import java.io.IOException;
 import java.util.List;
 
 import javax.servlet.Filter;
 import javax.servlet.FilterChain;
 import javax.servlet.FilterConfig;
 import javax.servlet.ServletException;
 import javax.servlet.ServletRequest;
 import javax.servlet.ServletResponse;
 import javax.servlet.http.HttpServletRequest;
 import javax.servlet.http.HttpServletResponse;
 
 import beans.Natureza;
 import beans.Pessoa;
 import AuthorizationDAO;
 import service.PessoaService;
 import Bean;
 import br.com.linkcom.neo.authorization.User;
 import br.com.linkcom.neo.core.standard.Neo;
 import br.com.linkcom.neo.core.web.DefaultWebRequestContext;
 import br.com.linkcom.neo.core.web.NeoWeb;
 
 /**
  * @author Pedro Gonçalves
  */
 public class AuthorizationFilter implements Filter {
 
 	public void init(FilterConfig config) throws ServletException {
 		
 	}
 
 	public void doFilter(ServletRequest req, ServletResponse res, FilterChain chain) throws IOException, ServletException {
 	
 		HttpServletRequest request = (HttpServletRequest) req;
 		HttpServletResponse response = (HttpServletResponse) res;
 		String requestURI = request.getRequestURI();
 		if (requestURI.endsWith("login_security")) {
 			doLogin(request, response, chain);
 		} else {
 			if(doAuth(request, response, chain)){
 				chain.doFilter(request,response);
 			}
 		}
 
 	}
 	public void destroy() {
 		
 	}
 	
 	public void doLogin(HttpServletRequest request,HttpServletResponse response,FilterChain chain) throws IOException, ServletException {
 		String username = request.getParameter("username") != null && !request.getParameter("username").equals("") ? request.getParameter("username") : "0";
 		String password = request.getParameter("password") != null && !request.getParameter("password").equals("") ? request.getParameter("password") : "0";
 
 		AuthorizationDAO authorizationDAO = (AuthorizationDAO)Neo.getApplicationContext().getBean("authorizationDAO");
 		
 		User user = authorizationDAO.findUserByLogin(username);
 		if (user != null && password.equals(user.getPassword())) {
 			DefaultWebRequestContext requestContext = (DefaultWebRequestContext) NeoWeb.getRequestContext();
 			
 			user = Neo.getObject(PessoaService.class).load((Pessoa)user);			
 			requestContext.setUser(user);
 			
 //			Object attribute = request.getSession().getAttribute("originator");
 			response.sendRedirect("/sgr/login/process/Selecao");
 //			response.sendRedirect((String)attribute);
 		}
 		else {
 			request.setAttribute("error",true);
 			request.getRequestDispatcher("/jsp/login.jsp").forward(request,response);	
 			return;
 		}
 	}
 	
 	public Boolean doAuth(HttpServletRequest request,HttpServletResponse response,FilterChain chain) throws IOException, ServletException {
 		String requestURI = request.getRequestURI();
 		String queryString = request.getQueryString() != null ? "?" + request.getQueryString() : "";
 		String contextPath = request.getContextPath() != null ? request.getContextPath() : "";
 		if (!requestURI.contains("/process/Selecao")) {
 			request.getSession().setAttribute("originator",contextPath + requestURI.substring(contextPath.length()) + queryString);
 		}
 		User user = NeoWeb.getRequestContext().getUser();
 		if (user != null) {
 //			chain.doFilter(request,response);
 			return true;
 		}
 		else {
 			request.getRequestDispatcher("/jsp/login.jsp").forward(request,response);
 		}
 		return false;
 	}
 	
 }