Level = require 'level'

config = require './config'
emailer = require './emailer'

db = Level __dirname + '/../db', valueEncoding: 'json'
codeExpirationTime = 15 * 60 * 1000 # 15 minutes

authorizedUsers = config.data.users.map (email) -> email.toLowerCase()
isOpenMode = authorizedUsers.length is 0
if isOpenMode
  console.log "[TAILGATE] Running in 'open mode'".yellow

module.exports =
  check: (req, res, next) ->
    if req.session.currentUser
      next()
    else
      res.send 404

  login: (req, res) ->
    email = req.body.email?.toLowerCase()
    code = req.body.code

    if email and code
      validateCode email, code, (err, success) ->
        if success
          if isOpenMode
            createUser email

          if email in authorizedUsers
            req.session.currentUser = email
            return res.json 200, {success: true}

        console.log "[TAILGATE] Not Authorized: #{email} ".red
        return res.json 403, {success: false}
    else
      return res.json 400, {success: false}

  getCode: (req, res) ->
    email = req.body.email?.toLowerCase()
    return res.send 400 unless email

    audience = 'http://' + req.headers.host

    generateCode email, (err, code) ->
      return console.error err if err
      email =
        to: email
        from: 'auth@tailgate.io'
        subject: "Your access code is: #{code}"
        text: "Your access code is: #{code}"
      emailer email, (err) ->
        return res.json 500, {success: false} if err
        res.json 200, {success: true}


createUser = (email) ->
  console.log "[TAILGATE] #{email} added to users".green
  console.log "[TAILGATE] Running in 'closed mode'".green
  config.data.users.push email
  authorizedUsers = config.data.users.map (email) -> email.toLowerCase()
  config.save()

generateCode = (email, cb) ->
  code = Math.floor Math.random() * 9999
  key = ['auth', email].join '\xff'
  auth =
    email: email
    code: code.toString()
    expires: Date.now() + codeExpirationTime

  console.log "[TAILGATE] Auth Code for #{email}: #{code} ".yellow

  db.put key, auth, (err) ->
    return console.error err if err
    cb null, code

validateCode = (email, codeAssert, cb) ->
  key = ['auth', email].join '\xff'
  db.get key, (err, auth) ->
    return cb err if err
    return cb null, false unless auth
    return cb null, false if Date.now() > auth.expires
    return cb null, false unless codeAssert is auth.code

    return cb null, true