/*
    * Copyright 2012-2025 CodeLibs Project and the Others.
    *
    * Licensed under the Apache License, Version 2.0 (the "License");
    * you may not use this file except in compliance with the License.
    * You may obtain a copy of the License at
    *
    *     http://www.apache.org/licenses/LICENSE-2.0
    *
   * Unless required by applicable law or agreed to in writing, software
   * distributed under the License is distributed on an "AS IS" BASIS,
   * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND,
   * either express or implied. See the License for the specific language
   * governing permissions and limitations under the License.
   */
  package org.codelibs.fess.ldap;
  
  import static org.codelibs.core.stream.StreamUtil.stream;
  
  import java.util.Arrays;
  import java.util.Hashtable;
  
  import org.apache.commons.lang3.ArrayUtils;
  import org.codelibs.core.lang.StringUtil;
  import org.codelibs.fess.entity.FessUser;
  import org.codelibs.fess.mylasta.action.FessUserBean;
  import org.codelibs.fess.mylasta.direction.FessConfig;
  import org.codelibs.fess.util.ComponentUtil;
  import org.dbflute.optional.OptionalThing;
  
  /**
   * An LDAP user.
   */
  public class LdapUser implements FessUser {
  
      private static final long serialVersionUID = 1L;
  
      /** The environment for LDAP connection. */
      protected Hashtable<String, String> env;
  
      /** The name of the user. */
      protected String name;
  
      /** The permissions of the user. */
      protected String[] permissions = null;
  
      /**
       * Constructs a new LDAP user.
       *
       * @param env The environment for LDAP connection.
       * @param name The name of the user.
       */
      public LdapUser(final Hashtable<String, String> env, final String name) {
          this.env = env;
          this.name = name;
      }
  
      @Override
      public String getName() {
          return name;
      }
  
      @Override
      public String[] getPermissions() {
          if (permissions == null) {
              final FessConfig fessConfig = ComponentUtil.getFessConfig();
              final String baseDn = fessConfig.getLdapBaseDn();
              final String accountFilter = fessConfig.getLdapAccountFilter();
              final String groupFilter = fessConfig.getLdapGroupFilter();
              if (StringUtil.isNotBlank(baseDn) && StringUtil.isNotBlank(accountFilter)) {
                  final LdapManager ldapManager = ComponentUtil.getLdapManager();
                  permissions = distinct(ArrayUtils.addAll(ldapManager.getRoles(this, baseDn, accountFilter, groupFilter, roles -> {
                      permissions = distinct(roles);
                      ComponentUtil.getActivityHelper().permissionChanged(OptionalThing.of(new FessUserBean(this)));
                  }), fessConfig.getRoleSearchUserPrefix() + ldapManager.normalizePermissionName(getName())));
              } else {
                  permissions = StringUtil.EMPTY_STRINGS;
              }
          }
          return permissions;
      }
  
      @Override
      public String[] getRoleNames() {
          final FessConfig fessConfig = ComponentUtil.getFessConfig();
          return stream(getPermissions()).get(stream -> stream.filter(s -> s.startsWith(fessConfig.getRoleSearchRolePrefix()))
                  .map(s -> s.substring(1))
                  .toArray(n -> new String[n]));
      }
  
      @Override
      public String[] getGroupNames() {
          final FessConfig fessConfig = ComponentUtil.getFessConfig();
          return stream(getPermissions()).get(stream -> stream.filter(s -> s.startsWith(fessConfig.getRoleSearchGroupPrefix()))
                  .map(s -> s.substring(1))
                  .toArray(n -> new String[n]));
      }
  
      /**
      * Returns the environment for LDAP connection.
      *
      * @return The environment for LDAP connection.
      */
     public Hashtable<String, String> getEnvironment() {
         return env;
     }
 
     @Override
     public boolean isEditable() {
         return ComponentUtil.getFessConfig().isLdapAdminEnabled(name);
     }
 
     private static String[] distinct(final String[] values) {
         if (values == null) {
             return StringUtil.EMPTY_STRINGS;
         }
         if (values.length < 2) {
             return values;
         }
         return Arrays.stream(values).distinct().toArray(n -> new String[n]);
     }
 
 }