// Copyright Vespa.ai. Licensed under the terms of the Apache 2.0 license. See LICENSE in the project root.
package com.yahoo.security.tls;

import java.util.Set;

/**
 * @author bjorncs
 */
public record AuthorizedPeers(Set<PeerPolicy> peerPolicies) {

    private static final AuthorizedPeers EMPTY = new AuthorizedPeers(Set.of());

    public AuthorizedPeers {
        peerPolicies = verifyPeerPolicies(peerPolicies);
    }

    public static AuthorizedPeers empty() { return EMPTY; }

    private static Set<PeerPolicy> verifyPeerPolicies(Set<PeerPolicy> peerPolicies) {
        long distinctNames = peerPolicies.stream()
                .map(PeerPolicy::policyName)
                .distinct()
                .count();
        if (distinctNames != peerPolicies.size()) {
            throw new IllegalArgumentException("'authorized-peers' contains entries with duplicate names");
        }
        return Set.copyOf(peerPolicies);
    }

    public boolean isEmpty() { return peerPolicies.isEmpty(); }

}