#!/usr/bin/env sh
# shellcheck disable=SC2034
dns_infoblox_uddi_info='Infoblox UDDI
Site: Infoblox.com
Docs: github.com/acmesh-official/acme.sh/wiki/dnsapi2#dns_infoblox_uddi
Options:
 Infoblox_UDDI_Key API Key for Infoblox UDDI
 Infoblox_Portal URL, e.g. "csp.infoblox.com" or "csp.eu.infoblox.com"
Issues: github.com/acmesh-official/acme.sh/issues
Author: Stefan Riegel
'

########  Public functions #####################

#Usage: dns_infoblox_uddi_add _acme-challenge.www.domain.com "XKrxpRBosdIKFzxW_CT3KLZNf6q0HG9i01zxXp5CPBs"
dns_infoblox_uddi_add() {
  fulldomain=$1
  txtvalue=$2

  Infoblox_UDDI_Key="${Infoblox_UDDI_Key:-$(_readaccountconf_mutable Infoblox_UDDI_Key)}"
  Infoblox_Portal="${Infoblox_Portal:-$(_readaccountconf_mutable Infoblox_Portal)}"

  _info "Using Infoblox UDDI API"
  _debug fulldomain "$fulldomain"
  _debug txtvalue "$txtvalue"

  if [ -z "$Infoblox_UDDI_Key" ] || [ -z "$Infoblox_Portal" ]; then
    Infoblox_UDDI_Key=""
    Infoblox_Portal=""
    _err "You didn't specify the Infoblox UDDI key or server (Infoblox_UDDI_Key; Infoblox_Portal)."
    _err "Please set them via EXPORT Infoblox_UDDI_Key=your_key, EXPORT Infoblox_Portal=csp.infoblox.com and try again."
    return 1
  fi

  _saveaccountconf_mutable Infoblox_UDDI_Key "$Infoblox_UDDI_Key"
  _saveaccountconf_mutable Infoblox_Portal "$Infoblox_Portal"

  export _H1="Authorization: token $Infoblox_UDDI_Key"
  export _H2="Content-Type: application/json"

  zone_url="https://$Infoblox_Portal/api/ddi/v1/dns/auth_zone"
  _debug "Fetching zones from: $zone_url"
  zone_result="$(_get "$zone_url")"
  _debug2 "zone_result: $zone_result"

  if [ "$?" != "0" ]; then
    _err "Error fetching zones from Infoblox API"
    return 1
  fi

  fulldomain_no_acme=$(echo "$fulldomain" | sed 's/^_acme-challenge\.//')
  _debug "Looking for zone matching domain: $fulldomain_no_acme"

  zone_fqdn=""
  temp_domain="$fulldomain_no_acme"

  while [ -n "$temp_domain" ]; do
    _debug "Checking if '$temp_domain' is a zone..."
    if echo "$zone_result" | grep -q "\"fqdn\":\"$temp_domain\"" || echo "$zone_result" | grep -q "\"fqdn\":\"$temp_domain\.\""; then
      zone_fqdn="$temp_domain"
      _debug "Found matching zone: $zone_fqdn"
      break
    fi
    temp_domain=$(echo "$temp_domain" | sed 's/^[^.]*\.//')
    if ! echo "$temp_domain" | grep -q '\.'; then
      break
    fi
  done

  if [ -z "$zone_fqdn" ]; then
    _err "Could not determine zone for domain $fulldomain"
    _err "Available zones: $(echo "$zone_result" | _egrep_o '"fqdn":"[^"]*"' | sed 's/"fqdn":"//;s/"//')"
    return 1
   fi

   zone_id=$(echo "$zone_result" | jq -r '(.results // .)[] | select(.fqdn == "'"$zone_fqdn"'" or .fqdn == "'"$zone_fqdn"'.") | .id' | head -1)

   _debug "zone_id: $zone_id"

   if [ -z "$zone_id" ]; then
     _err "Could not find zone ID for $zone_fqdn"
     _debug "Zone result: $zone_result"
     return 1
   fi

   _debug "Extracting name_in_zone from fulldomain='$fulldomain' with zone_fqdn='$zone_fqdn'"
   name_in_zone=$(echo "$fulldomain" | sed "s/\.$zone_fqdn\$//")
   _debug "name_in_zone after removing zone: '$name_in_zone'"
   name_in_zone=$(echo "$name_in_zone" | sed 's/\.$//')
   _debug "name_in_zone final: '$name_in_zone'"

   baseurl="https://$Infoblox_Portal/api/ddi/v1/dns/record"

  body="{\"type\":\"TXT\",\"name_in_zone\":\"$name_in_zone\",\"zone\":\"$zone_id\",\"ttl\":120,\"inheritance_sources\":{\"ttl\":{\"action\":\"override\"}},\"rdata\":{\"text\":\"$txtvalue\"}}"

