-- Copyright (C) 2009-2011 Florian Zeitz

--

-- This file is MIT/X11 licensed. Please see the

-- COPYING file in the source package for more information.

--

local _G = _G;

local prosody = _G.prosody;

local hosts = prosody.hosts;

local t_concat = table.concat;

local iterators = require "util.iterators";

local keys, values = iterators.keys, iterators.values;

local usermanager_user_exists = require "core.usermanager".user_exists;

local usermanager_create_user = require "core.usermanager".create_user;

local usermanager_delete_user = require "core.usermanager".delete_user;

local usermanager_get_password = require "core.usermanager".get_password;

local usermanager_set_password = require "core.usermanager".set_password;

local hostmanager_activate = require "core.hostmanager".activate;

local hostmanager_deactivate = require "core.hostmanager".deactivate;

local is_admin = require "core.usermanager".is_admin;

local rm_load_roster = require "core.rostermanager".load_roster;

local st, jid, uuid = require "util.stanza", require "util.jid", require "util.uuid";

local timer_add_task = require "util.timer".add_task;

local dataforms_new = require "util.dataforms".new;

local array = require "util.array";

local modulemanager = require "modulemanager";

local core_post_stanza = prosody.core_post_stanza;

module:depends("adhoc");

local adhoc_new = module:require "adhoc".new;

local function generate_error_message(errors)

	local errmsg = {};

	for name, err in pairs(errors) do

		errmsg[#errmsg + 1] = name .. ": " .. err;

	end

	return { status = "completed", error = { message = t_concat(errmsg, "\n") } };

end

function add_user_command_handler(self, data, state)

	local add_user_layout = dataforms_new{

		title = "Adding a User";

		instructions = "Fill out this form to add a user.";

		{ name = "FORM_TYPE", type = "hidden", value = "http://jabber.org/protocol/admin" };

		{ name = "accountjid", type = "jid-single", required = true, label = "The Jabber ID for the account to be added" };

		{ name = "password", type = "text-private", label = "The password for this account" };

		{ name = "password-verify", type = "text-private", label = "Retype password" };

	};

	if state then

		if data.action == "cancel" then

			return { status = "canceled" };

		end

		local fields, err = add_user_layout:data(data.form);

		if err then

			return generate_error_message(err);

		end

		local username, host, resource = jid.split(fields.accountjid);

		if data.to ~= host then

			return { status = "completed", error = { message = "Trying to add a user on " .. host .. " but command was sent to " .. data.to}};

		end

		if (fields["password"] == fields["password-verify"]) and username and host then

			if usermanager_user_exists(username, host) then

				return { status = "completed", error = { message = "Account already exists" } };

			else

				if usermanager_create_user(username, fields.password, host) then

					module:log("info", "Created new account %s@%s", username, host);

					return { status = "completed", info = "Account successfully created" };

				else

					return { status = "completed", error = { message = "Failed to write data to disk" } };

				end

			end

		else

			module:log("debug", "Invalid data, password mismatch or empty username while creating account for %s", fields.accountjid or "<nil>");

			return { status = "completed", error = { message = "Invalid data.\nPassword mismatch, or empty username" } };

		end

	else

		return { status = "executing", actions = {"next", "complete", default = "complete"}, form = add_user_layout }, "executing";

	end

end

function change_user_password_command_handler(self, data, state)

	local change_user_password_layout = dataforms_new{

		title = "Changing a User Password";

		instructions = "Fill out this form to change a user's password.";

		{ name = "FORM_TYPE", type = "hidden", value = "http://jabber.org/protocol/admin" };

		{ name = "accountjid", type = "jid-single", required = true, label = "The Jabber ID for this account" };

		{ name = "password", type = "text-private", required = true, label = "The password for this account" };

	};

	if state then

		if data.action == "cancel" then

			return { status = "canceled" };

		end

		local fields, err = change_user_password_layout:data(data.form);

		if err then

			return generate_error_message(err);

		end

		local username, host, resource = jid.split(fields.accountjid);

		if data.to ~= host then

			return { status = "completed", error = { message = "Trying to change the password of a user on " .. host .. " but command was sent to " .. data.to}};

		end

		if usermanager_user_exists(username, host) and usermanager_set_password(username, fields.password, host) then

			return { status = "completed", info = "Password successfully changed" };

		else

			return { status = "completed", error = { message = "User does not exist" } };

		end

	else

		return { status = "executing", actions = {"next", "complete", default = "complete"}, form = change_user_password_layout }, "executing";

	end

end

function config_reload_handler(self, data, state)

	local ok, err = prosody.reload_config();

	if ok then

		return { status = "completed", info = "Configuration reloaded (modules may need to be reloaded for this to have an effect)" };

	else

		return { status = "completed", error = { message = "Failed to reload config: " .. tostring(err) } };

	end

end

function delete_user_command_handler(self, data, state)

	local delete_user_layout = dataforms_new{

		title = "Deleting a User";

		instructions = "Fill out this form to delete a user.";

