UserRestView.java

/*
 * Copyright Codecrew Ry
 * 
 * All rights reserved.
 * 
 * This license applies to any software containing a notice placed by the 
 * copyright holder. Such software is herein referred to as the Software. 
 * This license covers modification, distribution and use of the Software. 
 * 
 * Any distribution and use in source and binary forms, with or without 
 * modification is not permitted without explicit written permission from the 
 * copyright owner. 
 * 
 * A non-exclusive royalty-free right is granted to the copyright owner of the 
 * Software to use, modify and distribute all modifications to the Software in 
 * future versions of the Software. 
 * 
 */
package fi.codecrew.moya.rest;

import java.security.Principal;
import java.util.List;

import javax.ejb.EJB;
import javax.enterprise.context.RequestScoped;
import javax.servlet.ServletException;
import javax.servlet.http.HttpServletRequest;
import javax.ws.rs.Consumes;
import javax.ws.rs.DefaultValue;
import javax.ws.rs.FormParam;
import javax.ws.rs.GET;
import javax.ws.rs.POST;
import javax.ws.rs.Path;
import javax.ws.rs.PathParam;
import javax.ws.rs.Produces;
import javax.ws.rs.QueryParam;
import javax.ws.rs.core.Context;
import javax.ws.rs.core.MediaType;
import javax.ws.rs.core.Response;
import javax.ws.rs.core.Response.ResponseBuilder;
import javax.ws.rs.core.Response.Status;

import org.slf4j.Logger;
import org.slf4j.LoggerFactory;

import com.wordnik.swagger.annotations.Api;
import com.wordnik.swagger.annotations.ApiOperation;
import com.wordnik.swagger.annotations.ApiParam;

import fi.codecrew.moya.beans.CardTemplateBeanLocal;
import fi.codecrew.moya.beans.EventBeanLocal;
import fi.codecrew.moya.beans.PermissionBeanLocal;
import fi.codecrew.moya.beans.PlaceBeanLocal;
import fi.codecrew.moya.beans.PlaceGroupBeanLocal;
import fi.codecrew.moya.beans.ReaderBeanLocal;
import fi.codecrew.moya.beans.TicketBeanLocal;
import fi.codecrew.moya.beans.UserBeanLocal;
import fi.codecrew.moya.model.EventUser;
import fi.codecrew.moya.model.GroupMembership;
import fi.codecrew.moya.model.Place;
import fi.codecrew.moya.model.ReaderEvent;
import fi.codecrew.moya.rest.pojo.userinfo.v1.EventUserRestPojo;
import fi.codecrew.moya.rest.pojo.userinfo.v1.PrintedCardRestPojo;
import fi.codecrew.moya.rest.pojo.userinfo.v1.SimpleEventuserRoot;
import fi.codecrew.moya.rest.pojo.userinfo.v1.UserReservationPlacePojo;
import fi.codecrew.moya.rest.pojo.userinfo.v1.UserReservationRoot;
import fi.codecrew.moya.util.UserSearchQuery;
import fi.codecrew.moya.utilities.SearchQuery.QuerySortOrder;
import fi.codecrew.moya.utilities.SearchResult;

@RequestScoped
@Path("/user")
@Consumes({ MediaType.APPLICATION_JSON, MediaType.APPLICATION_XML })
@Produces({ MediaType.APPLICATION_JSON + "; charset=UTF-8" })
@Api("/user")
public class UserRestView {

	@EJB
	private UserBeanLocal userbean;

	@EJB
	private CardTemplateBeanLocal cardbean;

	@Context
	private HttpServletRequest servletRequest;

	@EJB
	private PermissionBeanLocal permbean;

	private static final Logger logger = LoggerFactory.getLogger(UserRestView.class);

	@EJB
	private PlaceGroupBeanLocal placegroupbean;

	@EJB
	private ReaderBeanLocal readerbean;
	@EJB
	private TicketBeanLocal ticketbean;

	@EJB
	private PlaceBeanLocal placebean;

	@POST
	@Path("/giveplace/{placeId}")
	@Consumes(MediaType.APPLICATION_FORM_URLENCODED)
	public Response setPlacesGivenStatus(
			@PathParam("placeId") Integer id,
			@FormParam("action") String status) {

		Place place = placebean.find(id);
		if (place == null) {
			ResponseBuilder resp = Response.status(Status.BAD_REQUEST);
			resp.entity("Place not found with id: " + id);
			return resp.build();
		}
		GroupMembership gm = place.getPlaceReserver();
		if (gm == null) {
			ResponseBuilder resp = Response.status(Status.BAD_REQUEST);
			resp.entity("No group membership for place: " + id);
			return resp.build();
		}

