<?php

class FacebookDriver extends SocialDriver
{
	protected $profile = NULL;

	public function __construct ($array, $path)
	{
		parent::__construct ($array, $path);

		if (isset ($_SESSION ['_TITAN_FACEBOOK_ACCESS_TOKEN_']) && trim ($_SESSION ['_TITAN_FACEBOOK_ACCESS_TOKEN_']) != '')
			define ('TITAN_FACEBOOK_ACCESS_TOKEN', $_SESSION ['_TITAN_FACEBOOK_ACCESS_TOKEN_']);

		if (defined ('TITAN_FACEBOOK_ACCESS_TOKEN'))
		{
			$token = TITAN_FACEBOOK_ACCESS_TOKEN;

			$this->driver = new \Facebook\Facebook ([
				'app_id' => $this->authId,
				'app_secret' => $this->authSecret,
				'default_graph_version' => 'v2.10',
				'default_access_token' => $token
			]);
		}
		else
		{
			$this->driver = new \Facebook\Facebook ([
				'app_id' => $this->authId,
				'app_secret' => $this->authSecret,
				'default_graph_version' => 'v2.10'
			]);

			$helper = $this->driver->getRedirectLoginHelper ();

			if (isset ($_GET ['state']))
				$helper->getPersistentDataHandler ()->set ('state', $_GET ['state']);

			try
			{
				$token = $helper->getAccessToken ();

				$_SESSION ['_TITAN_FACEBOOK_ACCESS_TOKEN_'] = $token;

				$this->driver = new \Facebook\Facebook ([
					'app_id' => $this->authId,
					'app_secret' => $this->authSecret,
					'default_graph_version' => 'v2.10',
					'default_access_token' => $token
				]);
			}
			catch(Facebook\Exceptions\FacebookSDKException $e)
			{
				toLog ($e->getMessage () .' ['. $e->getLine () .']');
			}
		}
	}

	public function getIdColumn ()
	{
		/*
		 * ALTER TABLE titan._user ADD COLUMN _facebook VARCHAR(50);
		 * ALTER TABLE titan._user ADD CONSTRAINT _user__facebook_key UNIQUE (_facebook);
		 */

		return '_facebook';
	}

	public function getId ()
	{
		$profile = $this->loadProfile ();

		if (isset ($profile ['id']) && trim ($profile ['id']) != '')
			return $profile ['id'];

		return NULL;
	}

	public function authenticate ()
	{
		try
		{
			$response = $this->driver->get ('/me');
		}
		catch (\Facebook\Exceptions\FacebookResponseException $e)
		{
			toLog ($e->getMessage () .' ['. $e->getLine () .']');

			return FALSE;
		}
		catch(\Facebook\Exceptions\FacebookSDKException $e)
		{
			toLog ($e->getMessage () .' ['. $e->getLine () .']');

			return FALSE;
		}

		$this->user = $response->getDecodedBody ();

		return TRUE;
	}

	public function loadProfile ($full = FALSE)
	{
		if (!$this->isAuthenticated ())
			return array ();

		if (is_array ($this->profile) && !$full)
			return $this->profile;

		$atts = array ('id', 'name', 'email');

		while ($att = $this->getAttribute ())
			if (!in_array ($att->getName (), $atts) &&
				$att->getName () != 'username') // 'username' is deprecated in Facebook SDK 2.+.
				$atts [] = $att->getName ();

		try
		{
			$response = $this->driver->get ('/me?fields='. implode (',', $atts));
		}
		catch (\Facebook\Exceptions\FacebookResponseException $e)
		{
			toLog (print_r ($e, TRUE));

			return [];
		}
		catch(\Facebook\Exceptions\FacebookSDKException $e)
		{
			toLog (print_r ($e, TRUE));

			return [];
		}

		$profile = $response->getDecodedBody ();

		if ($full)
			return $profile;

		$profile ['username'] = array_shift (explode ('@', $profile ['email']));
		$profile ['picture'] = $profile ['id'];

