<?php

class AccountController extends BaseController
{

    public function createAccountView()
    {
        return View::make('account/create');
    }

    public function createAccountSubmit()
    {
        $rules = array(
            "username" => "required|min:6",
            "password" => "required|min:6|max:48|regex:/^.*(?=.*[a-z])(?=.*[A-Z])(?=.*[0-9])(?=.*[@!$#%*]).*$/",
            "confirm_password" => "required|same:password",
            "email" => "required|email",
        );

        $messages = array(
            'password.regex' => 'Password needs to contain at least (a) One lower case letter (b) One Upper case letter and (c) One number (d) One of the following special characters - !@#$%&*',
        );

        $validator = Validator::make(Input::all(), $rules, $messages);
        if ($validator->fails()) {
            return Redirect::to("create")
                ->withInput(Input::except('password', 'password_confirm'))
                ->withErrors($validator);
        }

        $first_name = $_POST['first_name'];
        $last_name = $_POST['last_name'];
        $username = $_POST['username'];
        $password = $_POST['password'];
        $email = $_POST['email'];

//        Fixme - Save these user information
//        $organization = $_POST['organization'];
//        $address = $_POST['address'];
//        $country = $_POST['country'];
//        $telephone = $_POST['telephone'];
//        $mobile = $_POST['mobile'];
//        $im = $_POST['im'];
//        $url = $_POST['url'];

        $organization = "";
        $address = "";
        $country = "";
        $telephone = "";
        $mobile = "";
        $im = "";
        $url = "";


        if (WSIS::usernameExists($username)) {
            return Redirect::to("create")
                ->withInput(Input::except('password', 'password_confirm'))
                ->with("username_exists", true);
        } else {
//            We are using account confirmation now
//            WSIS::addUser($username, $password);
//
//            //update user profile
//            WSIS::updateUserProfile($username, $email, $first_name, $last_name);
//
//            CommonUtilities::print_success_message('New user created!');
//
//            if(Config::get('pga_config.wsis')['auth-mode']=="oauth"){
//                return View::make('home');
//            }else{
//                return View::make('account/login');
//            }

            WSIS::registerUserAccount($username, $password, $email, $first_name, $last_name,
                Config::get('pga_config.wsis')['tenant-domain']);

            /*add user to role - user_pending */

            $allRoles = WSIS::getAllRoles();
            if(! in_array( "user_pending", $allRoles)){
                WSIS::addRole( "user_pending");
            }
            //$userRoles = (array)WSIS::getUserRoles( $username);

            $userRoles["new"] = "user_pending";
            $userRoles["deleted"] = array();
            WSIS::updateUserRoles( $username, $userRoles);

            CommonUtilities::print_success_message('Account confirmation request was sent to your email account');
            return View::make('home');
        }
    }

    public function loginView()
    {
//        if(Config::get('pga_config.wsis')['auth-mode'] == "oauth"){
//            $url = WSIS::getOAuthRequestCodeUrl();
//            return Redirect::away($url);
//        }else{
//            return View::make('account/login');
//        }
        return View::make('account/login');
    }

    public function loginSubmit()
    {
        if (CommonUtilities::form_submitted()) {
            $wsisConfig = Config::get('pga_config.wsis');
            if( $wsisConfig['tenant-domain'] == "")
                $username = Input::get("username");
            else
                $username = Input::get("username") . "@" . $wsisConfig['tenant-domain'];

            $password = $_POST['password'];
            $response = WSIS::authenticate($username, $password);
            if(!isset($response->access_token)){
                return Redirect::to("login")->with("invalid-credentials", true);
            }

            $accessToken = $response->access_token;
            $refreshToken = $response->refresh_token;
            $expirationTime = time() + $response->expires_in - 5; //5 seconds safe margin

            $userProfile = WSIS::getUserProfileFromOAuthToken($accessToken);
            $username = $userProfile['username'];
            $userRoles = (array)WSIS::getUserRoles($username);

            $authzToken = new Airavata\Model\Security\AuthzToken();
            $authzToken->accessToken = $accessToken;
            $authzToken->claimsMap = array('userName'=>$username);
            Session::put('authz-token',$authzToken);
            Session::put('oauth-refresh-code',$refreshToken);
            Session::put('oauth-expiration-time',$expirationTime);
            Session::put("user-profile", $userProfile);

            if (in_array(Config::get('pga_config.wsis')['admin-role-name'], $userRoles)) {
                Session::put("admin", true);
            }
            if (in_array(Config::get('pga_config.wsis')['read-only-admin-role-name'], $userRoles)) {
                Session::put("admin-read-only", true);
            }
            if (in_array(Config::get('pga_config.wsis')['user-role-name'], $userRoles)) {
                Session::put("authorized-user", true);
            }

