<?php
/***************************************************************************
 *  Copyright (C) 2003-2014 Polytechnique.org                              *
 *  http://opensource.polytechnique.org/                                   *
 *                                                                         *
 *  This program is free software; you can redistribute it and/or modify   *
 *  it under the terms of the GNU General Public License as published by   *
 *  the Free Software Foundation; either version 2 of the License, or      *
 *  (at your option) any later version.                                    *
 *                                                                         *
 *  This program is distributed in the hope that it will be useful,        *
 *  but WITHOUT ANY WARRANTY; without even the implied warranty of         *
 *  MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the          *
 *  GNU General Public License for more details.                           *
 *                                                                         *
 *  You should have received a copy of the GNU General Public License      *
 *  along with this program; if not, write to the Free Software            *
 *  Foundation, Inc.,                                                      *
 *  59 Temple Place, Suite 330, Boston, MA  02111-1307  USA                *
 ***************************************************************************/

class GoogleAppsModule extends PLModule
{
    function handlers()
    {
        global $globals;
        if (!$globals->mailstorage->googleapps_domain) {
            return array();
        }

        return array(
            'googleapps'            => $this->make_hook('index',      AUTH_PASSWD, 'gapps'),
            'admin/googleapps'      => $this->make_hook('admin',      AUTH_PASSWD, 'admin'),
            'admin/googleapps/job'  => $this->make_hook('admin_job',  AUTH_PASSWD, 'admin'),
            'admin/googleapps/user' => $this->make_hook('admin_user', AUTH_PASSWD, 'admin'),
        );
    }

    function handler_index($page, $action = null)
    {
        require_once 'emails.inc.php';
        require_once 'googleapps.inc.php';
        $page->changeTpl('googleapps/index.tpl');
        $page->setTitle('Compte Google Apps');

        $user = S::user();
        $account = new GoogleAppsAccount($user);

        // Fills up the 'is Google Apps redirection active' variable.
        $redirect_active = false;
        $redirect_unique = true;
        $gapps_email = '';

        if ($account->active()) {
            $redirect = new Redirect($user);
            foreach ($redirect->emails as $email) {
                if ($email->type == 'googleapps') {
                    $gapps_email = $email->email;
                    $redirect_active = $email->active;
                    $redirect_unique = !$redirect->other_active($email->email);
                }
            }
        }
        $page->assign('redirect_active', $redirect_active);
        $page->assign('redirect_unique', $redirect_unique);

        // Updates the Google Apps account as required.
        if ($action) {
            if ($action == 'password' && Post::has('pwsync')) {
                S::assert_xsrf_token();
                if (Post::v('pwsync') == 'sync') {
                    $account->set_password_sync(true);
                    $account->set_password($user->password());
                } else {
                    $account->set_password_sync(false);
                }
            } elseif ($action == 'password' && Post::has('pwhash') && Post::t('pwhash') && !$account->sync_password) {
                S::assert_xsrf_token();
                $account->set_password(Post::t('pwhash'));
            }

            if ($action == 'suspend' && Post::has('suspend') && $account->active()) {
                S::assert_xsrf_token();

                if ($account->pending_update_suspension) {
                    $page->trigWarning("Ton compte est déjà en cours de désactivation.");
                } else {
                    if (!$redirect_active || $redirect->modify_one_email($gapps_email, false) == SUCCESS) {
                        $account->suspend();
                        $page->trigSuccess("Ton compte Google Apps est dorénavant désactivé.");
                    } else {
                        $page->trigError("Ton compte Google Apps est ta seule adresse de redirection. Ton compte ne peux pas être désactivé.");
                    }
                }
            } elseif ($action == 'unsuspend' && Post::has('unsuspend') && $account->suspended()) {
                $account->unsuspend(Post::b('redirect_mails', true));
                $page->trigSuccess("Ta demande de réactivation a bien été prise en compte.");
            }

            if ($action == 'create') {
                $page->assign('has_password_sync', Get::has('password_sync'));
                $page->assign('password_sync', Get::b('password_sync', true));
            }
            if ($action == 'create' && Post::has('password_sync') && Post::has('redirect_mails')) {
                S::assert_xsrf_token();

                $password_sync = Post::b('password_sync');
                $redirect_mails = Post::b('redirect_mails');
                if ($password_sync) {
                    $password = $user->password();
                } else {
                    $password = Post::t('pwhash');
                }

                $account->create($password_sync, $password, $redirect_mails);
                $page->trigSuccess("La demande de création de ton compte Google Apps a bien été enregistrée.");
            }
        }

        $page->assign('account', $account);
    }

    function handler_admin($page, $action = null) {
        require_once 'googleapps.inc.php';
        $page->changeTpl('googleapps/admin.tpl');
        $page->setTitle('Administration Google Apps');
        $page->assign('googleapps_admin', GoogleAppsAccount::is_administrator(S::v('uid')));

        if ($action == 'ack') {
            $qid = @func_get_arg(2);
            if ($qid) {
                XDB::execute(
                    "DELETE FROM  gapps_queue
                           WHERE  q_id = {?} AND p_status = 'hardfail'", $qid);
                $page->trigSuccess("La requête échouée a bien été retirée.");
            }
        }

