@*******************************************************************************************************
//  Groups.cshtml - Gbtc
//
//  Copyright © 2016, Grid Protection Alliance.  All Rights Reserved.
//
//  Licensed to the Grid Protection Alliance (GPA) under one or more contributor license agreements. See
//  the NOTICE file distributed with this work for additional information regarding copyright ownership.
//  The GPA licenses this file to you under the MIT License (MIT), the "License"; you may not use this
//  file except in compliance with the License. You may obtain a copy of the License at:
//
//      http://opensource.org/licenses/MIT
//
//  Unless agreed to in writing, the subject software distributed under the License is distributed on an
//  "AS-IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. Refer to the
//  License for the specific language governing permissions and limitations.
//
//  Code Modification History:
//  ----------------------------------------------------------------------------------------------------
//  03/03/2016 - J. Ritchie Carroll
//       Generated original version of source code.
//
//
//******************************************************************************************************
//  To use in an ASP.NET destination project, include a Groups.cshtml view with following content:
//
//  @using GSF.Web
//  @section StyleSheets{@Html.Raw(ViewBag.StyleSheetsSection?.ToString())}
//  @{ViewBag.HelpTarget = Url.Action("Help", "Main");}
//  @Html.RenderResource("GSF.Web.Security.Views.Groups.cshtml")
//  @section Scripts{@Html.Raw(ViewBag.ScriptsSection?.ToString())}
//
//******************************************************************************************************
//  To use in a self-hosted web project, include a Groups.cshtml view with following content:
//
//  @using GSF.Web.Model
//  @inherits ExtendedTemplateBase<AppModel>
//  @section StyleSheets{@Html.Raw(ViewBag.StyleSheetsSection.ToString())}
//  @{Layout = "Layout.cshtml";}
//  @Html.RenderResource("GSF.Web.Security.Views.Groups.cshtml")
//  @section Scripts{@Html.Raw(ViewBag.ScriptsSection.ToString())}
//
//*****************************************************************************************************@
@using GSF.Configuration
@using GSF.Data.Model
@using GSF.Security
@using GSF.Security.Model
@using GSF.Web.Model
@using GSF.Web.Security
@inherits ExtendedTemplateBase
@section StyleSheets{
    <style>
         .account-feedback-wrapper {
             position: relative;
             display: table;
         }

         .account-feedback-message {
             position: absolute;
             vertical-align: middle;
             display: table-cell;
             left: 10px;
             width: 425px;
             display: none;
         }

         .account-feedback-icon {
             font-size: large;
             vertical-align: middle;
             margin-top: -5px;
         }
    </style>
}
@{
    // Layout will depend on rendering environment, so do not specify one
    DataContext dataContext = ViewBag.DataContext;
    ViewBag.Title = "Groups";

    // Define column headers, use null for field name to make column non-sortable
    ViewBag.HeaderColumns = new[]
    {   //    { "Field", "Label", "Classes" }
        new[] { null, "Group Name", "text-center valign-middle" },
        new[] { null, "Is&nbsp;AD&nbsp;Group", "text-center valign-middle" },
        new[] { "CreatedOn", "Date&nbsp;Added", "text-center" },
        new[] { null, "Group Roles", "text-center valign-middle" }
    };

    if (ViewBag.HelpTarget == null) {
        ViewBag.HelpTarget = "Help.cshtml";
    }

    // Make sure default settings exist
    ConfigurationFile config = ConfigurationFile.Current;
    CategorizedSettingsElementCollection settings = config.Settings[SecurityProviderBase.DefaultSettingsCategory];

    settings.Add("ApplicationName", SecurityProviderBase.DefaultApplicationName, "Name of the application being secured as defined in the backend security data store.");

    // Get configured settings
    string applicationName = settings["ApplicationName"].ValueAs(SecurityProviderBase.DefaultApplicationName);

