Subversion Repositories SmartDukaan

package com.spice.profitmandi.web.controller;

import com.google.gson.Gson;

import com.google.gson.reflect.TypeToken;

import com.spice.profitmandi.common.exception.ProfitMandiBusinessException;

import com.spice.profitmandi.common.model.Location;

import com.spice.profitmandi.common.model.ProfitMandiConstants;

import com.spice.profitmandi.common.model.ProfitMandiResponse;

import com.spice.profitmandi.common.web.client.RestClient;

import com.spice.profitmandi.dao.entity.auth.AuthUser;

import com.spice.profitmandi.dao.entity.dtr.*;

import com.spice.profitmandi.dao.entity.fofo.FofoStore;

import com.spice.profitmandi.dao.entity.user.Device;

import com.spice.profitmandi.dao.enumuration.dtr.AccountType;

import com.spice.profitmandi.dao.enumuration.dtr.RoleType;

import com.spice.profitmandi.dao.repository.auth.AuthRepository;

import com.spice.profitmandi.dao.repository.catalog.DeviceRepository;

import com.spice.profitmandi.dao.repository.cs.DemoPartnerAccessService;

import com.spice.profitmandi.dao.repository.dtr.*;

import com.spice.profitmandi.service.AuthService;

import com.spice.profitmandi.service.authentication.RoleManager;

import com.spice.profitmandi.service.user.RetailerService;

import com.spice.profitmandi.service.user.UserService;

import com.spice.profitmandi.web.model.LoginDetails;

import com.spice.profitmandi.web.util.CookiesProcessor;

import com.spice.profitmandi.web.util.GoogleTokenUtil;

import com.spice.profitmandi.web.util.MVCResponseSender;

import org.apache.commons.lang.StringUtils;

import org.apache.http.NameValuePair;

import org.apache.http.client.utils.URLEncodedUtils;

import org.apache.http.message.BasicNameValuePair;

import org.apache.logging.log4j.LogManager;

import org.apache.logging.log4j.Logger;

import org.springframework.beans.factory.annotation.Autowired;

import org.springframework.beans.factory.annotation.Value;

import org.springframework.stereotype.Controller;

import org.springframework.ui.Model;

import org.springframework.ui.ModelMap;

import org.springframework.web.bind.annotation.*;

import javax.servlet.http.Cookie;

import javax.servlet.http.HttpServletRequest;

import javax.servlet.http.HttpServletResponse;

import org.springframework.transaction.annotation.Transactional;

import java.lang.reflect.Type;

import java.time.LocalDateTime;

import java.util.*;

import java.util.stream.Collectors;

@Controller

@Transactional(rollbackFor = Throwable.class)

public class LoginController {

    private static final Logger LOGGER = LogManager.getLogger(LoginController.class);

    @Autowired

    private GoogleTokenUtil googleTokenUtil;

    @Autowired

    private RoleManager roleManager;

    @Autowired

    private DeviceRepository deviceRepository;

    @Autowired

    private RetailerRepository retailerRepository;

    @Autowired

    private RetailerService retailerService;

    @Autowired

    private UserRepository userRepository;

    @Autowired

    private UserAccountRepository userAccountRepository;

    @Autowired

    private UserRoleRepository userRoleRepository;

    @Autowired

    private RoleRepository roleRepository;

    @Autowired

    private FofoStoreRepository fofoStoreRepository;

    @Autowired

    private MVCResponseSender mvcResponseSender;

    @Autowired

    private RestClient restClient;

    @Autowired

    private CookiesProcessor cookiesProcessor;

    @Value("${google.api.key}")

    private String googleApiKey;

    @Value("${app.token.url}")

    private String appTokenUrl;

    @Value("${angular.app.url}")

    private String appUrl;

    @Value("${react.app.url}")

    private String reactAppUrl;

    @Value("${admin.token}")

    private String adminToken;

    @Autowired

    private AuthService authService;

    @Autowired

    private UserService userService;

    @Autowired

    private AuthRepository authRepository;

    @Autowired

    private DemoPartnerAccessService demoPartnerAccessService;

    @RequestMapping(value = "/login", method = RequestMethod.GET)

    public String loginPage(HttpServletRequest request, HttpServletResponse response, Model model) throws Exception {

