#--
#   Copyright (C) 2009 Brown Beagle Software
#   Copyright (C) 2008 Darcy Laycock <sutto@sutto.net>
#
#   This program is free software: you can redistribute it and/or modify
#   it under the terms of the GNU Affero General Public License as published by
#   the Free Software Foundation, either version 3 of the License, or
#   (at your option) any later version.
#
#   This program is distributed in the hope that it will be useful,
#   but WITHOUT ANY WARRANTY; without even the implied warranty of
#   MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
#   GNU Affero General Public License for more details.
#
#   You should have received a copy of the GNU Affero General Public License
#   along with this program.  If not, see <http://www.gnu.org/licenses/>.
#++

require 'sinatra'
require 'digest/sha2'
module GitAuth
  class WebApp < Sinatra::Base
    
    use Rack::Auth::Basic do |username, password|
      [username, Digest::SHA256.hexdigest(password)] == [GitAuth.settings.web_username, GitAuth.settings.web_password_hash]
    end
    
    configure do
      set :port, 8998
      set :views, File.join(GitAuth::BASE_DIR, "views")
      set :public, File.join(GitAuth::BASE_DIR, "public")
      set :static, true
      set :methodoverride, true
    end
    
    before do
      GitAuth.force_setup!
    end
    
    helpers do
      include Rack::Utils
      alias_method :h, :escape_html
      
      def link_to(text, link)
        "<a href='#{link}'>#{text}</a>"
      end
      
      def delete_link(text, url)
        id = "deleteable-#{Digest::SHA256.hexdigest(url.to_s)[0, 6]}"
        html =  "<div class='deletable-container' style='display: none; margin: 0; padding: 0;'>"
        html << "<form method='post' action='#{url}' id='#{id}'>"
        html << "<input name='_method' type='hidden' value='delete' />"
        html << "</form></div>"
        html << "<a href='#' onclick='if(confirm(\"Are you sure you want to do that? Deletion can not be reversed.\")) $(\"##{id}\").submit(); return false;'>#{text}</a>"
        return html
      end
      
      def auto_link(member)
        member = member.to_s
        url = (member[0] == ?@ ? "/groups/#{URI.encode(member[1..-1])}" : "/users/#{URI.encode(member)}")
        return link_to(member, url)
      end
      
    end
    
    get '/' do
      @repos  = GitAuth::Repo.all
      @users  = GitAuth::User.all
      @groups = GitAuth::Group.all
      erb :index
    end
    
    
    # Listing / Index Page
    
    get '/repos/:name' do
      @repo = GitAuth::Repo.get(params[:name])
      if @repo.nil?
        redirect root_with_message("The given repository couldn't be found.")
      else
        read_perms, write_perms = (@repo.permissions[:read]||[]), (@repo.permissions[:write]||[])
        @all_access = read_perms & write_perms
        @read_only  = read_perms - @all_access 
        @write_only = write_perms - @all_access
        erb :repo
      end
    end
    
    get '/users/:name' do
      @user = GitAuth::User.get(params[:name])
      if @user.nil?
        redirect root_with_message("The given user couldn't be found.")
      else
        repos  = GitAuth::Repo.all 
        read_perms  = repos.select { |r| r.readable_by?(@user)  }
        write_perms = repos.select { |r| r.writeable_by?(@user) }
        @all_access = read_perms & write_perms
        @read_only  = read_perms - @all_access
        @write_only = write_perms - @all_access
        @groups = GitAuth::Group.all.select { |g| g.member?(@user) }
        erb :user
      end
    end
    
    get '/groups/:name' do
      @group = GitAuth::Group.get(params[:name])
      if @group.nil?
        redirect root_with_message("The given group could not be found.")
      else
        erb :group
      end
    end
    
    # Create and update repos
    
    post '/repos' do
      name = params[:repo][:name]
      path = params[:repo][:path]
      path = name if path.to_s.strip.empty?
      if GitAuth::Repo.create(name, path)
        redirect root_with_message("Repository successfully added")
      else
        redirect root_with_message("There was an error adding the repository.")
      end
    end
    
    post '/repos/:name' do
      repo = GitAuth::Repo.get(params[:name])
      if repo.nil?
        redirect root_with_message("The given repository couldn't be found.")
      else
        new_permissions = Hash.new([])
        [:all, :read, :write].each do |k|
          if params[:repo][k]
            perm_lines = params[:repo][k].to_s.split("\n")
            new_permissions[k] = perm_lines.map do |l|
              i = GitAuth.get_user_or_group(l.strip)
              i.nil? ? nil : i.to_s
            end.compact
          end
        end
        all = new_permissions.delete(:all)
        new_permissions[:read]  |= all
        new_permissions[:write] |= all
        new_permissions.each_value { |v| v.uniq! }
        repo.permissions = new_permissions
        GitAuth::Repo.save!
        redirect "/repos/#{URI.encode(repo.name)}"
      end
    end
    
    delete '/repos/:name' do
      repo = GitAuth::Repo.get(params[:name])
      if repo.nil?
        redirect root_with_message("The given repository couldn't be found.")
      else
        repo.destroy!
        redirect root_with_message("Repository removed.")
      end
    end
    
    # Create, delete and update users
    
    post '/users' do
      name  = params[:user][:name]
      admin = params[:user][:admin].to_s == "1"
      key   = params[:user][:key]
      if GitAuth::User.create(name, admin, key)
        redirect root_with_message("User Added")
      else
        redirect root_with_message("There was an error adding the requested user.")
      end
    end
    
    delete '/users/:name' do
      user = GitAuth::User.get(params[:name])
      if user.nil?
        redirect root_with_message("The specified user couldn't be found.")
      else
        user.destroy!
        redirect root_with_message("User removed.")
      end
    end
    
    # Create and Update Groups
    
    post '/groups' do
      if GitAuth::Group.create(params[:group][:name])
        redirect root_with_message("Group added")
      else
        redirect root_with_message("There was an error adding the requested group.")
      end
    end
    
    post '/groups/:name' do
      group = GitAuth::Group.get(params[:name])
      if group.nil?
        redirect root_with_message("The specified group couldn't be found.")
      else
        if params[:group][:members]
          member_lines = params[:group][:members].to_s.split("\n")
          group.members = member_lines.map do |l|
            i = GitAuth.get_user_or_group(l.strip)
            i.nil? ? nil : i.to_s
          end.compact - [group.to_s]
          GitAuth::Group.save!
        end
        redirect "/groups/#{URI.encode(group.name)}"
      end
    end
    
    delete '/groups/:name' do
      group = GitAuth::Group.get(params[:name])
      if group.nil?
        redirect root_with_message("The specified group couldn't be found.")
      else
        group.destroy!
        redirect root_with_message("Group removed.")
      end
    end
    
    
    # Misc Helpers
    
    def root_with_message(message)
      "/?message=#{URI.encode(message)}"
    end
    
  end
end