package org.argeo.cms.auth;

import java.util.Map;

import javax.security.auth.Subject;
import javax.security.auth.callback.CallbackHandler;
import javax.security.auth.login.LoginException;
import javax.security.auth.spi.LoginModule;
import javax.servlet.http.HttpServletRequest;

import org.apache.commons.logging.Log;
import org.apache.commons.logging.LogFactory;
import org.argeo.cms.CmsException;
import org.osgi.framework.BundleContext;
import org.osgi.framework.FrameworkUtil;
import org.osgi.service.useradmin.Authorization;
import org.osgi.service.useradmin.UserAdmin;

/** Anonymous CMS user */
public class AnonymousLoginModule implements LoginModule {
	private final static Log log = LogFactory.getLog(AnonymousLoginModule.class);

	private Subject subject;
	private Map<String, Object> sharedState = null;

	// private state
	private BundleContext bc;

	@SuppressWarnings("unchecked")
	@Override
	public void initialize(Subject subject, CallbackHandler callbackHandler, Map<String, ?> sharedState,
			Map<String, ?> options) {
		this.subject = subject;
		this.sharedState = (Map<String, Object>) sharedState;
		try {
			bc = FrameworkUtil.getBundle(AnonymousLoginModule.class).getBundleContext();
			assert bc != null;
		} catch (Exception e) {
			throw new CmsException("Cannot initialize login module", e);
		}
	}

	@Override
	public boolean login() throws LoginException {
		return true;
	}

	@Override
	public boolean commit() throws LoginException {
		UserAdmin userAdmin = bc.getService(bc.getServiceReference(UserAdmin.class));
		Authorization authorization = userAdmin.getAuthorization(null);
		CmsAuthUtils.addAuthorization(subject, authorization,
				(HttpServletRequest) sharedState.get(CmsAuthUtils.SHARED_STATE_HTTP_REQUEST));
		if (log.isDebugEnabled())
			log.debug("Anonymous logged in to CMS: " + subject);
		return true;
	}

	@Override
	public boolean abort() throws LoginException {
		// authorization = null;
		return true;
	}

	@Override
	public boolean logout() throws LoginException {
		if (log.isDebugEnabled())
			log.debug("Logging out anonymous from CMS... " + subject);
		CmsAuthUtils.cleanUp(subject);
		return true;
	}
}