package com.oblivionsoftware.raid.security;

/**
 * Imports
 */
import com.oblivionsoftware.raid.security.encoder.PasswordEncoder;
import com.oblivionsoftware.raid.entity.User;
import com.oblivionsoftware.raid.entity.UserManagerBean;
import javax.ejb.EJB;
import javax.ejb.Stateless;
import javax.persistence.EntityNotFoundException;

/**
 * SecurityServiceBean.
 *
 * @author Dustin Dobervich <ddobervich@gmail.com>
 */
@Stateless
public class SecurityManagerBean
{
    @EJB
    private UserManagerBean userManager;

    /**
     * Validates a users credentials.
     *
     * @param username The username
     * @param password The password
     * @return True if valid, false otherwise
     */
    public boolean validateCredentials(String username, String password)
    {
        User user = this.userManager.findUserByUsername(username);
        if (user == null) {
            throw new EntityNotFoundException("Unable to find user with username: " + username);
        }

        PasswordEncoder encoder = new PasswordEncoder();
        String encodedPassword = encoder.encodePassword(password, user.getSalt());

        return encodedPassword.equals(password);
    }
}