#!/bin/bash
# simple script to run an appinspect API check
EXPECTED_ARGS=4
E_BADARGS=65

if [ $# -lt 4 ]
then
echo "Usage: `basename $0` <app_path> <package_name> <username> <password>"
echo "Example `basename $0` ~/ DA-ESS-ContentUpdate-latest.tar.gz doomguy R1p&T3ar"
  exit $E_BADARGS
fi

if [ $# -gt $EXPECTED_ARGS ]
then
echo "Too many arguments"
        exit $E_BADARGS
fi

APP_PATH=$1
PACKAGE_NAME=$2
USERNAME=$3
PASSWORD=$4

#PACKAGE_PATH="/home/circleci/"$PACKAGE_NAME
PACKAGE_PATH="build/"$PACKAGE_NAME

cd $APP_PATH

# check if report exists
if [ -d report ]
then
    echo "report/ Directory exists"
else
	mkdir report
fi

# get a JWT token
AUTH_TOKEN=$(echo -n "$USERNAME:$PASSWORD" | base64)
APPINSPECT_TOKEN=$(curl -s --location --request GET 'https://api.splunk.com/2.0/rest/login/splunk' --header "Authorization: Basic $AUTH_TOKEN" | jq -r '.data | .token')
sleep 1
# submit a inspection job EXPECTS app on same directory
#REQUEST_ID=$(curl -s --location --request POST 'https://appinspect.splunk.com/v1/app/validate' --header "Authorization: bearer $APPINSPECT_TOKEN" --form 'app_package=@"/home/circleci/DA-ESS-ContentUpdate-latest.tar.gz"' | jq -r '.request_id')
echo "The PACKAGE_PATH is "$PACKAGE_PATH
ls -lah $PACKAGE_PATH 

REQUEST_ID=$(curl -s --location --request POST 'https://appinspect.splunk.com/v1/app/validate' --header "Authorization: bearer $APPINSPECT_TOKEN" --form 'included_tags="cloud"' --form 'app_package=@'$PACKAGE_PATH | jq -r '.request_id')
echo "app inspect request: $REQUEST_ID"
sleep 5
STATUS=$(curl -s --location --request GET https://appinspect.splunk.com/v1/app/validate/status/$REQUEST_ID --header "Authorization: bearer $APPINSPECT_TOKEN" | jq -r '.status')
while :
do
	STATUS=$(curl -s --location --request GET https://appinspect.splunk.com/v1/app/validate/status/$REQUEST_ID --header "Authorization: bearer $APPINSPECT_TOKEN" | jq -r '.status')
    if [ "$STATUS" == "PROCESSING" ] || [ "$STATUS" == "PREPARING" ]
    then
    	echo "appinspect PROCESSING request: $REQUEST_ID"
    elif [ "$STATUS" == "SUCCESS" ]
	# REPORT FINISHED CHECK RESULTS
    then
    	echo "appinspect completed inspection"
        curl -s --location --request GET https://appinspect.splunk.com/v1/app/report/$REQUEST_ID --header "Authorization: bearer $APPINSPECT_TOKEN" --header 'Content-Type: text/html' -o report/appinspect_report_$PACKAGE_NAME.html
        FAILS=$(curl -s --location --request GET https://appinspect.splunk.com/v1/app/report/$REQUEST_ID --header "Authorization: bearer $APPINSPECT_TOKEN" --header 'Content-Type: application/json' | jq -r '.summary | .failure')
        ERRORS=$(curl -s --location --request GET https://appinspect.splunk.com/v1/app/report/$REQUEST_ID --header "Authorization: bearer $APPINSPECT_TOKEN" --header 'Content-Type: application/json' | jq -r '.summary | .error')
        if [ $FAILS -gt 0 -o $ERRORS -gt 0 ]
        then
    		echo "ERROR appinspect had $FAILS failures and or $ERRORS errors, see summary report under job artifacts for details"
            #print out the report so that we know what went wrong
            cat report/appinspect_report_$PACKAGE_NAME.html
    		exit 1
    	else
    		echo "appinspect passed successfully, see summary report under job artifacts for details"
        	exit 0
        fi
    else
    	echo "there was an error with app inspect report please see below:"
    	curl -s --location --request GET https://appinspect.splunk.com/v1/app/report/$REQUEST_ID --header "Authorization: bearer $APPINSPECT_TOKEN" --header 'Content-Type: application/json' | jq -r
    	exit 1
	fi
sleep 60
done
exit 0