<?php

namespace Espo\Core\Utils\Api;

use \Slim\Slim;

class Auth extends \Slim\Middleware
{
	private $entityManager;
	
	private $container;

	public function __construct(\Espo\Core\ORM\EntityManager $entityManager, \Espo\Core\Container $container)
	{
		$this->entityManager = $entityManager;
		$this->container = $container;
	}

	function call()
	{
		$req = $this->app->request();
        $res = $this->app->response();

		$uri = $req->getResourceUri();
		$httpMethod = $req->getMethod();

		/**
		* Check if user credentials are required for current route
		*/
		$routes = $this->app->router()->getMatchedRoutes($httpMethod, $uri);

		if (!empty($routes[0])) {
			$routeConditions = $routes[0]->getConditions();
        	if (isset($routeConditions['auth']) && $routeConditions['auth'] === false) {
        		$this->container->setUser($this->entityManager->getEntity('User'));
	        	$this->next->call();
				return;
			}
		}

		$authKey = $req->headers('PHP_AUTH_USER');
        $authSec = $req->headers('PHP_AUTH_PW');

        if ($authKey && $authSec) {

			$isAuthenticated = false;
			
			$username = $authKey;
			$password = $authSec;

		    $user = $this->entityManager->getRepository('User')->findOne(array(
				'whereClause' => array(
					'userName' => $username,
				),
			));

			if ($user instanceof \Espo\Entities\User) {
				
				$this->entityManager->setUser($user);
			
				if ($password == $user->get('password')) {
					$this->container->setUser($user);
					$isAuthenticated = true;
				}
			}


            if ($isAuthenticated) {
                $this->next->call();
            } else {
            	$res->header('WWW-Authenticate');
            	$res->status(401);
            }
        } else {
            $res->header('WWW-Authenticate');
            $res->status(401);
        }
	}
}