D-Net

package eu.dnetlib.goldoa.service.dao;

import eu.dnetlib.goldoa.domain.AccountAction;

import eu.dnetlib.goldoa.domain.Affiliation;

import eu.dnetlib.goldoa.domain.Budget;

import eu.dnetlib.goldoa.domain.Organization;

import eu.dnetlib.goldoa.domain.UserRole;

import eu.dnetlib.goldoa.domain.Project;

import eu.dnetlib.goldoa.domain.ProjectCoordinator;

import eu.dnetlib.goldoa.domain.Publisher;

import eu.dnetlib.goldoa.domain.Role;

import eu.dnetlib.goldoa.domain.User;

import eu.dnetlib.goldoa.service.UserManagerImpl;

import org.apache.commons.codec.digest.DigestUtils;

import org.hibernate.Criteria;

import org.hibernate.criterion.Order;

import org.hibernate.criterion.Restrictions;

import org.springframework.beans.factory.annotation.Autowired;

import org.springframework.jdbc.core.BatchPreparedStatementSetter;

import org.springframework.jdbc.core.JdbcTemplate;

import org.springframework.jdbc.core.PreparedStatementSetter;

import org.springframework.jdbc.core.RowMapper;

import javax.sql.DataSource;

import java.sql.PreparedStatement;

import java.sql.ResultSet;

import java.sql.SQLException;

import java.sql.Timestamp;

import java.sql.Types;

import java.util.ArrayList;

import java.util.Date;

import java.util.List;

/**

 * Created by antleb on 3/13/15.

 */

public class UserDAO extends AbstractDao<String, User>{

	@Autowired

	private DataSource dataSource;

	private static final String GET_BY_ID =

			"select p.id, email, firstname, lastname, initials, password, telephone, active, orcidid, p.source, p.publisher, array_agg(distinct pro.project) as projects, array_agg(distinct a.organization||'||'||case when a.department is null then '' else a.department end||'||'||case when a.startdate is null then 0 else extract(epoch from a.startdate) end||'||'||case when a.enddate is null then 0 else extract(epoch from a.enddate) end) as affiliations, array_agg(distinct pr.role||'||'||pr.approved) as roles\n" +

					"from person p\n" +

					"left join person_role pr on p.id = pr.person\n" +

					"left join role r on r.id = pr.role\n" +

					"left join affiliation a on a.person = p.id\n" +

					"left join organisation o on o.id = a.organization\n" +

					"left join project_coordinator pro on pro.coordinator=p.id\n" +

					"where p.id = ?\n" +

					"group by p.id, p.email, firstname, lastname, initials, password, telephone, active, orcidid, p.source\n";

	private static final String GET_BY_EMAIL =

			"select p.id, email, firstname, lastname, initials, password, telephone, active, orcidid, p.source, p.publisher, array_agg(distinct pro.project) as projects, array_agg(distinct a.organization||'||'||case when a.department is null then '' else a.department end||'||'||case when a.startdate is null then 0 else extract(epoch from a.startdate) end||'||'||case when a.enddate is null then 0 else extract(epoch from a.enddate) end) as affiliations, array_agg(distinct pr.role||'||'||pr.approved) as roles\n" +

					"from person p\n" +

					"left join person_role pr on p.id = pr.person\n" +

					"left join role r on r.id = pr.role\n" +

					"left join affiliation a on a.person = p.id\n" +

					"left join organisation o on o.id = a.organization\n" +

					"left join project_coordinator pro on pro.coordinator=p.id\n" +

					"where email = ? and password is not null\n" +

					"group by p.id, p.email, firstname, lastname, initials, password, telephone, active, orcidid, p.source\n";

	private static final String GET_USERS =

			"select p.id, email, firstname, lastname, initials, password, telephone, active, orcidid, p.source, p.publisher, array_agg(distinct pro.project) as projects, array_agg(distinct a.organization||'||'||case when a.department is null then '' else a.department end||'||'||case when a.startdate is null then 0 else extract(epoch from a.startdate) end||'||'||case when a.enddate is null then 0 else extract(epoch from a.enddate) end) as affiliations, array_agg(distinct pr.role||'||'||pr.approved) as roles\n" +

