package SrvMngr::Controller::Ibays;

#----------------------------------------------------------------------
# heading     : Network
# description : Shared areas (was ibays)
# navigation  : 6000 100
# 
#
# routes : end
#----------------------------------------------------------------------
use strict;
use warnings;
use Mojo::Base 'Mojolicious::Controller';

use Locale::gettext;
use SrvMngr::I18N;
use SrvMngr qw( theme_list init_session is_normal_password );

use esmith::AccountsDB;
use esmith::ConfigDB;
use esmith::DomainsDB;

#use esmith::FormMagick::Panel::ibays;

our $adb = esmith::AccountsDB->open || die "Couldn't open accounts db";
our $cdb = esmith::ConfigDB->open() || die "Couldn't open config db";

sub main {

    my $c = shift;
    $c->app->log->info($c->log_req);

    my %iba_datas = ();
    my $title = $c->l('iba_FORM_TITLE');

    $iba_datas{'trt'} = 'LIST';

    my @ibays;
    if ($adb)
    {
        @ibays = $adb->ibays();
    }

    $c->stash( title => $title, iba_datas => \%iba_datas, ibays => \@ibays );
    $c->render(template => 'ibays');

};


sub do_display {

    my $c = shift;

    my $rt = $c->current_route;
    my $trt = ($c->param('trt') || 'LIST');
    my $ibay = $c->param('ibay') || '';

    #$trt = 'DEL' if ( $ibay );
    #$trt = 'ADD' if ( $rt eq 'ibayadd' );

    my %iba_datas = ();
    my $title = $c->l('iba_FORM_TITLE');
    my $modul = '';

    $iba_datas{'trt'} = $trt;

        if ( $trt eq 'ADD' ) {

    	    $iba_datas{ibay} = '';
    	    $iba_datas{description} = '';
    	    $iba_datas{group} = '';
    	    $iba_datas{userAccess} = '';
    	    $iba_datas{publicAccess} = '';
    	    $iba_datas{CgiBin} = '';
    	    $iba_datas{SSL} = '';

        }

        if ( $trt eq 'UPD' ) {

			my $rec = $adb->get($ibay);
			if ($rec and $rec->prop('type') eq 'ibay') {
				$iba_datas{ibay} = $ibay;
				$iba_datas{description} = $rec->prop('Name') || '';
				$iba_datas{group} = $rec->prop('Group') || '';
				$iba_datas{userAccess} = $rec->prop('UserAccess') || '';
				$iba_datas{publicAccess} = $rec->prop('PublicAccess') || '';
				$iba_datas{CgiBin} = $rec->prop('CgiBin') || 'disabled';
				$iba_datas{SSL} = $rec->prop('SSL') || 'disabled';
			}
        }

        if ( $trt eq 'DEL' ) {

			my $rec = $adb->get($ibay);
			if ($rec and $rec->prop('type') eq 'ibay') {
				$iba_datas{ibay} = $ibay;
				$iba_datas{description} = $rec->prop('Name') || '';
			$modul .= print_vhost_message( $c, $ibay );
			}

        }

        if ( $trt eq 'PWD' ) {

			my $rec = $adb->get($ibay);
			if ($rec and $rec->prop('type') eq 'ibay') {
				$iba_datas{ibay} = $ibay;
				$iba_datas{description} = $rec->prop('Name') || '';
			}

        }

        if ( $trt eq 'LIST' ) {
	    my @ibays;
	    $adb = esmith::AccountsDB->open || die "Couldn't open accounts db";
	    if ($adb)
	    {
    		@ibays = $adb->ibays();
	    }
            $c->stash( ibays => \@ibays );

	}

    $c->stash( title => $title, modul => $modul, iba_datas => \%iba_datas );
    $c->render( template => 'ibays' );

};


sub do_update {

    my $c = shift;
    $c->app->log->info($c->log_req);

    my $rt = $c->current_route;
    my $trt = ($c->param('trt') || 'LIST');

    my %iba_datas = ();
    my $title = $c->l('iba_FORM_TITLE');

