-- Copyright (C) 2009-2011 Florian Zeitz

--

-- This file is MIT/X11 licensed. Please see the

-- COPYING file in the source package for more information.

--

-- luacheck: ignore 212/self 212/data 212/state 412/err 422/err

local _G = _G;

local prosody = _G.prosody;

local hosts = prosody.hosts;

local t_concat = table.concat;

local t_sort = table.sort;

local module_host = module:get_host();

local keys = require "prosody.util.iterators".keys;

local usermanager_user_exists = require "prosody.core.usermanager".user_exists;

local usermanager_create_user = require "prosody.core.usermanager".create_user;

local usermanager_delete_user = require "prosody.core.usermanager".delete_user;

local usermanager_disable_user = require "prosody.core.usermanager".disable_user;

local usermanager_enable_user = require "prosody.core.usermanager".enable_user;

local usermanager_set_password = require "prosody.core.usermanager".set_password;

local hostmanager_activate = require "prosody.core.hostmanager".activate;

local hostmanager_deactivate = require "prosody.core.hostmanager".deactivate;

local rm_load_roster = require "prosody.core.rostermanager".load_roster;

local st, jid = require "prosody.util.stanza", require "prosody.util.jid";

local timer_add_task = require "prosody.util.timer".add_task;

local dataforms_new = require "prosody.util.dataforms".new;

local array = require "prosody.util.array";

local modulemanager = require "prosody.core.modulemanager";

local core_post_stanza = prosody.core_post_stanza;

local adhoc_simple = require "prosody.util.adhoc".new_simple_form;

local adhoc_initial = require "prosody.util.adhoc".new_initial_data_form;

local set = require"prosody.util.set";

module:depends("adhoc");

local adhoc_new = module:require "adhoc".new;

local function generate_error_message(errors)

	local errmsg = {};

	for name, err in pairs(errors) do

		errmsg[#errmsg + 1] = name .. ": " .. err;

	end

	return { status = "completed", error = { message = t_concat(errmsg, "\n") } };

end

-- Adding a new user

local add_user_layout = dataforms_new{

	title = "Adding a User";

	instructions = "Fill out this form to add a user.";

	{ name = "FORM_TYPE", type = "hidden", value = "http://jabber.org/protocol/admin" };

	{ name = "accountjid", type = "jid-single", required = true, label = "The Jabber ID for the account to be added" };

	{ name = "password", type = "text-private", label = "The password for this account" };

	{ name = "password-verify", type = "text-private", label = "Retype password" };

};

local add_user_command_handler = adhoc_simple(add_user_layout, function(fields, err, data)

	if err then

		return generate_error_message(err);

	end

	local username, host = jid.split(fields.accountjid);

	if module_host ~= host then

		return { status = "completed", error = { message = "Trying to add a user on " .. host .. " but command was sent to " .. module_host}};

	end

	if (fields["password"] == fields["password-verify"]) and username and host then

		if usermanager_user_exists(username, host) then

			return { status = "completed", error = { message = "Account already exists" } };

		else

			if usermanager_create_user(username, fields.password, host) then

				module:log("info", "Created new account %s@%s by %s", username, host, jid.bare(data.from));

				return { status = "completed", info = "Account successfully created" };

			else

				return { status = "completed", error = { message = "Failed to write data to disk" } };

			end

		end

	else

		module:log("debug", "Invalid data, password mismatch or empty username while creating account for %s", fields.accountjid or "<nil>");

		return { status = "completed", error = { message = "Invalid data.\nPassword mismatch, or empty username" } };

	end

end);

-- Changing a user's password

local change_user_password_layout = dataforms_new{

	title = "Changing a User Password";

	instructions = "Fill out this form to change a user's password.";

	{ name = "FORM_TYPE", type = "hidden", value = "http://jabber.org/protocol/admin" };

	{ name = "accountjid", type = "jid-single", required = true, label = "The Jabber ID for this account" };

	{ name = "password", type = "text-private", required = true, label = "The password for this account" };

};

local change_user_password_command_handler = adhoc_simple(change_user_password_layout, function(fields, err, data)

	if err then

		return generate_error_message(err);

	end

	local username, host = jid.split(fields.accountjid);

	if module_host ~= host then

		return {

			status = "completed",

			error = {

				message = "Trying to change the password of a user on " .. host .. " but command was sent to " .. module_host

			}

		};

	end

	if usermanager_user_exists(username, host) and usermanager_set_password(username, fields.password, host, nil) then

		module:log("info", "Password of account %s@%s changed by %s", username, host, jid.bare(data.from));

		return { status = "completed", info = "Password successfully changed" };

	else

		return { status = "completed", error = { message = "User does not exist" } };

	end

end);

