#!/usr/bin/env python3

import jwt
import requests
import time
import json

class graphQL:

    # Authorization is set in __init__
	headers = {}

	def __init__(self, token):
		super(graphQL, self).__init__()
		self.headers["Authorization"] = f"token {token}"

	def run_query(self, query, variables): # A simple function to use requests.post to make the API call. Note the json= section.
		request = requests.post('https://api.github.com/graphql', json={'query': query, 'variables': variables}, headers=self.headers)
		if request.status_code == 200:
			return request.json()
		else:
			raise Exception("Query failed to run by returning code of {}. Message {}".format(request.status_code, request.text))

	def getTags(self, variables):
		listOfNames = []
		query = '''
			    query($owner: String!, $name: String!, $cursor: String, $count: Int!) {
                    repository(owner: $owner, name: $name) {
                        isRepoPrivate: isPrivate
                        payload:
                            refs(
                                first: $count
                                after: $cursor
                                orderBy: {field: TAG_COMMIT_DATE, direction: DESC}
                                refPrefix: \"refs/tags/\"
                            ) {
                                pageInfo {
                                    hasNextPage
                                    endCursor
                                }
                                nodes {
                                    version: name
                                    target {
                                        type: __typename
                                        ... on Commit {
                                        oid
                                        releaseTimestamp: committedDate
                                        }
                                        ... on Tag {
                                            target {
                                                ... on Commit {
                                                oid
                                                }
                                            }
                                            tagger {
                                                releaseTimestamp: date
                                            }
                                        }
                                    }
                                }
                            }
                    }
                }
        '''

		result = self.run_query(query, variables) #execute query
		print(json.dumps(result))

def get_jwt(pem, app_id):
    # Open PEM
    with open(pem, 'rb') as pem_file:
        signing_key = jwt.jwk_from_pem(pem_file.read())

    payload = {
        # Issued at time
        'iat': int(time.time()),
        # JWT expiration time (10 minutes maximum)
        'exp': int(time.time()) + 600,
        # GitHub App's identifier
        'iss': app_id
    }

    # Create JWT
    jwt_instance = jwt.JWT()
    encoded_jwt = jwt_instance.encode(payload, signing_key, alg='RS256')

    return encoded_jwt

########################################
# Set config in the following block
########################################

pem = "key.pem" # Path to the private key of the app
app_id = 123456 # ID of your app
installation_id = 123456 # ID of your app installation

variables = {
    "owner": "bridgecrewio",
    "name": "checkov-action",
    "count": 5,
}
########################################

jwt = get_jwt(pem, app_id)

request = requests.post(f"https://api.github.com/app/installations/{installation_id}/access_tokens", headers={
    "Accept": "application/vnd.github+json",
    "Authorization": f"Bearer {jwt}",
    "X-GitHub-Api-Version": "2022-11-28"
})

token = ""
if request.status_code == 201:
	token = request.json()["token"]
else:
    raise Exception("Query failed to run by returning code of {}. Message {}".format(request.status_code, request.text))

query = graphQL(token)
query.getTags(variables)