    $iba_datas{'trt'} = $trt;

    my $result = '';
    my $res;

    if ( $trt eq 'ADD' ) {

	my $name = ($c->param('ibay') || '');

	# controls
	$res = validate_ibay( $c, $name );
	$result .= $res unless $res eq 'OK';

	if ( ! $result ) {
	    $res = create_ibay( $c, $name ); 
	    $result .= $res unless $res eq 'OK';
	    if ( ! $result ) { 
		$result = $c->l('iba_SUCCESSFULLY_CREATED_IBAY') . ' ' . $name; 
		$iba_datas{trt} = 'LST';
	    }
	}
    }

    if ( $trt eq 'UPD' ) {

	my $name = ($c->param('ibay') || '');

	# controls
	$res = '';

	if ( ! $result ) {
	    $res = modify_ibay( $c, $name ); 
	    $result .= $res unless $res eq 'OK';
	    if ( ! $result ) { 
		$result = $c->l('iba_SUCCESSFULLY_MODIFIED_IBAY') . ' ' . $name; 
		$iba_datas{trt} = 'LST';
	    }
	}
    }

    if ( $trt eq 'PWD' ) {

	my $ibay = ($c->param('ibay') || '');
        my $pass1 = ($c->param('newPass') || '');
        my $pass2 = ($c->param('newPassVerify') || '');

	# controls
        unless ($pass1 eq $pass2) {
            $result .= $c->l('iba_IBAY_PASSWD_VERIFY_ERROR') . ' - ';
	}

	$res = check_password( $c, $pass1 );
	$result .= $res unless $res eq 'OK';
	
	if ( ! $result ) {
	    $res = reset_password( $c, $ibay, $pass1 );
	    $result .= $res unless $res eq 'OK';
	    if ( ! $result ) { 
		$result = $c->l('iba_SUCCESSFULLY_RESET_PASSWORD') . ' ' . $ibay; 
		$iba_datas{trt} = 'LST';
	    }
	}
    }

    if ( $trt eq 'DEL' ) {
    
	my $ibay = $c->param ('ibay');

	if ($ibay =~ /^([a-z][a-z0-9]*)$/) {
    	    $ibay = $1;
	} else {
    	    $result .= $c->l('iba_ERR_INTERNAL_FAILURE') . ':' . $ibay;
	}

	if ( ! $result ) {
	    $res = remove_ibay( $c, $ibay );
	    $result .= $res unless $res eq 'OK';
	    if ( ! $result ) { 
		$result = $c->l('iba_SUCCESSFULLY_DELETED_IBAY') . ' ' . $ibay; 
		$iba_datas{trt} = 'LST';
	    }
	}
    }

    # common parts

    if ($res ne 'OK') {
	$c->stash( error => $result );
	$c->stash( title => $title, iba_datas => \%iba_datas );
	return $c->render('ibays');
    }

    my $message = "'Ibays' updates ($trt) DONE";
    $c->app->log->info($message);
    $c->flash( success => $result );

    $c->redirect_to('/ibays');
};


sub validate_ibay {

    my ($c, $name) = @_;

    my $msg = validate_name($c, $name);
    unless ($msg eq "OK")
    {
        return ($msg);
    }

    $msg = max_ibay_name_length($c, $name);
    unless ($msg eq "OK")
    {
        return ($msg);
    }

    $msg = conflict_check($c, $name);
    unless ($msg eq "OK")
    {
        return ($msg);
    }

    return ('OK');
}


sub create_ibay {

    my ($c, $name) = @_;

    my $msg;
    my $uid  = $adb->get_next_uid();
    if (my $acct = $adb->new_record($name, {
            Name         => $c->param('ibayDesc'),
            CgiBin       => $c->param('CgiBin'),
            Group        => $c->param('group'),
            PublicAccess => $c->param('publicAccess'),
            SSL          => $c->param('SSL'),
            UserAccess   => $c->param('userAccess'),
            Uid          => $uid,
            Gid          => $uid,
            PasswordSet  => 'no',
            type         => 'ibay',
        }) ) 
    {
        # Untaint $name before use in system()
        $name =~ /(.+)/; $name = $1;
        if (system ("/sbin/e-smith/signal-event", "ibay-create", $name) == 0) {
            $msg = 'OK';
        } else {
            $msg = $c->l('iba_ERROR_WHILE_CREATING_IBAY');
        }
    } else {
        $msg = $c->l('iba_CANT_CREATE_IBAY');
    }
    return $msg;