					"from person p\n" +

					"left join person_role pr on p.id = pr.person\n" +

					"left join role r on r.id = pr.role\n" +

					"left join affiliation a on a.person = p.id\n" +

					"left join organisation o on o.id = a.organization\n" +

					"left join project_coordinator pro on pro.coordinator=p.id\n" +

					"where password is not null \n" +

					"group by p.id, p.email, firstname, lastname, initials, password, telephone, active, orcidid, p.source\n";

	private static final String INSERT_PERSON = "insert into person (email, firstname, lastname, initials, password, telephone, orcidid, source, publisher, id) values (?, ?, ?, ?, md5(?), ?, ?, ?, ?, ?);";

	private static final String UPDATE_PERSON = "update person set email=?, firstname=?, lastname=?, initials=?, password= (case when password=? then password else md5(?) end) , telephone=?, orcidid=?, source=?, publisher=? where id=?";

	private static final String INSERT_COORDINATORS = "insert into project_coordinator (project, coordinator) values (?, ?)";

	private static final String INSERT_PERSON_ROLE = "insert into person_role (person, role, approved) values (?, ? ,?)";

	private static final String INSERT_AFFILIATION = "insert into affiliation (id, person, organization, startdate, enddate, department) values (?, ?, ?, ?, ?, ?)";

	private static final String INSERT_ACTIVATION_TOKEN = "insert into account_action (\"user\", type, token, date, expires) values (?, ?, ? , ?, ?)";

	private static final String LOGIN = "select 1 from person where email = ? and password = md5(?)";

	private static final String GET_PERSON_TOKEN = "select 1 from person p join account_action ac on ac.user=p.id where p.email=? and ac.token=?";

	private static final String ACTIVATE_USER = "update person set active=true where id = ?";

	private static final String DELETE_ACTIVATION_TOKEN = "delete from account_action where user=? and token=? and type='activation'";

	private static final String UPDATE_PASSWORD = "update person set password=md5(?) where email=?";

	private static final String GET_MODERATORS = "select distinct email, firstname, lastname from person p join person_role pr on pr.person=p.id and pr.role='moderator' and approved=true";

	private static final String GET_ACCOUNTING_OFFICERS = "select distinct email, firstname, lastname from person p join person_role pr on pr.person=p.id and pr.role='accounting' and approved=true";

	/**

	 * Returns the person with the given id. Objects of different type are placeholders containing only their id.

	 * Objects representing relations are fully initialized, with placeholders for other main entities.

	 *

	 * @param userId

	 * @return

	 */

	public User getUserById(String userId) {

		return (User) createEntityCriteria().add(Restrictions.ilike("id", userId)).list().get(0);

	}

	/**

	 * Returns the person with the given email. Objects of different type are placeholders containing only their id.

	 * Objects representing relations are fully initialized, with placeholders for other main entities.

	 *

	 * @param email

	 * @return

	 */

	public User getUserByEmail(String email) {

		return (User) createEntityCriteria().add(Restrictions.ilike("email", email)).list().get(0);

	}

	public void saveToken(final String email, final String token, final int tokenTTL) {

		AccountAction acc_action = new AccountAction();

		acc_action.setUser(getUserByEmail(email));

		acc_action.setType("activation");

		acc_action.setToken(token);

		acc_action.setDate(new Timestamp(System.currentTimeMillis()));

		acc_action.setExpires(new Timestamp(System.currentTimeMillis() + 1000L * 60L * 60L * 24L * tokenTTL));

		getSession().persist(acc_action);

//		new JdbcTemplate(dataSource).update(INSERT_ACTIVATION_TOKEN, new PreparedStatementSetter() {

//			@Override

//			public void setValues(PreparedStatement ps) throws SQLException {

//

//				ps.setString(1, personId);

//				ps.setString(2, "activation");

//				ps.setString(3, token);

//				ps.setTimestamp(4, new Timestamp(System.currentTimeMillis()));

//				ps.setTimestamp(5, new Timestamp(System.currentTimeMillis() + 1000L * 60L * 60L * 24L * tokenTTL));

//			}

//		});

	}

	public boolean verifyLogin(String email, String password) {

		User user = (User) createEntityCriteria().add(Restrictions.eq("email", email))

				.add(Restrictions.eq("password", DigestUtils.md5Hex(password))).list().get(0);

		if(user != null)

			return true;

		return false;

	}

	public boolean verifyToken(final String email, final String token) {

//		private static final String GET_PERSON_TOKEN = "select 1 from person p join account_action ac "

//				+ "on ac.user=p.id where p.email=? and ac.token=?";	

		return new JdbcTemplate(dataSource).query(GET_PERSON_TOKEN, new Object[]{email, token}, new int[]{Types.VARCHAR, Types.VARCHAR}, new RowMapper<Object>() {

			@Override

			public Object mapRow(ResultSet rs, int rowNum) throws SQLException {

				return 1;

			}

		}).size() > 0;

	}

	public void activateUser(final String email) {		

		User user = (User) createEntityCriteria().add(Restrictions.eq("email", email)).list().get(0);

		user.setActive(true);

		getSession().update(user);

	}

	public void deleteToken(final String email, final String token) {		

		Criteria cr = getSession().createCriteria(AccountAction.class);

		AccountAction ac = (AccountAction) cr.add(Restrictions.eq("email", email))

				.add(Restrictions.eq("token", token))

				.add(Restrictions.eq("type", "activation")).list().get(0);

		getSession().delete(ac);