-- Reloading the config

local function config_reload_handler(self, data, state)

	module:log("info", "%s reloads the config", jid.bare(data.from));

	local ok, err = prosody.reload_config();

	if ok then

		return { status = "completed", info = "Configuration reloaded (modules may need to be reloaded for this to have an effect)" };

	else

		return { status = "completed", error = { message = "Failed to reload config: " .. tostring(err) } };

	end

end

-- Deleting a user's account

local delete_user_layout = dataforms_new{

	title = "Deleting a User";

	instructions = "Fill out this form to delete a user.";

	{ name = "FORM_TYPE", type = "hidden", value = "http://jabber.org/protocol/admin" };

	{ name = "accountjids", type = "jid-multi", required = true, label = "The Jabber ID(s) to delete" };

};

local delete_user_command_handler = adhoc_simple(delete_user_layout, function(fields, err, data)

	if err then

		return generate_error_message(err);

	end

	local failed = {};

	local succeeded = {};

	for _, aJID in ipairs(fields.accountjids) do

		local username, host = jid.split(aJID);

		if (host == module_host) and  usermanager_user_exists(username, host) and usermanager_delete_user(username, host) then

			module:log("info", "User %s has been deleted by %s", aJID, jid.bare(data.from));

			succeeded[#succeeded+1] = aJID;

		else

			module:log("debug", "Tried to delete non-existent user %s", aJID);

			failed[#failed+1] = aJID;

		end

	end

	return {status = "completed", info = (#succeeded ~= 0 and

			"The following accounts were successfully deleted:\n"..t_concat(succeeded, "\n").."\n" or "")..

			(#failed ~= 0 and

			"The following accounts could not be deleted:\n"..t_concat(failed, "\n") or "") };

end);

local disable_user_layout = dataforms_new{

	title = "Disabling a User";

	instructions = "Fill out this form to disable a user.";

	{ name = "FORM_TYPE", type = "hidden", value = "http://jabber.org/protocol/admin" };

	{ name = "accountjids", type = "jid-multi", required = true, label = "The Jabber ID(s) to disable" };

};

local disable_user_command_handler = adhoc_simple(disable_user_layout, function(fields, err, data)

	if err then

		return generate_error_message(err);

	end

	local failed = {};

	local succeeded = {};

	for _, aJID in ipairs(fields.accountjids) do

		local username, host = jid.split(aJID);

		if (host == module_host) and  usermanager_user_exists(username, host) and usermanager_disable_user(username, host) then

			module:log("info", "User %s has been disabled by %s", aJID, jid.bare(data.from));

			succeeded[#succeeded+1] = aJID;

		else

			module:log("debug", "Tried to disable non-existent user %s", aJID);

			failed[#failed+1] = aJID;

		end

	end

	return {status = "completed", info = (#succeeded ~= 0 and

			"The following accounts were successfully disabled:\n"..t_concat(succeeded, "\n").."\n" or "")..

			(#failed ~= 0 and

			"The following accounts could not be disabled:\n"..t_concat(failed, "\n") or "") };

end);

local enable_user_layout = dataforms_new{

	title = "Re-Enable a User";

	instructions = "Fill out this form to enable a user.";

	{ name = "FORM_TYPE", type = "hidden", value = "http://jabber.org/protocol/admin" };

	{ name = "accountjids", type = "jid-multi", required = true, label = "The Jabber ID(s) to re-enable" };

};

local enable_user_command_handler = adhoc_simple(enable_user_layout, function(fields, err, data)

	if err then

		return generate_error_message(err);

	end

	local failed = {};

	local succeeded = {};

	for _, aJID in ipairs(fields.accountjids) do

		local username, host = jid.split(aJID);

		if (host == module_host) and  usermanager_user_exists(username, host) and usermanager_enable_user(username, host) then

			module:log("info", "User %s has been enabled by %s", aJID, jid.bare(data.from));

			succeeded[#succeeded+1] = aJID;

		else

			module:log("debug", "Tried to enable non-existent user %s", aJID);

			failed[#failed+1] = aJID;

		end

	end

	return {status = "completed", info = (#succeeded ~= 0 and

			"The following accounts were successfully enabled:\n"..t_concat(succeeded, "\n").."\n" or "")..