    ViewBag.BodyRows = BodyRows().ToString();
    ViewBag.AddNewEditDialog = AddNewEditDialog(dataContext).ToString();
    ViewBag.AddNewEditTitle = "Group";
}
@helper BodyRows()
{
    <td width="65%" class="text-center valign-middle" nowrap><button type="button" class="btn btn-link" data-bind="text: AccountName(), attr: {title: Name}, click: $parent.viewPageRecord"></button></td>
    <td width="10%" class="text-center valign-middle"><input type="checkbox" id="checkEnabled" data-bind="checked: useADAuthentication(AccountName())" disabled></td>
    <td width="10%" class="text-center valign-middle" data-bind="text: CreatedOn.formatDate(DateFormat)"></td>
    <td width="10%" class="text-center valign-middle"><button type="button" class="btn btn-default btn-sm" data-bind="click: openRolesEditor.bind($data), enable: $parent.canEdit() && $parent.dataHubIsConnected()">Roles...</button></td>
    <td width="5%" class="text-center valign-middle" nowrap>
        <button type="button" class="btn btn-xs" data-bind="click: $parent.editPageRecord, enable: $parent.canEdit() && $parent.dataHubIsConnected()"><span class="glyphicon glyphicon-pencil"></span></button>
        <button type="button" class="btn btn-xs" data-bind="click: $parent.removePageRecord, enable: $parent.canDelete() && $parent.dataHubIsConnected()"><span class="glyphicon glyphicon-remove"></span></button>
    </td>
}
@helper AccountValidationFeedback()
{
    <div class="pull-right account-feedback-wrapper">
        <span id="resolvingAccount" class="account-feedback-message"><span class="glyphicon glyphicon-refresh glyphicon-spin account-feedback-icon"></span>&nbsp;<em class="small">Resolving account details...</em></span>
        <span id="accountValid" class="account-feedback-message"><span class="glyphicon glyphicon-ok-circle account-feedback-icon" data-bind="style: {color: $root.recordMode()===RecordMode.View ? 'gray' : 'green'}"></span>&nbsp;<em class="small">Resolved account name</em></span>
        <span id="accountInvalid" class="account-feedback-message"><span class="glyphicon glyphicon-remove-circle account-feedback-icon" data-bind="style: {color: $root.recordMode()===RecordMode.View ? 'gray' : 'red'}"></span>&nbsp;<em class="small">Cannot resolve account name</em></span>
        <span id="accountUnknown" class="account-feedback-message"><span class="glyphicon glyphicon-warning-sign account-feedback-icon" data-bind="style: {color: $root.recordMode()===RecordMode.View ? 'gray' : 'orange'}"></span>&nbsp;<em class="small">Valid account name is not a group</em></span>
    </div>
}
@helper AddNewEditDialog(DataContext dataContext)
{
    <div class="col-md-12">
        @Raw(dataContext.AddInputField<SecurityGroup>("Name", fieldLabel: "Name" + AccountValidationFeedback().ToString().Trim(), customDataBinding: "attr: {'acct-valid': validateAccount($data), 'autocomplete': 'off'}", initialFocus: true))
        <div class="panel panel-default" data-bind="css: {'panel-readonly': $root.recordMode()===RecordMode.View, 'panel-primary': UseDBAuthentication}">
            <div class="panel-heading">
                <div class="row">
                    <div class="col-md-8">
                        <div class="row">
                            <div class="col-md-4">
                                <label class="radio-inline"><input type="radio" name="radioUseDBAuthentication" data-bind="checkedValue: false, checked: UseDBAuthentication, attr: {'disabled': ($root.recordMode()===RecordMode.View ? true : undefined)}">&nbsp;Active&nbsp;Directory&nbsp;Group</label>
                            </div>
                            <div class="col-md-8">
                                <label class="radio-inline"><input type="radio" name="radioUseDBAuthentication" data-bind="checkedValue: true, checked: UseDBAuthentication, attr: {'disabled': ($root.recordMode()===RecordMode.View ? true : undefined)}">&nbsp;Database&nbsp;Group</label>
                            </div>
                        </div>
                    </div>
                    <div class="col-md-4">
                    </div>
                </div>
            </div>
            <div class="panel-body" data-bind="visible: UseDBAuthentication">
                @Raw(dataContext.AddTextAreaField<SecurityGroup>("Description", 4, dependencyFieldName: "UseDBAuthentication"))
            </div>
        </div>
    </div>
}
@Html.RenderResource("GSF.Web.Model.Views.PagedViewModel.cshtml")
<div id="editRolesDialog" class="modal fade" role="dialog">
    <div class="modal-dialog">
        <div class="modal-content">
            <div class="modal-header">
                <button type="button" class="close" data-dismiss="modal">&times;</button>
                <h4 class="modal-title">Edit Roles for <span id="currentGroupName"></span>:</h4>
            </div>
            <div class="modal-body">
                <div class="modal-body auto-height text-center">
                    <form role="form">
                        <input type="hidden" id="currentGroupID" />
                        <div class="center-block">
                            <div id="loadingRoles">Loading role assignments&nbsp;&nbsp;<span class="glyphicon glyphicon-refresh glyphicon-spin"></span><hr class="full-break" /></div>
                            <table class="table-condensed table-center">
                            @foreach (ApplicationRole role in dataContext.Table<ApplicationRole>().QueryRecords("Name", new RecordRestriction("NodeID={0}", SecurityHub.DefaultNodeID))) {
                                <tr>
                                    <td class="text-left valign-middle">
                                        <div class="checkbox" style="margin: 0">
                                            <label for="@role.ID"><input type="checkbox" id="@role.ID"> @role.Description (@role.Name)</label>
                                        </div>
                                    </td>
                                </tr>
                            }
                            </table>
                            <br />
                            <div class="text-center">
                                <a href="@ViewBag.HelpTarget#Roles" target="_blank">@applicationName Role Definitions</a>
                            </div>
                        </div>
                    </form>
                </div>
            </div>
            <div class="modal-footer">
                <button type="submit" class="btn btn-primary" data-dismiss="modal" id="saveRolesButton" data-bind="enable: canEdit()">Save</button>
                <button type="button" class="btn btn-default" data-dismiss="modal">Cancel</button>
            </div>
        </div>
    </div>
</div>
@section Scripts {
    <script>
        "use strict";

