/**
 * Form builder for execute rights form.
 */
function gdpr_execute_rights_form($form, $form_state, $org, $lang, $token) {
  $form = array();
  // Check Gigya to make sure this is the valid user.
  // First, generate random string to use as new password.
  $new_password = '';
  for($i = 0; $i < 20; $i++) {
    $new_password .= mt_rand(0, 9);
  }

  $params = array(
    'passwordResetToken' => $token,
    'newPassword' => $new_password
  );

  $validate = [];
  // Use token to validate that email had been verified. However, we only want to do it the first time
  // the form is displayed, not when it is rebuilt after being submitted.
  $validate_gigya = count($form_state['input']) > 0 && $form_state['input']['op'] == 'Submit' ? FALSE : TRUE;
  if ($validate_gigya) {
    $validate = gdpr_send_gigya_request($org, $params, 'resetPassword');
  }
  // We only want to actually display the form fields if the user has been validated against Gigya.
  $display_fields = isset($validate['status']) && $validate['status'] == TRUE ? TRUE : FALSE;
    // Address has been validated, so build the form.
    $form['details'] = array(
      '#type' => $display_fields ? 'markup' : 'hidden',
      '#markup' => '<p>Your identity has been confirmed and we can continue with the data privacy rights request process. Please select one of the options below to tell us what you want to do with your personal data. If you’d like to make more than one change please initiate an additional rights request by clicking on this link.</p>'
    );

    $form['data_options'] = array(
      '#type' => $display_fields ? 'select' : 'hidden',
      '#title' => t('Data Options'),
      '#options' => array(
        'update' => 'Update your information. Please include details of the information you'd like updated in the fields below.',
        'restrict' => 'Restrict processing of your personal information. Please provide details below.',
        'access' => 'Access the personal information stored on you by this company. You will be sent a file via email.',
        'consent' => 'Consent to receive marketing materials from (brand specific).',
        'revoke_marketing' => 'Revoke consent to be sent marketing materials (brand specific).',
        'revoke_all' => 'Revoke consent to receive marketing materials from all Fluke brands.',
        'forget' => 'Forget me.'
      ),
      '#default_value' => 'update'
    );

    $form['given_name'] = array(
      '#type' => $display_fields ? 'textfield' : 'hidden',
      '#title' => t('Given Name'),
      '#description' => t('Enter your given (first) name'),
      '#required' => TRUE,
    );

    $form['family_name'] = array(
      '#type' => $display_fields ? 'textfield' : 'hidden',
      '#title' => t('Family Name'),
      '#description' => t('Enter your family (last) name'),
      '#required' => TRUE,
    );

    $form['email'] = array(
      '#type' => $display_fields ? 'textfield' : 'hidden',
      '#title' => t('Email Address'),
      '#description' => t('This is the address used to identify you in our system.'),
      '#disabled' => TRUE,
      '#default_value' => isset($validate['email']) ? $validate['email'] : ''
    );

    $form['submit'] = array(
      '#type' => $display_fields ? 'submit' : 'hidden',
      '#value' => t('Submit')
    );

    $form['error'] = array(
      '#type' => $display_fields ? 'hidden' : 'markup',
      '#markup' => '<p>Sorry, your email address could not be validated.</p>'
    );

  return $form;
}