<?php defined('SYSPATH') or die('No direct access allowed.');

/**
 * This class provides login capability
 *
 * @package    lnApp
 * @category   Controllers
 * @author     Deon George
 * @copyright  (c) 2009-2013 Deon George
 * @license    http://dev.leenooks.net/license.html
 * @also       [logout]
 */
class lnApp_Controller_Login extends Controller_TemplateDefault {
	protected $auth_required = FALSE;

	/**
	 * Activate an account so that it can login and use the site
	 */
	public function action_activate() {
		if ($this->request->post()) {
			$ao = ORM::factory('Account',array('id'=>$this->request->param('id'),'email'=>$this->request->post('email')));

			if ($ao->loaded()) {
				if ($ao->activated())
					HTTP::redirect('login');

				elseif (! $ao->active) {
					SystemMessage::factory()
						->title(_('Account NOT Activated'))
						->type('warning')
						->body(_('Your account cannot been activated, please contact us.'));

				} elseif ($ao->activate_code() == $this->request->post('code')) {
					$ao->verified = TRUE;
					$ao->save();

					SystemMessage::factory()
						->title(_('Account Activated'))
						->type('info')
						->body(_('Your account has been activated.'));
				}

				HTTP::redirect('welcome');
			}

		} elseif (! $this->request->param('id'))
			HTTP::redirect('login/activate_resend');

		Block::factory()
			->title('Activate account')
			->title_icon('fa-wrench')
			->type('form-horizontal')
			->body(View::factory('login/activate')->set('o',Session::instance()->get_once('activate'))->set('email',$this->request->query('email')));
	}

	/**
	 * Send the account activation code to the email address, validating the email address
	 */
	public function action_activate_resend() {
		if ($this->request->post('email')) {
			$ao = ORM::factory('Account',array('email'=>$this->request->post('email')));

			if ($ao->loaded()) {
				if ($ao->activated())
					HTTP::redirect('login');
				else {
					$co = Company::instance();

					// Send our email with the token
					$email = Email::factory('login_activate')
						->set('SITE',URL::base(TRUE,TRUE))
						->set('SITE_ADMIN',$co->admin()->name())
						->set('CODE',$ao->activate_code())
						->set('EMAIL',$ao->email)
						->set('ID',$ao->id)
						->set('USER_NAME',$ao->name());

					$email->to = array('email'=>array($ao->email=>$ao->name()));
					$email->from = array('email'=>array($co->admin()->email=>$co->admin()->name()));
					$email->subject = 'Activation Code for '.$co->name();
					$email->deliver();

					// Log the password reset
					$ao->log('Activation code sent');

					Session::instance()->set('activate',$ao);
				}
			}

			HTTP::redirect('login/activate/'.$ao->id);

		} else {
			Block::factory()
				->title('Activate account')
				->title_icon('fa-wrench')
				->type('form-horizontal')
				->body(View::factory('login/activate_resend'));
		}
	}

	/**
	 * Login to the site
	 */
	public function action_index() {
		$output = '';

		if (! array_key_exists('auth',Kohana::modules()))
			throw HTTP_Exception::factory(501,'Auth not enabled.');

		// If user already signed-in
		if (Auth::instance()->logged_in())
			HTTP::redirect(URL::link('user','welcome/index'));

		// If there is a post and $_POST is not empty
		if ($this->request->post()) {
			// If the post data validates using the rules setup in the user model
			if (Auth::instance()->login($this->request->post('username'),$this->request->post('password'))) {
				// Redirect to the user account
				if ($redir = Session::instance()->get('afterlogin')) {
					Session::instance()->delete('afterlogin');
					HTTP::redirect($redir);

				} else
					HTTP::redirect(URL::link('user','welcome/index'));