	}

	public boolean updatePassword(final String newPassword, final String email) {

		User user = (User) createEntityCriteria().add(Restrictions.eq("email", email)).list().get(0);

		if(user != null){

			user.setPassword(DigestUtils.md5Hex(newPassword));

			getSession().update(user);

			return true;

		}

		return false;

	}

	@SuppressWarnings("unchecked")

	public List<Role> getRoles() {		

		Criteria cr = getSession().createCriteria(Role.class);

		return cr.list();

	}

	public void saveUser(final User user) {

		getSession().persist(user);

//		JdbcTemplate jdbcTemplate = new JdbcTemplate(dataSource);

//

//		int updated = jdbcTemplate.update(UPDATE_PERSON, new PreparedStatementSetter() {

//			@Override

//			public void setValues(PreparedStatement ps) throws SQLException {

//				ps.setString(1, user.getEmail());

//				ps.setString(2, user.getName());

//				ps.setString(3, user.getLastname());

//				ps.setString(4, user.getInitials());

//				ps.setString(5, user.getPassword());

//				ps.setString(6, user.getPassword());

//				ps.setString(7, user.getTelephone());

//				ps.setString(8, user.getOrcidId());

//				ps.setString(9, user.getSource());

//				if (user.getPublisher() != null)

//					ps.setString(10, user.getPublisher().getId());

//				else

//					ps.setString(10, null);

//				ps.setString(11, user.getId());

//			}

//		});

//

//		if (updated == 0) {

//			jdbcTemplate.update(INSERT_PERSON, new PreparedStatementSetter() {

//				@Override

//				public void setValues(PreparedStatement ps) throws SQLException {

//					ps.setString(1, person.getEmail());

//					ps.setString(2, person.getName());

//					ps.setString(3, person.getLastname());

//					ps.setString(4, person.getInitials());

//					ps.setString(5, person.getPassword());

//					ps.setString(6, person.getTelephone());

//					ps.setString(7, person.getOrcidId());

//					ps.setString(8, person.getSource());

//					if (person.getPublisher() != null)

//						ps.setString(9, person.getPublisher().getId());

//					else

//						ps.setString(9, null);

//					ps.setString(10, person.getId());

//				}

//			});

//		}

	}

	public void deleteAffiliations(final String email) {

		Criteria cr = getSession().createCriteria(Affiliation.class);

		Affiliation af = (Affiliation) cr.add(Restrictions.eq("email",email)).list().get(0);

		getSession().delete(af);

	}

	public void deletePersonRoles(final String email) {

		Criteria cr = getSession().createCriteria(Affiliation.class);

		UserRole ur = (UserRole) cr.add(Restrictions.eq("email",email)).list().get(0);

		getSession().delete(ur);

	}

	//TODO MOVE TO PROJECT DAO

	public void removeProjectCoordinators(final String email) {

		Criteria cr = getSession().createCriteria(ProjectCoordinator.class);

		ProjectCoordinator pc = (ProjectCoordinator) cr.add(Restrictions.eq("email",email)).list().get(0);

		getSession().delete(pc);

	}

	public void saveProjectCoordinators(final String email, final List<ProjectCoordinator> projectCoordinators) {

		User user = (User) createEntityCriteria().add(Restrictions.eq("email", email)).list().get(0);

		user.setProjectCoordinators(projectCoordinators);

	}

	public void saveUserRoles(final String email, final List<UserRole> roles) {

		User user = getUserByEmail(email);

		user.setRole(roles);

//		persist(user);

	}

	/**

	 * @param person       included because the GWT serialization returns a different object than the original (perhaps...)

	 * @param affiliations

	 */

	public void saveAffiliations(final User user, final List<Affiliation> affiliations) {

		user.setAffiliations(affiliations);

//		new JdbcTemplate(dataSource).batchUpdate(INSERT_AFFILIATION, new BatchPreparedStatementSetter() {

//			@Override

//			public void setValues(PreparedStatement ps, int i) throws SQLException {

//				Affiliation affiliation = affiliations.get(i);

//

//				ps.setInt(1, UserManagerImpl.generateId(affiliation));

//				ps.setString(2, person.getId());

//

//				if (affiliation.getOrganization() != null)

//					ps.setString(3, affiliation.getOrganization().getId());

//				else

//					ps.setString(3, null);

//

//				if (affiliation.getStart() != null)

//					ps.setTimestamp(4, new Timestamp(affiliation.getStart().getTime()));

//				else

//					ps.setTimestamp(4, null);

//

//				if (affiliation.getEnd() != null)

//					ps.setTimestamp(5, new Timestamp(affiliation.getEnd().getTime()));

//				else

//					ps.setTimestamp(5, null);

//

//				ps.setString(6, affiliation.getDepartment());

