# EasyEntra Hybrid User Onboarding Listener
# Configuration
$Port = 8443
$SharedSecret = "<Your GUID>"
$Prefix = "https://+:$Port/onboard/"
# Load EasyEntraPS
Import-Module "C:\Program Files\PowerShell\7\Modules\EasyEntraPS\EasyEntraPS.psd1" `
    -Force `
    -ErrorAction Stop
# Create HTTPS listener
$Listener = [System.Net.HttpListener]::new()
$Listener.Prefixes.Add($Prefix)
$Listener.Start()
Write-Host ""
Write-Host "EasyEntra onboarding listener started." -ForegroundColor Green
Write-Host "Listening on: $Prefix"
Write-Host "Press Ctrl+C to stop the listener."
Write-Host ""
try {
    while ($Listener.IsListening) {
        # Wait for a request
        $Context = $Listener.GetContext()
        $Request = $Context.Request
        $Response = $Context.Response
        $StatusCode = 200
        $ResponseBody = "OK"
        try {
            # Only accept POST requests
            if ($Request.HttpMethod -ne "POST") {
                $StatusCode = 405
                $ResponseBody = "Method not allowed"
            }
            else {
                # Read request body
                $Reader = [System.IO.StreamReader]::new(
                    $Request.InputStream,
                    $Request.ContentEncoding
                )
                $RawBody = $Reader.ReadToEnd()
                $Reader.Dispose()
                # Convert JSON payload
                try {
                    $Payload = $RawBody | ConvertFrom-Json -ErrorAction Stop
                }
                catch {
                    $StatusCode = 400
                    $ResponseBody = "Invalid JSON payload"
                    $Payload = $null
                }
                # Process request
                if ($null -ne $Payload) {

                    # Validate shared secret
                    if ($Payload.Secret -ne $SharedSecret) {
                        $StatusCode = 401
                        $ResponseBody = "Unauthorized"
                    }
                    # Validate required values
                    elseif (
                        [string]::IsNullOrWhiteSpace($Payload.DisplayName) -or
                        [string]::IsNullOrWhiteSpace($Payload.TemplateName)
                    ) {
                        $StatusCode = 400
                        $ResponseBody = "DisplayName and TemplateName are required"
                    }
                    else {
                        Write-Host ""
                        Write-Host "Onboarding request received" -ForegroundColor Cyan
                        Write-Host "Display name : $($Payload.DisplayName)"
                        Write-Host "Template     : $($Payload.TemplateName)"
                        Write-Host ""
                        # Trigger EasyEntra hybrid user creation
                        $Result = Invoke-EECreateHybridUserFromTemplate `
                            -DisplayName $Payload.DisplayName `
                            -TemplateName $Payload.TemplateName
                        # Prepare JSON response
                        $ResponseBody = $Result | ConvertTo-Json -Depth 6
                        $Response.ContentType = "application/json"
                        Write-Host ""
                        Write-Host "Onboarding processing finished." -ForegroundColor Green
                        Write-Host "Status: $($Result.Status)"
                        Write-Host ""
                    }
                }
            }
        }
        catch {
            $StatusCode = 500
            $ResponseBody = "Error: $($_.Exception.Message)"
            Write-Warning $ResponseBody
        }
        # Return response to caller
        try {
            $Buffer = [System.Text.Encoding]::UTF8.GetBytes(
                [string]$ResponseBody
            )
            $Response.StatusCode = $StatusCode
            $Response.ContentLength64 = $Buffer.Length
            $Response.OutputStream.Write(
                $Buffer,
                0,
                $Buffer.Length
            )
            $Response.OutputStream.Flush()
        }
        catch {
            Write-Warning "The caller disconnected before the response could be returned."
        }
        finally {
            try {
                $Response.OutputStream.Close()
            }
            catch {
                # Connection may already be closed
            }
            try {
                $Response.Close()
            }
            catch {
                # Connection may already be closed
            }
        }
    }
}
catch [System.Management.Automation.PipelineStoppedException] {
    Write-Host ""
    Write-Host "Stopping listener..." -ForegroundColor Yellow
}
finally {
    if ($null -ne $Listener) {
        try {
            if ($Listener.IsListening) {
                $Listener.Stop()
            }

            $Listener.Close()
        }
        catch {
            # Listener may already be stopped
        }
    }
    Write-Host "EasyEntra onboarding listener stopped." -ForegroundColor Yellow
}