package org.appfuse.webapp.pages;
   
   import org.apache.commons.lang.StringUtils;
   import org.apache.tapestry5.alerts.AlertManager;
   import org.apache.tapestry5.alerts.Duration;
   import org.apache.tapestry5.alerts.Severity;
   import org.apache.tapestry5.annotations.Component;
   import org.apache.tapestry5.annotations.Log;
   import org.apache.tapestry5.annotations.PageActivationContext;
  import org.apache.tapestry5.annotations.Property;
  import org.apache.tapestry5.ioc.Messages;
  import org.apache.tapestry5.ioc.annotations.Inject;
  import org.apache.tapestry5.services.HttpError;
  import org.apache.tapestry5.services.Response;
  import org.appfuse.Constants;
  import org.appfuse.model.User;
  import org.appfuse.service.RoleManager;
  import org.appfuse.service.UserExistsException;
  import org.appfuse.service.UserManager;
  import org.appfuse.webapp.components.UserForm;
  import org.appfuse.webapp.services.EmailService;
  import org.appfuse.webapp.services.SecurityContext;
  import org.appfuse.webapp.util.RequestUtil;
  import org.slf4j.Logger;
  import org.springframework.mail.MailException;
  import org.springframework.security.access.AccessDeniedException;
  
  import javax.servlet.http.HttpServletRequest;
  import javax.servlet.http.HttpServletResponse;
  import java.io.IOException;
  
  /**
   * Self-registration page for new users
   *
   * @author Serge Eby
   * @version $Id: Signup.java 5 2008-08-30 09:59:21Z serge.eby $
   */
  public class Signup {
      @Inject
      private Logger logger;
  
      @Inject
      private UserManager userManager;
  
      @Inject
      private RoleManager roleManager;
  
      @Inject
      private AlertManager alertManager;
  
      @Inject
      private EmailService emailService;
  
      @Property
      @PageActivationContext
      private User user;
  
      @Inject
      private HttpServletRequest request;
  
      @Inject
      private SecurityContext securityContext;
  
      @Inject
      private Response response;
  
      @Inject
      private Messages messages;
  
      @Component(id = "signup")
      private UserForm form;
  
      @Property
      private Boolean cookieLogin;
  
      void onPrepare() {
          if (user == null) {
              user = new User();
          }
          // Enable user;
          user.setEnabled(true);
  
          // Set the default user role on this new user
          user.addRole(roleManager.getRole(Constants.USER_ROLE));
      }
  
      void setupRender() {
          form.setInfoMessage(messages.get("signup.message"));
      }
  
      // ~ Event Handlers
  
      @Log
      Object onCanceledFromSignup() {
          return Login.class;
      }
  
      @Log
      void onValidatePasswordFromSignup() {
         // Ensure the password fields match
         if (form.isValid()) {
             if (!StringUtils.equals(user.getPassword(), user.getConfirmPassword())) {
 
                 String errorMessage = messages.format("errors.twofields",
                         messages.get("user.confirmPassword"),
                         messages.get("user.password"));
 
                 form.recordError(errorMessage);
 
                 alertManager.alert(
                         Duration.TRANSIENT,
                         Severity.ERROR,
                         errorMessage);
             }
         }
     }
 
     @Log
     Object onSuccess() throws IOException {
         try {
             user = userManager.saveUser(user);
         } catch (AccessDeniedException ade) {
             // thrown by UserSecurityAdvice configured in aop:advisor
             logger.warn(ade.getMessage());
             return new HttpError(HttpServletResponse.SC_FORBIDDEN, "Resource not available");
         } catch (UserExistsException e) {
             // TODO #1: FIXME: only username should be highlighted.. move to onValidate()?
 
             alertManager.error(
                     messages.format("errors.existing.user", user.getUsername(), user.getEmail())
             );
             // redisplay the unencrypted passwords
             user.setPassword(user.getConfirmPassword());
             //TODO: somehow returning current page doesn't work
             //return this;
 
             response.sendRedirect("signup");
         }
 
         // log user in automatically
         securityContext.login(user);
 
         // Send user an e-mail
         logger.debug(String.format("Sending user '%s' an account information e-mail", user.getUsername()));
         try {
             String msg = messages.get("signup.email.message");
             String subject = messages.get("signup.email.subject");
             emailService.send(user, subject, msg, RequestUtil.getAppURL(request), false);
         } catch (MailException me) {
             request.getSession(true).setAttribute("error",
                     me.getMostSpecificCause().getMessage());
         }
 
         alertManager.alert(Duration.TRANSIENT, Severity.INFO,  messages.get("user.registered"));
         if (request != null) { // needed for testing
             response.sendRedirect(request.getContextPath());
         }
         return null;
     }
 
     @Log
     void onFailure() throws IOException {
         response.sendRedirect("signup");
     }
 }