package org.gcube.portal.plugins;

import static org.gcube.common.authorization.client.Constants.authorizationService;

import java.util.ArrayList;
import java.util.List;

import org.gcube.common.authorization.library.provider.SecurityTokenProvider;
import org.gcube.common.portal.PortalContext;
import org.gcube.common.scope.api.ScopeProvider;
import org.gcube.common.storagehub.client.dsl.StorageHubClient;
import org.gcube.common.storagehub.client.dsl.Util;
import org.gcube.common.storagehub.client.dsl.VREFolderManager;
import org.gcube.portal.plugins.util.HookConstants;
import org.gcube.vomanagement.usermanagement.GroupManager;
import org.gcube.vomanagement.usermanagement.RoleManager;
import org.gcube.vomanagement.usermanagement.impl.LiferayGroupManager;
import org.gcube.vomanagement.usermanagement.impl.LiferayRoleManager;
import org.gcube.vomanagement.usermanagement.impl.LiferayUserManager;
import org.gcube.vomanagement.usermanagement.model.GCubeRole;
import org.gcube.vomanagement.usermanagement.model.GCubeUser;
import org.slf4j.Logger;
import org.slf4j.LoggerFactory;

import com.liferay.portal.kernel.exception.PortalException;
import com.liferay.portal.kernel.exception.SystemException;
import com.liferay.portal.model.Role;
import com.liferay.portal.model.UserGroupRole;
import com.liferay.portal.service.RoleLocalServiceUtil;
import com.liferay.portal.service.UserGroupRoleLocalService;
import com.liferay.portal.service.UserGroupRoleLocalServiceWrapper;
import com.liferay.portal.service.UserLocalServiceUtil;

public class GCubeHookSiteRoleLocalService extends UserGroupRoleLocalServiceWrapper {
	/**
	 * logger
	 */
	private static final Logger _log = LoggerFactory.getLogger(GCubeHookSiteRoleLocalService.class);
	private GroupManager gm;
	private LiferayUserManager uMan;
	public GCubeHookSiteRoleLocalService(UserGroupRoleLocalService userGroupRoleLocalService) {
		super(userGroupRoleLocalService);
		gm = new LiferayGroupManager();
		uMan = new LiferayUserManager();
		System.out.println("GCubeHookSiteRoleLocalService hook is UP & Listening ...");
	}

	//TODO: as soon as Feature https://support.d4science.org/issues/17726 is delivered take care of this also 
	@Override
	public java.util.List<com.liferay.portal.model.UserGroupRole> addUserGroupRoles(long[] userIds, long groupId, long roleId) throws com.liferay.portal.kernel.exception.SystemException {			
		List<UserGroupRole> toReturn = super.addUserGroupRoles(userIds, groupId, roleId);
		return toReturn;
	}

	@Override
	public java.util.List<com.liferay.portal.model.UserGroupRole> addUserGroupRoles(long userId, long groupId, long[] roleIds) throws com.liferay.portal.kernel.exception.SystemException {			
		List<UserGroupRole> toReturn = super.addUserGroupRoles(userId, groupId,	roleIds);
		try {
			String context = gm.getInfrastructureScope(groupId);
			String username = UserLocalServiceUtil.getUser(userId).getScreenName();
			String userToken = authorizationService().resolveTokenByUserAndContext(username, context);	
			List<String> userRoles = getUserRoles(roleIds);
			authorizationService().setTokenRoles(userToken, userRoles);
			_log.debug("Check if addUserGroupRoles is done in a VRE");
			if (gm.isVRE(groupId)) {
				_log.debug("addUserGroupRoles performed in a VRE, groupId=" + groupId);
				boolean vreManagerRolePresent = false;
				for (int i = 0; i < roleIds.length; i++) {
					Role role = RoleLocalServiceUtil.getRole(roleIds[i]);
					if (role.getName().compareTo(GCubeRole.VRE_MANAGER_LABEL) == 0) { 
						_log.info("User is being promoted (or was) as VREFolder Administrator, userId=" + userId + " on Site groupId="+groupId);
						vreManagerRolePresent = true;
						break;
					}					
				} 
				setVREFolderAdministrator(userId, groupId, vreManagerRolePresent);
			} else {
				_log.debug("addUserGroupRoles NOT done in a VRE, groupId=" + groupId);
			}
		}
		catch (Exception e) {
			e.printStackTrace();
		}
		return toReturn;
	}

	private List<String> getUserRoles(long[] roleIds) throws PortalException, SystemException {
		List<String> toReturn = new ArrayList<>();
		for (int i = 0; i < roleIds.length; i++) {
			Role role = RoleLocalServiceUtil.getRole(roleIds[i]);
			toReturn.add(role.getName());			
		} 
		return toReturn;
	}

	private boolean setVREFolderAdministrator(long userId, long groupId, boolean enable) throws Exception {		
		String context = gm.getInfrastructureScope(groupId);
		ScopeProvider.instance.set(context);
		String vreFolderTitle = Util.getVREGroupFromContext(context);
		_log.info("The vreFolderTitle on which the VREFolder role is being {} is {}", enable, vreFolderTitle);
		_log.info("Before StorageHubClient shc = new StorageHubClient();");
		StorageHubClient shc = new StorageHubClient();
		_log.info("Before shc.getVreFolderManager(vreFolderTitle);");
		VREFolderManager vreFolderManager = shc.getVreFolderManager(vreFolderTitle);
	
		String previousToken = SecurityTokenProvider.instance.get();
		//get the super user
		_log.info("//get the super user");
		String infraContext = "/"+PortalContext.getConfiguration().getInfrastructureName();
//		long rootgroupId = gm.getGroupIdFromInfrastructureScope(infraContext);
//		RoleManager rm = new LiferayRoleManager();
//		long roleId = rm.getRoleId(HookConstants.AUTORISED_INFRA_ROLE, rootgroupId);
//		List<GCubeUser> users = uMan.listUsersByGroupAndRole(rootgroupId, roleId);
//		if (users.isEmpty()) {
//			_log.error("Cannot add the user as VRE Folder admin: there is no user having role {} on context: {}", HookConstants.AUTORISED_INFRA_ROLE, infraContext);
//			return false;
//		}
//		else {
			//GCubeUser theAdmin = users.get(0);
			String adminUsername = "lucio.lelii";
			_log.info("Got the super user: {}",adminUsername);
			String theAdminToken = PortalContext.getConfiguration().getCurrentUserToken(infraContext, adminUsername);
			List<String> rolesString = new ArrayList<String>();
//			List<GCubeRole> theAdminRoles = rm.listRolesByUserAndGroup(theAdmin.getUserId(), rootgroupId);			
//			for (GCubeRole gCubeRole : theAdminRoles) {
//				rolesString.add(gCubeRole.getRoleName());
//			}
			rolesString.add("Infrastructure-Manager");
			_log.info("authorizationService().setTokenRoles(theAdminToken, rolesString);",theAdminToken);
			authorizationService().setTokenRoles(theAdminToken, rolesString);
			SecurityTokenProvider.instance.set(theAdminToken);
			
			String theUserToPromoteOrDeclass = uMan.getUserById(userId).getUsername();
			_log.info("The {} is being promoted? {} ", theUserToPromoteOrDeclass, enable);
			if (enable) 
				vreFolderManager.setAdmin(theUserToPromoteOrDeclass);
			else 	
				vreFolderManager.removeAdmin(theUserToPromoteOrDeclass);
			SecurityTokenProvider.instance.set(previousToken);
			return true;
//		}
	}


}