knuedge/lita-activedirectory

module Lita
  module Handlers
    class Activedirectory < Handler
      namespace 'Activedirectory'
      config :host, required: true, type: String
      config :port, required: true, type: Integer, default: 389
      config :basedn, required: true, type: String
      config :user_basedn, required: true, type: String
      config :group_basedn, required: true, type: String
      config :username, required: true, type: String
      config :password, required: true, type: String

      route(
        /^(is)\s+(\S+)\s+(locked(\?)?)/i,
        :user_locked?,
        command: true,
        help: { t('help.user_locked?.syntax') => t('help.user_locked?.desc') }
      )

      route(
        /^(unlock)\s+(\S+)/i,
        :unlock,
        command: true,
        restrict_to: :ad_admins,
        help: { t('help.unlock.syntax') => t('help.unlock.desc') }
      )

      route(
        /^(\S+)\s+(groups)/i,
        :user_groups,
        command: true,
        help: { t('help.user_groups.syntax') => t('help.user_groups.desc') }
      )

      route(
        /^(group)\s+(\S+)\s+(members)$/i,
        :group_members,
        command: true,
        help: { t('help.group_members.syntax') => t('help.group_members.desc') }
      )

      route(
        /^remove\s+(\S+)\s+from\s+(\S+)$/i,
        :remove_group_member,
        command: true,
        restrict_to: :ad_admins,
        help: { t('help.remove_member.syntax') => t('help.remove_member.desc') }
      )

      route(
        /^add\s+(\S+)\s+to\s+(\S+)$/i,
        :add_group_member,
        command: true,
        restrict_to: :ad_admins,
        help: { t('help.add_member.syntax') => t('help.add_member.desc') }
      )

      route(
        /^disable\s+user\s+(\S+)$/i,
        :disable_user,
        command: true,
        restrict_to: :ad_admins,
        help: { t('help.disable_user.syntax') => t('help.disable_user.desc') }
      )

      route(
        /^enable\s+user\s+(\S+)$/i,
        :enable_user,
        command: true,
        restrict_to: :ad_admins,
        help: { t('help.enable_user.syntax') => t('help.enable_user.desc') }
      )

      include ::Utils::Cratususer

      def user_locked?(response)
        user = response.matches[0][1]
        response.reply_with_mention(t('replies.user_locked?.working'))
        handle_user_query(response, user, user_query(user))
      end

      def unlock(response)
        user = response.matches[0][1]
        response.reply_with_mention(t('replies.unlock.working'))
        user_result = user_query(user)
        if user_result
          handle_unlock_query(response, user, unlock_user(user))
        else
          handle_user_query(response, user, user_result)
        end
      end

      def user_groups(response)
        user = response.matches[0][0]
        response.reply_with_mention(t('replies.user_groups.working'))
        group_results = user_groups_query(user)
        if group_results.nil?
          response.reply_with_mention(
            t('replies.user_groups.error', user: user)
          )
        else
          response.reply group_results
        end
      end

      def group_members(response)
        group = response.matches[0][1]
        response.reply_with_mention(t('replies.group_members.working'))
        result = group_mem_query(group)
        if result.nil?
          response.reply_with_mention(
            t('replies.group_members.error', group: group)
          )
        else
          response.reply result
        end
      end

      def add_group_member(response)
        user  = response.matches[0][0]
        group = response.matches[0][1]

        response.reply_with_mention(t('replies.add_member.working'))
        result = add_user_to_group(user, group)
        response.reply_with_mention(
          if result.nil?
            t('replies.add_member.error', user: user, group: group)
          else
            t('replies.add_member.success', user: user, group: group)
          end
        )
      end

      def remove_group_member(response)
        user  = response.matches[0][0]
        group = response.matches[0][1]

        response.reply_with_mention(t('replies.remove_member.working'))
        result = remove_user_from_group(user, group)
        response.reply_with_mention(
          if result.nil?
            t('replies.remove_member.error', user: user, group: group)
          else
            t('replies.remove_member.success', user: user, group: group)
          end
        )
      end

      def disable_user(response)
        user = response.matches[0][0]

        response.reply_with_mention(t('replies.disable_user.working'))
        result = disable_ldap_user(user)
        response.reply_with_mention(
          if result.nil?
            t('replies.disable_user.error', user: user)
          else
            t('replies.disable_user.success', user: user)
          end
        )
      end

      def enable_user(response)
        user = response.matches[0][0]

        response.reply_with_mention(t('replies.enable_user.working'))
        result = enable_ldap_user(user)
        response.reply_with_mention(
          if result.nil?
            t('replies.enable_user.error', user: user)
          else
            t('replies.enable_user.success', user: user)
          end
        )
      end

      private

      def handle_user_query(response, user, result)
        case result
        when true
          response.reply_with_mention(
            t('replies.user_locked?.locked', user: user)
          )
        when false
          response.reply_with_mention(
            t('replies.user_locked?.notlocked', user: user)
          )
        when nil
          response.reply_with_mention(
            t('replies.user_locked?.error', user: user)
          )
        end
      end

      def handle_unlock_query(response, user, result)
        if result
          response.reply_with_mention(
            t('replies.unlock.success', user: user)
          )
        else
          response.reply_with_mention(
            t('replies.unlock.fail', user: user)
          )
        end
      end

      Lita.register_handler(self)
    end
  end
end