@*******************************************************************************************************
//  Users.cshtml - Gbtc
//
//  Copyright © 2016, Grid Protection Alliance.  All Rights Reserved.
//
//  Licensed to the Grid Protection Alliance (GPA) under one or more contributor license agreements. See
//  the NOTICE file distributed with this work for additional information regarding copyright ownership.
//  The GPA licenses this file to you under the MIT License (MIT), the "License"; you may not use this
//  file except in compliance with the License. You may obtain a copy of the License at:
//
//      http://opensource.org/licenses/MIT
//
//  Unless agreed to in writing, the subject software distributed under the License is distributed on an
//  "AS-IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. Refer to the
//  License for the specific language governing permissions and limitations.
//
//  Code Modification History:
//  ----------------------------------------------------------------------------------------------------
//  03/03/2016 - J. Ritchie Carroll
//       Generated original version of source code.
//
//******************************************************************************************************
//  To use in an ASP.NET destination project, include a Users.cshtml view with following content:
//
//  @using GSF.Web
//  @section StyleSheets{@Html.Raw(ViewBag.StyleSheetsSection?.ToString())}
//  @{ViewBag.HelpTarget = Url.Action("Help", "Main");}
//  @Html.RenderResource("GSF.Web.Security.Views.Users.cshtml")
//  @section Scripts{@Html.Raw(ViewBag.ScriptsSection?.ToString())}
//
//******************************************************************************************************
//  To use in a self-hosted web project, include a Users.cshtml view with following content:
//
//  @using GSF.Web.Model
//  @inherits ExtendedTemplateBase<AppModel>
//  @section StyleSheets{@Html.Raw(ViewBag.StyleSheetsSection.ToString())}
//  @{Layout = "Layout.cshtml";}
//  @Html.RenderResource("GSF.Web.Security.Views.Users.cshtml")
//  @section Scripts{@Html.Raw(ViewBag.ScriptsSection.ToString())}
//
//*****************************************************************************************************@
@using GSF.Configuration
@using GSF.Data.Model
@using GSF.Security
@using GSF.Security.Model
@using GSF.Web.Model
@using GSF.Web.Security
@inherits ExtendedTemplateBase
@section StyleSheets{
    <style>
         .account-feedback-wrapper {
             position: relative;
             display: table;
         }

         .account-feedback-message {
             position: absolute;
             vertical-align: middle;
             display: table-cell;
             left: 10px;
             width: 425px;
             display: none;
         }

         .account-feedback-icon {
             font-size: large;
             vertical-align: middle;
             margin-top: -5px;
         }
    </style>
}
@{
    // Layout will depend on rendering environment, so do not specify one
    DataContext dataContext = ViewBag.DataContext;
    ViewBag.Title = "Users";
    ViewBag.ShowSearchFilter = true;

    // Define column headers, use null for field name to make column non-sortable
    ViewBag.HeaderColumns = new[]
    {   //    { "Field", "Label", "Classes" }
        new[] { "FirstName", "First Name", "text-center valign-middle" },
        new[] {"LastName", "Last Name", "text-center valign-middle"},
        new[] { null, "User Name", "text-center valign-middle"},
        new[] { "UseADAuthentication", "Is&nbsp;AD&nbsp;User", "text-center" },
        new[] { "CreatedOn", "Date&nbsp;Added", "text-center" },
        new[] { null, "User Roles", "text-center valign-middle" }
    };

    if (ViewBag.HelpTarget == null) {
        ViewBag.HelpTarget = "Help.cshtml";
    }

    // Make sure default settings exist
    ConfigurationFile config = ConfigurationFile.Current;
    CategorizedSettingsElementCollection settings = config.Settings[SecurityProviderBase.DefaultSettingsCategory];

    settings.Add("ApplicationName", SecurityProviderBase.DefaultApplicationName, "Name of the application being secured as defined in the backend security data store.");
    settings.Add("PasswordRequirementsRegex", AdoSecurityProvider.DefaultPasswordRequirementsRegex, "Regular expression used to validate new passwords for database users.");
    settings.Add("PasswordRequirementsError", AdoSecurityProvider.DefaultPasswordRequirementsError, "Error message to be displayed when new database user password fails regular expression test.");

