# -*- coding: utf-8 -*-

"""Set of base controllers, which are directly plugged into the application

object to handle publication.

:organization: Logilab

:copyright: 2001-2009 LOGILAB S.A. (Paris, FRANCE), all rights reserved.

:contact: http://www.logilab.fr/ -- mailto:contact@logilab.fr

"""

__docformat__ = "restructuredtext en"

from smtplib import SMTP

import simplejson

from logilab.common.decorators import cached

from cubicweb import NoSelectableObject, ValidationError, ObjectNotFound, typed_eid

from cubicweb.utils import strptime

from cubicweb.selectors import yes, match_user_groups

from cubicweb.view import STRICT_DOCTYPE, CW_XHTML_EXTENSIONS

from cubicweb.common.mail import format_mail

from cubicweb.web import ExplicitLogin, Redirect, RemoteCallFailed

from cubicweb.web.formrenderers import FormRenderer

from cubicweb.web.controller import Controller

from cubicweb.web.views import vid_from_rset

try:

    from cubicweb.web.facet import (FilterRQLBuilder, get_facet,

                                    prepare_facets_rqlst)

    HAS_SEARCH_RESTRICTION = True

except ImportError: # gae

    HAS_SEARCH_RESTRICTION = False

class LoginController(Controller):

    id = 'login'

    def publish(self, rset=None):

        """log in the application"""

        if self.config['auth-mode'] == 'http':

            # HTTP authentication

            raise ExplicitLogin()

        else:

            # Cookie authentication

            return self.appli.need_login_content(self.req)

class LogoutController(Controller):

    id = 'logout'

    def publish(self, rset=None):

        """logout from the application"""

        return self.appli.session_handler.logout(self.req)

class ViewController(Controller):

    """standard entry point :

    - build result set

    - select and call main template

    """

    id = 'view'

    template = 'main-template'

    def publish(self, rset=None):

        """publish a request, returning an encoded string"""

        view, rset = self._select_view_and_rset(rset)

        self.add_to_breadcrumbs(view)

        self.validate_cache(view)

        template = self.appli.main_template_id(self.req)

        return self.vreg.main_template(self.req, template, rset=rset, view=view)

    def _select_view_and_rset(self, rset):

        req = self.req

        if rset is None and not hasattr(req, '_rql_processed'):

            req._rql_processed = True

            rset = self.process_rql(req.form.get('rql'))

        if rset and rset.rowcount == 1 and '__method' in req.form:

            entity = rset.get_entity(0, 0)

            try:

                method = getattr(entity, req.form.pop('__method'))

                method()

            except Exception, ex:

                self.exception('while handling __method')

                req.set_message(req._("error while handling __method: %s") % req._(ex))

        vid = req.form.get('vid') or vid_from_rset(req, rset, self.schema)

        try:

            view = self.vreg.select_view(vid, req, rset)

        except ObjectNotFound:

            self.warning("the view %s could not be found", vid)

            req.set_message(req._("The view %s could not be found") % vid)

            vid = vid_from_rset(req, rset, self.schema)

            view = self.vreg.select_view(vid, req, rset)

        except NoSelectableObject:

            if rset:

                req.set_message(req._("The view %s can not be applied to this query") % vid)

            else:

                req.set_message(req._("You have no access to this view or it's not applyable to current data"))

            self.warning("the view %s can not be applied to this query", vid)

            vid = vid_from_rset(req, rset, self.schema)

            view = self.vreg.select_view(vid, req, rset)

        return view, rset

    def add_to_breadcrumbs(self, view):

        # update breadcrumps **before** validating cache, unless the view

        # specifies explicitly it should not be added to breadcrumb or the

        # view is a binary view

        if view.add_to_breadcrumbs and not view.binary:

            self.req.update_breadcrumbs()

    def validate_cache(self, view):

        view.set_http_cache_headers()

        self.req.validate_cache()

    def execute_linkto(self, eid=None):

        """XXX __linkto parameter may cause security issue

        defined here since custom application controller inheriting from this

        one use this method?

