//@import System.Net.Http
//@import Microsoft.Identity.Client

using System;
using System.Collections.Generic;
using System.Net.Http;
using System.Threading.Tasks;

using Innovation.Activate;
using Microsoft.Identity.Client;

class Script : ScriptBase
{
    string URL = "<full path to API here>";
    string appSecret = "<test client secret here>";
    string tenantName = "<tenant name here>";
    string appID = "<client app ID here>";

    ConfidentialClientApplication application;

    public void main()
    {
        // Get Activate application, this forms the scope of the access token request
        string scope = $"api://{Evaluator.GetString("=//Resources/ActiveDirectory/External Directories/Azure/ApplicationID")}/.default";

        HttpClient http = GetHttpClient(new List<string> { scope });

        Trace.WriteLine("Logged in");

        HttpRequestMessage m = new HttpRequestMessage(HttpMethod.Get, URL);
        HttpResponseMessage r = http.SendAsync(m).Result;

        Trace.WriteLine(string.Format("{0}: {1}", r.StatusCode.ToString(), r.ReasonPhrase));
        Trace.WriteLine(string.Format("[{0}]", r.Content.ReadAsStringAsync().Result));
    }

    // Get an authenticated Microsoft Graph Service client.
    public HttpClient GetHttpClient(List<string> scopes)
    {
        HttpClient httpClient = new HttpClient();

        string accessToken = Task.Run<string>(() =>
        {
            return GetAppAccessTokenAsync(scopes);
        }).Result;

        // Append the access token to the request.
        httpClient.DefaultRequestHeaders.Add(
            "Authorization",
            string.Format("Bearer {0}", accessToken)
        );

        return httpClient;
    }

    // Get an access token. First tries to get the token from the token cache.
    public async Task<string> GetAppAccessTokenAsync(List<string> scopes)
    {
        // wrong token version is being returned
        string authority = string.Format(
            @"https://login.microsoftonline.com/{0}/oauth/V2.0/authorize",
            tenantName
        );

        var application =
            ConfidentialClientApplicationBuilder
                .Create(appID)
                .WithAuthority(AzureCloudInstance.AzurePublic, tenantName)
                .WithClientSecret(appSecret)
                .Build();

        AuthenticationResult result =
            await application.AcquireTokenForClient(scopes).ExecuteAsync();

        return result.AccessToken;
    }
}