package la.oarf.componente.openam.login;

import java.security.Principal;
import java.util.Map;
import javax.security.auth.Subject;
import javax.security.auth.callback.Callback;
import javax.security.auth.callback.NameCallback;
import javax.security.auth.callback.PasswordCallback;
import javax.security.auth.login.LoginException;
import weblogic.security.principal.WLSGroupImpl;
import com.sun.identity.authentication.spi.AMLoginModule;
import com.sun.identity.authentication.util.ISAuthConstants;
import com.sun.identity.shared.debug.Debug;

public class MyCustomAuth extends AMLoginModule
{
   private String userLogin;
   private Subject subject;
   private final static Debug debug = Debug.getInstance("MyCustomAuth");

   public MyCustomAuth()
   {
      super();
   }

   @Override
   public Principal getPrincipal()
   {
      return criaPrincipalUsuario(userLogin);
   }

   @SuppressWarnings("rawtypes")
   @Override
   public void init(Subject subject, Map sharedState, Map options)
   {
      if (debug.messageEnabled())
      {
          debug.message("MyCustomAuth::init");
      }

      this.subject = subject;
   }

   @Override
   public int process(Callback[] callbacks, int state) throws LoginException
   {
      NameCallback nameCB = (NameCallback) callbacks[0];
      PasswordCallback passwordCB = (PasswordCallback) callbacks[1];

      String user = nameCB.getName();
      String senha = new String(passwordCB.getPassword());

      if (debug.messageEnabled())
      {
          debug.message("MyCustomAuth::process user: " + user + " password: " + senha);
      }

      // TODO fazer autenticacao no LDAP

      this.userLogin = user;

      return ISAuthConstants.LOGIN_SUCCEED;

      // throw new InvalidPasswordException("Senha inválida");
   }

   private BRBAuthPrincipal criaPrincipalUsuario(String userName)
   {
      // TODO recuperar grupos do BD
      subject.getPrincipals().add(new WLSGroupImpl("my-group-1"));
      subject.getPrincipals().add(new WLSGroupImpl("my-group-2"));
      subject.getPrincipals().add(new WLSGroupImpl("my-group-3"));

      if (debug.messageEnabled())
      {
          debug.message("MyCustomAuth::get principal user: " + userName);
      }

      return new BRBAuthPrincipal(userLogin);
   }
}