local st = require "util.stanza";

local mod_smacks = module:depends("smacks");

local xmlns_sasl2 = "urn:xmpp:sasl:1";

local xmlns_sm = "urn:xmpp:sm:3";

module:hook("stream-features", function (event)

	if event.origin.type ~= "c2s_unauthed" then return; end

	local features = event.features;

	local inline = features:get_child("inline", xmlns_sasl2);

	if not inline then

		inline = st.stanza("inline", { xmlns = xmlns_sasl2 });

		features:add_child(inline);

	end

	inline:tag("sm", { xmlns = xmlns_sm }):up();

end);

module:hook_tag(xmlns_sasl2, "authenticate", function (session, auth)

	-- Cache action for future processing (after auth success)

end, 100);

module:hook("sasl2/c2s/success", function (event)

	local session = event.session;

	local sm_action = session.sasl2_sm_action;

	if not sm_action then return; end

	session.sasl2_sm_action = nil;

	local sm_result;

	if sm_action.name == "resume" then

		local resumed, err = mod_smacks.do_resume(session, sm_action);

		if not resumed then

			local h = err.context and err.context.h;

			sm_result = st.stanza("failed", { xmlns = xmlns_sm, h = h and ("%d"):format(h) or nil })

				:add_error(err);

		else

			event.session = resumed.session; -- Update to resumed session

			event.sasl2_sm_finish = resumed.finish; -- To be called after sending final SASL response

			sm_result = st.stanza("resumed", { xmlns = xmlns_sm,

				h = ("%d"):format(event.session.handled_stanza_count);

				previd = resumed.id; });

		end

	elseif sm_action.name == "enable" then

		local enabled, err = mod_smacks.do_enable(session, sm_action);

		if not enabled then

			sm_result = st.stanza("failed", { xmlns = xmlns_sm })

				:add_error(err);

		else

			event.sasl2_sm_finish = enabled.finish; -- To be called after sending final SASL response

			sm_result = st.stanze("enabled", {

				xmlns = xmlns_sm;

				id = enabled.id;

				resume = enabled.id and "1" or nil;

				max = enabled.resume_max;

			});

		end

	end

	if sm_result then

		event.success:add_child(sm_result);

	end

end, 100);

module:hook("sasl2/c2s/success", function (event)

	-- The authenticate response has already been sent at this point

	local finish = event.sasl2_sm_finish;

	if finish then

		finish(); -- Finish resume and sync stanzas

	end

end, -1100);

module:hook("sasl2/c2s/failure", function (event)

	event.session.sasl2_sm_action = nil;

end);