require 'bcrypt' unless RUBY_PLATFORM == 'opal'

module Volt
  class User < Model
    # returns login field name depending on config settings
    def self.login_field
      if Volt.config.try(:public).try(:auth).try(:use_username)
        :username
      else
        :email
      end
    end

    validate login_field, unique: true, length: 8
    validate :email, email: true

    permissions(:read) do
      # Never pass the hashed_password to the client
      deny :hashed_password

      # Deny all if this isn't the owner
      deny if !id == Volt.current_user_id && !new?
    end

    if RUBY_PLATFORM == 'opal'
      validations do
        # Only validate password when it has changed
        if changed?(:password)
          # Don't validate on the server
          validate :password, length: 8
        end
      end
    end

    def password=(val)
      if Volt.server?
        # on the server, we bcrypt the password and store the result
        self._hashed_password = BCrypt::Password.create(val)
      else
        # Assign the attribute
        self._password = val
      end
    end
  end
end