//			}

//

//			@Override

//			public int getBatchSize() {

//				return affiliations != null ? affiliations.size() : 0;

//			}

//		});

	}

	public DataSource getDataSource() {

		return dataSource;

	}

	public void setDataSource(DataSource dataSource) {

		this.dataSource = dataSource;

	}

	@SuppressWarnings("unchecked")

	public List<User> getModerators() {	

		return createEntityCriteria().add(Restrictions.eq("approved", "true")).createAlias("userRole", "ur")

		.add(Restrictions.eq("ur.role","moderator")).list();

	}

	@SuppressWarnings("unchecked")

	public List<User> getAccountingOfficers() {

		return createEntityCriteria().add(Restrictions.eq("approved", "true")).createAlias("userRole", "ur")

		.add(Restrictions.eq("ur.role","accounting")).list();

	}

	public Role getRole(final String roleId) {

		Criteria cr = getSession().createCriteria(Role.class);

		cr.add(Restrictions.eq("role", roleId));

		return (Role) cr.list().get(0);

	}

	public void deactivateUser(String email) {

		User user = (User) createEntityCriteria().add(Restrictions.eq("email", email)).list().get(0);

		user.setActive(false);

		getSession().update(user);

	}

	public void acceptUserRole(String email, String roleId) {

		UserRole ur = (UserRole) createEntityCriteria().add(Restrictions.eq("email", email)).createAlias("userRole", "ur")

		.add(Restrictions.eq("ur.id",roleId)).list().get(0);

		ur.setApproved(true);

		getSession().update(ur);

//		

//		JdbcTemplate jdbcTemplate = new JdbcTemplate(dataSource);

//

//		if (jdbcTemplate.update("update person_role set approved=true where person=? and role=?", new Object[]{userId, roleId}, new int[]{Types.VARCHAR, Types.VARCHAR}) == 0) {

//			jdbcTemplate.update("insert into person_role (person, role, approved) values (?, ?, true)", new Object[]{userId, roleId}, new int[]{Types.VARCHAR, Types.VARCHAR});

//		}

	}

	public void rejectUserRole(String email, String roleId) {

		UserRole ur = (UserRole) createEntityCriteria().add(Restrictions.eq("email", email)).createAlias("userRole", "ur")

		.add(Restrictions.eq("ur.id",roleId)).list().get(0);

		getSession().delete(ur);

		//new JdbcTemplate(dataSource).update("delete from person_role where person=? and role=?", new Object[]{userId, roleId}, new int[]{Types.VARCHAR, Types.VARCHAR});

	}

	@SuppressWarnings("unchecked")

	public List<User> getUsers() {

		return createEntityCriteria().list();

	}

	private User readPerson(ResultSet rs) throws SQLException {

		return null;

//		Person person = new Person();

//

//		person.setId(rs.getString("id"));

//		person.setEmail(rs.getString("email"));

//		person.setName(rs.getString("firstname"));

//		person.setLastname(rs.getString("lastname"));

//		person.setInitials(rs.getString("initials"));

//		person.setTelephone(rs.getString("telephone"));

//		person.setActive(rs.getBoolean("active"));

//		person.setOrcidId(rs.getString("orcidid"));

//		person.setPassword(rs.getString("password"));

//		person.setSource(rs.getString("source"));

//		person.setPublisher(new Publisher(rs.getString("publisher")));

//

//		person.setCoordinatedProjects(new ArrayList<Project>());

//		for (String projectId : (String[]) rs.getArray("projects").getArray()) {

//			person.getCoordinatedProjects().add(new Project(projectId));

//		}

//

//		person.setAffiliations(new ArrayList<Affiliation>());

//		for (String affString : (String[]) rs.getArray("affiliations").getArray()) {

//			if (affString != null) {

//				String[] parts = affString.split("\\|\\|");

//				String org = parts[0];

//				String dep = parts[1];

//				Date start = parts[2] == "0" ? null : new Date(Long.parseLong(parts[2]));

//				Date end = parts[3] == "0" ? null : new Date(Long.parseLong(parts[3]));

//

//				Affiliation affiliation = new Affiliation();

//

//				affiliation.setPerson(person);

//				affiliation.setOrganization(new Organization(org));

//				affiliation.setDepartment(dep);

//				affiliation.setStart(start);

//				affiliation.setEnd(end);

//

//				person.getAffiliations().add(affiliation);

//			}

//		}

//

//		person.setRoles(new ArrayList<PersonRole>());

//		for (String rString : (String[]) rs.getArray("roles").getArray()) {

//			if (rString != null) {

//				String[] parts = rString.split("\\|\\|");

//				String role = parts[0];

//				boolean approved = Boolean.parseBoolean(parts[1]);

//

//				person.getRoles().add(new PersonRole(person, getRole(role), approved));

//			}

//		}

//

//		return person;

	}

}