#--
# Cloud Foundry 2012.02.03 Beta
# Copyright (c) [2009-2012] VMware, Inc. All Rights Reserved.
#
# This product is licensed to you under the Apache License, Version 2.0 (the "License").
# You may not use this product except in compliance with the License.
#
# This product includes a number of subcomponents with
# separate copyright notices and license terms. Your use of these
# subcomponents is subject to the terms and conditions of the
# subcomponent's license, as noted in the LICENSE file.
#++

require 'cli/common'

module CF::UAA

class UserCli < CommonCli

  topic "User Accounts", "account"

  define_option :givenName, "--given_name <name>"
  define_option :familyName, "--family_name <name>"
  define_option :emails, "--emails <addresses>"
  define_option :phoneNumbers, "--phones <phone_numbers>"
  USER_INFO_OPTS = [:givenName, :familyName, :emails, :phoneNumbers]

  def user_opts(info = {})
    [:emails, :phoneNumbers].each do |o|
      next unless opts[o]
      info[o] = Util.arglist(opts[o]).each_with_object([]) { |v, a| a << {:value => v} }
    end
    n = [:givenName, :familyName].each_with_object({}) { |o, n| n[o] = opts[o] if opts[o] }
    info[:name] = n unless n.empty?
    info
  end

  define_option :attrs, "-a", "--attributes <names>", "output for each user"
  define_option :start, "--start <number>", "start of output page"
  define_option :count, "--count <number>", "max number per page"
  desc "users [filter]", "List user accounts", :attrs, :start, :count do |filter|
    pp scim_request { |ua|
      query = { attributes: opts[:attrs], filter: filter }
      opts[:start] || opts[:count] ?
        ua.query(:user, query.merge!(startIndex: opts[:start], count: opts[:count])):
        ua.all_pages(:user, query)
    }
  end

  desc "user get [name]", "Get specific user account" do |name|
    pp scim_request { |ua| ua.get(:user, ua.id(:user, username(name))) }
  end

  desc "user add [name]", "Add a user account", *USER_INFO_OPTS, :password do |name|
    info = {userName: username(name), password: verified_pwd("Password", opts[:password])}
    pp scim_request { |ua| 
      ua.add(:user, user_opts(info))
      "user account successfully added" 
    }
  end

  define_option :del_attrs, "--del_attrs <attr_names>", "list of attributes to delete"
  desc "user update [name]", "Update a user account with specified options",
      *USER_INFO_OPTS, :del_attrs do |name|
    return say "no user updates specified" if (updates = user_opts).empty?
    pp scim_request { |ua|
      info = ua.get(:user, ua.id(:user, username(name)))
      opts[:del_attrs].each { |a| info.delete(a.to_s) } if opts[:del_attrs]
      ua.put(:user, info.merge(updates))
      "user account successfully updated"
    }
  end

  desc "user delete [name]", "Delete user account" do |name|
    pp scim_request { |ua|
      ua.delete(:user, ua.id(:user, username(name)))
      "user account successfully deleted"
    }
  end

  desc "user ids [username|id...]", "Gets user names and ids for the given users" do |*users|
    pp scim_request { |ua|
      users = Util.arglist(ask("names or ids of users")) if !users || users.empty?
      ids = ua.ids(:user_id, *users)
      raise NotFound, "no users found" unless ids && ids.length > 0
      ids
    }
  end

  desc "password set [name]", "Set password", :password do |name|
    pp scim_request { |ua|
      ua.change_password(ua.id(:user, username(name)), verified_pwd("New password", opts[:password]))
      "password successfully set"
    }
  end

  define_option :old_password, "-o", "--old_password <password>", "current password"
  desc "password change", "Change password for authenticated user in current context", :old_password, :password do
    pp scim_request { |ua|
      oldpwd = opts[:old_password] || ask_pwd("Current password")
      ua.change_password(Config.value(:user_id), verified_pwd("New password", opts[:password]), oldpwd)
      "password successfully changed"
    }
  end

end

end