        LOGGER.info("Context Path is {}", request.getContextPath());

        try {

            LoginDetails fofoDetails = cookiesProcessor.getCookiesObject(request);

            LOGGER.info("Request session is already exist, should be redirect to as per roles assigned");

            String redirectUrl = null;

            Role roleRetailer = roleRepository.selectByName(RoleType.RETAILER.toString());

            Role roleFofo = roleRepository.selectByName(RoleType.FOFO.toString());

            Role roleFofoAdmin = roleRepository.selectByName(RoleType.FOFO_ADMIN.toString());

            if (fofoDetails.getRoleIds().contains(roleFofoAdmin.getId())) {

                redirectUrl = "/dashboard";

            } else if (fofoDetails.getRoleIds().contains(roleRetailer.getId())

                    && fofoDetails.getRoleIds().contains(roleFofo.getId())) {

                FofoStore fofoStore = fofoStoreRepository.selectByRetailerId(fofoDetails.getFofoId());

                if (!fofoStore.isActive()) {

                    cookiesProcessor.removeCookies(request, response);

                    throw new ProfitMandiBusinessException("", "", "");

                }

                redirectUrl = "/dashboard";

            } else {

                redirectUrl = "/login";

            }

            return "redirect:" + redirectUrl;

        } catch (ProfitMandiBusinessException profitMandiBusinessException) {

            model.addAttribute("googleApiKey", googleApiKey);

            model.addAttribute("appContextPath", request.getContextPath());

            return "login";

        }

    }

    @RequestMapping(value = "/", method = RequestMethod.GET)

    public String home() {

        return "redirect:/login";

    }

    @RequestMapping(value = "/mobileapp", method = RequestMethod.GET)

    public String mobileApp(HttpServletRequest request, Model model, @RequestParam(defaultValue = "") String emailId, @RequestParam(defaultValue = "") String appType)

            throws Exception {

        LoginDetails fofoDetails = cookiesProcessor.getCookiesObject(request);

        if (roleManager.isAdmin(fofoDetails.getRoleIds())) {

            if (StringUtils.isEmpty(emailId)) {

                AuthUser authUser = authRepository.selectByEmailOrMobile(fofoDetails.getEmailId());

                model.addAttribute("authToken", getToken(authUser.getGmailId()));

            } else {

                validateSalesPartnerAccess(fofoDetails.getEmailId(), emailId);

                model.addAttribute("authToken", getToken(emailId));

                model.addAttribute("androidId", getAndroidId(emailId));

            }

        } else {

            emailId = fofoDetails.getEmailId();

            model.addAttribute("authToken", getToken(emailId));

            model.addAttribute("androidId", getAndroidId(emailId));

        }

        model.addAttribute("internal", true);

        if (appType.equals("react")) {

            model.addAttribute("appUrl", reactAppUrl);

        } else {

            model.addAttribute("appUrl", appUrl);

        }

        return "mobileapp";

    }

    // Sales position holders may only take a partner's app token for their position or demo partners.

    private void validateSalesPartnerAccess(String callerEmail, String partnerEmail) throws Exception {

        AuthUser authUser = authRepository.selectByEmailOrMobile(callerEmail);

        if (authUser == null || !demoPartnerAccessService.isSalesUser(authUser.getId())) {

            return;

        }

        User partnerUser = userRepository.selectByEmailId(partnerEmail);

        int fofoId = userAccountRepository.selectRetailerIdByUserId(partnerUser.getId());

        if (!demoPartnerAccessService.isAllowed(authUser.getId(), fofoId)) {

            throw new ProfitMandiBusinessException("emailId", partnerEmail, "Partner is not mapped to you by position or demo access");

        }

    }

    private String getAndroidId(String emailId) throws Exception {

        User user = userRepository.selectByEmailId(emailId);

        List<Device> devices = deviceRepository.selectByUserIdAndModifiedTimestamp(Arrays.asList(user.getId()),

                LocalDateTime.now().minusYears(2), LocalDateTime.now());

        if (devices.size() > 0) {

            Device device = devices.get(0);

            return device.getAndroidId();

        } else {

            return "";

        }

    }

    private String getToken(String emailId) throws Exception {

        List<NameValuePair> nameValuePairs = new ArrayList<>();

        nameValuePairs.add(new BasicNameValuePair("adminToken", this.adminToken));

        nameValuePairs.add(new BasicNameValuePair("emailId", emailId));

