/*
 * Copyright 2014 LinkedIn Corp.
 *
 * Licensed under the Apache License, Version 2.0 (the "License"); you may not
 * use this file except in compliance with the License. You may obtain a copy of
 * the License at
 *
 * http://www.apache.org/licenses/LICENSE-2.0
 *
 * Unless required by applicable law or agreed to in writing, software
 * distributed under the License is distributed on an "AS IS" BASIS, WITHOUT
 * WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. See the
 * License for the specific language governing permissions and limitations under
 * the License.
 */

package azkaban.restli;

import java.util.UUID;
import javax.servlet.ServletException;
import org.apache.log4j.Logger;

import azkaban.restli.user.User;
import azkaban.user.UserManager;
import azkaban.user.UserManagerException;
import azkaban.webapp.AzkabanWebServer;
import azkaban.server.session.Session;

import com.linkedin.restli.server.annotations.Action;
import com.linkedin.restli.server.annotations.ActionParam;
import com.linkedin.restli.server.annotations.RestLiActions;
import com.linkedin.restli.server.resources.ResourceContextHolder;

@RestLiActions(name = "user", namespace = "azkaban.restli")
public class UserManagerResource extends ResourceContextHolder {
  private static final Logger logger = Logger
      .getLogger(UserManagerResource.class);

  public AzkabanWebServer getAzkaban() {
    return AzkabanWebServer.getInstance();
  }

  @Action(name = "login")
  public String login(@ActionParam("username") String username,
      @ActionParam("password") String password) throws UserManagerException,
      ServletException {
    String ip = ResourceUtils.getRealClientIpAddr(this.getContext());
    logger
        .info("Attempting to login for " + username + " from ip '" + ip + "'");

    Session session = createSession(username, password, ip);

    logger.info("Session id " + session.getSessionId() + " created for user '"
        + username + "' and ip " + ip);
    return session.getSessionId();
  }

  @Action(name = "getUserFromSessionId")
  public User getUserFromSessionId(@ActionParam("sessionId") String sessionId) {
    String ip = ResourceUtils.getRealClientIpAddr(this.getContext());
    Session session = getSessionFromSessionId(sessionId, ip);
    azkaban.user.User azUser = session.getUser();

    // Fill out the restli object with properties from the Azkaban user
    User user = new User();
    user.setUserId(azUser.getUserId());
    user.setEmail(azUser.getEmail());
    return user;
  }

  private Session createSession(String username, String password, String ip)
      throws UserManagerException, ServletException {
    UserManager manager = getAzkaban().getUserManager();
    azkaban.user.User user = manager.getUser(username, password);

    String randomUID = UUID.randomUUID().toString();
    Session session = new Session(randomUID, user, ip);
    getAzkaban().getSessionCache().addSession(session);

    return session;
  }

  private Session getSessionFromSessionId(String sessionId, String remoteIp) {
    if (sessionId == null) {
      return null;
    }

    Session session = getAzkaban().getSessionCache().getSession(sessionId);
    // Check if the IP's are equal. If not, we invalidate the sesson.
    if (session == null || !remoteIp.equals(session.getIp())) {
      return null;
    }

    return session;
  }
}