/*******************************************************************************
 * Copyright (C) 2007 The University of Manchester   
 * 
 *  Modifications to the initial code base are copyright of their
 *  respective authors, or their employers as appropriate.
 * 
 *  This program is free software; you can redistribute it and/or
 *  modify it under the terms of the GNU Lesser General Public License
 *  as published by the Free Software Foundation; either version 2.1 of
 *  the License, or (at your option) any later version.
 *    
 *  This program is distributed in the hope that it will be useful, but
 *  WITHOUT ANY WARRANTY; without even the implied warranty of
 *  MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the GNU
 *  Lesser General Public License for more details.
 *    
 *  You should have received a copy of the GNU Lesser General Public
 *  License along with this program; if not, write to the Free Software
 *  Foundation, Inc., 59 Temple Place, Suite 330, Boston, MA 02111-1307
 ******************************************************************************/
package net.sf.taverna.t2.workbench.file.impl.actions;

import static java.awt.EventQueue.invokeLater;
import static javax.swing.JOptionPane.ERROR_MESSAGE;
import static javax.swing.JOptionPane.showMessageDialog;

import java.awt.event.ActionEvent;
import java.awt.event.ActionListener;
import java.io.IOException;
import java.net.HttpURLConnection;
import java.net.URL;

import javax.swing.JButton;
import javax.swing.JFrame;
import javax.swing.JLabel;
import javax.swing.JPasswordField;
import javax.swing.JTextField;

import net.sf.taverna.t2.workbench.helper.HelpEnabledDialog;

import org.apache.commons.codec.binary.Base64;
import org.apache.log4j.Logger;

/**
 * Simple dialogue to handle username/password input for workflow URL requiring
 * http authentication.
 * 
 * @author Stuart Owen
 * @author Stian Soiland-Reyes
 * @author Alan R Williams
 */
@SuppressWarnings("serial")
public class PasswordInput extends HelpEnabledDialog {
	private static Logger logger = Logger.getLogger(PasswordInput.class);

	private String password = null;
	private String username = null;
	private URL url = null;
	private int tryCount = 0;
	private final static int MAX_TRIES = 3;

	private JButton cancelButton;
	private JLabel jLabel1;
	private JLabel jLabel2;
	private JLabel messageLabel;
	private JButton okButton;
	private JPasswordField passwordTextField;
	private JLabel urlLabel;
	private JTextField usernameTextField;

	public void setUrl(URL url) {
		this.url = url;
		urlLabel.setText(url.toExternalForm());
	}

	public String getPassword() {
		return password;
	}

	public String getUsername() {
		return username;
	}

	public PasswordInput(JFrame parent) {
		super(parent, "Authorization", true, null);
		initComponents();
	}

	/** Creates new form PasswordInput */
	public PasswordInput() {
		super((JFrame) null, "Authorization", true, null);
		initComponents();
	}

	/**
	 * This method is called from within the constructor to initialize the form.
	 * WARNING: Do NOT modify this code. The content of this method is always
	 * regenerated by the Form Editor.
	 */
	private void initComponents() {
		usernameTextField = new javax.swing.JTextField();
		cancelButton = new javax.swing.JButton();
		okButton = new javax.swing.JButton();
		passwordTextField = new javax.swing.JPasswordField();
		jLabel1 = new javax.swing.JLabel();
		jLabel2 = new javax.swing.JLabel();
		messageLabel = new javax.swing.JLabel();
		urlLabel = new javax.swing.JLabel();

		getContentPane().setLayout(null);

		setModal(true);
		// setResizable(false);
		getContentPane().add(usernameTextField);
		usernameTextField.setBounds(20, 80, 280, 22);

		cancelButton.setText("Cancel");
		cancelButton.addActionListener(new ActionListener() {
			@Override
			public void actionPerformed(ActionEvent evt) {
				cancelButtonActionPerformed(evt);
			}
		});

		getContentPane().add(cancelButton);
		cancelButton.setBounds(230, 160, 75, 29);

		okButton.setText("OK");
		okButton.addActionListener(new ActionListener() {
			@Override
			public void actionPerformed(ActionEvent evt) {
				okButtonActionPerformed(evt);
			}
		});

		getContentPane().add(okButton);
		okButton.setBounds(150, 160, 75, 29);

		getContentPane().add(passwordTextField);
		passwordTextField.setBounds(20, 130, 280, 22);

		jLabel1.setText("Username");
		getContentPane().add(jLabel1);
		jLabel1.setBounds(20, 60, 70, 16);

		jLabel2.setText("Password");
		getContentPane().add(jLabel2);
		jLabel2.setBounds(20, 110, 70, 16);

		messageLabel.setText("A username and password is required for:");
		getContentPane().add(messageLabel);
		messageLabel.setBounds(20, 10, 270, 20);

		urlLabel.setText("service");
		getContentPane().add(urlLabel);
		urlLabel.setBounds(20, 30, 270, 16);

		pack();
	}

	private void okButtonActionPerformed(ActionEvent evt) {//GEN-FIRST:event_okButtonActionPerformed
		String password = String.valueOf(passwordTextField.getPassword());
		String username = usernameTextField.getText();
		HttpURLConnection connection;
		try {
			connection = (HttpURLConnection) url.openConnection();
			String userPassword = username + ":" + password;
			/*
			 * Note: non-latin1 support for basic auth is fragile/unsupported
			 * and must be MIME-encoded (RFC2047) according to
			 * https://bugzilla.mozilla.org/show_bug.cgi?id=41489
			 */
			byte[] encoded = Base64.encodeBase64(userPassword
					.getBytes("latin1"));
			connection.setRequestProperty("Authorization", "Basic "
					+ new String(encoded, "ascii"));
			connection.setRequestProperty("Accept", "text/xml");
			int code = connection.getResponseCode();

			/*
			 * NB: myExperiment gives a 500 response for an invalid
			 * username/password
			 */
			if (code == 401 || code == 500) {
				tryCount++;
				showMessageDialog(this, "The username and password failed",
						"Invalid username or password", ERROR_MESSAGE);
				if (tryCount >= MAX_TRIES) { // close after 3 attempts.
					this.password = null;
					this.username = null;
					this.setVisible(false);
				}
			} else {
				this.username = username;
				this.password = password;
				this.setVisible(false);
			}
		} catch (IOException ex) {
			logger.error("Could not get password", ex);
		}
	}

	private void cancelButtonActionPerformed(ActionEvent evt) {
		this.password = null;
		this.username = null;
		this.setVisible(false);
	}

	/**
	 * @param args
	 *            the command line arguments
	 */
	public static void main(String args[]) {
		invokeLater(new Runnable() {
			@Override
			public void run() {
				new PasswordInput().setVisible(true);
			}
		});
	}
}