/**
 *
 * Copyright
 * 2009-2015 Jayway Products AB
 * 2016-2017 Föreningen Sambruk
 *
 * Licensed under AGPL, Version 3.0 (the "License");
 * you may not use this file except in compliance with the License.
 * You may obtain a copy of the License at
 *
 *     http://www.gnu.org/licenses/agpl.txt
 *
 * Unless required by applicable law or agreed to in writing, software
 * distributed under the License is distributed on an "AS IS" BASIS,
 * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
 * See the License for the specific language governing permissions and
 * limitations under the License.
 */
package se.streamsource.streamflow.web.domain.structure.user;

import org.qi4j.api.common.Optional;
import org.qi4j.api.common.UseDefaults;
import org.qi4j.api.injection.scope.This;
import org.qi4j.api.mixin.Mixins;
import org.qi4j.api.property.Property;

import se.streamsource.streamflow.api.Password;
import se.streamsource.streamflow.infrastructure.event.domain.DomainEvent;
import se.streamsource.streamflow.util.Strings;

/**
 * JAVADOC
 */
@Mixins(UserAuthentication.Mixin.class)
public interface UserAuthentication
{
   void changePassword( String currentPassword, @Password String newPassword ) throws WrongPasswordException;

   void resetPassword( @Password String password );

   void changeEnabled( boolean enabled );

   interface Data
   {
      Property<String> userName();

      Property<String> hashedPassword();

      @UseDefaults
      Property<Boolean> disabled();

      boolean isCorrectPassword( String password );

      boolean isAdministrator();

      boolean isDisabled();

      void changedPassword( @Optional DomainEvent event, String hashedPassword );

      void changedEnabled( @Optional DomainEvent event, boolean enabled );
   }

   abstract class Mixin
         implements UserAuthentication, Data
   {
      @This
      Data authenticationState;

      public void changeEnabled( boolean enabled )
      {
         if (enabled == disabled().get())
         {
            changedEnabled( null, !enabled );
         }
      }

      public void changePassword( String currentPassword, String newPassword ) throws WrongPasswordException
      {
         // Check if current password is correct
         if (!isCorrectPassword( currentPassword ))
         {
            throw new WrongPasswordException();
         }

         changedPassword( null, Strings.hashString( newPassword ) );
      }

      public void resetPassword( String password )
      {
         changedPassword( null, Strings.hashString( password ) );
      }

      public void changedPassword( @Optional DomainEvent event, String hashedPassword )
      {
         hashedPassword().set( hashedPassword );
      }

      public void changedEnabled( @Optional DomainEvent event, boolean enabled )
      {
         authenticationState.disabled().set( enabled );
      }

      public boolean isCorrectPassword( String password )
      {
         boolean alreadyHashed = password.startsWith( "#" );
         return hashedPassword().get().equals( alreadyHashed ? password.replace( "#", "" ) : Strings.hashString( password ) );
      }

      public boolean isAdministrator()
      {
         return userName().get().equals( "administrator" );
      }

      public boolean isDisabled()
      {
         return disabled().get();
      }
   }
}