#--
#            DO WHAT THE FUCK YOU WANT TO PUBLIC LICENSE
#                    Version 2, December 2004
#
#            DO WHAT THE FUCK YOU WANT TO PUBLIC LICENSE
#   TERMS AND CONDITIONS FOR COPYING, DISTRIBUTION AND MODIFICATION
#
#  0. You just DO WHAT THE FUCK YOU WANT TO.
#++

class User
  include DataMapper::Resource

  property :id,       Serial
  property :username, String, unique: true,  length: 4..16, format: /^[\w_\s\-\*]*$/, key: true
  property :email,    String, unique: true,                 format: :email_address

  property :permission_level, Integer, default: 4

  property :salt,             String, length: 29
  property :salted_password,  String, length: 60
  property :lost_password,    String
  property :session,          String

  property :created_at,       DateTime
  property :updated_at,       DateTime

  def password=(password)
    salt                 = BCrypt::Engine.generate_salt
    self.salt            = salt
    self.salted_password = BCrypt::Engine.hash_secret password, salt
  end

  def banned?
    self.permission_level == User.banned
  end

  def founder?
    self.permission_level == User.founder
  end

  def admin?
    self.permission_level == User.admin
  end

  def smod?
    self.permission_level == User.smod
  end
    alias_method :gmod?, :smod?

  def mod?
    self.permission_level == User.mod
  end

  def user?
    self.permission_level == User.user
  end

  def guest?
    false
  end

  def high_staff?
    founder? || admin?
  end
    alias_method :high_staffer?, :high_staff?

  def staff?
    founder? || admin? || smod? || mod?
  end
    alias_method :staffer?, :staff?

  def logged?(session)
    self.session == session
  end
    alias_method :logged_in?, :logged?

  def logout
    self.session = ''
    true
  end
    alias_method :logout!, :logout

  def change_level(permission_level)
    self.permission_level = permission_level
  end

  class << self
    def banned
      -1
    end

    def founder
      0
    end

    def admin
      1
    end

    def smod
      2
    end
      alias_method :gmod, :smod

    def mod
      3
    end

    def user
      4
    end

    def guest
      5
    end

    def levels
      {
        :banned  => User.banned,
        :founder => User.founder,
        :admin   => User.admin,
        :smod    => User.smod,
        :gmod    => User.gmod,
        :mod     => User.mod,
        :user    => User.user
      }
    end

    def empty?
      User.count == 0
    end

    def get(username)
      User.first username: username
    end

    def exists?(username)
      User.count(username: username) == 1
    end
    
    def registration(username, email, password, permission_level, stuff = {})
      User.create({
        :username         => username,
        :email            => email,
        :password         => password,
        :permission_level => permission_level
      }.merge(stuff))
    end
      alias_method :signup, :registration

    def authentication(username, password)
      user = User.first username: username
      return false unless user
      if user.salted_password == BCrypt::Engine.hash_secret(password, user.salt)
        return user.update(session: BCrypt::Engine.generate_salt) ? user.session : false
      else
        false
      end
    end
      alias_method :login,        :authentication
      alias_method :signin,       :authentication
      alias_method :authenticate, :authentication

    def lost_password(username)
      user = User.first username: username
      return false unless user
      user.update lost_password: BCrypt::Engine.generate_salt
      user.lost_password
    end

    def password_recovery(username, lost_password, password)
      user = User.first({
        :username      => username,
        :lost_password => lost_password
      })
      return false unless user
      return false if     user.lost_password.empty?
      user.update({
        :lost_password => '',
        :password      => password
      })
    end

    def change_level(username, permission_level)
      user = User.first username: username
      return false unless user
      user.update permission_level: permission_level
    end
  end
end