/*******************************************************************************
 * Copyright 2014 Federal Chancellery Austria
 * MOA-ID has been developed in a cooperation between BRZ, the Federal
 * Chancellery Austria - ICT staff unit, and Graz University of Technology.
 *
 * Licensed under the EUPL, Version 1.1 or - as soon they will be approved by
 * the European Commission - subsequent versions of the EUPL (the "Licence");
 * You may not use this work except in compliance with the Licence.
 * You may obtain a copy of the Licence at:
 * http://www.osor.eu/eupl/
 *
 * Unless required by applicable law or agreed to in writing, software
 * distributed under the Licence is distributed on an "AS IS" basis,
 * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
 * See the Licence for the specific language governing permissions and
 * limitations under the Licence.
 *
 * This product combines work with different licenses. See the "NOTICE" text
 * file for details on the various modules and licenses.
 * The "NOTICE" text file is part of the distribution. Any derivative works
 * that you distribute must include a readable copy of the "NOTICE" text file.
 *******************************************************************************/
package at.gv.egovernment.moa.id.protocols.saml1;

import javax.servlet.http.HttpServletRequest;
import javax.servlet.http.HttpServletResponse;

import org.springframework.beans.factory.annotation.Autowired;
import org.springframework.stereotype.Service;

import at.gv.egiz.eaaf.core.api.IRequest;
import at.gv.egiz.eaaf.core.api.idp.IAction;
import at.gv.egiz.eaaf.core.api.idp.IAuthData;
import at.gv.egiz.eaaf.core.api.idp.slo.SLOInformationInterface;
import at.gv.egiz.eaaf.core.impl.data.SLOInformationImpl;
import at.gv.egovernment.moa.id.auth.exception.AuthenticationException;
import at.gv.egovernment.moa.id.auth.servlet.RedirectServlet;
import at.gv.egovernment.moa.id.commons.MOAIDAuthConstants;
import at.gv.egovernment.moa.id.commons.api.IOAAuthParameters;
import at.gv.egovernment.moa.logging.Logger;
import at.gv.egovernment.moa.util.MiscUtil;
import at.gv.egovernment.moa.util.URLEncoder;

@Service("SAML1_GetArtifactAction")
public class GetArtifactAction implements IAction {

	@Autowired private SAML1AuthenticationServer saml1server;
	
	public SLOInformationInterface processRequest(IRequest req, HttpServletRequest httpReq,
			HttpServletResponse httpResp, IAuthData obj) throws AuthenticationException {
			
		String oaURL = (String) req.getSPEntityId();
		
		String sourceID = null; 
		if (req instanceof SAML1RequestImpl) {
			SAML1RequestImpl saml1req = (SAML1RequestImpl) req;
			sourceID = saml1req.getSourceID();
			
		}
		
		SAML1AuthenticationData authData;
		if (obj instanceof SAML1AuthenticationData) {
			authData = (SAML1AuthenticationData) obj;
			
		} else {
			Logger.error("AuthDate is NOT of type SAML1AuthenticationData.");
			throw new AuthenticationException("AuthDate is NOT of type SAML1AuthenticationData.", new Object[]{});
		}
					
		try {
			IOAAuthParameters oaParam = req.getServiceProviderConfiguration(IOAAuthParameters.class);
								
			//TODO: add eIDAS to SAML1 protocol if it is really necessary
			
			// add other stork attributes to MOA assertion if available
//			IPersonalAttributeList storkAttributes = authData.getGenericData(
//					AuthenticationSessionStorageConstants.STORK_ATTRIBUTELIST, 
//					IPersonalAttributeList.class);
			Object storkAttributes = null;
			if(null != storkAttributes) {
//				List<ExtendedSAMLAttribute> moaExtendedSAMLAttibutes = saml1server.addAdditionalSTORKAttributes(storkAttributes);
//				authData.getExtendedSAMLAttributesOA().addAll(moaExtendedSAMLAttibutes);
				Logger.info("MOA assertion assembled and SAML Artifact generated.");
			}
			
			String samlArtifactBase64 = saml1server.BuildSAMLArtifact(oaParam, authData, sourceID);
			
			String oaTargetArea = req.getRawData(SAML1Protocol.REQ_DATA_TARGET, String.class);
			
			if (authData.isSsoSession()) {
				String url = req.getAuthURL() + RedirectServlet.SERVICE_ENDPOINT;
				url = addURLParameter(url, RedirectServlet.REDIRCT_PARAM_URL, URLEncoder.encode(oaURL, "UTF-8"));
				if (MiscUtil.isNotEmpty(oaTargetArea))
					url = addURLParameter(url, MOAIDAuthConstants.PARAM_TARGET, 
							URLEncoder.encode(req.getRawData(SAML1Protocol.REQ_DATA_TARGET, String.class), "UTF-8"));
				url = addURLParameter(url, MOAIDAuthConstants.PARAM_SAMLARTIFACT, URLEncoder.encode(samlArtifactBase64, "UTF-8"));
				url = httpResp.encodeRedirectURL(url);
				
				httpResp.setContentType("text/html");
				httpResp.setStatus(302);
				httpResp.addHeader("Location", url);
				
			} else {
				String redirectURL = oaURL;		
				if (MiscUtil.isNotEmpty(oaTargetArea)) {
					redirectURL = addURLParameter(redirectURL, MOAIDAuthConstants.PARAM_TARGET,
					URLEncoder.encode(req.getRawData(SAML1Protocol.REQ_DATA_TARGET, String.class), "UTF-8"));

				}
				
				redirectURL = addURLParameter(redirectURL, MOAIDAuthConstants.PARAM_SAMLARTIFACT,
						URLEncoder.encode(samlArtifactBase64, "UTF-8"));
				redirectURL = httpResp.encodeRedirectURL(redirectURL);
				httpResp.setContentType("text/html");
				httpResp.setStatus(302);
				httpResp.addHeader("Location", redirectURL);
				Logger.debug("REDIRECT TO: " + redirectURL);
			}

			SLOInformationInterface sloInformation = 
					new SLOInformationImpl(req.getAuthURL(), oaParam.getPublicURLPrefix(), authData.getAssertionID(), null, null, req.requestedModule());
			
			return sloInformation;
			 
		} catch (Exception ex) {
			Logger.error("SAML1 Assertion build error", ex);
			throw new AuthenticationException("SAML1 Assertion build error.", new Object[]{}, ex);
		}
		
	}

	protected static String addURLParameter(String url, String paramname,
			String paramvalue) {
		String param = paramname + "=" + paramvalue;
		if (url.indexOf("?") < 0)
			return url + "?" + param;
		else
			return url + "&" + param;
	}

	public boolean needAuthentication(IRequest req, HttpServletRequest httpReq,
			HttpServletResponse httpResp) {
		return true;
	}

	public String getDefaultActionName() {
		return SAML1Protocol.GETARTIFACT;
	}

}