        String queryString = URLEncodedUtils.format(nameValuePairs, "UTF-8");

        String response = restClient.post(this.appTokenUrl + queryString,

                new HashMap<>(), new HashMap<>());

        Type t = new TypeToken<ProfitMandiResponse<Map<String, Object>>>() {

        }.getType();

        ProfitMandiResponse<Map<String, Object>> apiResponse = new Gson().fromJson(response, t);

        if (apiResponse.getStatusCode().equals("200")) {

            return (new StringBuilder((String) apiResponse.getResponse().get("token")).reverse().toString());

        } else {

            throw new Exception("Unauthorised access");

        }

    }

    @RequestMapping(value = "/login-as-partner", method = RequestMethod.GET)

    public String adminLogin(HttpServletRequest request, Model model, HttpServletResponse response,

                             @RequestParam int fofoId) throws Exception {

        LoginDetails fofoDetails = cookiesProcessor.getCookiesObject(request);

        if (roleManager.isAdmin(fofoDetails.getRoleIds())) {

            int userId = userAccountRepository.selectUserIdByRetailerId(fofoId);

            User user = userRepository.selectById(userId);

            Set<Integer> roleIds = userRoleRepository.selectByUserId(userId).stream().map(x -> x.getRoleId())

                    .collect(Collectors.toSet());

            LoginDetails newFofoDetails = new LoginDetails();

            newFofoDetails.setFofoId(fofoId);

            newFofoDetails.setRoleIds(roleIds);

            newFofoDetails.setEmailId(user.getEmailId());

            model.addAttribute("response1", true);

            this.addCookiesToResponse(newFofoDetails, request, response);

        } else {

            throw new ProfitMandiBusinessException("", "", "");

        }

        return "response";

    }

    @RequestMapping(value = "/login-as-partner-readonly", method = RequestMethod.GET)

    public String readonlyLogin(HttpServletRequest request, Model model, HttpServletResponse response,

                                @RequestParam int fofoId) throws Exception {

        LoginDetails fofoDetails = cookiesProcessor.getCookiesObject(request);

        if (roleManager.isAdmin(fofoDetails.getRoleIds())) {

            AuthUser authUser = authRepository.selectByEmailOrMobile(fofoDetails.getEmailId());

            if (authUser == null || !demoPartnerAccessService.isAllowed(authUser.getId(), fofoId)) {

                throw new ProfitMandiBusinessException("fofoId", fofoId, "Partner is not mapped to you by position or demo access");

            }

            int userId = userAccountRepository.selectUserIdByRetailerId(fofoId);

            User user = userRepository.selectById(userId);

            Set<Integer> roleIds = userRoleRepository.selectByUserId(userId).stream().map(x -> x.getRoleId())

                    .collect(Collectors.toSet());

            LoginDetails newFofoDetails = new LoginDetails();

            newFofoDetails.setFofoId(fofoId);

            newFofoDetails.setRoleIds(roleIds);

            newFofoDetails.setEmailId(user.getEmailId());

            newFofoDetails.setReadOnly(true);

            model.addAttribute("response1", true);

            this.addCookiesToResponse(newFofoDetails, request, response);

        } else {

            throw new ProfitMandiBusinessException("", "", "");

        }

        return "response";

    }

    @RequestMapping(value = "/login", method = RequestMethod.POST)

    public String login(HttpServletRequest request, HttpServletResponse response,

                        @RequestParam(name = ProfitMandiConstants.TOKEN) String token,

                        @RequestParam(name = ProfitMandiConstants.EMAIL_ID_OR_MOBILE_NUMBER, defaultValue = "") String emailIdOrMobileNumber,

                        @RequestParam(name = "password", defaultValue = "") String password, Model model) throws Exception {

        LoginDetails fofoDetails = new LoginDetails();

        Set<Integer> roleIds = new HashSet<>();

        fofoDetails.setRoleIds(roleIds);

        String emailId = null;

        String name = null;

        User user = null;

        try {

            // if role is retailer then FOFO_ID is retailerId else it is userid as normal

            // user's wont have retailer id.

