<?php

/**
 * DomFramework
 * @package domframework
 * @author Dominique Fournier <dominique@fournier38.fr>
 * @license BSD
 */

namespace Domframework;

/**
 * User authentication against SESSION
 */
class Authsession extends Auth
{
    /**
     * Check if there is already a session or the user can not be authenticated
     */
    public function __construct()
    {
        if (!isset($_SESSION)) {
            throw new \Exception("No session previously opened", 401);
        }
    }

    /**
     * No connection to session
     */
    public function connect()
    {
        return true;
    }

    /**
     * Try to authenticate the email/password of the user
     * @param string $email Email to authenticate
     * @param string $password Password to authenticate
     */
    public function authentication($email, $password)
    {
        if (
            !isset($_SESSION["domframework"]["auth"]["email"]) ||
            !isset($_SESSION["domframework"]["auth"]["password"])
        ) {
            throw new \Exception("No previous email in session", 401);
        }
        if ($_SESSION["domframework"]["auth"]["email"] !== $email) {
            throw new \Exception("Unable to authenticate user '$email'", 401);
        }
        if ($_SESSION["domframework"]["auth"]["password"] !== $password) {
            throw new \Exception("Bad password for '$email'", 401);
        }
    }

    /**
     * Return all the parameters recorded for the authenticate user
     */
    public function getdetails()
    {
        if (! isset($_SESSION["domframework"]["auth"]["email"])) {
            return ["lastname" => "anonymous",
                    "firstname" => "",
                    "email" => "anonymous"];
        }
        return ["lastname" => $_SESSION["domframework"]["auth"]["lastname"],
                  "firstname" => $_SESSION["domframework"]["auth"]["firstname"],
                  "email" => $_SESSION["domframework"]["auth"]["email"]];
    }

    /**
     * Method to change the password : unavailable in SESSION auth
     * @param string $oldpassword The old password (to check if the user have the
     *    rights to change the password)
     * @param string $newpassword The new password to be recorded
     */
    public function changepassword($oldpassword, $newpassword)
    {
        throw new \Exception(
            dgettext(
                "domframework",
                "The password can't be change for SESSION users"
            ),
            405
        );
    }

    /**
     * Method to overwrite the password (without oldpassword check)
     * Must be reserved to the administrators. For the users, use changepassword
     * method
     * @param string $email the user identifier to select
     * @param string $newpassword The new password to be recorded
     */
    public function overwritepassword($email, $newpassword)
    {
        throw new \Exception(
            dgettext(
                "domframework",
                "The password can't be overwrite for SESSION users"
            ),
            405
        );
    }

    /**
     * Save the data in session
     * @param string $email The email to store in the session
     * @param string $password The password to store in the session
     * @param string $lastname The lastname to store in the session
     * @param string $firstname The firstname to store in the session
     * @deprecated 0.23
     */
    public function savedatas($email, $password, $lastname, $firstname)
    {
        return $this->savedata($email, $password, $lastname, $firstname);
    }

    /**
     * Save the data in session
     * @param string $email The email to store in the session
     * @param string $password The password to store in the session
     * @param string $lastname The lastname to store in the session
     * @param string $firstname The firstname to store in the session
     */
    public function savedata($email, $password, $lastname, $firstname)
    {
        $_SESSION["domframework"]["auth"]["lastname"] = $lastname;
        $_SESSION["domframework"]["auth"]["firstname"] = $firstname;
        $_SESSION["domframework"]["auth"]["email"] = $email;
        $_SESSION["domframework"]["auth"]["password"] = $password;
    }

    /**
     * Remove the information from the session
     */
    public function logout()
    {
        if (isset($_SESSION["domframework"]["auth"]["lastname"])) {
            unset($_SESSION["domframework"]["auth"]["lastname"]);
        }
        if (isset($_SESSION["domframework"]["auth"]["firstname"])) {
            unset($_SESSION["domframework"]["auth"]["firstname"]);
        }
        if (isset($_SESSION["domframework"]["auth"]["email"])) {
            unset($_SESSION["domframework"]["auth"]["email"]);
        }
        if (isset($_SESSION["domframework"]["auth"]["password"])) {
            unset($_SESSION["domframework"]["auth"]["password"]);
        }
    }
}