		$this->setProfile ($profile);

		return $this->getProfile ();
	}

	public function login ()
	{
		$profile = $this->loadProfile ();

		if (!array_key_exists ('email', $profile) || trim ($profile ['email']) == '' ||
			!array_key_exists ('name', $profile) || trim ($profile ['name']) == '' ||
			!array_key_exists ('username', $profile) || trim ($profile ['username']) == '' ||
			!array_key_exists ('id', $profile) || is_null ($profile ['id']) || !(int) $profile ['id'])
			throw new Exception (__ ('Invalid data to search user (id, username, email or name)!'));

		try
		{
			User::singleton ()->authenticateBySocialNetwork ($this->getName (), $profile ['id']);

			Log::singleton ()->add ('LOGON', "Using Facebook with ID '". $profile ['id'] ."'.", Log::SECURITY, FALSE, TRUE);

			return TRUE;
		}
		catch (Exception $e)
		{}

		$this->register ($profile);

		$success = User::singleton ()->authenticateBySocialNetwork ($this->getName (), $profile ['id']);

		if ($success)
			Log::singleton ()->add ('LOGON', "Using Facebook with ID '". $profile ['id'] ."'.", Log::SECURITY, FALSE, TRUE);

		return $success;
	}

	public function register ($profile)
	{
		$db = Database::singleton ();

		$sql = "SELECT _id FROM _user WHERE _facebook = :facebook";

		$sth = $db->prepare ($sql);

		$sth->bindParam (':facebook', $profile ['id'], PDO::PARAM_STR);

		$sth->execute ();

		$obj = $sth->fetch (PDO::FETCH_OBJ);

		if ($obj)
			return $obj->_id;

		$sql = "SELECT _id, _type FROM _user WHERE _email = :email";

		$sth = $db->prepare ($sql);

		$sth->bindParam (':email', $profile ['email'], PDO::PARAM_STR);

		$sth->execute ();

		$obj = $sth->fetch (PDO::FETCH_OBJ);

		if ($obj)
		{
			$type = Security::singleton ()->getUserType ($obj->_type);

			if (!is_object ($type))
				throw new Exception (__ ('User type not exists! Contact administrator.'));

			$sql = "UPDATE _user SET _facebook = :facebook WHERE _id = :id";

			$sth = $db->prepare ($sql);

			$sth->bindParam (':facebook', $profile ['id'], PDO::PARAM_STR);
			$sth->bindParam (':id', $obj->_id, PDO::PARAM_INT);

			$sth->execute ();

			return $obj->_id;
		}

		if (!$this->autoRegister ())
			throw new Exception (__ ('There is no user in the system linked to this social network profile!'));

		$_id = Database::nextId ('_user', '_id');

		while ($type = Security::singleton ()->getUserType ())
		{
			if (!$type->useLdap ())
				continue;

			$ldap = $type->getLdap ();

			if (!$ldap->connect (FALSE, FALSE, TRUE))
			{
				$ldap->close ();

				throw new Exception (__ ('This user type require LDAP integration! Please, contact administrator.'));
			}

			$search = $ldap->search (array ('uid'), '(mail='. $profile ['email'] .')');

			$ldap->close ();

			if (!(int) $search ['count'])
				continue;

			$_login = $search [0]['uid'][0];

			break;
		}

		if (!isset ($_login))
		{
			if (!Security::singleton ()->userTypeExists ($this->getUserType ()))
				throw new Exception (__ ('Invalid user type!'));

			$type = Security::singleton ()->getUserType ($this->getUserType ());

			if ($type->useLdap ())
			{
				$ldap = $type->getLdap ();

				if (!$ldap->connect (FALSE, FALSE, TRUE))
				{
					$ldap->close ();

					throw new Exception (__ ('This user type require LDAP integration! Please, contact administrator.'));
				}

				$_login = $this->getAttribute ('username')->getValue ();

				$count = 0;

				do
				{
					$query = $db->query ("SELECT COUNT(*) AS n FROM _user WHERE _login ILIKE '". $_login ."'");

					if ($count)
						$_login = $profile ['username'] . $count;

					$count++;

				} while ((int) $query->fetch (PDO::FETCH_COLUMN) || $ldap->userExists ($_login));

				$ldap->create ($ldap->getEssentialInput ($_login, $this->getAttribute ('name')->getValue (), $this->getAttribute ('email')->getValue (), randomHash (10), $_id), $_login);

