package v5

import (
	"fmt"
	"os"
	"strings"
	"time"

	"github.com/luscis/openlan/cmd/api"
	"github.com/luscis/openlan/pkg/libol"
	"github.com/luscis/openlan/pkg/schema"
	"github.com/urfave/cli/v2"
)

type User struct {
	Cmd
}

func (u User) Url(prefix, name string) string {
	if name == "" {
		return prefix + "/api/user"
	} else {
		return prefix + "/api/user/" + name
	}
}

func (u User) Add(c *cli.Context) error {
	username := c.String("name")
	user := &schema.User{
		Name:     username,
		Password: c.String("password"),
		Role:     c.String("role"),
		Lease:    c.String("lease"),
	}
	if user.Name == "" {
		return libol.NewErr("name is empty")
	}
	if !strings.Contains(username, "@") {
		return libol.NewErr("name not contains network")
	}
	values := strings.SplitN(username, "@", 2)
	user.Name = values[0]
	user.Network = values[1]
	url := u.Url(c.String("url"), user.Name)
	clt := u.NewHttp(c.String("token"))
	if err := clt.PostJSON(url, user, nil); err != nil {
		return err
	}
	return nil
}

func (u User) Remove(c *cli.Context) error {
	username := c.String("name")
	url := u.Url(c.String("url"), username)
	clt := u.NewHttp(c.String("token"))
	if err := clt.DeleteJSON(url, nil, nil); err != nil {
		return err
	}
	return nil
}

func (u User) Tmpl() string {
	return `# total {{ len . }}
{{ps -24 "username"}} {{ps -24 "password"}} {{ps -6 "role"}} {{ps -15 "lease"}}
{{- range . }}
{{p2 -24 "%s@%s" .Name .Network}} {{ps -24 .Password}} {{ps -6 .Role}} {{ps -15 .Lease }}
{{- end }}
`
}

func (u User) ChapTmpl() string {
	return `# Generate by OpenLAN
# Secrets for authentication using CHAP
# client	server	secret			IP addresses
{{- range . }}
{{.Name}}@{{.Network}}{{"\t"}}*{{"\t"}}{{.Password}}{{"\t"}}*
{{- end }}
`
}

func (u User) List(c *cli.Context) error {
	url := u.Url(c.String("url"), "")
	clt := u.NewHttp(c.String("token"))
	var items []schema.User
	if err := clt.GetJSON(url, &items); err != nil {
		return err
	}
	name := c.String("network")
	if len(name) > 0 {
		tmp := items[:0]
		for _, obj := range items {
			if obj.Network == name {
				tmp = append(tmp, obj)
			}
		}
		items = tmp
	}
	tmpl := u.Tmpl()
	chap := c.Bool("chap")
	if chap {
		tmpl = u.ChapTmpl()
	}
	return u.Out(items, c.String("format"), tmpl)
}

func (u User) Get(c *cli.Context) error {
	username := c.String("name")
	url := u.Url(c.String("url"), username)
	client := u.NewHttp(c.String("token"))
	items := []schema.User{{}}
	if err := client.GetJSON(url, &items[0]); err != nil {
		return err
	}
	return u.Out(items, c.String("format"), u.Tmpl())
}

func (u User) Check(c *cli.Context) error {
	netFromO := c.String("network")
	nameFromE := c.String("name")
	passFromE := c.String("password")
	if nameFromE == "" {
		nameFromE = os.Getenv("username")
		passFromE = os.Getenv("password")
	}
	netFromE := "default"
	if strings.Contains(nameFromE, "@") {
		netFromE = strings.Split(nameFromE, "@")[1]
	}
	fullName := nameFromE
	if !strings.Contains(nameFromE, "@") {
		fullName = nameFromE + "@" + netFromE
	}
	if netFromO != "" && netFromE != netFromO {
		return libol.NewErr("wrong: zo=%s, us=%s", netFromO, nameFromE)
	}
	alias := ""
	if ip, ok := os.LookupEnv("untrusted_ip"); ok {
		alias = ip + ":" + os.Getenv("untrusted_port")
	}
	url := u.Url(c.String("url"), fullName)
	url += "/check"
	client := u.NewHttp(c.String("token"))
	data := &schema.User{
		Name:     fullName,
		Password: passFromE,
		Alias:    alias,
	}
	if err := client.PostJSON(url, data, nil); err == nil {
		fmt.Printf("success: us=%s\n", nameFromE)
		return nil
	} else {
		return err
	}
}

func (u User) Commands(app *api.App) {
	lease := time.Now().AddDate(1, 0, 0)
	app.Command(&cli.Command{
		Name:    "user",
		Aliases: []string{"us"},
		Usage:   "User authentication",
		Subcommands: []*cli.Command{
			{
				Name:  "add",
				Usage: "Add a new user",
				Flags: []cli.Flag{
					&cli.StringFlag{Name: "name"},
					&cli.StringFlag{Name: "password", Value: libol.GenString(24)},
					&cli.StringFlag{Name: "role", Value: "guest"},
					&cli.StringFlag{Name: "lease", Value: lease.Format(libol.LeaseTime)},
				},
				Action: u.Add,
			},
			{
				Name:  "set",
				Usage: "Update a user",
				Flags: []cli.Flag{
					&cli.StringFlag{Name: "name"},
					&cli.StringFlag{Name: "password"},
					&cli.StringFlag{Name: "role"},
					&cli.StringFlag{Name: "lease"},
				},
				Action: u.Add,
			},
			{
				Name:    "remove",
				Usage:   "Remove an existing user",
				Aliases: []string{"rm"},
				Flags: []cli.Flag{
					&cli.StringFlag{Name: "name"},
				},
				Action: u.Remove,
			},
			{
				Name:    "list",
				Usage:   "Display all users",
				Aliases: []string{"ls"},
				Flags: []cli.Flag{
					&cli.StringFlag{Name: "network"},
					&cli.BoolFlag{Name: "chap", Value: false},
				},
				Action: u.List,
			},
			{
				Name:  "get",
				Usage: "Get an user",
				Flags: []cli.Flag{
					&cli.StringFlag{Name: "name"},
				},
				Action: u.Get,
			},
			{
				Name:    "check",
				Usage:   "Check an user",
				Aliases: []string{"co"},
				Flags: []cli.Flag{
					&cli.StringFlag{Name: "name"},
					&cli.StringFlag{Name: "password"},
					&cli.StringFlag{Name: "network"},
				},
				Action: u.Check,
			},
		},
	})
}