            //only for super admin
            if(  Config::get('pga_config.portal')['super-admin-portal'] == true){
                Session::put("super-admin", true);
            }

            CommonUtilities::store_id_in_session($username);
            Session::put("gateway_id", Config::get('pga_config.airavata')['gateway-id']);

            if(Session::get("admin") || Session::get("admin-read-only") || Session::get("authorized-user")){
                return $this->initializeWithAiravata($username);
            }

            if(Session::get("admin") || Session::get("admin-read-only")){
                return Redirect::to("admin/dashboard");
            }else{
                return Redirect::to("home");
            }
        }

    }

//    public function oauthCallback()
//    {
//        if (!isset($_GET["code"])) {
//            return Redirect::to('home');
//        }
//
//        $code = $_GET["code"];
//        $response = WSIS::getOAuthToken($code);
//        if(!isset($response->access_token)){
//            return Redirect::to('home');
//        }
//
//        $accessToken = $response->access_token;
//        $refreshToken = $response->refresh_token;
//        $expirationTime = time() + $response->expires_in - 5; //5 seconds safe margin
//
//        $userProfile = WSIS::getUserProfileFromOAuthToken($accessToken);
//        $username = $userProfile['username'];
//
//        //Fixme - OpenID profile takes some time to get synced (WSO2 IS Issue)
//        //$userRoles = $userProfile['roles'];
//        $userRoles = (array)WSIS::getUserRoles($username);
//
//        $username = $userProfile['username'];
//
//        $authzToken = new Airavata\Model\Security\AuthzToken();
//        $authzToken->accessToken = $accessToken;
//        $authzToken->claimsMap = array('userName'=>$username);
//        Session::put('authz-token',$authzToken);
//        Session::put('oauth-refresh-code',$refreshToken);
//        Session::put('oauth-expiration-time',$expirationTime);
//        Session::put("user-profile", $userProfile);
//
//        if (in_array(Config::get('pga_config.wsis')['admin-role-name'], $userRoles)) {
//            Session::put("admin", true);
//        }
//        if (in_array(Config::get('pga_config.wsis')['read-only-admin-role-name'], $userRoles)) {
//            Session::put("admin-read-only", true);
//        }
//        if (in_array(Config::get('pga_config.wsis')['user-role-name'], $userRoles)) {
//            Session::put("authorized-user", true);
//        }
//
//        CommonUtilities::store_id_in_session($username);
//        Session::put("gateway_id", Config::get('pga_config.airavata')['gateway-id']);
//
//        if(Session::get("admin") || Session::get("admin-read-only") || Session::get("authorized-user")){
//            return $this->initializeWithAiravata($username);
//        }
//        return Redirect::to("home");
//    }

    private function initializeWithAiravata($username){
        //Check Airavata Server is up
        try{
            //creating a default project for user
            $projects = ProjectUtilities::get_all_user_projects(Config::get('pga_config.airavata')['gateway-id'], $username);
            if($projects == null || count($projects) == 0){
                //creating a default project for user
                ProjectUtilities::create_default_project($username);
            }
        }catch (Exception $ex){
            CommonUtilities::print_error_message("Unable to Connect to the Airavata Server Instance!");
            return View::make('home');
        }

        return Redirect::to("admin/dashboard");
    }

    public function forgotPassword()
    {
        return View::make("account/forgot-password");
    }

    public function forgotPasswordSubmit()
    {
        $username = Input::get("username");
        if(empty($username)){
            CommonUtilities::print_error_message("Please provide a valid username");
            return View::make("account/forgot-password");
        }else{
            $wsisConfig = Config::get('pga_config.wsis');
            if( $wsisConfig['tenant-domain'] == "")
                $username = $username;
            else
                $username = $username . "@" . $wsisConfig['tenant-domain'];
            try{
                $key = WSIS::validateUser($username);
                if(!empty($key)){
                    $result = WSIS::sendPasswordResetNotification($username, $key);
                    if($result===true){
                        CommonUtilities::print_success_message("Password reset notification was sent to your email account");
                        return View::make("home");
                    }else{
                        CommonUtilities::print_error_message("Failed to send password reset notification email");
                        return View::make("home");
                    }
                }else{
                    CommonUtilities::print_error_message("Failed to validate the given username");
                    return View::make("account/forgot-password");
                }
            }catch (Exception $ex){
                CommonUtilities::print_error_message("Password reset operation failed");
                return View::make("home");
            }
        }
    }