        @Raw(dataContext.RenderViewModelConfiguration<SecurityGroup, SecurityHub>(ViewBag))
        var AccountState = {
            Invalid: 0,
            Valid: 1,
            Unknown: 2,
            Resolving: 3
        }

        function lookupAccountName(record) {
            if (viewModel.dataHubIsConnected()) {
                securityHub.sidToAccountName(record.Name).done(function (accountName) {
                    record.AccountName(accountName);
                });
            }
        }

        function validateAccount(observableRecord) {
            showAccountNameValidityFeedback(AccountState.Resolving);

            if (observableRecord.UseDBAuthentication == null || observableRecord.UseDBAuthentication()) {
                hideAccountNameValidityFeedback();
            }
            else {
                if (viewModel.dataHubIsConnected()) {
                    const accountName = observableRecord.Name();

                    if (isEmpty(accountName)) {
                        showAccountNameValidityFeedback(AccountState.Invalid);
                    } else {
                        securityHub.groupNameToSID(accountName).done(function (sid) {
                            if (accountName !== sid && accountName.countOccurrences("\\") < 2) {
                                if (accountName.startsWith("NT AUTHORITY")) {
                                    // This is a valid group source for things like "Authenticated Users", but is
                                    // not technically a "group" - since SID validated, we report a valid account
                                    showAccountNameValidityFeedback(AccountState.Valid);
                                } else {
                                    securityHub.isGroupSID(sid).done(function (isGroup) {
                                        showAccountNameValidityFeedback(isGroup ? AccountState.Valid : AccountState.Unknown);
                                    });
                                }
                            } else {
                                showAccountNameValidityFeedback(AccountState.Invalid);
                            }
                        });
                    }
                }
                else {
                    hideAccountNameValidityFeedback();
                }
            }

            return undefined;
        }

        var messages = [];
        var nextMessageName = undefined;
        var showingMessage = false;

        messages.push("resolvingAccount");
        messages.push("accountValid");
        messages.push("accountInvalid");
        messages.push("accountUnknown");

        function showFeedbackMessage(messageName) {
            if (showingMessage) {
                nextMessageName = messageName;
            } else {
                showingMessage = true;

                hideAccountNameValidityFeedback(messageName);

                if (messageName == null)
                    showingMessage = false;
                else
                    $("#" + messageName).fadeIn(function () {
                        showingMessage = false;

