import getopt
import sys

import jwt


def usage():
    progname = sys.argv[0]

    print(f'Usage: {progname} [-p <path>] [-w <value>] [-r <value>]\n' +
          '  -p <path to private key>\n' +
          '  -w <write, comma separated list of domains>\n' +
          '  -r <read, comma separated list of domains>')
    sys.exit(0)


def create_token(private_key, write_domain, read_domain):
    payload = {
        'type': 'access',
        'write': [write_domain],
        'read': [read_domain]
    }

    with open(private_key, "r") as fd:
        key = fd.read()

    return jwt.encode(payload=payload, algorithm='ES256', key=key)


if __name__ == '__main__':
    read_domain = ''
    write_domain = ''

    try:
        opts, args = getopt.getopt(sys.argv[1:], 'p:w:r:h')
    except getopt.GetoptError:
        usage()

    if len(sys.argv) != 5:
        usage()

    for opt, arg in opts:
        if opt == '-p':
            private_key = arg
        elif opt == '-w':
            write_domain = arg
        elif opt == '-r':
            read_domain = arg
        elif opt == '-h':
            usage()
        else:
            usage()

    token = create_token(private_key, write_domain,
                         read_domain).decode('utf-8')

    print(f'{token}')