package fr.ifremer.quadrige3.synchro.server.security;
   
   /*-
    * #%L
    * Quadrige3 Core :: Quadrige3 Synchro server
    * $Id:$
    * $HeadURL:$
    * %%
    * Copyright (C) 2017 Ifremer
   * %%
   * This program is free software: you can redistribute it and/or modify
   * it under the terms of the GNU Affero General Public License as published by
   * the Free Software Foundation, either version 3 of the License, or
   * (at your option) any later version.
   * 
   * This program is distributed in the hope that it will be useful,
   * but WITHOUT ANY WARRANTY; without even the implied warranty of
   * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
   * GNU General Public License for more details.
   * 
   * You should have received a copy of the GNU Affero General Public License
   * along with this program.  If not, see <http://www.gnu.org/licenses/>.
   * #L%
   */
  
  
  
  import com.google.common.collect.Lists;
  import com.google.common.collect.Sets;
  import fr.ifremer.quadrige3.core.dao.administration.user.PrivilegeCode;
  import fr.ifremer.quadrige3.core.vo.administration.user.PrivilegeVO;
  import org.apache.commons.collections4.CollectionUtils;
  import org.springframework.security.core.GrantedAuthority;
  import org.springframework.security.core.authority.SimpleGrantedAuthority;
  
  import java.util.Collection;
  import java.util.List;
  import java.util.Set;
  
  /**
   * <p>QuadrigeUserDetailsImpl class.</p>
   *
   * @author Ludovic Pecquot <ludovic.pecquot@e-is.pro>
   * @since 1.0
   */
  public class QuadrigeUserDetailsImpl implements QuadrigeUserDetails {
  
      private static final long serialVersionUID = 1L;
      
      private final int userId;
      
      private String password;
  
      private final Collection<? extends GrantedAuthority> authorities;
  
      /**
       * <p>Constructor for QuadrigeUserDetailsImpl.</p>
       *
       * @param userId a int.
       */
      public QuadrigeUserDetailsImpl(int userId) {
          this.userId = userId;
          this.password = "";
          this.authorities = createAllAuthorities();
      }
  
      /**
       * <p>Constructor for QuadrigeUserDetailsImpl.</p>
       *
       * @param userId a int.
       * @param privileges a {@link java.util.List} object.
       */
      public QuadrigeUserDetailsImpl(int userId, List<PrivilegeVO> privileges) {
          this.userId = userId;
          this.password = "";
          this.authorities = createAuthoritiesFromPrivileges(privileges);
      }
  
      /**
       * <p>Constructor for QuadrigeUserDetailsImpl.</p>
       *
       * @param userId a int.
       * @param password a {@link java.lang.String} object.
       */
      public QuadrigeUserDetailsImpl(int userId, String password) {
          this.userId = userId;
          this.password = password;
          this.authorities = createAllAuthorities();
      }
  
      /** {@inheritDoc} */
      @Override
      public int getUserId() {
          return userId;
      }
  
      @Override
      public boolean isAdmin() {
          return authorities.stream().anyMatch(grantedAuthority -> QuadrigeGrantedAuthority.ROLE_ADMIN.name().equals(grantedAuthority.getAuthority()));
     }
 
     /** {@inheritDoc} */
     @Override
     public Collection<? extends GrantedAuthority> getAuthorities() {
         return authorities;
     }
 
     /** {@inheritDoc} */
     @Override
     public String getPassword() {
         return password;
     }
 
     /** {@inheritDoc} */
     @Override
     public String getUsername() {
         return "Ldap User";
     }
 
     /** {@inheritDoc} */
     @Override
     public boolean isAccountNonExpired() {
         return true;
     }
 
     /** {@inheritDoc} */
     @Override
     public boolean isAccountNonLocked() {
         return true;
     }
 
     /** {@inheritDoc} */
     @Override
     public boolean isCredentialsNonExpired() {
         return true;
     }
 
     /** {@inheritDoc} */
     @Override
     public boolean isEnabled() {
         return true;
     }
 
     /* -- Internal methods -- */
 
     /**
      * <p>createAllAuthorities.</p>
      *
      * @return a {@link java.util.Collection} object.
      */
     protected Collection<? extends GrantedAuthority> createAllAuthorities() {
         return Lists.newArrayList(
                 new SimpleGrantedAuthority(QuadrigeGrantedAuthority.ROLE_ADMIN.name()),
                 new SimpleGrantedAuthority(QuadrigeGrantedAuthority.ROLE_USER.name())
         );
 
     }
 
     /**
      * <p>createAuthorities.</p>
      *
      * @param roles a {@link java.util.Set} object.
      * @return a {@link java.util.Collection} object.
      */
     protected Collection<? extends GrantedAuthority> createAuthorities(Set<String> roles) {
         List<SimpleGrantedAuthority> authorities = Lists.newArrayListWithExpectedSize(roles.size());
         for (String role: roles) {
             authorities.add(new SimpleGrantedAuthority(role));
         }
         return authorities;
     }
 
     /**
      * <p>createAuthoritiesFromPrivileges.</p>
      *
      * @param privileges a {@link java.util.List} object.
      * @return a {@link java.util.Collection} object.
      */
     protected Collection<? extends GrantedAuthority> createAuthoritiesFromPrivileges(List<PrivilegeVO> privileges) {
         Set<String> roles = Sets.newHashSet();
 
         if (CollectionUtils.isNotEmpty(privileges)) {
             // If has privilege "referential administrator": add the ADMIN role
             for (PrivilegeVO privilege : privileges) {
                 if (PrivilegeCode.REFERENTIAL_ADMINISTRATOR.getValue().equalsIgnoreCase(privilege.getPrivilegeCd())) {
                     roles.add(QuadrigeGrantedAuthority.ROLE_ADMIN.name());
                     break;
                 }
             }
         }
 
         // Always add the USER role
         roles.add(QuadrigeGrantedAuthority.ROLE_USER.name());
 
         return createAuthorities(roles);
     }
 }