		ResponseBuilder resp = Response.ok();

		switch (status) {
		case "give":
			gm = placegroupbean.markGroupMembershipEntered(gm);
			break;
		case "ungive":
			gm = placegroupbean.markGroupMembershipNotEntered(gm);
			break;
		default:
			resp = Response.status(Status.BAD_REQUEST);
			resp.status(Status.BAD_REQUEST);
			resp.entity("Unknown status" + status + " possible values: 'give' and 'ungive'");
			return resp.build();

		}

		resp.entity(PojoUtils.initUserReservationPlace(gm));
		return resp.build();

	}

	@GET
	@Path("/reservationswithcode/{code}")
	public Response getPlacesWithCode(@PathParam("code") String code) {

		EventUser curruser = permbean.getCurrentUser();
		ReaderEvent revent = readerbean.checkCode("restapi: " + curruser.getLogin(), code);

		if (revent != null && revent.getUser() != null) {
			EventUser eu = revent.getUser();
			List<GroupMembership> gms = ticketbean.findMembershipPrintlistForUser(eu);

			UserReservationRoot ret = new UserReservationRoot();
			ret.setUser(PojoUtils.initEventUserRestPojo(eu));

			for (GroupMembership g : gms) {

				ret.getReservations().add(PojoUtils.initUserReservationPlace(g));
			}
			return Response.ok(ret).build();
		}
		return Response.status(Status.NOT_FOUND).build();

	}

	@GET
	@Path("/{userid}/reservations")
	public Response usersPlaces(@PathParam("userid") Integer userid) {
		EventUser eu = userbean.findByUserId(userid, false);
		if (eu != null) {

			List<GroupMembership> gms = ticketbean.findMembershipPrintlistForUser(eu);

			UserReservationRoot ret = new UserReservationRoot();
			ret.setUser(PojoUtils.initEventUserRestPojo(eu));
			for (GroupMembership g : gms) {
				ret.getReservations().add(PojoUtils.initUserReservationPlace(g));
			}
			return Response.ok(ret).build();
		}
		return Response.status(Status.NOT_FOUND).build();
	}

	@POST
	@Path("/auth")
	@Produces({ MediaType.APPLICATION_JSON })
	@Consumes(MediaType.APPLICATION_FORM_URLENCODED)
	public Response auth(
			@FormParam("username") String username,
			@FormParam("password") String password) {
		logger.info("Tried to login with rest {} , {}", username, password);
		boolean success = true;
		try {

			Principal principal = servletRequest.getUserPrincipal();
			if (principal != null) {
				logger.info("Current username {}", principal.getName());

				if (principal.getName() != null && !principal.getName().equals(username)) {
					logger.info("Trying to logout from user {}", principal.getName());
					servletRequest.logout();
				}
			}
			if (principal == null || principal.getName() == null || !principal.getName().equals(username)) {

				servletRequest.getSession(true);
				servletRequest.login(username, password);
			}
		} catch (ServletException e) {
			success = false;
		}
		ResponseBuilder ret = null;
		if (success)
			ret = Response.ok(PojoUtils.initEventUserRestPojo(permbean.getCurrentUser()));
		else
			ret = Response.status(Status.FORBIDDEN);
		return ret.build();
	}

	@GET
	@Path("/eventusers")
	@ApiOperation(value = "Get EventUsers", response = SimpleEventuserRoot.class)
	public SimpleEventuserRoot getEventUsers(
			@DefaultValue("0") @QueryParam("pagesize") Integer pagesize,
			@DefaultValue("0") @QueryParam("page") Integer page,
			@QueryParam("search") String search
			) {

		UserSearchQuery q = new UserSearchQuery(page, pagesize, null, search, QuerySortOrder.UNSORTED);
		SearchResult<EventUser> users = userbean.getThisEventsUsers(q);
		return PojoUtils.parseEventusers(users.getResults());
	}

	@GET
	@Path("/card/{eventuserId}")
	@ApiOperation(value = "Get PrintedCard for EventUser", response = PrintedCardRestPojo.class)
	public PrintedCardRestPojo getUsersCard(
			@ApiParam("EventUser entity ID") @PathParam("eventuserId") Integer eventuserid) {
		EventUser user = userbean.findByEventUserId(eventuserid);
		return PojoUtils.initPrintedCardRestPojo(cardbean.checkPrintedCard(user));

	}

	@GET
	@Path("/eventuser/{cardauthcode}")
	@ApiOperation(value = "Get EventUser by cardAuthCode", response = EventUserRestPojo.class)
	public EventUserRestPojo getEventUser(
			@ApiParam("Card authentication code") @PathParam("cardauthcode") String code) {

		EventUser user = userbean.getUserByAuthcode(code);
		if (user != null)
			return PojoUtils.initEventUserRestPojo(user);
		else
			return new EventUserRestPojo();
	}
}