#!/bin/sh -e

basic_urlencode() {
  echo "${1}" | sed 's/\./%2e/g' | sed 's/-/%2d/g' | sed 's/_/%5f/g'
}

PASSWD="$(cat "${__object}/parameter/password" 2>/dev/null || true)"
DOMAIN="$(cat "${__object}/parameter/domain" 2>/dev/null || true)"
STATE="$(cat "${__object}/parameter/state")"

if [ -z "${PASSWD}" ] && [ "${STATE}" != "absent" ]; then
	cat >> dev/stderr <<-EOF
	A password is required unless you are removing the user '$__object_id'.
	EOF
fi

JITSI_USER_RAW="${__object_id}"
if echo "${JITSI_USER_RAW}" | grep -q ".*[A-Z\"&'/:<>@]"; then
  cat > /dev/stderr <<EOF
Username (XMPP's localpart) ${JITSI_USER_RAW} has uppercase characters or
contains invalid symbols ("&'/:<>@) according to RFC6122.
EOF
  exit 1
fi

JITSI_USER="$(basic_urlencode "${JITSI_USER_RAW}")"
if [ -z "${DOMAIN}" ]; then
	DOMAIN="${__target_host}"
fi
FQDN="$(basic_urlencode "${DOMAIN}")"
FQDN_PATH="/var/lib/prosody/${FQDN}/accounts"
FILENAME="${FQDN_PATH}/${JITSI_USER}.dat"

__directory "${FQDN_PATH}" --parents --owner prosody --group prosody --state "present"

require="__directory${FQDN_PATH}" __file "${FILENAME}" --owner prosody --group prosody --mode 0440 \
  --state "${STATE}" --source - <<EOF
return {
	["password"] = "${PASSWD}";
};
EOF