            if (StringUtils.isEmpty(token)) {

                if (authService.authenticate(emailIdOrMobileNumber, password)) {

                    AuthUser authUser = authRepository.selectByEmailOrMobile(emailIdOrMobileNumber);

                    if (authUser == null) {

                        throw new ProfitMandiBusinessException("Authentication", "Email or Mobile", "Invalid Email Or Mobile");

                    }

                    emailId = authUser.getEmailId();

                    name = authUser.getFirstName() + " " + authUser.getLastName();

                    authUser.setLastLoginTimestamp(LocalDateTime.now());

                } else {

                    // TODO: Add login with email and password

                    user = userService.authenticate(emailIdOrMobileNumber, password);

                    if (user != null) {

                        emailId = user.getEmailId();

                    } else {

                        LOGGER.error("User not found with given emailIdOrMobileNumber [{}]", emailIdOrMobileNumber);

                        model.addAttribute("response1", mvcResponseSender.createResponseString("RTLR_OK_1002", true,

                                request.getContextPath() + "/login", "Email"));

                        return "response";

                    }

                }

            } else {

                try {

                    emailId = googleTokenUtil.getEmailId(token);

                } catch (Exception e) {

                    // in case we cannot connect to google server.

                    emailId = emailIdOrMobileNumber;

                }

            }

            fofoDetails.setEmailId(emailId);

            fofoDetails.setFofoId(-1);

            if (user == null) {

                try {

                    user = userRepository.selectByEmailId(emailId);

                } catch (ProfitMandiBusinessException profitMandiBusinessException) {

                    LOGGER.error("User not found with given emailId [{}]", emailId);

                    try {

                        user = userRepository.selectBySecondryEmailId(emailId);

                    } catch (ProfitMandiBusinessException exception) {

                        LOGGER.error("User not found with given emailId", exception);

                        model.addAttribute("response1", mvcResponseSender.createResponseString("RTLR_OK_1002", true,

                                request.getContextPath() + "/login", "Email"));

                        return "response";

                    }

                }

            }

            if (user != null) {

                fofoDetails.setFofoId(user.getId());

                try {

                    List<UserRole> userRoles = userRoleRepository.selectByUserId(user.getId());

                    for (UserRole userRole : userRoles) {

                        roleIds.add(userRole.getRoleId());

                    }

                    List<Role> roles = roleRepository.selectByIds(roleIds);

                    for (Role role : roles) {

                        if (role.getName().equals(RoleType.RETAILER.toString())) {

                            UserAccount userAccounts = userAccountRepository.selectByUserIdType(user.getId(), AccountType.saholic);

                            Retailer retailer = retailerRepository.selectById(userAccounts.getAccountKey());

                            fofoDetails.setFofoId(retailer.getId());

                        }

                    }

                } catch (ProfitMandiBusinessException pmbe) {

                    LOGGER.error("Data Inconsistent", pmbe);

                }

            }

            String redirectUrl = null;

            Role roleFofo = roleRepository.selectByName(RoleType.FOFO.toString());

            Role roleFofoAdmin = roleRepository.selectByName(RoleType.FOFO_ADMIN.toString());

            if (fofoDetails.getRoleIds().contains(roleFofo.getId())) {

                redirectUrl = "/dashboard";

            } else {

                redirectUrl = "/login";

            }

            if (redirectUrl.equals("/dashboard")) {

                user.setLoginTimestamp(LocalDateTime.now());

                this.addCookiesToResponse(fofoDetails, request, response);

                LOGGER.info("Requested token email_id is valid, user login to system, shoud be redirect to {}", redirectUrl);

                model.addAttribute("response1", mvcResponseSender.createResponseString("RTLR_OK_1002", true,

                        request.getContextPath() + redirectUrl, name));

            } else {

                LOGGER.error("Requested token email_id is not valid, please try to login");

                /**

                 * TODO:Amit This redirect should be handle.

