class OrgsController < ApplicationController
  after_action :verify_authorized, except: ['shibboleth_ds', 'shibboleth_ds_passthru']
  respond_to :html

  ##
  # GET /organisations/1/edit
  def admin_edit
    org = Org.find(params[:id])
    authorize org
    languages = Language.all.order("name")
    org.links = {"org": []} unless org.links.present?
    render 'admin_edit', locals: {org: org, languages: languages, method: 'PUT', 
                                  url: admin_update_org_path(org) }
  end

  ##
  # PUT /organisations/1
  def admin_update
    attrs = org_params
    @org = Org.find(params[:id])
    authorize @org
    @org.logo = attrs[:logo] if attrs[:logo]
    tab = (attrs[:feedback_enabled].present? ? 'feedback' : 'profile')
    if params[:org_links].present?
      @org.links = JSON.parse(params[:org_links]) 
    end
    
    begin
      # Only allow super admins to change the org types and shib info
      if current_user.can_super_admin?    
        # Handle Shibboleth identifiers if that is enabled
        if Rails.application.config.shibboleth_use_filtered_discovery_service 
          shib = IdentifierScheme.find_by(name: 'shibboleth')
          shib_settings = @org.org_identifiers.select{ |ids| ids.identifier_scheme == shib}.first

          if params[:shib_id].present? || params[:shib_domain].present?
            shib_settings = OrgIdentifier.new(org: @org, identifier_scheme: shib) unless shib_settings.present?
            shib_settings.identifier = params[:shib_id]
            shib_settings.attrs = {domain: params[:shib_domain]}
            shib_settings.save
          else  
            if shib_settings.present?
              # The user cleared the shib values so delete the object
              shib_settings.destroy
            end
          end
        end
      end
      
      if @org.update_attributes(attrs)
        flash[:notice] = success_message(_('organisation'), _('saved'))
        redirect_to "#{admin_edit_org_path(@org)}\##{tab}"
      else
        failure = failed_update_error(@org, _('organisation')) if failure.blank?
        redirect_to "#{admin_edit_org_path(@org)}\##{tab}", alert: failure
      end
    rescue Dragonfly::Job::Fetch::NotFound => dflye
      redirect_to "#{admin_edit_org_path(@org)}\##{tab}", alert: _('There seems to be a problem with your logo. Please upload it again.')
    end
  end

  # GET /orgs/shibboleth_ds
  # ----------------------------------------------------------------
  def shibboleth_ds
    redirect_to root_path unless current_user.nil?
  
    @user = User.new
    # Display the custom Shibboleth discovery service page. 
    @orgs = Org.joins(:identifier_schemes).where('identifier_schemes.name = ?', 'shibboleth').sort{|x,y| x.name <=> y.name }
  
    if @orgs.empty?
      flash[:alert] = _('No organisations are currently registered.')
      redirect_to user_shibboleth_omniauth_authorize_path 
    end
  end

  # POST /orgs/shibboleth_ds
  # ----------------------------------------------------------------
  def shibboleth_ds_passthru
    if !params[:org_name].blank?
      session['org_id'] = params[:org_name]

      scheme = IdentifierScheme.find_by(name: 'shibboleth')
      shib_entity = OrgIdentifier.where(org_id: params[:org_name], identifier_scheme: scheme)
  
      if !shib_entity.empty?
        # Force SSL
        url = "#{request.base_url.gsub('http:', 'https:')}#{Rails.application.config.shibboleth_login}"
        target = "#{user_shibboleth_omniauth_callback_url.gsub('http:', 'https:')}"
    
        #initiate shibboleth login sequence
        redirect_to "#{url}?target=#{target}&entityID=#{shib_entity.first.identifier}"
      else
        flash[:alert] = _('Your organisation does not seem to be properly configured.')
        redirect_to shibboleth_ds_path
      end

    else
      flash[:notice] = _('Please choose an organisation')
      redirect_to shibboleth_ds_path
    end
  end

  private
    def org_params
      params.require(:org).permit(:name, :abbreviation, :logo, :contact_email, :contact_name, :remove_logo, :org_type,
                                  :feedback_enabled, :feedback_email_subject, :feedback_email_msg)
    end
end