				$ldap->close ();
			}
			else
			{
				$_login = $this->getAttribute ('username')->getValue ();

				$count = 0;

				do
				{
					$query = $db->query ("SELECT COUNT(*) AS n FROM _user WHERE _login ILIKE '". $_login ."'");

					if ($count)
						$_login = $profile ['username'] . $count;

					$count++;

				} while ((int) $query->fetch (PDO::FETCH_COLUMN));
			}
		}

		$fields = array (
			'_id' 	 	 => array ($_id, PDO::PARAM_INT),
			'_login' 	 => array ($_login, PDO::PARAM_STR),
			'_name'	 => array ($this->getAttribute ('name')->getValue (), PDO::PARAM_STR),
			'_email'	 => array ($this->getAttribute ('email')->getValue (), PDO::PARAM_STR),
			'_password' => array (randomHash (13) .'_INVALID_HASH_'. randomHash (13), PDO::PARAM_STR),
			'_active'	 => array ('1', PDO::PARAM_STR),
			'_deleted'	 => array ('0', PDO::PARAM_STR),
			'_type'	 => array ($type->getName (), PDO::PARAM_STR),
			'_facebook' => array ($profile ['id'], PDO::PARAM_STR)
		);

		$alreadyAtts = array ('id', 'username', 'name', 'email');

		while ($att = $this->getAttribute ())
			if (!in_array ($att->getName (), $alreadyAtts))
				$fields [$att->getColumn ()] = array ($att->getValue ());

		try
		{
			$db->beginTransaction ();

			$sql = "INSERT INTO _user (". implode (", ", array_keys ($fields)) .") VALUES (:". implode (", :", array_keys ($fields)) .")";

			$sth = $db->prepare ($sql);

			foreach ($fields as $key => $array)
				if (sizeof ($array) > 1)
					$sth->bindParam (':'. $key, $array [0], $array [1]);
				else
					$sth->bindParam (':'. $key, $array [0]);

			$sth->execute ();

			$sql = "SELECT _group FROM _type_group WHERE _type = :type";

			$sth = $db->prepare ($sql);

			$sth->bindParam (':type', $type->getName (), PDO::PARAM_STR);

			$sth->execute ();

			$sthUser = $db->prepare ("INSERT INTO _user_group (_user, _group) VALUES (:id, :group)");

			while ($obj = $sth->fetch (PDO::FETCH_OBJ))
				$sthUser->execute (array (':id' => $_id, ':group' => $obj->_group));

			$db->commit ();

			return $_id;
		}
		catch (PDOException $e)
		{
			$db->rollBack ();

			toLog ('Impossible to save user data in _user table. ['. $e->getMessage () .'] ['. print_r ($fields, TRUE) .']');
		}

		throw new Exception (__ ('Impossible to save your data! Please, contact administrator.'));
	}

	public function getLoginUrl ()
	{
		$helper = $this->driver->getRedirectLoginHelper ();

		return $helper->getLoginUrl (Instance::singleton ()->getLoginUrl (), $this->getRequiredPermissions ());
	}

	public function getConnectUrl ()
	{
		$section = Business::singleton ()->getSection (Section::TCURRENT)->getName ();
		$action = Business::singleton ()->getAction (Action::TCURRENT)->getName ();

		$helper = $this->driver->getRedirectLoginHelper ();

		return $helper->getLoginUrl (Instance::singleton ()->getUrl () .'titan.php?target=social&driver='. $this->getName () .'&section='. $section .'&action='. $action, $this->getRequiredPermissions ());
	}

	public function getUserUrl ($asLink = TRUE)
	{
		$query = Database::singleton ()->query ("SELECT ". $this->getIdColumn () ." FROM _user WHERE _id = '". User::singleton ()->getId () ."'");

		$id = $query->fetch (PDO::FETCH_COLUMN);

		if (trim ($id) == '')
			return '';

		$url = 'http://www.facebook.com/'. $id;

		if (!$asLink)
			return $url;

		return '<a href="'. $url .'" target="_blank">'. $url .'</a>';
	}
}