    // Get configured settings
    string applicationName = settings["ApplicationName"].ValueAs(SecurityProviderBase.DefaultApplicationName);
    string passwordRequirementsRegex = settings["PasswordRequirementsRegex"].ValueAs(AdoSecurityProvider.DefaultPasswordRequirementsRegex);
    string passwordRequirementsError = settings["PasswordRequirementsError"].ValueAs(AdoSecurityProvider.DefaultPasswordRequirementsError);

    ViewBag.BodyRows = BodyRows().ToString();
    ViewBag.AddNewEditDialog = AddNewEditDialog(dataContext, passwordRequirementsRegex, passwordRequirementsError).ToString();
    ViewBag.AddNewEditTitle = "User";
}
@helper BodyRows()
{
    <td width="20%" class="text-center valign-middle" nowrap><button type="button" class="btn btn-link" data-bind="text: FirstName"></button></td>
    <td width="20%" class="text-center valign-middle" nowrap><button type="button" class="btn btn-link" data-bind="text: LastName"></button></td>
    <td width="25%" class="text-center valign-middle" nowrap><button type="button" class="btn btn-link" data-bind="text: AccountName(), attr: {title: Name}, click: $parent.viewPageRecord"></button></td>
    <td width="10%" class="text-center valign-middle"><input type="checkbox" id="checkEnabled" data-bind="checked: UseADAuthentication" disabled></td>
    <td width="10%" class="text-center valign-middle" data-bind="text: CreatedOn.formatDate(DateFormat)"></td>
    <td width="10%" class="text-center valign-middle"><button type="button" class="btn btn-default btn-sm" data-bind="click: openRolesEditor.bind($data), enable: $parent.canEdit() && $parent.dataHubIsConnected()">Roles...</button></td>
    <td width="5%" class="text-center valign-middle" nowrap>
        <button type="button" class="btn btn-xs" data-bind="click: $parent.editPageRecord, enable: $parent.canEdit() && $parent.dataHubIsConnected()"><span class="glyphicon glyphicon-pencil"></span></button>
        <button type="button" class="btn btn-xs" data-bind="click: $parent.removePageRecord, enable: $parent.canDelete() && $parent.dataHubIsConnected()"><span class="glyphicon glyphicon-remove"></span></button>
    </td>
}
@helper AccountValidationFeedback()
{
    <div class="pull-right account-feedback-wrapper">
        <span id="resolvingAccount" class="account-feedback-message"><span class="glyphicon glyphicon-refresh glyphicon-spin account-feedback-icon"></span>&nbsp;<em class="small">Resolving account details...</em></span>
        <span id="accountValid" class="account-feedback-message"><span class="glyphicon glyphicon-ok-circle account-feedback-icon" data-bind="style: {color: $root.recordMode()===RecordMode.View ? 'gray' : 'green'}"></span>&nbsp;<em class="small">Resolved account name</em></span>
        <span id="accountInvalid" class="account-feedback-message"><span class="glyphicon glyphicon-remove-circle account-feedback-icon" data-bind="style: {color: $root.recordMode()===RecordMode.View ? 'gray' : 'red'}"></span>&nbsp;<em class="small">Cannot resolve account name</em></span>
        <span id="accountUnknown" class="account-feedback-message"><span class="glyphicon glyphicon-warning-sign account-feedback-icon" data-bind="style: {color: $root.recordMode()===RecordMode.View ? 'gray' : 'orange'}"></span>&nbsp;<em class="small">Valid account name is not a user or Active Directory access is limited</em></span>
    </div>
}
@helper AddNewEditDialog(DataContext dataContext, string passwordRequirementsRegex, string passwordRequirementsError)
{
    <div class="col-md-12">
        @Raw(dataContext.AddInputField<UserAccount>("Name", fieldLabel: "Name" + AccountValidationFeedback().ToString().Trim(), customDataBinding: "attr: {'acct-valid': validateAccount($data), 'autocomplete': 'off'}", initialFocus: true))
        <div class="panel panel-default" data-bind="css: {'panel-readonly': $root.recordMode()===RecordMode.View, 'panel-primary': UseDBAuthentication}">
            <div class="panel-heading">
                @* Adding actual UseADAuthentication field check-box, but hidden, to pick-up any model based field initializers *@
                <div style="display: none">
                    @Raw(dataContext.AddCheckBoxField<UserAccount>("UseADAuthentication"))
                </div>
                @* Adding radio buttons bound to virtual UseDBAuthentication that models negated state of UseADAuthentication field for simplified dependency field initialization *@
                <div class="row">
                    <div class="col-md-8">
                        <div class="row">
                            <div class="col-md-4">
                                <label class="radio-inline"><input type="radio" name="radioUseDBAuthentication" data-bind="checkedValue: false, checked: UseDBAuthentication, attr: {'disabled': ($root.recordMode()===RecordMode.View ? true : undefined)}">&nbsp;Active&nbsp;Directory&nbsp;User</label>