        """

        req = self.req

        if not '__linkto' in req.form:

            return

        if eid is None:

            eid = typed_eid(req.form['eid'])

        for linkto in req.list_form_param('__linkto', pop=True):

            rtype, eids, target = linkto.split(':')

            assert target in ('subject', 'object')

            eids = eids.split('_')

            if target == 'subject':

                rql = 'SET X %s Y WHERE X eid %%(x)s, Y eid %%(y)s' % rtype

            else:

                rql = 'SET Y %s X WHERE X eid %%(x)s, Y eid %%(y)s' % rtype

            for teid in eids:

                req.execute(rql, {'x': eid, 'y': typed_eid(teid)}, ('x', 'y')) 

class FormValidatorController(Controller):

    id = 'validateform'

    def publish(self, rset=None):

        vreg = self.vreg

        try:

            ctrl = vreg.select(vreg.registry_objects('controllers', 'edit'),

                               req=self.req, appli=self.appli)

        except NoSelectableObject:

            status, args = (False, {None: self.req._('not authorized')})

        else:

            try:

                ctrl.publish(None, fromjson=True)

            except ValidationError, err:

                status, args = self.validation_error(err)

            except Redirect, err:

                try:

                    self.req.cnx.commit() # ValidationError may be raise on commit

                except ValidationError, err:

                    status, args = self.validation_error(err)

                else:

                    status, args = (True, err.location)

            except Exception, err:

                self.req.cnx.rollback()

                self.exception('unexpected error in validateform')

                try:

                    status, args = (False, self.req._(unicode(err)))

                except UnicodeError:

                    status, args = (False, repr(err))

            else:

                status, args = (False, '???')

        self.req.set_content_type('text/html')

        jsarg = simplejson.dumps( (status, args) )

        return """<script type="text/javascript">

 window.parent.handleFormValidationResponse('entityForm', null, %s);

</script>""" %  simplejson.dumps( (status, args) )

    def validation_error(self, err):

        self.req.cnx.rollback()

        try:

            eid = err.entity.eid

        except AttributeError:

            eid = err.entity

        return (False, (eid, err.errors))

def xmlize(source):

    head = u'<?xml version="1.0"?>\n' + STRICT_DOCTYPE % CW_XHTML_EXTENSIONS

    return head + u'<div xmlns="http://www.w3.org/1999/xhtml" xmlns:cubicweb="http://www.logilab.org/2008/cubicweb">%s</div>' % source.strip()

def jsonize(func):

    """sets correct content_type and calls `simplejson.dumps` on results

    """

    def wrapper(self, *args, **kwargs):

        self.req.set_content_type('application/json')

        result = func(self, *args, **kwargs)

        return simplejson.dumps(result)

    return wrapper

def check_pageid(func):

    """decorator which checks the given pageid is found in the

    user's session data

    """

    def wrapper(self, *args, **kwargs):

        data = self.req.get_session_data(self.req.pageid)

        if data is None:

            raise RemoteCallFailed(self.req._('pageid-not-found'))

        return func(self, *args, **kwargs)

    return wrapper

class JSonController(Controller):

    id = 'json'

    template = 'main'

    def publish(self, rset=None):

        mode = self.req.form.get('mode', 'html')

        self.req.pageid = self.req.form.get('pageid')

        try:

            func = getattr(self, '%s_exec' % mode)

        except AttributeError, ex:

            self.error('json controller got an unknown mode %r', mode)

            self.error('\t%s', ex)

            result = u''

        else:

            try:

                result = func(rset)

            except RemoteCallFailed:

                raise

            except Exception, ex:

                self.exception('an exception occured on json request(rset=%s): %s',

                               rset, ex)

                raise RemoteCallFailed(repr(ex))

        return result.encode(self.req.encoding)

    def _exec(self, rql, args=None, eidkey=None, rocheck=True):

        """json mode: execute RQL and return resultset as json"""

        if rocheck:

            self.ensure_ro_rql(rql)

        try:

            return self.req.execute(rql, args, eidkey)

        except Exception, ex:

            self.exception("error in _exec(rql=%s): %s", rql, ex)

            return None

        return None

    @jsonize

    def json_exec(self, rset=None):

        """json mode: execute RQL and return resultset as json"""

        rql = self.req.form.get('rql')

        if rset is None and rql:

            rset = self._exec(rql)

        return rset and rset.rows or []

    def _set_content_type(self, vobj, data):