}


sub modify_ibay {
    my ($c, $name) = @_;

    my $msg;
    if (my $acct = $adb->get($name)) {
        if ($acct->prop('type') eq 'ibay') {
            $acct->merge_props(
                Name         => $c->param('ibayDesc'),
                CgiBin       => $c->param('CgiBin'),
                Group        => $c->param('group'),
                PublicAccess => $c->param('publicAccess'),
                SSL          => $c->param('SSL'),
                UserAccess   => $c->param('userAccess'),
            );

            # Untaint $name before use in system()
            $name =~ /(.+)/; $name = $1;
            if (system ("/sbin/e-smith/signal-event", "ibay-modify", 
                $name) == 0) 
            {
                $msg = 'OK';
            } else {
                $msg = $c->l('iba_ERROR_WHILE_MODIFYING_IBAY');
            }
        } else {
            $msg = $c->l('iba_CANT_FIND_IBAY');
        }
    } else {
        $msg = $c->l('iba_CANT_FIND_IBAY');
    }

    return $msg;

}


sub print_vhost_message {
    my $c = shift;
    my $name = $c->param('ibay');

    my $result = '';

    my $domaindb = esmith::DomainsDB->open();
    my @domains = $domaindb->get_all_by_prop(Content => $name);
    my $vhostListItems = join "\n",
        (map ($_->key." ".$_->prop('Description'), @domains));
    if ($vhostListItems)
    {
        $result = $c->l('iba_VHOST_MESSAGE') . "<br><ul>";
        foreach ( $vhostListItems ) {
    	    $result .= "<li> $_ </li>";
    	}
    	$result .= '</ul>'
    }
    return $result;
}


sub remove_ibay {
    my ($c, $name) = @_;

    my $msg = '';
    if (my $acct = $adb->get($name)) {
        if ($acct->prop('type') eq 'ibay') {
            $acct->set_prop('type', 'ibay-deleted');

            my $domains_db = esmith::DomainsDB->open();
            my @domains = $domains_db->get_all_by_prop(Content=>$name);
            foreach my $d (@domains) {
                $d->set_prop(Content => 'Primary');
            }

            # Untaint $name before use in system()
            $name =~ /(.+)/; $name = $1;
            if (system ("/sbin/e-smith/signal-event", "ibay-delete", 
                $name) == 0) 
            {
                $msg = 'OK';
                $acct->delete();
            } else {
                $msg = $c->l('iba_ERROR_WHILE_DELETING_IBAY');
            }
        } else {
            $msg = $c->l('iba_CANT_FIND_IBAY');
        }

    } else {
        $msg = $c->l('iba_CANT_FIND_IBAY');
    }
    return $msg;
}


sub reset_password {
    my ($c, $name, $newPass) = @_;

    my ($msg, $acct);
    
    if (($acct = $adb->get($name)) && ($acct->prop('type') eq 'ibay')) {
        esmith::util::setIbayPassword ($acct->key, $newPass);
        $acct->set_prop('PasswordSet', 'yes');
        # Untaint $name before use in system()
        $name =~ /(.+)/; $name = $1;
        if (system ("/sbin/e-smith/signal-event", "password-modify", 
            $name) == 0) 
        {
            $msg = 'OK';
        } else {
            $msg = $c->l('iba_ERROR_WHILE_RESETTING_PASSWORD');
        }
    } else {
        $msg = $c->l('iba_CANT_FIND_IBAY');
    }
    return $msg;
}


sub check_password {
    my ($c, $password) = @_;

    my $strength;
    
    my $rec = $cdb->get('passwordstrength');
    $strength = ($rec ? ($rec->prop('Ibays') || 'none') : 'none');

    return validate_password( $c, $strength, $password );
}


sub validate_password {

    my ($c, $strength, $pass) = @_;

    use Crypt::Cracklib;

    my $reason;

    if ($strength eq "none") {
        return $c->l("Passwords must be at least 7 characters long") unless (length($pass) > 6);
        return "OK";
    }