		{ name = "FORM_TYPE", type = "hidden", value = "http://jabber.org/protocol/admin" };

		{ name = "accountjids", type = "jid-multi", label = "The Jabber ID(s) to delete" };

	};

	if state then

		if data.action == "cancel" then

			return { status = "canceled" };

		end

		local fields, err = delete_user_layout:data(data.form);

		if err then

			return generate_error_message(err);

		end

		local failed = {};

		local succeeded = {};

		for _, aJID in ipairs(fields.accountjids) do

			local username, host, resource = jid.split(aJID);

			if (host == data.to) and  usermanager_user_exists(username, host) and usermanager_delete_user(username, host) then

				module:log("debug", "User %s has been deleted", aJID);

				succeeded[#succeeded+1] = aJID;

			else

				module:log("debug", "Tried to delete non-existant user %s", aJID);

				failed[#failed+1] = aJID;

			end

		end

		return {status = "completed", info = (#succeeded ~= 0 and

				"The following accounts were successfully deleted:\n"..t_concat(succeeded, "\n").."\n" or "")..

				(#failed ~= 0 and

				"The following accounts could not be deleted:\n"..t_concat(failed, "\n") or "") };

	else

		return { status = "executing", actions = {"next", "complete", default = "complete"}, form = delete_user_layout }, "executing";

	end

end

function disconnect_user(match_jid)

	local node, hostname, givenResource = jid.split(match_jid);

	local host = hosts[hostname];

	local sessions = host.sessions[node] and host.sessions[node].sessions;

	for resource, session in pairs(sessions or {}) do

		if not givenResource or (resource == givenResource) then

			module:log("debug", "Disconnecting %s@%s/%s", node, hostname, resource);

			session:close();

		end

	end

	return true;

end

function end_user_session_handler(self, data, state)

	local end_user_session_layout = dataforms_new{

		title = "Ending a User Session";

		instructions = "Fill out this form to end a user's session.";

		{ name = "FORM_TYPE", type = "hidden", value = "http://jabber.org/protocol/admin" };

		{ name = "accountjids", type = "jid-multi", label = "The Jabber ID(s) for which to end sessions" };

	};

	if state then

		if data.action == "cancel" then

			return { status = "canceled" };

		end

		local fields, err = end_user_session_layout:data(data.form);

		if err then

			return generate_error_message(err);

		end

		local failed = {};

		local succeeded = {};

		for _, aJID in ipairs(fields.accountjids) do

			local username, host, resource = jid.split(aJID);

			if (host == data.to) and  usermanager_user_exists(username, host) and disconnect_user(aJID) then

				succeeded[#succeeded+1] = aJID;

			else

				failed[#failed+1] = aJID;

			end

		end

		return {status = "completed", info = (#succeeded ~= 0 and

				"The following accounts were successfully disconnected:\n"..t_concat(succeeded, "\n").."\n" or "")..

				(#failed ~= 0 and

				"The following accounts could not be disconnected:\n"..t_concat(failed, "\n") or "") };

	else

		return { status = "executing", actions = {"next", "complete", default = "complete"}, form = end_user_session_layout }, "executing";

	end

end

function get_user_password_handler(self, data, state)

	local get_user_password_layout = dataforms_new{

		title = "Getting User's Password";

		instructions = "Fill out this form to get a user's password.";

		{ name = "FORM_TYPE", type = "hidden", value = "http://jabber.org/protocol/admin" };

		{ name = "accountjid", type = "jid-single", required = true, label = "The Jabber ID for which to retrieve the password" };

	};

	local get_user_password_result_layout = dataforms_new{

		{ name = "FORM_TYPE", type = "hidden", value = "http://jabber.org/protocol/admin" };

		{ name = "accountjid", type = "jid-single", label = "JID" };

		{ name = "password", type = "text-single", label = "Password" };

