installation.go

package authentik

import (
	"context"

	"github.com/theopenlane/core/internal/integrations/types"
	authentikSDK "goauthentik.io/api/v3"
)

// resolveInstallationMetadata derives Authentik instance metadata from the persisted credential
func resolveInstallationMetadata(ctx context.Context, req types.InstallationRequest) (InstallationMetadata, bool, error) {
	cred, err := resolveCredential(req.Credentials)
	if err != nil {
		return InstallationMetadata{}, false, ErrCredentialDecode
	}

	if cred.Token == "" || cred.BaseURL == "" {
		return InstallationMetadata{}, false, nil
	}

	client, err := Client{}.Build(ctx, types.ClientBuildRequest{Credentials: req.Credentials})
	if err != nil {
		return InstallationMetadata{}, false, err
	}

	apiClient := client.(*authentikSDK.APIClient)

	info, _, err := apiClient.AdminApi.AdminSystemRetrieve(ctx).Execute()
	if err != nil {
		return InstallationMetadata{}, false, ErrHealthCheckFailed
	}

	return InstallationMetadata{
		Brand:   info.GetBrand(),
		Host:    info.GetHttpHost(),
		BaseURL: cred.BaseURL,
	}, true, nil
}