/*-
 * ============LICENSE_START=======================================================
 * SDC
 * ================================================================================
 * Copyright (C) 2017 AT&T Intellectual Property. All rights reserved.
 * ================================================================================
 * Licensed under the Apache License, Version 2.0 (the "License");
 * you may not use this file except in compliance with the License.
 * You may obtain a copy of the License at
 * 
 *      http://www.apache.org/licenses/LICENSE-2.0
 * 
 * Unless required by applicable law or agreed to in writing, software
 * distributed under the License is distributed on an "AS IS" BASIS,
 * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
 * See the License for the specific language governing permissions and
 * limitations under the License.
 * ============LICENSE_END=========================================================
 */

package org.openecomp.server.filters;

import java.io.IOException;
import java.security.Principal;
import java.util.Base64;

import javax.servlet.Filter;
import javax.servlet.FilterChain;
import javax.servlet.FilterConfig;
import javax.servlet.ServletException;
import javax.servlet.ServletRequest;
import javax.servlet.ServletResponse;
import javax.servlet.http.HttpServletRequest;
import javax.servlet.http.HttpServletRequestWrapper;
import javax.servlet.http.HttpServletResponse;

public class ActionAuthenticationFilter implements Filter {

  private boolean runningOnLocal = true;

  @Override
  public void destroy() {

  }

  @Override
  public void doFilter(ServletRequest arg0, ServletResponse arg1, FilterChain arg2)
      throws IOException, ServletException {
    if (runningOnLocal) {

      HttpServletRequest httpRequest = (HttpServletRequest) arg0;
      String authorizationHeader = httpRequest.getHeader("Authorization");
      if (authorizationHeader != null && !authorizationHeader.isEmpty()) {
        String username;
        try {
          String base64Credentials =
              httpRequest.getHeader("Authorization").replace("Basic", "").trim();
          String decodedCredentials = new String(Base64.getDecoder().decode(base64Credentials));
          username = decodedCredentials.substring(0, decodedCredentials.indexOf(":"));
        } catch (Exception e0) {
          setResponseStatus((HttpServletResponse) arg1, HttpServletResponse.SC_FORBIDDEN);
          return;
        }
        if (username.startsWith("AUTH")) {
          HttpServletRequestWrapper servletRequest = new HttpServletRequestWrapper(httpRequest) {
            @Override
            public java.lang.String getRemoteUser() {
              return getUserPrincipal().getName();
            }

            @Override
            public Principal getUserPrincipal() {
              return () -> username.substring(0, username.indexOf("-"));
            }

            @Override
            public boolean isUserInRole(String role) {
              try {
                ActionLibraryPrivilege requiredPrivilege =
                    ActionLibraryPrivilege.getPrivilege(httpRequest.getMethod());
                ActionLibraryPrivilege userPrivilege = ActionLibraryPrivilege
                    .valueOf(username.substring(username.indexOf("-") + 1).toUpperCase());
                return userPrivilege.ordinal() >= requiredPrivilege.ordinal();
              } catch (Exception e0) {
                return false;
              }
            }
          };
          arg2.doFilter(servletRequest, arg1);
        } else {
          setResponseStatus((HttpServletResponse) arg1, HttpServletResponse.SC_FORBIDDEN);
        }
      } else {
        setResponseStatus((HttpServletResponse) arg1, HttpServletResponse.SC_UNAUTHORIZED);
      }
    } else {
      //call super doFilter of cadi authentication filter
    }


  }

  private void setResponseStatus(HttpServletResponse response, int status) {
    response.setStatus(status);
  }

  @Override
  public void init(FilterConfig arg0) throws ServletException {
  /*runningOnLocal = System.getProperty("file.separator").equals("\\");
  if (!runningOnLocal){
  // call to super init of cadi filter as we are not running on windows
  }*/
  }

}