local Luan = require "luan:Luan.luan"
local error = Luan.error
local do_file = Luan.do_file or error()
local ipairs = Luan.ipairs or error()
local stringify = Luan.stringify or error()
local Io = require "luan:Io.luan"
local String = require "luan:String.luan"
local lower = String.lower or error()
local format = String.format or error()
local Binary = require "luan:Binary.luan"
local bytes = Binary.byte or error()
local Hosting = require "luan:host/Hosting.luan"
local Sql = require "luan:sql/Sql.luan"
local database = Sql.database or error()
local Logging = require "luan:logging/Logging.luan"
local logger = Logging.logger "Util"

require "java"
local Base64 = require "java:java.util.Base64"
local MessageDigest = require "java:java.security.MessageDigest"


local Util = {}

function Util.read_password(domain)
	domain = lower(domain)
	return do_file(Hosting.sites_dir..domain.."/info.luan").password or error()
end

local function basic_authentication(dir,password)
	local sha1 = MessageDigest.getInstance("SHA1").digest(password.getBytes())
	local encoded = Base64.getEncoder().encodeToString(sha1)
	local file = Io.schemes.file(dir.."/password.nginx")
	file.delete()
	file.write_text("admin:{SHA}"..encoded.."\n")
end

local function digest_authentication(dir,password)
	local s = "admin:Restricted:"..password
	local md5 = MessageDigest.getInstance("MD5").digest(s.getBytes())
	md5 = {bytes(md5,1,#md5)}
	local encoded = ""
	for _, n in ipairs(md5) do
		encoded = encoded..format("%02x",n)
	end
	local file = Io.schemes.file(dir.."/password.nginx")
	file.delete()
	file.write_text("admin:Restricted:"..encoded.."\n")
end

function Util.set_password(domain,password)
	local dir = Hosting.sites_dir..lower(domain)
	local file = Io.schemes.file(dir.."/info.luan")
	file.delete()
	file.write_text("return "..stringify{password=password}.."\n")
	digest_authentication(dir,password)
end

local fn = Luan.load_file("file:postgres.luan") or error()
local pg_admin = fn()

function Util.set_postgres_password(domain,password)
	if pg_admin == nil then
		return
	end
	local db = database(pg_admin)
	local exists = db.query("select rolname from pg_roles where rolname=?",domain).results() ~= nil;
	--logger.info("exists "..exists)
	if exists then
		db.update( [[alter role "]]..domain..[[" with encrypted password ']]..password..[[']] )
	end
	db.close()
end

function Util.check_postgres_password(domain,password)
	if pg_admin == nil then
		return
	end
	local db = database{
		class = "org.postgresql.Driver"
		url = "jdbc:postgresql://localhost:5432/"..domain
		user = domain
		password = password
	}
	db.close()
end

return Util