                 */

                throw new ProfitMandiBusinessException(ProfitMandiConstants.EMAIL_ID, fofoDetails.getEmailId(), "RTLR_1000");

            }

            return "response";

        } catch (ProfitMandiBusinessException profitMandiBusinessException) {

            LOGGER.warn("Error : ", profitMandiBusinessException);

            model.addAttribute("response1",

                    mvcResponseSender.createResponseString(profitMandiBusinessException.getCode(), false, "/error"));

            return "response";

        } catch (Exception e) {

            e.printStackTrace();

            model.addAttribute("response1",

                    mvcResponseSender.createResponseString(

                            "You are not authorised! " + "Please contact the team if you feel this is incorrect", false,

                            "/error"));

            return "response";

        }

    }

    @PostMapping(value = "/forgetPassword")

    public String forgetPasswordPage(@RequestParam(name = ProfitMandiConstants.EMAIL_ID, defaultValue = "") String emailId, Model model) throws Exception {

        try {

            LOGGER.info("Forgetting password of: [{}]",emailId);

            authService.resetPassword(emailId);

        } catch (Exception exception){

            try {

                userService.resetPassword(emailId);

            } catch (Exception e){

                LOGGER.info("Forgetting password of: [{}] - {}",emailId, e);

                throw new ProfitMandiBusinessException("Password Reset Email", emailId, "Could not send password reset mail. Password Could not be reset");

            }

        }

        model.addAttribute("response1", mvcResponseSender.createResponseString(true));

        LOGGER.info("completed");

        return "response";

    }

    private void addCookiesToResponse(LoginDetails fofoDetails, HttpServletRequest request, HttpServletResponse response) {

        List<String> roleIds = new ArrayList<>();

        for (int roleId : fofoDetails.getRoleIds()) {

            roleIds.add(String.valueOf(roleId));

        }

        Cookie cookieRoleIds = new Cookie(ProfitMandiConstants.ROLE_IDS, String.join("-", roleIds));

        cookieRoleIds.setDomain(request.getServerName());

        cookieRoleIds.setPath(request.getContextPath());

        Cookie cookieFofoId = new Cookie(ProfitMandiConstants.FOFO_ID, String.valueOf(fofoDetails.getFofoId()));

        cookieFofoId.setDomain(request.getServerName());

        cookieFofoId.setPath(request.getContextPath());

        Cookie cookieEmailId = new Cookie(ProfitMandiConstants.EMAIL_ID, fofoDetails.getEmailId());

        cookieEmailId.setDomain(request.getServerName());

        cookieEmailId.setPath(request.getContextPath());

        Cookie cookieReadOnly = new Cookie(ProfitMandiConstants.READONLY_KEY, fofoDetails.isReadOnly() + "");

        cookieReadOnly.setDomain(request.getServerName());

        cookieReadOnly.setPath(request.getContextPath());

        response.addCookie(cookieFofoId);

        response.addCookie(cookieEmailId);

        response.addCookie(cookieRoleIds);

        response.addCookie(cookieReadOnly);

    }

    @RequestMapping(value = "/logout", method = RequestMethod.GET)

    public String logout(HttpServletRequest request, @ModelAttribute("model") ModelMap model,

                         HttpServletResponse response) throws Exception {

        try {

            LoginDetails loginDetails = cookiesProcessor.getCookiesObject(request);

            User user = null;

            try {

                user = userRepository.selectByEmailId(loginDetails.getEmailId());

            } catch (ProfitMandiBusinessException profitMandiBusinessException) {

                LOGGER.warn("User not found with given emailId", profitMandiBusinessException);

            }

            if (user == null) {

                user = userRepository.selectBySecondryEmailId(loginDetails.getEmailId());

            }

            user.setLogoutTimestamp(LocalDateTime.now());

            cookiesProcessor.removeCookies(request, response);

            LOGGER.info("Logout is successfull, should be redirect to /login");

            return "redirect:/login";

        } catch (ProfitMandiBusinessException profitMandiBusinessException) {

            LOGGER.info("Error occured while removing requested cookies, should be redirect to /login");

            return "redirect:/login";

        }

    }

    @RequestMapping(value = "/partner/location", method = RequestMethod.PUT)

    public String setLocation(HttpServletRequest request, Model model, @RequestBody Location location)

            throws Exception {

        LoginDetails loginDetails = cookiesProcessor.getCookiesObject(request);

        boolean response = true;

        try {

            FofoStore fs = fofoStoreRepository.selectByRetailerId(loginDetails.getFofoId());

            if (fs.getLatitude() == null) {

                fs.setLatitude(location.getLatitude());

                fs.setLongitude(location.getLongitude());

            }

            model.addAttribute("response1", response);

        } catch (Exception e) {

            LOGGER.error("FofoStore Code not found of fofoId {}", loginDetails.getFofoId());

        }

        return "response";

    }

}