#!/usr/bin/env bash

set -euo pipefail

keycloak_url="${KEYCLOAK_URL:-http://localhost:8081}"
backend_url="${BACKEND_URL:-http://localhost:8080}"

curl --fail --silent --show-error "${backend_url}/actuator/health" | jq .

for username in employee manager admin hr; do
  case "${username}" in
    employee) password='Employee123!' ;;
    manager) password='Manager123!' ;;
    admin) password='Admin123!' ;;
    hr) password='HrReviewer123!' ;;
  esac

  token="$({
    curl --fail --silent --show-error \
      -X POST "${keycloak_url}/realms/aioa/protocol/openid-connect/token" \
      -H 'Content-Type: application/x-www-form-urlencoded' \
      --data-urlencode client_id=aioa-mobile \
      --data-urlencode grant_type=password \
      --data-urlencode username="${username}" \
      --data-urlencode password="${password}"
  } | jq -r .access_token)"

  printf '%s\n' "${username}"
  curl --fail --silent --show-error \
    "${backend_url}/api/v1/me" \
    -H "Authorization: Bearer ${token}" | jq .
done