class AuthByTokenRequestProcessor extends RestRequestProcessor[AuthByTokenRequest]
{
    override def processRequest = Receive {
        case request @ AuthByTokenRequest(tokenId, password) ⇒
            tellService(NodeRole.ACL, CheckToken(tokenId, password), request)
            context.become(waitingCheckToken)
            log.debug("waitingCheckToken")
    }

    def waitingCheckToken = Receive {
        case CheckResult(accountId) ⇒
            tellService(NodeRole.ACL, GetAccount(accountId), rootRequest)
            context.become(waitingAccount)
            log.debug("waitingAccount")
    } orElse passHttpErrorResponse

    def waitingAccount = Receive {
        case account: Account ⇒
            context.become(waitingSession)
            tellService(NodeRole.ACL, CreateSession(account.id, account.roles), rootRequest)
            log.debug("waitingSession")
    } orElse passHttpErrorResponse

    def waitingSession = Receive {
        case Session(accountId, roles, token, _, id) ⇒
      tellService(NodeRole.ACL, TouchSession(id))
            complete(AuthResponse(id, token, accountId, roles))
    } orElse passHttpErrorResponse
}