ensure-aws-creds() {
  if [[ -f "$HOME/.cj-aws" ]]; then
    source "$HOME/.cj-aws"
    export AWS_ACCESS_KEY_ID
    export AWS_SECRET_ACCESS_KEY
    export AWS_SESSION_TOKEN
  fi
}

cleanup-cred-file() {
  echo "Cleaning up old credentials."
  rm -f "$HOME/.cj-aws"
}

TERMINAL_PROGRAM=${TERMINAL_PROGRAM:-iTerm}
aws-assume-developer() {
  cleanup-cred-file

  open -a CJAWSAccess
  
  while ! [[ -f "$HOME/.cj-aws" ]]; do
    sleep 1;
  done
  
  open -a "$TERMINAL_PROGRAM"
  ensure-aws-creds
}

aws-end-session() {
  cleanup-cred-file

  unset AWS_ACCESS_KEY_ID
  unset AWS_SECRET_ACCESS_KEY
  unset AWS_SESSION_TOKEN
}

aws-open-console() {
  open "$(aws-get-url-inline)"
}

aws-get-url-inline() {
  python3 <<EOF
import http.client
import json
import urllib.parse

result = json.dumps({
  "sessionId": "$AWS_ACCESS_KEY_ID",
  "sessionKey": "$AWS_SECRET_ACCESS_KEY",
  "sessionToken": "$AWS_SESSION_TOKEN"
})

path = '/federation?Action=getSigninToken&Session=' + urllib.parse.quote_plus(result, safe="")

conn = http.client.HTTPSConnection("signin.aws.amazon.com")
conn.request("GET", path)
rq = conn.getresponse()

if rq.status != 200:
  raise Exception('request failed because %s', rq.reason)

data = json.load(rq)
signin_token = data['SigninToken']

# print('https://signin.aws.amazon.com/federation?Action=login&Destination=https%3A%2F%2Fconsole.aws.amazon.com/console/home?region=us-west-1&SigninToken='+signin_token)
print('https://signin.aws.amazon.com/federation?Action=login&Destination=https%3A%2F%2Fconsole.aws.amazon.com&SigninToken='+signin_token)
EOF
}