module Aws::Endpoints

def default_api_authtype(context)
  context.config.api.operation(context.operation_name)['authtype'] ||
    context.config.api.metadata['signatureVersion']
end

def default_auth_scheme(context)
  case default_api_authtype(context)
  when 'v4', 'v4-unsigned-body'
    auth_scheme = { 'name' => 'sigv4' }
    merge_signing_defaults(auth_scheme, context.config)
  when 's3', 's3v4'
    auth_scheme = {
      'name' => 'sigv4',
      'disableDoubleEncoding' => true,
      'disableNormalizePath' => true
    }
    merge_signing_defaults(auth_scheme, context.config)
  when 'bearer'
    { 'name' => 'bearer' }
  when 'none', nil
    { 'name' => 'none' }
  end
end

def merge_signing_defaults(auth_scheme, config)
  if %w[sigv4 sigv4a].include?(auth_scheme['name'])
    auth_scheme['signingName'] ||= sigv4_name(config)
    if auth_scheme['name'] == 'sigv4a'
      auth_scheme['signingRegionSet'] ||= ['*']
    else
      auth_scheme['signingRegion'] ||= config.region
    end
  end
  auth_scheme
end

def resolve_auth_scheme(context, endpoint)
  if endpoint && (auth_schemes = endpoint.properties['authSchemes'])
    auth_scheme = auth_schemes.find do |scheme|
      Aws::Plugins::Sign::SUPPORTED_AUTH_TYPES.include?(scheme['name'])
    end
    raise 'No supported auth scheme for this endpoint.' unless auth_scheme
    merge_signing_defaults(auth_scheme, context.config)
  else
    default_auth_scheme(context)
  end
end

def sigv4_name(config)
  config.api.metadata['signingName'] ||
    config.api.metadata['endpointPrefix']
end