                            </div>
                            <div class="col-md-8">
                                <label class="radio-inline"><input type="radio" name="radioUseDBAuthentication" data-bind="checkedValue: true, checked: UseDBAuthentication, attr: {'disabled': ($root.recordMode()===RecordMode.View ? true : undefined)}">&nbsp;Database&nbsp;User</label>
                            </div>
                        </div>
                    </div>
                    <div class="col-md-4">
                    </div>
                </div>
            </div>
            <div class="panel-body">
                <div class="row">
                    <div class="col-md-6">
                        <div data-bind="visible: UseDBAuthentication">
                            @Raw(dataContext.AddInputField<UserAccount>("Password", "password", dependencyFieldName: "UseDBAuthentication"))
                        </div>
                        @Raw(dataContext.AddInputField<UserAccount>("FirstName"))
                        @Raw(dataContext.AddInputField<UserAccount>("LastName"))
                    </div>
                    <div class="col-md-6">
                        <div data-bind="visible: UseDBAuthentication">
                            @Raw(dataContext.AddInputField<UserAccount>("Phone", dependencyFieldName: "UseDBAuthentication"))
                        </div>
                        @Raw(dataContext.AddInputField<UserAccount>("Email"))
                        <div data-bind="visible: UseDBAuthentication">
                            @Raw(dataContext.AddDateField<UserAccount>("ChangePasswordOn", dependencyFieldName: "UseDBAuthentication"))
                            @{
                                dataContext.AddPageDefinedFieldInitialization("Password", "\"\"",
                                    /* RegEx Pattern: */ passwordRequirementsRegex,
                                    /* Error Message: */ passwordRequirementsError);
                                dataContext.AddPageDefinedFieldInitialization("ChangePasswordOn", "(new Date()).addDays(90)");
                            }
                        </div>
                    </div>
                </div>
            </div>
        </div>
        <div class="pull-right">
            @Raw(dataContext.AddCheckBoxField<UserAccount>("LockedOut"))
        </div>
    </div>
}
@Html.RenderResource("GSF.Web.Model.Views.PagedViewModel.cshtml")
<div id="editRolesDialog" class="modal fade" role="dialog">
    <div class="modal-dialog">
        <div class="modal-content">
            <div class="modal-header">
                <button type="button" class="close" data-dismiss="modal">&times;</button>
                <h4 class="modal-title">Edit Roles for <span id="currentUserName"></span>:</h4>
            </div>
            <div class="modal-body">
                <div class="modal-body auto-height text-center">
                    <form role="form">
                        <input type="hidden" id="currentUserID" />
                        <div class="center-block">
                            <div id="loadingRoles">Loading role assignments&nbsp;&nbsp;<span class="glyphicon glyphicon-refresh glyphicon-spin"></span><hr class="full-break" /></div>
                            <table class="table-condensed table-center">
                            @foreach (ApplicationRole role in dataContext.Table<ApplicationRole>().QueryRecords("Name", new RecordRestriction("NodeID={0}", SecurityHub.DefaultNodeID))) {
                                <tr>
                                    <td class="text-left valign-middle">
                                        <div class="checkbox" style="margin: 0">
                                            <label for="@role.ID"><input type="checkbox" id="@role.ID"> @role.Description (@role.Name)</label>
                                        </div>
                                    </td>
                                </tr>
                            }
                            </table>
                            <br />
                            <div class="text-center">
                                @* ReSharper disable once Html.IdNotResolved *@
                                <a href="@ViewBag.HelpTarget#Roles" target="_blank">@applicationName Role Definitions</a>
                            </div>
                        </div>
                    </form>
                </div>
            </div>
            <div class="modal-footer">
                <button type="submit" class="btn btn-primary" data-dismiss="modal" id="saveRolesButton" data-bind="enable: canEdit()">Save</button>
                <button type="button" class="btn btn-default" data-dismiss="modal">Cancel</button>
            </div>
        </div>
    </div>
</div>
@section Scripts {
    <script>
        "use strict";

