flant/superhosting

module Superhosting
  module Controller
    class User
      def _get(name:)
        Etc.getpwnam(name)
      rescue ArgumentError => _e
        nil
      end

      def _add(name:, container_name:, shell: '/usr/sbin/nologin', home_dir: "/web/#{container_name}")
        user = _get(name: container_name)
        with_dry_run do |dry_run|
          user_uid = dry_run ? 'XXXX' : user.uid
          _add_custom(name: "#{container_name}_#{name}", group: container_name, shell: shell, home_dir: home_dir, uid: user_uid)
        end
      end

      def _add_system_user(name:, container_name:)
        _add_custom(name: "#{container_name}_#{name}", group: container_name, shell: '/usr/sbin/nologin', home_dir: "/web/#{container_name}")
      end

      def _add_custom(name:, group:, shell: '/usr/sbin/nologin', home_dir: "/web/#{group}", uid: nil)
        debug_operation(desc: { code: :user, data: { name: name } }) do |&blk|
          if _get(name: name)
            blk.call(code: :ok)
            {}
          else
            if (resp = adding_validation(name: name, container_name: group)).net_status_ok?
              container_lib_mapper = @lib.containers.f(group)
              passwd_mapper = container_lib_mapper.config.f('etc-passwd')

              useradd_command = "useradd #{name} -g #{group} -d #{home_dir} -s #{shell}".split
              useradd_command += "-u #{uid} -o".split unless uid.nil?
              command!(useradd_command, debug: false)

              user = _get(name: name)

              with_dry_run do |dry_run|
                user_gid, user_uid = dry_run ? %w(XXXX XXXX) : [user.gid, user.uid]
                passwd_mapper.append_line!("#{name}:x:#{user_uid}:#{user_gid}::#{home_dir}:#{shell}")
              end

              blk.call(code: :added)
            end
            resp
          end
        end
      end

      def _del(name:, group:)
        debug_operation(desc: { code: :user, data: { name: name } }) do |&blk|
          with_dry_run do |dry_run|
            resp = {}
            with_adding_group = _group_get_users(name: group).one? ? true : false

            if _get(name: name)
              resp = command!("userdel #{name}", debug: false) unless dry_run
              blk.call(code: :deleted)
            else
              blk.call(code: :ok)
            end
            _group_add(name: group) if with_adding_group
            resp
          end
        end
      end

      def _create_password(generate: false)
        if generate
          password = SecureRandom.hex
        else
         loop do
           pass_ask = ->(msg) { ask(msg) { |q| q.echo = false } }
           if (password = pass_ask.call('Enter password: ')) != pass_ask.call('Repeat password: ')
             info('Passwords does not match')
           elsif !StrongPassword::StrengthChecker.new(password).is_strong?(min_entropy: @config.f('password_strength', default: '15').to_i)
             info('Password is weak')
           else
             break
           end
         end
        end

        encrypted_password = UnixCrypt::SHA512.build(password)
        { password: password, encrypted_password: encrypted_password }
      end

      def _update_password(name:, encrypted_password:)
        debug_operation(desc: { code: :user, data: { name: name } }) do |&blk|
          with_dry_run do |dry_run|
            resp = {}
            resp = command!("usermod -p '#{encrypted_password}' #{name}", debug: false) unless dry_run
            blk.call(code: :updated)
            resp
          end
        end
      end

      def system?(name:, container_name:)
        if (base_user = _get(name: container_name)) && (user = _get(name: name))
          base_user.uid != user.uid
        else
          false
        end
      end

      def admin?(name:, **_kwargs)
        name.include?('_admin_')
      end
    end
  end
end