"""okta user creation script"""

import os
import requests
import boto3
from okta import config

ENVIRONMENT = os.environ.get('Environment')
FIRST_NAME = os.environ.get('FIRST_NAME')
LAST_NAME = os.environ.get('LAST_NAME')
LOGIN = os.environ.get('LOGIN')
EMAIL = os.environ.get('EMAIL')

secrets = boto3.client('secretsmanager')
okta_api_key = secrets.get_secret_value(
    SecretId="{}/okta/user_creation_api".format(ENVIRONMENT))[
    'SecretString']
okta_google_litmos_group = secrets.get_secret_value(
    SecretId="{}/okta/google_litmos_users_group".format(ENVIRONMENT))[
    'SecretString']


okta_api_url = config.OKTA_CREATE_USER_API_URL

headers = {
  'accept': 'application/json',
  'authorization': okta_api_key,
  'content-type': 'application/json'
}

body = {
  'profile': {
    'firstName': FIRST_NAME,
    'lastName': LAST_NAME,
    'email': EMAIL,
    'login': LOGIN
  },
  'groupIds': [
    okta_google_litmos_group
  ]
}

r = requests.post(okta_api_url, headers=headers, json=body)
print(r)
r.raise_for_status()
print('New User {} {} has been created with login {} and activation email '
      'has\n been sent to {}'.format(FIRST_NAME, LAST_NAME, LOGIN, EMAIL))