package fr.ifremer.quadrige3.synchro.server.application;
   
   /*-
    * #%L
    * Quadrige3 Core :: Quadrige3 Synchro server
    * $Id:$
    * $HeadURL:$
    * %%
    * Copyright (C) 2017 Ifremer
   * %%
   * This program is free software: you can redistribute it and/or modify
   * it under the terms of the GNU Affero General Public License as published by
   * the Free Software Foundation, either version 3 of the License, or
   * (at your option) any later version.
   * 
   * This program is distributed in the hope that it will be useful,
   * but WITHOUT ANY WARRANTY; without even the implied warranty of
   * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
   * GNU General Public License for more details.
   * 
   * You should have received a copy of the GNU Affero General Public License
   * along with this program.  If not, see <http://www.gnu.org/licenses/>.
   * #L%
   */
  
  import fr.ifremer.quadrige3.synchro.server.config.SynchroServerConfiguration;
  import fr.ifremer.quadrige3.synchro.server.security.QuadrigeGrantedAuthority;
  import fr.ifremer.quadrige3.synchro.server.security.SecurityContextHelper;
  import fr.ifremer.quadrige3.synchro.server.service.ServiceLocator;
  import org.apache.commons.logging.Log;
  import org.apache.commons.logging.LogFactory;
  import org.apache.wicket.authroles.authentication.AuthenticatedWebSession;
  import org.apache.wicket.authroles.authorization.strategies.role.Roles;
  import org.apache.wicket.request.Request;
  import org.springframework.security.authentication.UsernamePasswordAuthenticationToken;
  import org.springframework.security.core.Authentication;
  import org.springframework.security.core.AuthenticationException;
  import org.springframework.security.core.GrantedAuthority;
  import org.springframework.security.core.context.SecurityContextHolder;
  
  import java.io.File;
  
  public class WebSession extends AuthenticatedWebSession {
  
      private static final long serialVersionUID = 1L;
      private final Log log = LogFactory.getLog(getClass());
  
      private File importOutputFile;
  
      public WebSession(Request request) {
          super(request);
          bind();
          this.importOutputFile = null;
      }
  
      @Override
      public Roles getRoles() {
          Roles roles = new Roles();
          getRolesIfSignedIn(roles);
          return roles;
      }
  
      private void getRolesIfSignedIn(Roles roles) {
          if (isUserAuthenticated() || SecurityContextHelper.isAuthenticateNotAnonymous()) {
              Authentication authentication = SecurityContextHolder.getContext().getAuthentication();
              for (GrantedAuthority authority : authentication.getAuthorities()) {
                  roles.add(authority.getAuthority());
              }
          }
      }
  
      public boolean isUserAuthenticated() {
          return getUserId() > 0;
      }
  
      public boolean isUserAdmin() {
          return getRoles().hasRole(QuadrigeGrantedAuthority.ROLE_ADMIN.name());
      }
  
      public final int getUserId() {
          return SecurityContextHelper.getPrincipalUserId();
      }
  
      public void setImportOutputFile(File importOutputFile) {
          this.importOutputFile = importOutputFile;
      }
  
      public File getImportOutputFile() {
          return importOutputFile;
      }
  
      /* -- Internal methods -- */
  
      protected SynchroServerConfiguration getConfiguration() {
          return ((Application) getApplication()).getConfiguration();
      }
  
      // Note : Méthode non appellée dans le cas d'une authentification CAS
      @Override
     public boolean authenticate(String username, String password) throws AuthenticationException {
         ServiceLocator serviceLocator = ServiceLocator.instance();
         boolean authenticated;
         try {
             Authentication authentication = serviceLocator.getAuthenticationManager().authenticate(new UsernamePasswordAuthenticationToken(username, password));
             SecurityContextHolder.getContext().setAuthentication(authentication);
             authenticated = authentication.isAuthenticated();
         } catch (AuthenticationException e) {
             String errorMessage = String.format("Authentication failed for user '%s' with error : %s", username, e.getLocalizedMessage());
             if (log.isDebugEnabled()) {
                 log.warn(errorMessage, e);
             }
             else {
                 log.warn(errorMessage, e);
             }
             throw e;
         }
         return authenticated;
     }
 }