        """sets req's content type according to vobj's content type

        (and xmlize data if needed)

        """

        content_type = vobj.content_type

        if content_type == 'application/xhtml+xml':

            self.req.set_content_type(content_type)

            return xmlize(data)

        return data

    def html_exec(self, rset=None):

        # XXX try to use the page-content template

        req = self.req

        rql = req.form.get('rql')

        if rset is None and rql:

            rset = self._exec(rql)

        vid = req.form.get('vid') or vid_from_rset(req, rset, self.schema)

        try:

            view = self.vreg.select_view(vid, req, rset)

        except NoSelectableObject:

            vid = req.form.get('fallbackvid', 'noresult')

            view = self.vreg.select_view(vid, req, rset)

        divid = req.form.get('divid', 'pageContent')

        # we need to call pagination before with the stream set

        stream = view.set_stream()

        if req.form.get('paginate'):

            if divid == 'pageContent':

                # mimick main template behaviour

                stream.write(u'<div id="pageContent">')

                vtitle = self.req.form.get('vtitle')

                if vtitle:

                    stream.write(u'<h1 class="vtitle">%s</h1>\n' % vtitle)

            view.pagination(req, rset, view.w, not view.need_navigation)

            if divid == 'pageContent':

                stream.write(u'<div id="contentmain">')

        view.dispatch()

        extresources = req.html_headers.getvalue(skiphead=True)

        if extresources:

            stream.write(u'<div class="ajaxHtmlHead">\n') # XXX use a widget ?

            stream.write(extresources)

            stream.write(u'</div>\n')

        if req.form.get('paginate') and divid == 'pageContent':

            stream.write(u'</div></div>')

        source = stream.getvalue()

        return self._set_content_type(view, source)

    def rawremote_exec(self, rset=None):

        """like remote_exec but doesn't change content type"""

        # no <arg> attribute means the callback takes no argument

        args = self.req.form.get('arg', ())

        if not isinstance(args, (list, tuple)):

            args = (args,)

        fname = self.req.form['fname']

        args = [simplejson.loads(arg) for arg in args]

        try:

            func = getattr(self, 'js_%s' % fname)

        except AttributeError:

            self.exception('rawremote_exec fname=%s', fname)

            return u""

        return func(*args)

    remote_exec = jsonize(rawremote_exec)

    def _rebuild_posted_form(self, names, values, action=None):

        form = {}

        for name, value in zip(names, values):

            # remove possible __action_xxx inputs

            if name.startswith('__action'):

                continue

            # form.setdefault(name, []).append(value)

            if name in form:

                curvalue = form[name]

                if isinstance(curvalue, list):

                    curvalue.append(value)

                else:

                    form[name] = [curvalue, value]

            else:

                form[name] = value

        # simulate click on __action_%s button to help the controller

        if action:

            form['__action_%s' % action] = u'whatever'

        return form

    def js_validate_form(self, action, names, values):

        # XXX this method (and correspoding js calls) should use the new

        #     `RemoteCallFailed` mechansim

        self.req.form = self._rebuild_posted_form(names, values, action)

        vreg = self.vreg

        try:

            ctrl = vreg.select(vreg.registry_objects('controllers', 'edit'),

                               req=self.req)

        except NoSelectableObject:

            return (False, {None: self.req._('not authorized')})

        try:

            ctrl.publish(None, fromjson=True)

        except ValidationError, err:

            self.req.cnx.rollback()

            if not err.entity or isinstance(err.entity, (long, int)):

                eid = err.entity

            else:

                eid = err.entity.eid

            return (False, (eid, err.errors))

        except Redirect, err:

            return (True, err.location)

        except Exception, err:

            self.req.cnx.rollback()

            self.exception('unexpected error in js_validateform')

            return (False, self.req._(str(err)))

        return (False, '???')

    def js_edit_field(self, action, names, values, rtype, eid):

        success, args = self.js_validate_form(action, names, values)

        if success:

            rset = self.req.execute('Any X,N WHERE X eid %%(x)s, X %s N' % rtype,

                                    {'x': eid}, 'x')

            entity = rset.get_entity(0, 0)

            return (success, args, entity.printable_value(rtype))

        else:

            return (success, args, None)

    def js_rql(self, rql):

        rset = self._exec(rql)