class AdminController < ApplicationController
  # Be sure to include AuthenticationSystem in Application Controller instead
  include AuthenticatedSystem
  # If you want "remember me" functionality, add this before_filter to Application Controller
  before_filter :login_from_cookie

  def index
    if logged_in?
      redirect_back_or_default(:controller => '/products', :action => 'list')
    else
      render :action => 'login'
    end
  end

  def login
    return unless request.post?
    self.current_user = User.authenticate(params[:username], params[:password])
    if logged_in?
      if params[:remember_me] == "1"
        self.current_user.remember_me
        cookies[:auth_token] = { :value => self.current_user.remember_token , :expires => self.current_user.remember_token_expires_at }
      end
      redirect_back_or_default(:controller => '/products', :action => 'list')
      flash[:notice] = "Logged in successfully"
    end
  end

  def signup
    @user = User.new(params[:user])
    return unless request.post?
    #User.role = "admin"
    User.password = "test"
    @user.save!
    self.current_user = @user
    redirect_back_or_default(:controller => '/products', :action => 'list')
    flash[:notice] = "You have successfully signed up as an Administrative user of the Atlrug Shopping Cart!"
  rescue ActiveRecord::RecordInvalid
    render :action => 'signup'
  end

  def logout
    self.current_user.forget_me if logged_in?
    cookies.delete :auth_token
    reset_session
    flash[:notice] = "You have been logged out."
    redirect_back_or_default(:controller => '/products', :action => 'list')
  end
end