        @Raw(dataContext.RenderViewModelConfiguration<UserAccount, SecurityHub>(ViewBag))
        var AccountState = {
            Invalid: 0,
            Valid: 1,
            Unknown: 2,
            Resolving: 3
        }

        function lookupAccountName(record) {
            if (viewModel.dataHubIsConnected()) {
                securityHub.sidToAccountName(record.Name).done(function(accountName) {
                    record.AccountName(accountName);
                });
            }
        }

        function validateAccount(observableRecord) {
            showAccountNameValidityFeedback(AccountState.Resolving);

            if (observableRecord.UseDBAuthentication == null || observableRecord.UseDBAuthentication()) {
                hideAccountNameValidityFeedback();
            } else {
                if (viewModel.dataHubIsConnected()) {
                    const accountName = observableRecord.Name();

                    if (isEmpty(accountName)) {
                        showAccountNameValidityFeedback(AccountState.Invalid);
                    } else {
                        securityHub.userNameToSID(accountName).done(function(sid) {
                            if (accountName !== sid && accountName.countOccurrences("\\") < 2) {
                                securityHub.isUserSID(sid).done(function(isUser) {
                                    showAccountNameValidityFeedback(isUser ? AccountState.Valid : AccountState.Unknown);
                                });
                            } else {
                                showAccountNameValidityFeedback(AccountState.Invalid);
                            }
                        });
                    }
                } else {
                    hideAccountNameValidityFeedback();
                }
            }

            return undefined;
        }

        var messages = [];
        var nextMessageName = undefined;
        var showingMessage = false;

        messages.push("resolvingAccount");
        messages.push("accountValid");
        messages.push("accountInvalid");
        messages.push("accountUnknown");

        function showFeedbackMessage(messageName) {
            if (showingMessage) {
                nextMessageName = messageName;
            } else {
                showingMessage = true;

                hideAccountNameValidityFeedback(messageName);

                if (messageName == null)
                    showingMessage = false;
                else
                    $("#" + messageName).fadeIn(function () {
                        showingMessage = false;

                        if (nextMessageName != undefined) {
                            messageName = nextMessageName;
                            nextMessageName = undefined;
                            showFeedbackMessage(messageName);
                        }
                    });
            }
        }

        function hideAccountNameValidityFeedback(messageName) {
            for (let i = 0; i < messages.length; i++) {
                if (messages[i] !== messageName)
                    $("#" + messages[i]).hide();
            }
        }

        function showAccountNameValidityFeedback(accountState) {
            switch (accountState) {
                case AccountState.Valid:
                    showFeedbackMessage("accountValid");
                    break;
                case AccountState.Invalid:
                    showFeedbackMessage("accountInvalid");
                    break;
                case AccountState.Unknown:
                    showFeedbackMessage("accountUnknown");
                    break;
                case AccountState.Resolving:
                    showFeedbackMessage("resolvingAccount");
                    break;
            }
        }

