<?php namespace HashOver;

// Copyright (C) 2015-2021 Jacob Barkdull
// This file is part of HashOver.
//
// HashOver is free software: you can redistribute it and/or modify
// it under the terms of the GNU Affero General Public License as
// published by the Free Software Foundation, either version 3 of the
// License, or (at your option) any later version.
//
// HashOver is distributed in the hope that it will be useful,
// but WITHOUT ANY WARRANTY; without even the implied warranty of
// MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
// GNU Affero General Public License for more details.
//
// You should have received a copy of the GNU Affero General Public License
// along with HashOver.  If not, see <http://www.gnu.org/licenses/>.


class SessionLogin
{
	protected $setup;
	protected $locale;
	protected $crypto;

	public $enabled = true;
	public $name;
	public $password;
	public $loginHash;
	public $email;
	public $website;

	public function __construct (Setup $setup, Cookies $cookies, Locale $locale)
	{
		// Store parameters as properties
		$this->setup = $setup;
		$this->locale = $locale;

		// Instantiate Crypto class
		$this->crypto = new Crypto ();

		// Check if cookies are disabled
		if ($setup->setsCookies === false) {
			// If so, disable login method
			$this->enabled = false;

			// Disable login setting
			$setup->allowsLogin = false;
			$setup->syncSettings ();
		} else {
			// If not, start session
			@session_start ();
		}
	}

	// Sets a session value
	protected function sessionSet ($name, $value = '')
	{
		// Add pseudo-namespacing prefix to session key
		$name = 'hashover-' . $name;

		// Set session value
		$_SESSION[$name] = $value;
	}

	// Get session value
	protected function sessionGet ($name, $trim = false)
	{
		// Add pseudo-namespacing prefix to session key
		$name = 'hashover-' . $name;

		// Check if session value exists
		if (!empty ($_SESSION[$name])) {
			// If so, store as value for cleaner code
			$value = $_SESSION[$name];

			// Strip escape slashes from session value
			$value = $this->setup->stripMagicQuotes ($value);

			// Return trimmed value if told to
			if ($trim === true) {
				$value = trim ($value, " \r\n\t");
			}

			// Otherwise, return value as-is
			return $value;
		}

		// If not, return null
		return null;
	}

	// Set login credentials
	public function setCredentials ()
	{
		// Set login session values
		$this->sessionSet ('name', $this->name);
		$this->sessionSet ('password', $this->password);
		$this->sessionSet ('website', $this->website);

		// Check if an email was given
		if (!empty ($this->email)) {
			// If so, generate encrypted string / decryption keys from email
			$email = $this->crypto->encrypt ($this->email);

			// And set email and encryption session values
			$this->sessionSet ('email', $email['encrypted']);
			$this->sessionSet ('encryption', $email['keys']);
		} else {
			// If not, remove email and encryption session values
			$this->sessionSet ('email', '');
			$this->sessionSet ('encryption', '');
		}
	}

	// Get login credentials
	public function getCredentials ()
	{
		// Get user name via session value
		$this->name = $this->sessionGet ('name', true);

		// Get user password via session value
		$this->password = $this->sessionGet ('password', true);

		// Decrypt email session value
		$encrypted_email = $this->sessionGet ('email', true);
		$encryption = $this->sessionGet ('encryption', true);
		$email = $this->crypto->decrypt ($encrypted_email, $encryption);

		// Validate email address
		if (filter_var ($email, FILTER_VALIDATE_EMAIL)) {
			$this->email = trim ($email, " \r\n\t");
		}

		// Get user website via session value
		$this->website = $this->sessionGet ('website', true);

		// Get login hash via session value
		$this->loginHash = $this->sessionGet ('login', true);
	}

	// Main login method
	public function setLogin ()
	{
		// Set login session value
		$this->sessionSet ('login', $this->loginHash);
	}

	// Main logout method
	public function clearLogin ()
	{
		// Remove login session value
		$this->sessionSet ('login', '');
	}
}