			(#failed ~= 0 and

			"The following accounts could not be enabled:\n"..t_concat(failed, "\n") or "") };

end);

-- Ending a user's session

local function disconnect_user(match_jid)

	local node, hostname, givenResource = jid.split(match_jid);

	local host = hosts[hostname];

	local sessions = host.sessions[node] and host.sessions[node].sessions;

	for resource, session in pairs(sessions or {}) do

		if not givenResource or (resource == givenResource) then

			module:log("debug", "Disconnecting %s@%s/%s", node, hostname, resource);

			session:close();

		end

	end

	return true;

end

local end_user_session_layout = dataforms_new{

	title = "Ending a User Session";

	instructions = "Fill out this form to end a user's session.";

	{ name = "FORM_TYPE", type = "hidden", value = "http://jabber.org/protocol/admin" };

	{ name = "accountjids", type = "jid-multi", label = "The Jabber ID(s) for which to end sessions", required = true };

};

local end_user_session_handler = adhoc_simple(end_user_session_layout, function(fields, err)

	if err then

		return generate_error_message(err);

	end

	local failed = {};

	local succeeded = {};

	for _, aJID in ipairs(fields.accountjids) do

		local username, host = jid.split(aJID);

		if (host == module_host) and  usermanager_user_exists(username, host) and disconnect_user(aJID) then

			succeeded[#succeeded+1] = aJID;

		else

			failed[#failed+1] = aJID;

		end

	end

	return {status = "completed", info = (#succeeded ~= 0 and

		"The following accounts were successfully disconnected:\n"..t_concat(succeeded, "\n").."\n" or "")..

		(#failed ~= 0 and

		"The following accounts could not be disconnected:\n"..t_concat(failed, "\n") or "") };

end);

-- Getting a user's roster

local get_user_roster_layout = dataforms_new{

	{ name = "FORM_TYPE", type = "hidden", value = "http://jabber.org/protocol/admin" };

	{ name = "accountjid", type = "jid-single", required = true, label = "The Jabber ID for which to retrieve the roster" };

};

local get_user_roster_result_layout = dataforms_new{

	{ name = "FORM_TYPE", type = "hidden", value = "http://jabber.org/protocol/admin" };

	{ name = "accountjid", type = "jid-single", label = "This is the roster for" };

	{ name = "roster", type = "text-multi", label = "Roster XML" };

};

local get_user_roster_handler = adhoc_simple(get_user_roster_layout, function(fields, err)

	if err then

		return generate_error_message(err);

	end

	local user, host = jid.split(fields.accountjid);

	if host ~= module_host then

		return { status = "completed", error = { message = "Tried to get roster for a user on " .. host .. " but command was sent to " .. module_host } };

	elseif not usermanager_user_exists(user, host) then

		return { status = "completed", error = { message = "User does not exist" } };

	end

	local roster = rm_load_roster(user, host);

	local query = st.stanza("query", { xmlns = "jabber:iq:roster" });

	for contact_jid in pairs(roster) do

		if contact_jid then

			query:tag("item", {

				jid = contact_jid,

				subscription = roster[contact_jid].subscription,

				ask = roster[contact_jid].ask,

				name = roster[contact_jid].name,

			});

			for group in pairs(roster[contact_jid].groups) do

				query:tag("group"):text(group):up();

			end

			query:up();

		end

	end

	local query_text = tostring(query):gsub("><", ">\n<");

	local result = get_user_roster_result_layout:form({ accountjid = user.."@"..host, roster = query_text }, "result");

	result:add_child(query);

	return { status = "completed", other = result };

end);

-- Getting user statistics

local get_user_stats_layout = dataforms_new{

	title = "Get User Statistics";

	instructions = "Fill out this form to gather user statistics.";

	{ name = "FORM_TYPE", type = "hidden", value = "http://jabber.org/protocol/admin" };

	{ name = "accountjid", type = "jid-single", required = true, label = "The Jabber ID for statistics" };

};

local get_user_stats_result_layout = dataforms_new{

	{ name = "FORM_TYPE", type = "hidden", value = "http://jabber.org/protocol/admin" };

	{ name = "ipaddresses", type = "text-multi", label = "IP Addresses" };

	{ name = "rostersize", type = "text-single", label = "Roster size", datatype = "xs:integer" };

	{ name = "onlineresources", type = "text-multi", label = "Online Resources" };

};

local get_user_stats_handler = adhoc_simple(get_user_stats_layout, function(fields, err)

	if err then

		return generate_error_message(err);

	end

	local user, host = jid.split(fields.accountjid);

	if host ~= module_host then

		return { status = "completed", error = { message = "Tried to get stats for a user on " .. host .. " but command was sent to " .. module_host } };

	elseif not usermanager_user_exists(user, host) then

		return { status = "completed", error = { message = "User does not exist" } };

	end

	local roster = rm_load_roster(user, host);

	local rostersize = 0;

	local IPs = "";

	local resources = "";

	for contact_jid in pairs(roster) do

		if contact_jid then

			rostersize = rostersize + 1;

		end

	end

	for resource, session in pairs((hosts[host].sessions[user] and hosts[host].sessions[user].sessions) or {}) do

		resources = resources .. "\n" .. resource;