package org.forgerock.openam.core.rest;

import static com.google.inject.multibindings.MapBinder.*;

import static org.forgerock.http.handler.Handlers.*;

import static org.forgerock.http.routing.RouteMatchers.*;

import static org.forgerock.http.routing.RoutingMode.*;

import static org.forgerock.http.routing.Version.*;

import static org.forgerock.openam.audit.AuditConstants.Component.*;

import com.google.inject.AbstractModule;

import com.google.inject.Key;

import com.google.inject.Provides;

import com.google.inject.TypeLiteral;

import com.google.inject.assistedinject.FactoryModuleBuilder;

import com.google.inject.multibindings.MapBinder;

import com.google.inject.name.Names;

import com.iplanet.am.util.SystemProperties;

import com.iplanet.dpro.session.service.SessionService;

import com.iplanet.sso.SSOTokenManager;

import com.sun.identity.idsvcs.opensso.IdentityServicesImpl;

import com.sun.identity.shared.Constants;

import com.sun.identity.shared.debug.Debug;

import java.io.IOException;

import java.util.Properties;

import java.util.Set;

import javax.inject.Inject;

import javax.inject.Named;

import javax.inject.Singleton;

import org.forgerock.authz.filter.crest.api.CrestAuthorizationModule;

import org.forgerock.guice.core.GuiceModule;

import org.forgerock.http.Handler;

import org.forgerock.http.protocol.Request;

import org.forgerock.http.routing.RouteMatchers;

import org.forgerock.openam.audit.AbstractHttpAccessAuditFilter;

import org.forgerock.openam.audit.AuditConstants.Component;

import org.forgerock.openam.audit.HttpAccessAuditFilterFactory;

import org.forgerock.openam.core.CoreWrapper;

import org.forgerock.openam.core.rest.authn.AuthenticationAccessAuditFilter;

import org.forgerock.openam.core.rest.authn.http.AuthenticationServiceV1;

import org.forgerock.openam.core.rest.authn.http.AuthenticationServiceV2;

import org.forgerock.openam.core.rest.cts.CoreTokenResource;

import org.forgerock.openam.core.rest.cts.CoreTokenResourceAuthzModule;

import org.forgerock.openam.core.rest.record.DebugRecorder;

import org.forgerock.openam.core.rest.record.DefaultDebugRecorder;

import org.forgerock.openam.core.rest.session.AggregateAuthzModule;

import org.forgerock.openam.core.rest.session.SessionResourceAuthzModule;

import org.forgerock.openam.core.rest.sms.SmsCollectionProvider;

import org.forgerock.openam.core.rest.sms.SmsCollectionProviderFactory;

import org.forgerock.openam.core.rest.sms.SmsGlobalSingletonProvider;

import org.forgerock.openam.core.rest.sms.SmsGlobalSingletonProviderFactory;

import org.forgerock.openam.core.rest.sms.SmsRequestHandler;

import org.forgerock.openam.core.rest.sms.SmsRequestHandlerFactory;

import org.forgerock.openam.core.rest.sms.SmsSingletonProvider;

import org.forgerock.openam.core.rest.sms.SmsSingletonProviderFactory;

import org.forgerock.openam.cts.utils.JSONSerialisation;

import org.forgerock.openam.forgerockrest.utils.MailServerLoader;

import org.forgerock.openam.http.annotations.Endpoints;

import org.forgerock.openam.rest.authz.AdminOnlyAuthzModule;

import org.forgerock.openam.rest.authz.PrivilegeAuthzModule;

import org.forgerock.openam.rest.router.CTSPersistentStoreProxy;

import org.forgerock.openam.services.RestSecurityProvider;

import org.forgerock.openam.services.baseurl.BaseURLProviderFactory;

import org.forgerock.openam.utils.Config;

import org.forgerock.services.routing.RouteMatcher;

@GuiceModule

public class CoreRestGuiceModule extends AbstractModule {

@Override

protected void configure() {

install(new FactoryModuleBuilder()

.implement(SmsRequestHandler.class, SmsRequestHandler.class)

.build(SmsRequestHandlerFactory.class));

install(new FactoryModuleBuilder()

.implement(SmsCollectionProvider.class, SmsCollectionProvider.class)

.build(SmsCollectionProviderFactory.class));

install(new FactoryModuleBuilder()

.implement(SmsSingletonProvider.class, SmsSingletonProvider.class)

