module "alb" {
  source  = "edelwud/alb/aws"
  version = "x.x.x"

  name = "redirect-http-https"

  type     = "application"
  internal = false
  subnets  = module.vpc.public_subnets

  security_groups = [
    module.vpc.default_security_group_id,
    module.lb_sg.security_group_id
  ]

  listeners = {
    "http-to-https" = {
      port     = 80
      protocol = "HTTP"

      redirect = {
        port        = "443"
        protocol    = "HTTPS"
        status_code = "HTTP_301"
      }
    }

    "https" = {
      port            = 433
      protocol        = "HTTPS"
      ssl_policy      = "ELBSecurityPolicy-2016-08"
      certificate_arn = aws_acm_certificate.example.arn

      fixed_response = {
        content_type = "text/plain"
        message_body = "Fixed response content"
        status_code  = "200"
      }
    }
  }
}

module "alb" {
  source  = "edelwud/alb/aws"
  version = "x.x.x"

  name = "listener-rules"

  type     = "application"
  internal = false
  subnets  = module.vpc.public_subnets

  security_groups = [
    module.vpc.default_security_group_id,
    module.lb_sg.security_group_id
  ]

  listeners = {
    "http-to-https" = {
      port     = 80
      protocol = "HTTP"

      redirect = {
        port        = "443"
        protocol    = "HTTPS"
        status_code = "HTTP_301"
      }

      rules = {
        "if-path-pattern-is-api" = {
          priority = 20

          condition = {
            path_pattern = ["/api*"]
          }

          forward = {
            target_group_arn = aws_lb_target_group.api.arn
          }
        }
      }
    }

    "https" = {
      port            = 433
      protocol        = "HTTPS"
      ssl_policy      = "ELBSecurityPolicy-2016-08"
      certificate_arn = aws_acm_certificate.example.arn

      fixed_response = {
        content_type = "text/plain"
        message_body = "Fixed response content"
        status_code  = "200"
      }

      rules = {
        "if-path-pattern-is-api" = {
          priority = 20

          condition = {
            path_pattern = ["/api*"]
          }

          forward = {
            target_group_arn = aws_lb_target_group.api.arn
          }
        }

        "if-host-header-is-example-and-method-is-get" = {
          priority = 20

          condition = {
            host_header         = ["example.com"]
            http_request_method = ["GET"]
          }

          forward = {
            target_group_arn = aws_lb_target_group.ui.arn
          }
        }
      }
    }
  }
}

module "alb" {
  source  = "edelwud/alb/aws"
  version = "x.x.x"

  name = "cognito-oidc"

  type     = "application"
  internal = false
  subnets  = module.vpc.public_subnets

  security_groups = [
    module.vpc.default_security_group_id,
    module.lb_sg.security_group_id
  ]

  listeners = {
    "access-to-fixed-response-after-oidc" = {
      port            = 433
      protocol        = "HTTPS"
      ssl_policy      = "ELBSecurityPolicy-2016-08"
      certificate_arn = aws_acm_certificate.example.arn

      authenticate_oidc = {
        authorization_endpoint = "https://example.com/authorization_endpoint"
        client_id              = "client_id"
        client_secret          = "client_secret"
        issuer                 = "https://example.com"
        token_endpoint         = "https://example.com/token_endpoint"
        user_info_endpoint     = "https://example.com/user_info_endpoint"
      }

      fixed_response = {
        content_type = "text/plain"
        message_body = "Fixed response content"
        status_code  = "200"
      }

      rules = {
        "cognito-before-api" = {
          priority = 20

          conditions = {
            path_pattern = ["/api*"]
          }

          authenticate_cognito = {
            user_pool_arn       = aws_cognito_user_pool.pool.arn
            user_pool_client_id = aws_cognito_user_pool_client.client.id
            user_pool_domain    = aws_cognito_user_pool_domain.domain.domain
          }

          forward = {
            target_group_arn = aws_lb_target_group.api.arn
          }
        }
      }
    }
  }
}