package main

import (
	"context"
	"errors"
	"fmt"
	"log"

	"github.com/akeylesslabs/akeyless-go/v4"
)

func main() {
	ctx := context.Background()
	client := akeyless.NewAPIClient(&akeyless.Configuration{
		Servers: []akeyless.ServerConfiguration{
			{
				// default: public API Gateway
				URL: "https://api.akeyless.io",

				// use port 8081 exposed by the deployment:
				// URL: "https://gateway.company.com:8081",

				// use port 8080 exposed by the deployment with /v2 prefix:
				// URL: "https://gateway.company.com:8080/v2",
			},
		},
	}).V2Api

	authBody := akeyless.NewAuthWithDefaults()
	authBody.AdminEmail = akeyless.PtrString("[email protected]")
	authBody.AdminPassword = akeyless.PtrString("strong-password")

	var apiErr akeyless.GenericOpenAPIError

	authOut, _, err := client.Auth(ctx).Body(*authBody).Execute()
	if err != nil {
		if errors.As(err, &apiErr) {
			log.Fatalln("authentication failed:", string(apiErr.Body()))
		}
		log.Fatalln("authentication failed:", err)
	}

	token := authOut.GetToken()

	csBody := akeyless.CreateSecret{
		Name:  "my-secret",
		Value: "some-value",
		Token: &token,
	}
	_, _, err = client.CreateSecret(ctx).Body(csBody).Execute()
	if err != nil {
		if errors.As(err, &apiErr) {
			log.Fatalln("can't create secret:", string(apiErr.Body()))
		}
		log.Fatalln("can't create secret:", err)
	}

	gsvBody := akeyless.GetSecretValue{
		Names: []string{"my-secret"},
		Token: &token,
	}
	gsvOut, _, err := client.GetSecretValue(ctx).Body(gsvBody).Execute()
	if err != nil {
		if errors.As(err, &apiErr) {
			log.Fatalln("can't get secret value:", string(apiErr.Body()))
		}
		log.Fatalln("can't get secret value:", err)
	}

	fmt.Println(gsvOut["my-secret"])
}