/*
 * Copyright 2000-2013 Enonic AS
 * http://www.enonic.com/license
 */

package com.enonic.cms.web.portal.interceptor;

import javax.servlet.http.HttpServletRequest;

import org.slf4j.Logger;
import org.slf4j.LoggerFactory;
import org.springframework.beans.factory.annotation.Autowired;
import org.springframework.stereotype.Component;

import com.enonic.cms.api.plugin.ext.http.HttpAutoLogin;
import com.enonic.cms.core.plugin.ext.HttpAutoLoginExtensions;
import com.enonic.cms.core.security.SecurityService;
import com.enonic.cms.core.security.user.QualifiedUsername;
import com.enonic.cms.core.security.user.UserEntity;
import com.enonic.cms.core.structure.SiteKey;
import com.enonic.cms.server.service.servlet.OriginalPathResolver;
import com.enonic.cms.web.portal.PortalWebContext;

@Component
public final class AutoLoginInterceptor
    implements RequestInterceptor
{
    private final static Logger LOG = LoggerFactory.getLogger( AutoLoginInterceptor.class );

    private HttpAutoLoginExtensions httpAutoLoginExtensions;

    private SecurityService securityService;

    private OriginalPathResolver originalPathResolver = new OriginalPathResolver();

    @Autowired
    public void setHttpAutoLoginExtensions( HttpAutoLoginExtensions httpAutoLoginExtensions )
    {
        this.httpAutoLoginExtensions = httpAutoLoginExtensions;
    }

    @Autowired
    public void setSecurityService( SecurityService securityService )
    {
        this.securityService = securityService;
    }

    /**
     * Execute the auto login, if an auto login plugin has been configured.
     */
    @Override
    public boolean preHandle( final PortalWebContext context )
        throws Exception
    {
        final HttpServletRequest req = context.getRequest();
        String path = originalPathResolver.getRequestPathFromHttpRequest( req );
        HttpAutoLogin plugin = httpAutoLoginExtensions.findFirstMatching( path );

        if ( plugin != null )
        {
            doAutoLogin( req, plugin, context.getSiteKey() );
        }

        return true;
    }

    @Override
    public void postHandle( final PortalWebContext context )
        throws Exception
    {
        // Do nothing
    }

    private void doAutoLogin( HttpServletRequest req, HttpAutoLogin plugin, SiteKey siteKey )
    {
        UserEntity current = securityService.getLoggedInPortalUserAsEntity();

        if ( !current.isAnonymous() )
        {
            if ( current.isEnterpriseAdmin() )
            {
                LOG.debug( "Already logged in as Enterprise Admin. Skipping auto-login." );
                return;
            }

            LOG.debug( "Already logged in. Checking if current user equals SSO user." );
            boolean currentUserIsValid = plugin.validateCurrentUser( current.getName(), current.getUserStore().getName(), req );
            if ( currentUserIsValid )
            {
                LOG.debug( "Already logged in. Skipping auto-login." );
                return;
            }
            else
            {
                LOG.debug( "A new SSO user has arrived. Logging out current user before continueing" );
                securityService.logoutPortalUser();
            }
        }

        QualifiedUsername qualifiedUserName = getAuthenticatedUser( req, plugin );
        if ( qualifiedUserName == null )
        {
            return;
        }

        if ( securityService.autoLoginPortalUser( qualifiedUserName, req.getRemoteAddr(), siteKey ) )
        {
            LOG.debug( "Auto-login logged in user [" + qualifiedUserName + "]" );
        }
        else
        {
            LOG.debug( "Auto-login user [" + qualifiedUserName + "] does not exist. Auto-login failed." );
        }
    }

    private QualifiedUsername getAuthenticatedUser( HttpServletRequest req, HttpAutoLogin plugin )
    {
        try
        {
            String qualifiedUsernameStr = plugin.getAuthenticatedUser( req );
            if ( qualifiedUsernameStr == null )
            {
                return null;
            }

            return QualifiedUsername.parse( qualifiedUsernameStr );
        }
        catch ( Exception e )
        {
            LOG.error( "Failed to get authenticated user from plugin", e );
            return null;
        }
    }
}