.build(SmsSingletonProviderFactory.class));

install(new FactoryModuleBuilder()

.implement(SmsGlobalSingletonProvider.class, SmsGlobalSingletonProvider.class)

.build(SmsGlobalSingletonProviderFactory.class));

bind(DebugRecorder.class).to(DefaultDebugRecorder.class);

MapBinder<RouteMatcher<Request>, Handler> chfEndpointHandlers = newMapBinder(binder(),

new TypeLiteral<RouteMatcher<Request>>() {}, new TypeLiteral<Handler>() {});

chfEndpointHandlers.addBinding(requestUriMatcher(EQUALS, "authenticate"))

.to(Key.get(Handler.class, Names.named("AuthenticateHandler")));

MapBinder<Component, AbstractHttpAccessAuditFilter> httpAccessAuditFilterMapBinder

= newMapBinder(binder(), Component.class, AbstractHttpAccessAuditFilter.class);

httpAccessAuditFilterMapBinder.addBinding(AUTHENTICATION).to(AuthenticationAccessAuditFilter.class);

}

@Provides

@Named("AuthenticateHandler")

@Inject

Handler getAuthenticateHandler(@Named("InvalidRealmNames") Set<String> invalidRealms,

HttpAccessAuditFilterFactory httpAuditFactory) {

invalidRealms.add(firstPathSegment("authenticate"));

org.forgerock.http.routing.Router authenticateVersionRouter = new org.forgerock.http.routing.Router();

Handler authenticateHandlerV1 = Endpoints.from(AuthenticationServiceV1.class);

Handler authenticateHandlerV2 = Endpoints.from(AuthenticationServiceV2.class);

authenticateVersionRouter.addRoute(RouteMatchers.requestResourceApiVersionMatcher(version(1, 1)),

authenticateHandlerV1);

authenticateVersionRouter.addRoute(RouteMatchers.requestResourceApiVersionMatcher(version(2)),

authenticateHandlerV2);

return chainOf(authenticateVersionRouter, httpAuditFactory.createFilter(AUTHENTICATION));

}

/**

private static String firstPathSegment(final String path) {

for (String part : path.split("/")) {

if (!part.isEmpty()) {

return part;

}

}

throw new IllegalArgumentException("uriTemplate " + path + " is invalid");

}

@Provides

@Named("UsersResource")

@Inject

@Singleton

public IdentityResourceV1 getUsersResourceV1(MailServerLoader mailServerLoader,

IdentityServicesImpl identityServices, CoreWrapper coreWrapper, RestSecurityProvider restSecurityProvider) {

return new IdentityResourceV1(IdentityResourceV1.USER_TYPE, mailServerLoader, identityServices, coreWrapper,

restSecurityProvider);

}

@Provides

@Named("UsersResource")

@Inject

@Singleton

public IdentityResourceV2 getUsersResourceV2(MailServerLoader mailServerLoader,

IdentityServicesImpl identityServices, CoreWrapper coreWrapper, RestSecurityProvider

restSecurityProvider, BaseURLProviderFactory baseURLProviderFactory) {

return new IdentityResourceV2(IdentityResourceV2.USER_TYPE, mailServerLoader, identityServices, coreWrapper,

restSecurityProvider, baseURLProviderFactory);

}

@Provides

@Named("UsersResource")

@Inject

@Singleton

public IdentityResourceV3 getUsersResource(MailServerLoader mailServerLoader,

IdentityServicesImpl identityServices, CoreWrapper coreWrapper, RestSecurityProvider restSecurityProvider,

BaseURLProviderFactory baseURLProviderFactory) {

return new IdentityResourceV3(IdentityResourceV2.USER_TYPE, mailServerLoader, identityServices, coreWrapper,

restSecurityProvider, baseURLProviderFactory);

}

@Provides

@Named("GroupsResource")

@Inject

@Singleton

public IdentityResourceV1 getGroupsResourceV1(MailServerLoader mailServerLoader,

IdentityServicesImpl identityServices, CoreWrapper coreWrapper, RestSecurityProvider restSecurityProvider) {

return new IdentityResourceV1(IdentityResourceV1.GROUP_TYPE, mailServerLoader, identityServices, coreWrapper,

restSecurityProvider);

}

@Provides

@Named("GroupsResource")

