# frozen_string_literal: true

module Mutations
  module DependencyProxy
    module GroupSettings
      class Update < Mutations::BaseMutation
        graphql_name 'UpdateDependencyProxySettings'

        include Mutations::ResolvesGroup

        description 'These settings can be adjusted only by the group Owner.'

        authorize :admin_dependency_proxy
        authorize_granular_token permissions: :update_dependency_proxy,
          boundary_argument: :group_path, boundary_type: :group

        argument :group_path,
          GraphQL::Types::ID,
          required: true,
          description: 'Group path for the group dependency proxy.'

        argument :enabled,
          GraphQL::Types::Boolean,
          required: false,
          description: copy_field_description(Types::DependencyProxy::ImageTtlGroupPolicyType, :enabled)

        argument :identity, GraphQL::Types::String, required: false,
          description: copy_field_description(Types::DependencyProxy::GroupSettingType, :identity)

        argument :secret, GraphQL::Types::String, required: false,
          description: 'Secret credential used to authenticate with Docker Hub when pulling images. ' \
            'Can be a password, personal access token (PAT), or organization access token (OAT).'

        field :dependency_proxy_setting,
          Types::DependencyProxy::GroupSettingType,
          null: true,
          description: 'Group dependency proxy settings after mutation.'

        def resolve(group_path:, **args)
          group = authorized_find!(group_path: group_path)

          result = ::DependencyProxy::GroupSettings::UpdateService
            .new(container: group, current_user: current_user, params: args)
            .execute

          {
            dependency_proxy_setting: result.payload[:dependency_proxy_setting],
            errors: result.errors
          }
        end

        private

        def find_object(group_path:)
          resolve_group(full_path: group_path)
        end
      end
    end
  end
end