        $(viewModel).on("pageRecordsQueried", function(event, records) {
            // Add a virtual observable field called "AccountName" that will resolve SID values to account names
            for (var i = 0; i < records.length; i++) {
                records[i].AccountName = ko.observable("...");
                lookupAccountName(records[i]);
            }
        });

        $(viewModel).on("newRecord", function(event, newRecord) {
            // Make sure new records get virtual field
            newRecord.AccountName = ko.observable("");
        });

        $(viewModel).on("beforeEdit", function(event, observableRecord) {
            // Create a virtual UseDBAuthentication field that is negated state of actual UseADAuthentication field
            observableRecord.UseDBAuthentication = ko.observable(!observableRecord.UseADAuthentication());

            // Load human readable account name into Name field
            if (observableRecord.AccountName)
                observableRecord.Name(observableRecord.AccountName());

            @* Cannot decrypt a password hash, have to clear it and force re-entry *@
            if (!observableRecord.UseADAuthentication())
                observableRecord.Password(null);
        });

        $(viewModel).on("beforeSave", function(event, observableRecord, promises) {
            // Set state of actual field to be negated state of virtual field
            observableRecord.UseADAuthentication(!observableRecord.UseDBAuthentication());

            // Remove virtual observable fields before serialization for record updates
            delete observableRecord.UseDBAuthentication;
            delete observableRecord.AccountName;

            // Push promise to convert user name back to SID before updating record
            if (viewModel.dataHubIsConnected() && observableRecord.UseADAuthentication()) {
                promises.push($.Deferred(function(deferred) {
                    securityHub.userNameToSID(observableRecord.Name()).done(function(sid) {
                        observableRecord.Name(sid);
                        deferred.resolve();
                    });
                }).promise());
            }
        });

        function openRolesEditor(record) {
            $("#currentUserID").text(record.ID);
            $("#currentUserName").text(record.AccountName());
            $("#editRolesDialog input:checkbox").prop("checked", false);

            if (viewModel.dataHubIsConnected()) {
                securityHub.queryApplicationRoles().done(function(roles) {
                    var evaluations = roles.length;

                    if (evaluations > 0)
                        $("#loadingRoles").show();

                    for (var i = 0; i < roles.length; i++) {
                        securityHub.userIsInRole(record.ID, roles[i].ID).done(function(roleID) {
                            return function(result) {
                                $("#" + roleID).prop("checked", result);

                                evaluations--;

                                if (evaluations <= 0)
                                    $("#loadingRoles").hide();
                            };
                        }(roles[i].ID));
                    }
                    $("#editRolesDialog").modal("show");
                });
            }
        }

        $(function() {
            $("#editRolesDialog").modal({ show: false, backdrop: "static" });

            $("#saveRolesButton").click(function() {
                if (viewModel.dataHubIsConnected()) {
                    const userID = $("#currentUserID").text();
                    const roles = $("#editRolesDialog input:checkbox");

                    for (var i = 0; i < roles.length; i++) {
                        const element = $(roles[i]);
                        const roleID = element.attr("id");

                        if (element.prop("checked")) {
                            securityHub.addUserToRole(userID, roleID).fail(function(error) {
                                showErrorMessage(error, null, true);
                            });
                        } else {
                            securityHub.removeUserFromRole(userID, roleID).fail(function(error) {
                                showErrorMessage(error, null, true);
                            });
                        }
                    }
                }
            });
        });
    </script>
}
@{
    ViewBag.StyleSheetsSection = RenderSection("StyleSheets").ToString();
    ViewBag.ScriptsSection = RenderSection("Scripts").ToString();
}