18F/identity-dashboard

class ServiceProviderSerializer < ActiveModel::Serializer
  attributes(
    :acs_url,
    :active,
    :agency_id,
    :assertion_consumer_logout_service_url,
    :attribute_bundle,
    :block_encryption,
    :certs,
    :email_nameid_format_allowed,
    :friendly_name,
    :ial,
    :default_aal,
    :issuer,
    :logo,
    :remote_logo_key,
    :redirect_uris,
    :return_to_sp_url,
    :failure_to_proof_url,
    :push_notification_url,
    :signature,
    :signed_response_message_requested,
    :sp_initiated_login_url,
    :updated_at,
    :help_text,
    :allow_prompt_login,
    :pkce,
  )

  # these are attributes that should only be passed to the show
  # endpoint
  attribute :protocol, if: :show

  def show
    instance_options[:action] == :show
  end

  def agency
    object&.agency&.name
  end

  def agency_id
    object&.agency&.id
  end

  def certs
    object.certificates.map(&:to_pem)
  end

  def pkce
    if object.openid_connect_pkce?
      true
    else
      false
    end
  end

  def protocol
    if object['identity_protocol'] == 'saml'
      'saml'
    else
      'oidc'
    end
  end

  def updated_at
    object.updated_at.iso8601
  end

  def signature
    Digest::SHA256.hexdigest unique_identifier
  end

  def remote_logo_key
    return unless object.logo_file.attached?
    object.logo_file.key
  end

  private

  def unique_identifier
    object.id.to_s + object.issuer + object.created_at.to_s + object.updated_at.to_s
  end
end