  _debug "POST URL: $baseurl"
  _debug "POST body: $body"
  result="$(_post "$body" "$baseurl" "" "POST")"
  _debug "POST result: $result"

  if echo "$result" | grep -q '"id"'; then
    record_id=$(echo "$result" | _egrep_o '"id":"[^"]*"' | head -1 | sed 's/"id":"\([^"]*\)"/\1/')
    _info "Successfully created TXT record with ID: $record_id"
    return 0
  else
    _err "Error encountered during record addition"
    _err "Response: $result"
    return 1
  fi
}

#Usage: dns_infoblox_uddi_rm _acme-challenge.www.domain.com "XKrxpRBosdIKFzxW_CT3KLZNf6q0HG9i01zxXp5CPBs"
dns_infoblox_uddi_rm() {
  fulldomain=$1
  txtvalue=$2

  Infoblox_UDDI_Key="${Infoblox_UDDI_Key:-$(_readaccountconf_mutable Infoblox_UDDI_Key)}"
  Infoblox_Portal="${Infoblox_Portal:-$(_readaccountconf_mutable Infoblox_Portal)}"

  if [ -z "$Infoblox_UDDI_Key" ] || [ -z "$Infoblox_Portal" ]; then
    _err "Credentials not found"
    return 1
  fi

  _info "Using Infoblox UDDI API"
  _debug fulldomain "$fulldomain"
  _debug txtvalue "$txtvalue"

  export _H1="Authorization: token $Infoblox_UDDI_Key"
  export _H2="Content-Type: application/json"

  zone_url="https://$Infoblox_Portal/api/ddi/v1/dns/auth_zone"
  _debug "Fetching zones from: $zone_url"
  zone_result="$(_get "$zone_url")"
  _debug2 "zone_result: $zone_result"

  if [ "$?" != "0" ]; then
    _err "Error fetching zones from Infoblox API"
    return 1
  fi

  fulldomain_no_acme=$(echo "$fulldomain" | sed 's/^_acme-challenge\.//')
  _debug "Looking for zone matching domain: $fulldomain_no_acme"

  zone_fqdn=""
  temp_domain="$fulldomain_no_acme"

  while [ -n "$temp_domain" ]; do
    _debug "Checking if '$temp_domain' is a zone..."
    if echo "$zone_result" | grep -q "\"fqdn\":\"$temp_domain\"" || echo "$zone_result" | grep -q "\"fqdn\":\"$temp_domain\.\""; then
      zone_fqdn="$temp_domain"
      _debug "Found matching zone: $zone_fqdn"
      break
    fi
    temp_domain=$(echo "$temp_domain" | sed 's/^[^.]*\.//')
    if ! echo "$temp_domain" | grep -q '\.'; then
      break
    fi
  done

  if [ -z "$zone_fqdn" ]; then
    _err "Could not determine zone for domain $fulldomain"
    _err "Available zones: $(echo "$zone_result" | _egrep_o '"fqdn":"[^"]*"' | sed 's/"fqdn":"//;s/"//')"
    return 1
   fi

   zone_id=$(echo "$zone_result" | jq -r '(.results // .)[] | select(.fqdn == "'"$zone_fqdn"'" or .fqdn == "'"$zone_fqdn"'.") | .id' | head -1)

   _debug "zone_id: $zone_id"

   if [ -z "$zone_id" ]; then
     _err "Could not find zone ID for $zone_fqdn"
     _debug "Zone result: $zone_result"
     return 1
   fi

   name_in_zone=$(echo "$fulldomain" | sed "s/\.$zone_fqdn\$//" | sed 's/\.$//')
   _debug "name_in_zone: $name_in_zone"

   filter="type eq 'TXT' and name_in_zone eq '$name_in_zone' and zone eq '$zone_id'"
   filter_encoded=$(_url_encode "$filter")
  geturl="https://$Infoblox_Portal/api/ddi/v1/dns/record?_filter=$filter_encoded"
  _debug "GET URL: $geturl"

  result="$(_get "$geturl")"
  _debug "GET result: $result"

  if echo "$result" | grep -q '"results":'; then
    record_count=$(echo "$result" | jq -r '.results | length')
    _debug "Found $record_count result(s)"

    record_id=$(echo "$result" | jq -r '.results[] | select(.rdata.text == "'"$txtvalue"'") | .id' | head -1)

    if [ -n "$record_id" ]; then
      record_uuid=$(echo "$record_id" | sed 's/.*\/\([a-f0-9-]*\)$/\1/')
      _debug "Found record UUID: $record_uuid"

      delurl="https://$Infoblox_Portal/api/ddi/v1/dns/record/$record_uuid"
      _debug "DELETE URL: $delurl"
      rmResult="$(_post "" "$delurl" "" "DELETE")"

      if [ -z "$rmResult" ] || [ "$rmResult" = "{}" ]; then
        _info "Successfully deleted the txt record"
        return 0
      else
        _err "Error occurred during txt record delete"
        _err "Response: $rmResult"
        return 1
      fi
    else
      _err "Record to delete didn't match an existing record (no matching txtvalue found)"
      _debug "Looking for txtvalue: $txtvalue"
      return 1
    fi
  else
    _err "Record to delete didn't match an existing record (no results found)"
    _debug "Response: $result"
    return 1
  fi
}