/*
    * Licensed to the Apache Software Foundation (ASF) under one
    * or more contributor license agreements.  See the NOTICE file
    * distributed with this work for additional information
    * regarding copyright ownership.  The ASF licenses this file
    * to you under the Apache License, Version 2.0 (the
    * "License"); you may not use this file except in compliance
    * with the License.  You may obtain a copy of the License at
    *
   *     http://www.apache.org/licenses/LICENSE-2.0
   *
   * Unless required by applicable law or agreed to in writing, software
   * distributed under the License is distributed on an "AS IS" BASIS,
   * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
   * See the License for the specific language governing permissions and
   * limitations under the License.
   */
  package org.apache.hadoop.chukwa.hicc.rest;
  
  import java.io.StringWriter;
  import java.net.URI;
  import java.net.URISyntaxException;
  
  import javax.servlet.http.HttpServletRequest;
  import javax.ws.rs.GET;
  import javax.ws.rs.POST;
  import javax.ws.rs.Path;
  import javax.ws.rs.core.Context;
  import javax.ws.rs.core.Response;
  
  import org.apache.hadoop.chukwa.datastore.ChukwaHBaseStore;
  import org.apache.velocity.Template;
  import org.apache.velocity.VelocityContext;
  import org.apache.velocity.app.VelocityEngine;
  
  import com.sun.jersey.api.client.ClientResponse.Status;
  
  @Path("/login")
  public class LoginController {
    @Context
    VelocityEngine velocity;
    
    static {
      ChukwaHBaseStore.populateDefaults();
    }
  
    /**
     * Password verification login screen
     * 
     * @param buffer holds any user input
     * @return html page of login screen
     * 
     * @response.representation.200.doc Login screen
     * @response.representation.200.mediaType text/html
     * @response.representation.200.example Example available in HICC UI
     */
    @GET
    @Path("check")
    public String login(String buffer) {
      VelocityContext context = new VelocityContext();
      StringWriter sw = null;
      try {
        Template template = velocity.getTemplate("login.vm");
        sw = new StringWriter();
        template.merge(context, sw);
      } catch (Exception e) {
        e.printStackTrace();
        return e.getMessage();
      }
      return sw.toString();
    }
  
    /**
     * Password verification REST API
     * 
     * @param request is HTTP request object
     * @return login status code
     * 
     * @response.representation.200.doc User login successful
     * @response.representation.200.mediaType text/plain
     * @response.representation.200.example 200 OK
     * @response.representation.403.doc Login denied
     * @response.representation.403.mediaType text/plain
     * @response.representation.403.example 403 FORBIDDEN
     */
    @POST
    @Path("check")
    public Response check(@Context HttpServletRequest request) {
      VelocityContext context = new VelocityContext();
      if(request.getRemoteUser()!=null) {
        URI location;
        try {
          location = new URI("/hicc/");
          return Response.temporaryRedirect(location).build();
        } catch (URISyntaxException e) {
        }
      }
      context.put("invalid", true);
      Template template = velocity.getTemplate("login.vm");
     StringWriter sw = new StringWriter();
     template.merge(context, sw);
     return Response.status(Status.FORBIDDEN).entity(sw.toString()).build();
   }
 }