/**
    * Copyright 2011-2013 The Kuali Foundation Licensed under the
    * Educational Community License, Version 2.0 (the "License"); you may
    * not use this file except in compliance with the License. You may
    * obtain a copy of the License at
    *
    * http://www.osedu.org/licenses/ECL-2.0
    *
    * Unless required by applicable law or agreed to in writing,
   * software distributed under the License is distributed on an "AS IS"
   * BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express
   * or implied. See the License for the specific language governing
   * permissions and limitations under the License.
   */
  
  package org.kuali.mobility.security.authz.interceptors;
  
  import org.slf4j.Logger;
  import org.slf4j.LoggerFactory;
  import org.kuali.mobility.security.authn.util.AuthenticationConstants;
  import org.kuali.mobility.security.group.api.Group;
  import org.kuali.mobility.security.user.api.User;
  import org.springframework.web.servlet.HandlerInterceptor;
  import org.springframework.web.servlet.ModelAndView;
  
  import javax.servlet.http.HttpServletRequest;
  import javax.servlet.http.HttpServletResponse;
  import java.util.ArrayList;
  import java.util.List;
  
  public class AuthorizationInterceptor implements HandlerInterceptor {
      private static final Logger LOG = LoggerFactory.getLogger(AuthorizationInterceptor.class);
  
      @Override
      public boolean preHandle(HttpServletRequest request, HttpServletResponse response, Object handler) throws Exception {
          User user = (User) request.getSession(true).getAttribute(AuthenticationConstants.KME_USER_KEY);
  
          if (user != null && !user.isPublicUser() && user.getLoginName() != null) {
              
              List<Group> groups = user.getGroups();
              if (groups == null){
              	groups = new ArrayList<Group>();
              }
  
  // Removing this since it doesn't seem to serve any purpose at this time. -joseswan
  //            user.addAttribute("user.authenticated", "true");
  
              String principalName = user.getLoginName().trim();
              
              // TODO: Refactor this to use and injected AuthZ Data Source (Active Directory, LDAP, etc)
  
              if ("admin".equals(principalName)) {
                  user.addAttribute("user.campus", "ALL");
  //                groups.add("KME-ADMIN");
              } else if ("student".equals(principalName)) {
                  user.addAttribute("user.campus", "BL");
  //                groups.add("KME-STUDENT");
              } else if ("staff".equals(principalName)) {
                  user.addAttribute("user.campus", "IN");
  //                groups.add("KME-STAFF");
              } else if ("faculty".equals(principalName)) {
                  user.addAttribute("user.campus", "BL");
  //                groups.add("KME-FACULTY");
              }
                          
              user.setGroups(groups);
          }
  
          return true;
      }
  
      @Override
      public void postHandle(HttpServletRequest request, HttpServletResponse response, Object handler, ModelAndView modelAndView) throws Exception {}
  
      @Override
      public void afterCompletion(HttpServletRequest request, HttpServletResponse response, Object handler, Exception ex) throws Exception {}
  
  }