/*
 * This program is free software; you can redistribute it and/or modify it under the
 * terms of the GNU General Public License, version 2 as published by the Free Software
 * Foundation.
 *
 * You should have received a copy of the GNU General Public License along with this
 * program; if not, you can obtain a copy at http://www.gnu.org/licenses/gpl-2.0.html
 * or from the Free Software Foundation, Inc.,
 * 51 Franklin Street, Fifth Floor, Boston, MA 02110-1301 USA.
 *
 * This program is distributed in the hope that it will be useful, but WITHOUT ANY WARRANTY;
 * without even the implied warranty of MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.
 * See the GNU General Public License for more details.
 *
 *
 * Copyright 2014 Pentaho Corporation.  All rights reserved.
 */
package org.pentaho.platform.web.http.api.resources;

import org.codehaus.enunciate.Facet;
import org.pentaho.platform.api.engine.IAuthorizationPolicy;
import org.pentaho.platform.engine.core.system.PentahoSystem;
import org.pentaho.platform.security.policy.rolebased.actions.AdministerSecurityAction;
import org.pentaho.platform.util.PasswordHelper;

import javax.ws.rs.FormParam;
import javax.ws.rs.GET;
import javax.ws.rs.POST;
import javax.ws.rs.Path;
import javax.ws.rs.Produces;
import javax.ws.rs.core.MediaType;
import javax.ws.rs.core.Response;

import static javax.ws.rs.core.Response.Status.UNAUTHORIZED;

/**
 * provides a resource for encrypting a password using the configured IPasswordService
 */
@Path( "/password" )
public class PasswordResource {
  private static final String FORM_HTML =
    "<html><body><form method='post'><input type=\"password\" name=\"password\"/>"
      + "<input type=\"submit\" value=\"Submit\"/></form><br/>%s</body></html>";

  @POST
  @Path( "/encrypt" )
  @Produces( MediaType.TEXT_HTML )
  @Facet( name = "Unsupported" )
  public Response encryptPassword( @FormParam( "password" ) String password ) {
    if ( isAllowed() ) {
      String encPwd = "";
      if ( password != null ) {
        encPwd = getPasswordHelper().encrypt( password );
      }
      return Response.ok( String.format( FORM_HTML, encPwd ) ).build();
    }
    return Response.status( UNAUTHORIZED ).build();
  }

  @GET
  @Path( "/encrypt" )
  @Produces( MediaType.TEXT_HTML )
  @Facet ( name = "Unsupported" )
  public Response encryptionForm() {
    if ( isAllowed() ) {
      return Response.ok( String.format( FORM_HTML, "" ) ).build();
    }
    return Response.status( UNAUTHORIZED ).build();
  }

  PasswordHelper getPasswordHelper() {
    return new PasswordHelper();
  }

  private boolean isAllowed() {
    return getAuthorizationPolicy().isAllowed( AdministerSecurityAction.NAME );
  }

  IAuthorizationPolicy getAuthorizationPolicy() {
    return PentahoSystem.get( IAuthorizationPolicy.class );
  }
}