    $reason = is_normal_password($c, $pass, undef);
    return $reason unless ($reason eq "OK");
    return "OK" unless ($strength eq "strong");

    if ( -f '/usr/lib64/cracklib_dict.pwd' ) {
        $reason = fascist_check($pass, '/usr/lib64/cracklib_dict');
    } else {
        $reason = fascist_check($pass, '/usr/lib/cracklib_dict');
    }
    $reason ||= "Software error: password check failed";

    return "OK" if ($reason eq "ok");

    return $c->l("Bad Password Choice") . ": "
	. $c->l("The password you have chosen is not a good choice, because")
	. " " . $c->($reason) . ".";
}


=head2 group_list()

Returns a hash of groups for the Create/Modify screen's group field's
drop down list.

=cut

sub group_list_m {

    my @groups = $adb->groups();

    my @grps = ( ['Admin' => 'admin'], ['Everyone' => 'shared']);

    foreach my $g (@groups) {
	push @grps, [ $g->prop('Description')." (". $g->key.")", $g->key() ];
    }

    return \@grps;
}


=head2 userAccess_list

Returns the hash of user access settings for showing in the user access
drop down list.

=cut

sub userAccess_list_m {

    my $c = shift;
    return [[ $c->l('WARG') => 'wr-admin-rd-group'],
	    [ $c->l('WGRE') => 'wr-group-rd-everyone'],
	    [ $c->l('WGRG') => 'wr-group-rd-group']];

}

=head2 publicAccess_list

Returns the hash of public access settings for showing in the public
access drop down list.

=cut

sub publicAccess_list_m {

    my $c = shift;
    return [[ $c->l('NONE') => 'none'],
            [ $c->l('LOCAL_NETWORK_NO_PASSWORD') => 'local'],
            [ $c->l('LOCAL_NETWORK_PASSWORD') => 'local-pw'],
            [ $c->l('ENTIRE_INTERNET_NO_PASSWORD') => 'global'],
            [ $c->l('ENTIRE_INTERNET_PASSWORD') => 'global-pw'],
            [ $c->l('ENTIRE_INTERNET_PASSWORD_REMOTE') => 'global-pw-remote']];
}


sub max_ibay_name_length {

    my ($c, $data) = @_;
    $cdb->reload();
    my $max = $cdb->get('maxIbayNameLength')->value;

    if (length($data) <= $max) {
        return "OK";
    } else {
        return $c->l('iba_MAX_IBAY_NAME_LENGTH_ERROR', $data, $max, $max);
    #        {acctName => $data, 
    #         maxIbayNameLength => $max, 
    #         maxLength => $max});
    }
}


sub conflict_check {

    my ($c, $name) = @_;
    my $rec = $adb->get($name);

    my $type;
    if (defined $rec)
    {
		my $type = $rec->prop('type');
		if ($type eq "pseudonym")
		{
			my $acct = $rec->prop("Account");
			my $acct_type = $adb->get($acct)->prop('type');

			return $c->l('iba_ACCT_CLASHES_WITH_PSEUDONYM', $name, $acct_type, $acct);
		}
    }
    elsif (defined getpwnam($name) || defined getgrnam($name))
    {
        $type = 'system';
    }
    else
    {
        # No account record and no account
        return 'OK';
    }
    return $c->l('iba_ACCOUNT_EXISTS', $name, $type);
}

sub validate_name {

    my ($c, $acctName) = @_;

    unless ($acctName =~ /^([a-z][\_\.\-a-z0-9]*)$/)
    {
        return $c->l('iba_ACCT_NAME_HAS_INVALID_CHARS', $acctName);
    }
    return "OK";
}


1