                        if (nextMessageName != undefined) {
                            messageName = nextMessageName;
                            nextMessageName = undefined;
                            showFeedbackMessage(messageName);
                        }
                    });
            }
        }

        function hideAccountNameValidityFeedback(messageName) {
            for (let i = 0; i < messages.length; i++) {
                if (messages[i] !== messageName)
                    $("#" + messages[i]).hide();
            }
        }

        function showAccountNameValidityFeedback(accountState) {
            switch (accountState) {
                case AccountState.Valid:
                    showFeedbackMessage("accountValid");
                    break;
                case AccountState.Invalid:
                    showFeedbackMessage("accountInvalid");
                    break;
                case AccountState.Unknown:
                    showFeedbackMessage("accountUnknown");
                    break;
                case AccountState.Resolving:
                    showFeedbackMessage("resolvingAccount");
                    break;
            }
        }

        function useADAuthentication(accountName)
        {
            const groupName = notNull(accountName);

            // Just deriving if group is AD based by delimiters in group name
            if (groupName.length > 0)
                return (groupName.indexOf("\\") > 0 || groupName.indexOf("@@") > 0 || groupName.startsWith("S-"));

            return true; // Default to AD group
        }

        $(viewModel).on("pageRecordsQueried", function (event, records) {
            // Add a virtual observable field called "AccountName" that will resolve SID values to account names
            for (var i = 0; i < records.length; i++) {
                records[i].AccountName = ko.observable("...");
                lookupAccountName(records[i]);
            }
        });

        $(viewModel).on("newRecord", function (event, newRecord) {
            // Make sure new records get virtual fields
            newRecord.AccountName = ko.observable("");
        });

        $(viewModel).on("beforeEdit", function (event, observableRecord) {
            // Load human readable account name into Name field
            if (observableRecord.AccountName)
                observableRecord.Name(observableRecord.AccountName());
                
            // Create a virtual UseDBAuthentication field
            observableRecord.UseDBAuthentication = ko.observable(!useADAuthentication(notNull(observableRecord.Name())));
        });

        $(viewModel).on("beforeSave", function (event, observableRecord, promises) {
            const isADGroup = !observableRecord.UseDBAuthentication();

            // Remove virtual observable fields before serialization for record updates
            delete observableRecord.UseDBAuthentication;
            delete observableRecord.AccountName;

            // Push promise to convert group name back to SID before updating record
            if (viewModel.dataHubIsConnected() && isADGroup) {
                promises.push($.Deferred(function (deferred) {
                    securityHub.groupNameToSID(observableRecord.Name()).done(function (sid) {
                        observableRecord.Name(sid);
                        deferred.resolve();
                    });
                }).promise());
            }
        });

        function openRolesEditor(record) {
            $("#currentGroupID").text(record.ID);
            $("#currentGroupName").text(record.AccountName());
            $("#editRolesDialog input:checkbox").prop("checked", false);

            if (viewModel.dataHubIsConnected()) {
                securityHub.queryApplicationRoles().done(function (roles) {
                    var evaluations = roles.length;

                    if (evaluations > 0)
                        $("#loadingRoles").show();

                    for (var i = 0; i < roles.length; i++) {
                        securityHub.groupIsInRole(record.ID, roles[i].ID).done(function (roleID) {
                            return function (result) {
                                $("#" + roleID).prop("checked", result);

                                evaluations--;

                                if (evaluations <= 0)
                                    $("#loadingRoles").hide();
                            };
                        }(roles[i].ID));
                    }
                    $("#editRolesDialog").modal("show");
                });
            }
        }

        $(function () {
            $("#editRolesDialog").modal({ show: false, backdrop: "static" });

            $("#saveRolesButton").click(function () {
                if (viewModel.dataHubIsConnected()) {
                    const groupID = $("#currentGroupID").text();
                    const roles = $("#editRolesDialog input:checkbox");

                    for (var i = 0; i < roles.length; i++) {
                        const element = $(roles[i]);
                        const roleID = element.attr("id");

                        if (element.prop("checked")) {
                            securityHub.addGroupToRole(groupID, roleID).fail(function (error) {
                                showErrorMessage(error, null, true);
                            });
                        } else {
                            securityHub.removeGroupFromRole(groupID, roleID).fail(function (error) {
                                showErrorMessage(error, null, true);
                            });
                        }
                    }
                }
            });
        });
    </script>
}
@{
    ViewBag.StyleSheetsSection = RenderSection("StyleSheets").ToString();
    ViewBag.ScriptsSection = RenderSection("Scripts").ToString();
}