    public function resetPassword()
    {
        $confirmation = Input::get("confirmation");
        $username = Input::get("username");
        if(empty($username) || empty($confirmation)){
            return View::make("home");
        }else{
            $wsisConfig = Config::get('pga_config.wsis');
            if( $wsisConfig['tenant-domain'] == "")
                $username = $username;
            else
                $username = $username . "@" . $wsisConfig['tenant-domain'];
            try{
                $key = WSIS::validateConfirmationCode($username, $confirmation);
                if(!empty($key)){
                    return View::make("account/reset-password", array("key" => $key, "username"=>$username));
                }else{
                    return View::make("home");
                }
            }catch (Exception $e){
                return View::make("home");
            }
        }

    }

    public function confirmAccountCreation()
    {
        $confirmation = Input::get("confirmation");
        $username = Input::get("username");
        if(empty($username) || empty($confirmation)){
            return View::make("home");
        }else{
            try{
                $result = WSIS::confirmUserRegistration($username, $confirmation, Config::get('pga_config.wsis')['tenant-domain']);
                if($result){
                    $this->sendAccountCreationNotification2Admin($username);
                    return Redirect::to("login");
                }else{
                    CommonUtilities::print_error_message("Account confirmation failed!");
                    return View::make("home");
                }
            }catch (Exception $e){
                CommonUtilities::print_error_message("Account confirmation failed!");
                return View::make("home");
            }
        }
    }

    private function sendAccountCreationNotification2Admin($username){

        $mail = new PHPMailer;

        $mail->isSMTP();
        $mail->SMTPDebug = 3;
        $mail->Host = Config::get('pga_config.portal')['portal-smtp-server-host'];

        $mail->SMTPAuth = true;

        $mail->Username = Config::get('pga_config.portal')['portal-email-username'];
        $mail->Password = Config::get('pga_config.portal')['portal-email-password'];

        $mail->SMTPSecure = "tls";
        $mail->Port = intval(Config::get('pga_config.portal')['portal-smtp-server-port']);

        $mail->From = Config::get('pga_config.portal')['portal-email-username'];
        $mail->FromName = "Airavata PHP Gateway";

        $recipients = Config::get('pga_config.portal')['admin-emails'];
        foreach($recipients as $recipient){
            $mail->addAddress($recipient);
        }

        $mail->isHTML(true);

        $mail->Subject = "New User Account Was Created Successfully";
        $userProfile = WSIS::getUserProfile($username);
        $wsisConfig = Config::get('pga_config.wsis');
        if( $wsisConfig['tenant-domain'] == "")
            $username = $username;
        else
            $username = $username . "@" . $wsisConfig['tenant-domain'];

        $str = "Gateway Portal: " . $_SERVER['SERVER_NAME'] ."<br/>";
        $str = $str . "Username: " . $username ."<br/>";
        $str = $str . "Name: " . $userProfile["firstname"] . " " . $userProfile["lastname"] . "<br/>";
        $str = $str . "Email: " . $userProfile["email"];

        $mail->Body = $str;
        $mail->send();
    }

    public function resetPasswordSubmit()
    {
        $rules = array(
            "new_password" => "required|min:6",
            "confirm_new_password" => "required|same:new_password",
        );

        $validator = Validator::make(Input::all(), $rules);
        if ($validator->fails()) {
            return Redirect::to("reset-password")
                ->withInput(Input::except('new_password', 'confirm)new_password'))
                ->withErrors($validator);
        }

        $key =  $_POST['key'];
        $username =  $_POST['username'];
        $new_password =  $_POST['new_password'];

        try{
            $result = WSIS::resetPassword($username, $new_password, $key);
            if($result){
                CommonUtilities::print_success_message("User password was reset successfully");
                return View::make("account/login");
            }else{
                CommonUtilities::print_error_message("Resetting user password operation failed");
                return View::make("account/home");
            }
        }catch (Exception $e){
            CommonUtilities::print_error_message("Resetting user password operation failed");
            return View::make("account/home");
        }
    }


    public function logout()
    {
//        Session::flush();
//        if(Config::get('pga_config.wsis')['auth-mode'] == "oauth"){
//            return Redirect::away(WSIS::getOAuthLogoutUrl());
//        }
//        return Redirect::to('home');

        Session::flush();
        return Redirect::to('home');
    }

}