package org.argeo.osgi.useradmin;

import java.util.ArrayList;
import java.util.List;

import javax.naming.InvalidNameException;
import javax.naming.directory.Attribute;
import javax.naming.directory.Attributes;
import javax.naming.ldap.LdapName;

import org.argeo.util.directory.FunctionalGroup;
import org.argeo.util.directory.Organization;
import org.argeo.util.directory.SystemPermissions;
import org.argeo.util.directory.ldap.AbstractLdapDirectory;
import org.osgi.service.useradmin.Role;

/** Directory group implementation */
abstract class LdifGroup extends LdifUser implements DirectoryGroup {
	private final String memberAttributeId;

	LdifGroup(AbstractLdapDirectory userAdmin, LdapName dn, Attributes attributes) {
		super(userAdmin, dn, attributes);
		memberAttributeId = userAdmin.getMemberAttributeId();
	}

	@Override
	public boolean addMember(Role role) {
		try {
			Role foundRole = findRole(new LdapName(role.getName()));
			if (foundRole == null)
				throw new UnsupportedOperationException(
						"Adding role " + role.getName() + " is unsupported within this context.");
		} catch (InvalidNameException e) {
			throw new IllegalArgumentException("Role name" + role.getName() + " is badly formatted");
		}

		getUserAdmin().checkEdit();
		if (!isEditing())
			startEditing();

		Attribute member = getAttributes().get(memberAttributeId);
		if (member != null) {
			if (member.contains(role.getName()))
				return false;
			else
				member.add(role.getName());
		} else
			getAttributes().put(memberAttributeId, role.getName());
		return true;
	}

	@Override
	public boolean addRequiredMember(Role role) {
		throw new UnsupportedOperationException();
	}

	@Override
	public boolean removeMember(Role role) {
		getUserAdmin().checkEdit();
		if (!isEditing())
			startEditing();

		Attribute member = getAttributes().get(memberAttributeId);
		if (member != null) {
			if (!member.contains(role.getName()))
				return false;
			member.remove(role.getName());
			return true;
		} else
			return false;
	}

	@Override
	public Role[] getMembers() {
		List<Role> directMembers = new ArrayList<Role>();
		for (LdapName ldapName : getReferences(memberAttributeId)) {
			Role role = findRole(ldapName);
			if (role == null) {
				throw new IllegalStateException("Role " + ldapName + " not found.");
			}
			directMembers.add(role);
		}
		return directMembers.toArray(new Role[directMembers.size()]);
	}

	/**
	 * Whether a role with this name can be found from this context.
	 * 
	 * @return The related {@link Role} or <code>null</code>.
	 */
	protected Role findRole(LdapName ldapName) {
		Role role = getUserAdmin().getRole(ldapName.toString());
		if (role == null) {
			if (getUserAdmin().getExternalRoles() != null)
				role = getUserAdmin().getExternalRoles().getRole(ldapName.toString());
		}
		return role;
	}

//	@Override
//	public List<LdapName> getMemberNames() {
//		Attribute memberAttribute = getAttributes().get(memberAttributeId);
//		if (memberAttribute == null)
//			return new ArrayList<LdapName>();
//		try {
//			List<LdapName> roles = new ArrayList<LdapName>();
//			NamingEnumeration<?> values = memberAttribute.getAll();
//			while (values.hasMore()) {
//				LdapName dn = new LdapName(values.next().toString());
//				roles.add(dn);
//			}
//			return roles;
//		} catch (NamingException e) {
//			throw new IllegalStateException("Cannot get members", e);
//		}
//	}

	@Override
	public Role[] getRequiredMembers() {
		throw new UnsupportedOperationException();
	}

	@Override
	public int getType() {
		return GROUP;
	}

	/*
	 * KIND
	 */
	static class LdifFunctionalGroup extends LdifGroup implements FunctionalGroup {

		public LdifFunctionalGroup(DirectoryUserAdmin userAdmin, LdapName dn, Attributes attributes) {
			super(userAdmin, dn, attributes);
		}

	}

	static class LdifOrganization extends LdifGroup implements Organization {

		public LdifOrganization(DirectoryUserAdmin userAdmin, LdapName dn, Attributes attributes) {
			super(userAdmin, dn, attributes);
		}

	}

	static class LdifSystemPermissions extends LdifGroup implements SystemPermissions {

		public LdifSystemPermissions(DirectoryUserAdmin userAdmin, LdapName dn, Attributes attributes) {
			super(userAdmin, dn, attributes);
		}

	}
}