	};

	if state then

		if data.action == "cancel" then

			return { status = "canceled" };

		end

		local fields, err = get_user_password_layout:data(data.form);

		if err then

			return generate_error_message(err);

		end

		local user, host, resource = jid.split(fields.accountjid);

		local accountjid = "";

		local password = "";

		if host ~= data.to then

			return { status = "completed", error = { message = "Tried to get password for a user on " .. host .. " but command was sent to " .. data.to } };

		elseif usermanager_user_exists(user, host) then

			accountjid = fields.accountjid;

			password = usermanager_get_password(user, host);

		else

			return { status = "completed", error = { message = "User does not exist" } };

		end

		return { status = "completed", result = { layout = get_user_password_result_layout, values = {accountjid = accountjid, password = password} } };

	else

		return { status = "executing", actions = {"next", "complete", default = "complete"}, form = get_user_password_layout }, "executing";

	end

end

function get_user_roster_handler(self, data, state)

	local get_user_roster_layout = dataforms_new{

		{ name = "FORM_TYPE", type = "hidden", value = "http://jabber.org/protocol/admin" };

		{ name = "accountjid", type = "jid-single", required = true, label = "The Jabber ID for which to retrieve the roster" };

	};

	local get_user_roster_result_layout = dataforms_new{

		{ name = "FORM_TYPE", type = "hidden", value = "http://jabber.org/protocol/admin" };

		{ name = "accountjid", type = "jid-single", label = "This is the roster for" };

		{ name = "roster", type = "text-multi", label = "Roster XML" };

	};

	if state then

		if data.action == "cancel" then

			return { status = "canceled" };

		end

		local fields, err = get_user_roster_layout:data(data.form);

		if err then

			return generate_error_message(err);

		end

		local user, host, resource = jid.split(fields.accountjid);

		if host ~= data.to then

			return { status = "completed", error = { message = "Tried to get roster for a user on " .. host .. " but command was sent to " .. data.to } };

		elseif not usermanager_user_exists(user, host) then

			return { status = "completed", error = { message = "User does not exist" } };

		end

		local roster = rm_load_roster(user, host);

		local query = st.stanza("query", { xmlns = "jabber:iq:roster" });

		for jid in pairs(roster) do

			if jid ~= "pending" and jid then

				query:tag("item", {

					jid = jid,

					subscription = roster[jid].subscription,

					ask = roster[jid].ask,

					name = roster[jid].name,

				});

				for group in pairs(roster[jid].groups) do

					query:tag("group"):text(group):up();

				end

				query:up();

			end

		end

		local query_text = tostring(query):gsub("><", ">\n<");

		local result = get_user_roster_result_layout:form({ accountjid = user.."@"..host, roster = query_text }, "result");

		result:add_child(query);

		return { status = "completed", other = result };

	else

		return { status = "executing", actions = {"next", "complete", default = "complete"}, form = get_user_roster_layout }, "executing";

	end

end

function get_user_stats_handler(self, data, state)

	local get_user_stats_layout = dataforms_new{

		title = "Get User Statistics";

		instructions = "Fill out this form to gather user statistics.";

		{ name = "FORM_TYPE", type = "hidden", value = "http://jabber.org/protocol/admin" };

		{ name = "accountjid", type = "jid-single", required = true, label = "The Jabber ID for statistics" };

	};

	local get_user_stats_result_layout = dataforms_new{

		{ name = "FORM_TYPE", type = "hidden", value = "http://jabber.org/protocol/admin" };

		{ name = "ipaddresses", type = "text-multi", label = "IP Addresses" };

		{ name = "rostersize", type = "text-single", label = "Roster size" };

		{ name = "onlineresources", type = "text-multi", label = "Online Resources" };

	};

	if state then

		if data.action == "cancel" then

			return { status = "canceled" };

		end

		local fields, err = get_user_stats_layout:data(data.form);

		if err then

			return generate_error_message(err);

		end

		local user, host, resource = jid.split(fields.accountjid);

		if host ~= data.to then

			return { status = "completed", error = { message = "Tried to get stats for a user on " .. host .. " but command was sent to " .. data.to } };

		elseif not usermanager_user_exists(user, host) then

			return { status = "completed", error = { message = "User does not exist" } };

		end

		local roster = rm_load_roster(user, host);

		local rostersize = 0;

		local IPs = "";

		local resources = "";

		for jid in pairs(roster) do

			if jid ~= "pending" and jid then

				rostersize = rostersize + 1;

			end

		end

		for resource, session in pairs((hosts[host].sessions[user] and hosts[host].sessions[user].sessions) or {}) do

			resources = resources .. "\n" .. resource;

			IPs = IPs .. "\n" .. session.ip;

		end

		return { status = "completed", result = {layout = get_user_stats_result_layout, values = {ipaddresses = IPs, rostersize = tostring(rostersize),