/*******************************************************************************
 * ============LICENSE_START====================================================
 * * org.onap.aaf
 * * ===========================================================================
 * * Copyright © 2017 AT&T Intellectual Property. All rights reserved.
 * * ===========================================================================
 * * Licensed under the Apache License, Version 2.0 (the "License");
 * * you may not use this file except in compliance with the License.
 * * You may obtain a copy of the License at
 * * 
 *  *      http://www.apache.org/licenses/LICENSE-2.0
 * * 
 *  * Unless required by applicable law or agreed to in writing, software
 * * distributed under the License is distributed on an "AS IS" BASIS,
 * * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
 * * See the License for the specific language governing permissions and
 * * limitations under the License.
 * * ============LICENSE_END====================================================
 * *
 * * ECOMP is a trademark and service mark of AT&T Intellectual Property.
 * *
 ******************************************************************************/
package org.onap.aaf.authz.cadi;

import static org.onap.aaf.authz.layer.Result.OK;

import java.util.Date;

import org.onap.aaf.authz.env.AuthzEnv;
import org.onap.aaf.authz.env.AuthzTrans;
import org.onap.aaf.authz.layer.Result;
import org.onap.aaf.dao.DAOException;
import org.onap.aaf.dao.aaf.hl.Question;

import org.onap.aaf.cadi.CredVal;

/**
 * DirectAAFUserPass is intended to provide password Validation directly from Cassandra Database, and is only
 * intended for use in AAF itself.  The normal "AAF Taf" objects are, of course, clients.
 * 
 *
 */
public class DirectAAFUserPass implements CredVal {
		private final AuthzEnv env;
	private final Question question;
	
	public DirectAAFUserPass(AuthzEnv env, Question question, String appPass) {
		this.env = env;
		this.question = question;
	}
	
	@Override
	public boolean validate(String user, Type type, byte[] pass) {
		try {
			AuthzTrans trans = env.newTransNoAvg();
			Result<Date> result = question.doesUserCredMatch(trans, user, pass);
			trans.logAuditTrail(env.info());
			switch(result.status) {
				case OK:
					return true;
				default:
					
					env.warn().log(user, "failed Password Validation:",result.errorString());
			}
		} catch (DAOException e) {
			System.out.println(" exception in DirectAAFUserPass class ");
			e.printStackTrace();
			env.error().log(e,"Cannot validate User/Pass from Cassandra");
		}
		return false;
	}


}