@Inject

@Singleton

public IdentityResourceV2 getGroupsResourceV2(MailServerLoader mailServerLoader,

IdentityServicesImpl identityServices, CoreWrapper coreWrapper,

RestSecurityProvider restSecurityProvider, BaseURLProviderFactory baseURLProviderFactory) {

return new IdentityResourceV2(IdentityResourceV2.GROUP_TYPE, mailServerLoader, identityServices, coreWrapper,

restSecurityProvider, baseURLProviderFactory);

}

@Provides

@Named("GroupsResource")

@Inject

@Singleton

public IdentityResourceV3 getGroupsResource(MailServerLoader mailServerLoader,

IdentityServicesImpl identityServices, CoreWrapper coreWrapper,

RestSecurityProvider restSecurityProvider, BaseURLProviderFactory baseURLProviderFactory) {

return new IdentityResourceV3(IdentityResourceV2.GROUP_TYPE, mailServerLoader, identityServices,

coreWrapper, restSecurityProvider, baseURLProviderFactory);

}

@Provides

@Named("AgentsResource")

@Inject

@Singleton

public IdentityResourceV1 getAgentsResourceV1(MailServerLoader mailServerLoader,

IdentityServicesImpl identityServices, CoreWrapper coreWrapper, RestSecurityProvider restSecurityProvider) {

return new IdentityResourceV1(IdentityResourceV1.AGENT_TYPE, mailServerLoader, identityServices, coreWrapper,

restSecurityProvider);

}

@Provides

@Named("AgentsResource")

@Inject

@Singleton

public IdentityResourceV2 getAgentsResourceV2(MailServerLoader mailServerLoader,

IdentityServicesImpl identityServices, CoreWrapper coreWrapper,

RestSecurityProvider restSecurityProvider, BaseURLProviderFactory baseURLProviderFactory) {

return new IdentityResourceV2(IdentityResourceV2.AGENT_TYPE, mailServerLoader, identityServices, coreWrapper,

restSecurityProvider, baseURLProviderFactory);

}

@Provides

@Named("AgentsResource")

@Inject

@Singleton

public IdentityResourceV3 getAgentsResource(MailServerLoader mailServerLoader,

IdentityServicesImpl identityServices, CoreWrapper coreWrapper,

RestSecurityProvider restSecurityProvider, BaseURLProviderFactory baseURLProviderFactory) {

return new IdentityResourceV3(IdentityResourceV2.AGENT_TYPE, mailServerLoader, identityServices,

coreWrapper, restSecurityProvider, baseURLProviderFactory);

}

@Provides

@Inject

@Singleton

public CoreTokenResource getCoreTokenResource(JSONSerialisation jsonSerialisation,

CTSPersistentStoreProxy ctsPersistentStore, @Named("frRest") Debug debug) {

return new CoreTokenResource(jsonSerialisation, ctsPersistentStore, debug);

}

@Provides

@Inject

@Singleton

public CoreTokenResourceAuthzModule getCoreTokenResourceAuthzModule(

Config<SessionService> sessionService, @Named("frRest") Debug debug) {

boolean coreTokenResourceEnabled = SystemProperties.getAsBoolean(Constants.CORE_TOKEN_RESOURCE_ENABLED);

return new CoreTokenResourceAuthzModule(sessionService, debug, coreTokenResourceEnabled);

}

@Provides

@Singleton

@Named("ServerAttributeSyntax")

public Properties getServerAttributeSyntax() throws IOException {

Properties syntaxProperties = new Properties();

syntaxProperties.load(getClass().getClassLoader().getResourceAsStream("validserverconfig.properties"));

return syntaxProperties;

}

@Provides

@Singleton

@Named("ServerAttributeTitles")

public Properties getServerAttributeTitles() throws IOException {

Properties titleProperties = new Properties();

titleProperties.load(getClass().getClassLoader().getResourceAsStream("amConsole.properties"));

return titleProperties;

}

@Provides

@Inject

public AggregateAuthzModule getSessionResourceAuthzModule(SSOTokenManager ssoTokenManager,

PrivilegeAuthzModule privilegeAuthzModule,

AdminOnlyAuthzModule adminOnlyAuthzModule) {

SessionResourceAuthzModule sessionResourceAuthzModule = new SessionResourceAuthzModule(ssoTokenManager);

CrestAuthorizationModule[] authzList = new CrestAuthorizationModule[3];

authzList[0] = adminOnlyAuthzModule;

authzList[1] = privilegeAuthzModule;

authzList[2] = sessionResourceAuthzModule;

return new AggregateAuthzModule(authzList);

}

}