			} else {
				SystemMessage::factory()
					->title(_('Invalid username or password'))
					->type('danger')
					->body(_('The username or password was invalid.'));
			}
		}

		if (array_key_exists('oauth',Kohana::modules()))
			$oauthlogin = is_null($x=Session::instance()->get_once('login-no-oauth',NULL)) ? TRUE : ! $x;
		else
			$oauthlogin = FALSE;

		$output .= View::factory('login')
			->set('oauth',$oauthlogin);

		Style::factory()
			->type('file')
			->data('media/css/auth-buttons.css');

		if ($oauthlogin)
			foreach (ORM::factory('Oauth')->list_active() as $oo)
				$output .= $oo->plugin()->html();

		$this->template->content = $output;
		$this->template->shownavbar = FALSE;
	}

	/**
	 * Method redirect when authenticated user doesnt have access to the url
	 */
	public function action_noaccess() {
		SystemMessage::factory()
			->title(_('No access to requested resource'))
			->type('danger')
			->body(_('You do not have access to the requested resource, please contact your administrator.'));
	}

	/**
	 * Register for an account on the site
	 */
	public function action_register() {
		$ao = ORM::factory('Account',$this->request->param('id'));

		if ($this->request->post() AND $ao->values($this->request->post())->changed() AND (! $this->save($ao)))
			$ao->reload()->values($this->request->post());

		if ($ao->loaded()) {
			$co = Company::instance();

			// Send our email with the token
			$email = Email::factory('login_activate')
				->set('SITE',URL::base(TRUE,TRUE))
				->set('SITE_ADMIN',$co->admin()->name())
				->set('CODE',$ao->activate_code())
				->set('EMAIL',$ao->email)
				->set('ID',$ao->id)
				->set('USER_NAME',$ao->name());

			$email->to = array('email'=>array($ao->email=>$ao->name()));
			$email->from = array('email'=>array($co->admin()->email=>$co->admin()->name()));
			$email->subject = 'Please activate your account for '.$co->name();
			$email->deliver();

			SystemMessage::factory()
				->title(_('Account Registered'))
				->type('info')
				->body(_('Please check your email for more instructions!'));

			Session::instance()->set('activate',$ao);
			HTTP::redirect('login/activate/'.$ao->id);
		}

		Block::factory()
			->type('form-horizontal')
			->title('Register Account')
			->title_icon('fa-edit')
			->body(View::factory('account/user/edit')->set('o',$ao));
	}

	/**
	 * Enable user password reset
	 */
	public function action_reset() {
		// Minutes to keep our token
		$token_expire = 15*60;

		// If the user posted their details to reset their password
		if ($this->request->post()) {
			// If the username is correct, create a method token
			if ($ao=ORM::factory('Account',array('email'=>$this->request->post('username'))) AND $ao->loaded()) {
				$token = $ao->token($token_expire,'account','user:resetpassword',2);

				if ($token) {
					$co = Company::instance();

					// Send our email with the token
					$email = Email::factory('login_reset')
						->set('SITE',URL::base(TRUE,TRUE))
						->set('SITE_ADMIN',$co->admin()->name())
						->set('TOKEN',$token)
						->set('TOKEN_EXPIRE_MIN',$token_expire)
						->set('USER_NAME',$ao->name());

					$email->to = array('email'=>array($ao->email=>$ao->name()));
					$email->from = array('email'=>array($co->admin()->email=>$co->admin()->name()));
					$email->subject = 'Login Reset Token for '.$co->name();
					$email->deliver();

					// Log the password reset
					$ao->log('Password reset token sent');
				}

			// Redirect to our password reset, the Auth will validate the token.
			} elseif ($this->request->post('token')) {
				HTTP::redirect(URL::link('user','account/resetpassword?token='.$this->request->post('token')));
			}

			// Show our token screen even if the email was invalid.
			if ($this->request->post('username'))
				$output = View::factory('login/reset_sent');
			else
				HTTP::redirect('login');

		} else {
			$output = View::factory('login/reset');
		}

		$this->template->content = $output;
		$this->template->shownavbar = FALSE;
	}
}
?>