        // Retrieves latest pending administrative requests from the gappsd queue.
        $res = XDB::iterator(
            "SELECT  q_id, q_recipient_id, s.email AS alias, j_type, j_parameters,
                     UNIX_TIMESTAMP(q.p_entry_date) AS p_entry_date
               FROM  gapps_queue AS q
          LEFT JOIN  email_source_account AS s ON (s.uid = q.q_recipient_id AND s.type = 'forlife')
              WHERE  p_status IN ('idle', 'active', 'softfail') AND
                     p_admin_request IS TRUE
           ORDER BY  p_entry_date");
        while ($request = $res->next()) {
            $j_parameters = json_decode($request['j_parameters'], true);
            unset($j_parameters['username']);
            $parameters = array_keys($j_parameters);
            $request['parameters'] = implode(', ', $parameters);

            $page->append('admin_requests', $request);
        }

        // Retrieves latest failed requests from the gappsd queue.
        $res = XDB::iterator(
            "SELECT  q.q_id, q.q_recipient_id, s.email AS alias, q.j_type, q.r_result,
                     UNIX_TIMESTAMP(q.p_entry_date) AS p_entry_date
               FROM  gapps_queue AS q
          LEFT JOIN  email_source_account AS s ON (s.uid = q.q_recipient_id AND s.type = 'forlife')
              WHERE  q.p_status = 'hardfail'
           ORDER BY  p_entry_date DESC
              LIMIT  20");
        $page->assign('failed_requests', $res);
    }

    function handler_admin_job($page, $job = null) {
        require_once 'googleapps.inc.php';
        $page->changeTpl('googleapps/admin.job.tpl');
        $page->setTitle('Administration Google Apps');
        $page->assign('googleapps_admin', GoogleAppsAccount::is_administrator(S::v('uid')));

        if ($job) {
            $res = XDB::query(
                "SELECT  q.*, so.email AS q_owner, sr.email AS q_recipient
                   FROM  gapps_queue AS q
              LEFT JOIN  email_source_account AS so ON (so.uid = q.q_owner_id AND so.type = 'forlife')
              LEFT JOIN  email_source_account AS sr ON (sr.uid = q.q_recipient_id AND sr.type = 'forlife')
                  WHERE  q_id = {?}", $job);
            $sql_job = $res->fetchOneAssoc();
            $sql_job['decoded_parameters'] = var_export(json_decode($sql_job['j_parameters'], true), true);
            $page->assign('job', $sql_job);
        }
    }

    function handler_admin_user($page, $user = null) {
        require_once 'emails.inc.php';
        require_once 'googleapps.inc.php';
        $page->changeTpl('googleapps/admin.user.tpl');
        $page->setTitle('Administration Google Apps');
        $page->assign('googleapps_admin', GoogleAppsAccount::is_administrator(S::v('uid')));

        if (!$user && Post::has('login')) {
            $user = Post::v('login');
        }
        $user = User::get($user);

        if ($user) {
            $account = new GoogleAppsAccount($user);

            // Apply requested actions.
            if (Post::has('suspend') && $account->active() && !$account->pending_update_suspension) {
                S::assert_xsrf_token();
                $account->suspend();
                $page->trigSuccess('Le compte est en cours de suspension.');
            } else if (Post::has('unsuspend') && $account->suspended() && !$account->pending_update_suspension) {
                S::assert_xsrf_token();
                $account->do_unsuspend();
                $page->trigSuccess('Le compte est en cours de réactivation.');
            } else if (Post::has('forcesync') && $account->active() && $account->sync_password) {
                $account->set_password($user->password());
                $page->trigSuccess('Le mot de passe est en cours de synchronisation.');
            } else if (Post::has('sync') && $account->active()) {
                $account->set_password($user->password());
                $account->set_password_sync(true);
            } else if (Post::has('nosync') && $account->active()) {
                $account->set_password_sync(false);
            }

            // Displays basic account information.
            $page->assign('account', $account);
            $page->assign('admin_account', GoogleAppsAccount::is_administrator($user->id()));
            $page->assign('googleapps_storage', Email::is_active_storage($user, 'googleapps'));
            $page->assign('user', $user->id());

            // Retrieves user's pending requests.
            $res = XDB::iterator(
                "SELECT  q_id, q_recipient_id, p_status, j_type, UNIX_TIMESTAMP(p_entry_date) AS p_entry_date
                   FROM  gapps_queue
                  WHERE  q_recipient_id = {?}
               ORDER BY  p_entry_date DESC", $user->id());
            $page->assign('requests', $res);
        }
    }
}

// vim:set et sw=4 sts=4 sws=4 foldmethod=marker fenc=utf-8:
?>