#!/bin/sh -e
#
# 2020 Dennis Camera (dennis.camera@ssrq-sds-fds.ch)
#
# This file is part of cdist.
#
# cdist is free software: you can redistribute it and/or modify
# it under the terms of the GNU General Public License as published by
# the Free Software Foundation, either version 3 of the License, or
# (at your option) any later version.
#
# cdist is distributed in the hope that it will be useful,
# but WITHOUT ANY WARRANTY; without even the implied warranty of
# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
# GNU General Public License for more details.
#
# You should have received a copy of the GNU General Public License
# along with cdist. If not, see <http://www.gnu.org/licenses/>.
#

state_should=$(cat "${__object}/parameter/state")

if test -f "${__object}/parameter/server"
then
	server=$(cat "${__object}/parameter/server")
else
	server=$__object_id
fi
login=$(cat "${__object}/parameter/login")

case $state_should
in
	(present)
		line_should=$(printf '%s|%s:%s\n' \
			"${login}" "${server}" \
			"$(cksum "${__object}/parameter/password" | cut -d' ' -f1)")
		if grep -qxF "${line_should}" "${__object}/explorer/authusers"
		then
			# correct line already present -> nothing to do
			exit 0
		fi

		test -n "${login}" || { echo '--login must be non-empty' >&2; exit 1 }

		mode=1

		if test -s "${__object}/explorer/authusers"
		then
			printf 'set authuser %s on %s\n' "${login}" "${server}" >>"${__messages_out}"
		else
			printf 'add authuser %s on %s\n' "${login}" "${server}" >>"${__messages_out}"
		fi
		;;
	(absent)
		# no matching logins present -> nothing to do
		test -s "${__object}/explorer/authusers" || exit 0

		mode=0

		printf 'delete authuser %s on %s\n' "${login}" "${server}" >>"${__messages_out}"
		;;
	(*)
		printf 'Invalid --state: %s' "${state_should}" >&2
		exit 1
		;;
esac

auth_conf=$(cat "${__object}/explorer/auth_conf")

if test -z "${auth_conf}"
then
	echo 'Cannot determine path of dma auth.conf' >&2
	exit 1
fi

cat <<EOF
export auth_conf='${auth_conf}'
export login='${login}'
export server='${server}'
mode=${mode}
EOF

cat <<'EOF'
test -f "${auth_conf}" || touch "${auth_conf}"

awk -F '\n' -v mode=$mode '
function getpw(    line, path) {
	path = (ENVIRON["__object"] "/parameter/password")
	getline line < path
	close(path)
	return line
}

BEGIN {
	DP = "[: \t]"  # copied from dma/conf.c
}

# skip comments and empty lines
/^#/ || /^$/ { print; next }

{
	login = substr($0, 1, index($0, "|") - 1)
	host = substr($0, length(login) + 2)
	if (match(host, DP)) {
		host = substr(host, 1, RSTART - 1)
		endpos = length(login) + RSTART
	} else endpos = length
}

host == ENVIRON["server"] {
	if (mode) {
		if (login == ENVIRON["login"] && !written) {
			printf "%s%s\n", substr($0, 1, endpos+1), getpw()
			written = 1
			next
		}
	} else if (!ENVIRON["login"] || login == ENVIRON["login"]) next
}

{ print }

END {
	if (mode && !written) {
		printf "%s|%s:%s\n", ENVIRON["login"], ENVIRON["server"], getpw()
	}
}
' <"${auth_conf}" >"${auth_conf}.tmp" \
 && mv "${auth_conf}.tmp" "${auth_conf}"
EOF