class User  < ActiveRecord::Base

  attr_accessor :password

  EMAIL_REGEX = /^[A-Z0-9._%+-]+@[A-Z0-9.-]+\.[A-Z]{2,4}$/i

  validates :first_name, :presence => true, :length => { :maximum => 50 }
  validates :last_name, :presence => true, :length => { :maximum => 50 }
  validates :email, :presence => true, :length => { :maximum => 100 },
    :format => EMAIL_REGEX, :confirmation => true

  validates_length_of :password, :within => 8..25, :on => :create

  validate :validates_email

    def validates_email
      errors.add_to_base "That email address is taken" if User.find_by_email(self.email)
    end

  before_save :create_hashed_password
  before_save :capitalize_names
  after_save :clear_password

  scope :sorted_by_type, order("users.type ASC, users.last_name ASC, users.first_name ASC")

  attr_protected :hashed_password, :salt


  def name
    "#{first_name} #{last_name}"
  end

  def list_name
    "#{last_name}, #{first_name}"
  end

  def self.authenticate(email="", password="")
    user = self.find_by_email(email)
    if user && user.password_match?(password)
      return user
    else
      return false
    end
  end

  # The same password string with the same hash method and salt
  # should always generate the same hashed_password.
  def password_match?(password="")
    hashed_pass == self.class.hash_with_salt(password, salt)
  end

  def self.make_salt(email="")
    Digest::SHA1.hexdigest("Use #{email} with #{Time.now} to make salt")
  end

  def self.hash_with_salt(password="", salt="")
    Digest::SHA1.hexdigest("Put #{salt} on the #{password}")
  end

  protected

  def create_hashed_password
    unless password.blank?
      self.salt = self.class.make_salt(email) if salt.blank?
      self.hashed_pass = self.class.hash_with_salt(password, salt)
    end
  end

  def clear_password
    self.password = nil
  end

  def capitalize_names
    self.first_name = self.first_name.capitalize
    self.last_name = self.last_name.capitalize
  end


  private

  def attributes_protected_by_default
    super - [self.class.type]
  end
end