#-*- coding: utf-8 -*-

"""

 (c) 2014 - Copyright Red Hat Inc

 Authors:

   Pierre-Yves Chibon <pingou@pingoured.fr></pingou@pingoured.fr>

"""

## These two lines are needed to run on EL6

__requires__ = ['SQLAlchemy >= 0.8', 'jinja2 >= 2.4']

import pkg_resources

__version__ = '0.1'

import logging

import os

import subprocess

import textwrap

import urlparse

from logging.handlers import SMTPHandler

import arrow

import flask

import pygit2

from flask_fas_openid import FAS

from functools import wraps

from sqlalchemy.exc import SQLAlchemyError

import progit.lib

import progit.doc_utils

# Create the application.

APP = flask.Flask(__name__)

APP.jinja_env.trim_blocks = True

APP.jinja_env.lstrip_blocks = True

# set up FAS

APP.config.from_object('progit.default_config')

if 'PROGIT_CONFIG' in os.environ:

    APP.config.from_envvar('PROGIT_CONFIG')

FAS = FAS(APP)

SESSION = progit.lib.create_session(APP.config['DB_URL'])

# Set up the logger

## Send emails for big exception

mail_handler = SMTPHandler(

    APP.config.get('SMTP_SERVER', '127.0.0.1'),

    'nobody@fedoraproject.org',

    APP.config.get('MAIL_ADMIN', APP.config['EMAIL_ERROR']),

    'Progit error')

mail_handler.setFormatter(logging.Formatter('''

    Message type:       %(levelname)s

    Location:           %(pathname)s:%(lineno)d

    Module:             %(module)s

    Function:           %(funcName)s

    Time:               %(asctime)s

    Message:

    %(message)s

'''))

mail_handler.setLevel(logging.ERROR)

if not APP.debug:

    APP.logger.addHandler(mail_handler)

## Send classic logs into syslog

handler = logging.StreamHandler()

handler.setLevel(APP.config.get('log_level', 'INFO'))

APP.logger.addHandler(handler)

LOG = APP.logger

def authenticated():

    return hasattr(flask.g, 'fas_user') and flask.g.fas_user

def is_safe_url(target):

    """ Checks that the target url is safe and sending to the current

    website not some other malicious one.

    """

    ref_url = urlparse.urlparse(flask.request.host_url)

    test_url = urlparse.urlparse(

        urlparse.urljoin(flask.request.host_url, target))

    return test_url.scheme in ('http', 'https') and \

        ref_url.netloc == test_url.netloc

def is_admin():

    """ Return whether the user is admin for this application or not. """

    if not authenticated() \

            or not flask.g.fas_user.cla_done \

            or len(flask.g.fas_user.groups) < 1:

        return False

    admins = APP.config['ADMIN_GROUP']

    if isinstance(admins, basestring):

        admins = set([admins])

    else:  # pragma: no cover

        admins = set(admins)

    groups = set(flask.g.fas_user.groups)

    return not groups.isdisjoint(admins)

def is_repo_admin(repo_obj):

    """ Return whether the user is an admin of the provided repo. """

    if not authenticated() \

            or not flask.g.fas_user.cla_done:

        return False

    user = flask.g.fas_user.username

    return user == repo_obj.user.user or (

        user in [user.user for user in repo_obj.users])

def generate_gitolite_acls():

    """ Generate the gitolite configuration file for all repos

    """

    progit.lib.generate_gitolite_acls(

        SESSION, APP.config['GITOLITE_CONFIG'])

    gitolite_folder = APP.config.get('GITOLITE_HOME', None)

    if gitolite_folder:

        cmd = 'GL_RC=%s GL_BINDIR=%s gl-compile-conf' % (

            APP.config.get('GL_RC'), APP.config.get('GL_BINDIR')

        )

        output = subprocess.Popen(

            cmd,

            shell=True,

            stdout=subprocess.PIPE,

            stderr=subprocess.PIPE,

            cwd=gitolite_folder

        )

def generate_gitolite_key(user, key):

    """ Generate the gitolite ssh key file for the specified user

    """

    gitolite_keydir = APP.config.get('GITOLITE_KEYDIR', None)

    if gitolite_keydir:

        keyfile = os.path.join(gitolite_keydir, '%s.pub' % user)

        with open(keyfile, 'w') as stream:

            stream.write(key + '\n')

def generate_authorized_key_file():

    """ Regenerate the `authorized_keys` file used by gitolite.

    """

    gitolite_home = APP.config.get('GITOLITE_HOME', None)

    if gitolite_home:

        users = progit.lib.get_all_users(SESSION)

        authorized_file = os.path.join(

            gitolite_home, '.ssh', 'authorized_keys')

        with open(authorized_file, 'w') as stream:

            stream.write('# gitolite start\n')

            for user in users:

                if not user.public_ssh_key:

                    continue

                row = 'command="/usr/bin/gl-auth-command %s",' \

                      'no-port-forwarding,no-X11-forwarding,'\

                      'no-agent-forwarding,no-pty %s' % (

                          user.user, user.public_ssh_key)

                stream.write(row + '\n')

            stream.write('# gitolite end\n')

def cla_required(function):

    """ Flask decorator to retrict access to CLA signed user.

To use this decorator you need to have a function named 'auth_login'.

Without that function the redirect if the user is not logged in will not

work.

"""

    @wraps(function)

    def decorated_function(*args, **kwargs):

        """ Decorated function, actually does the work. """

        if not authenticated():

            return flask.redirect(

                flask.url_for('auth_login', next=flask.request.url))

        elif not flask.g.fas_user.cla_done:

            flask.flash('You must sign the CLA (Contributor License '

                        'Agreement to use progit', 'errors')

            return flask.redirect(flask.url_for('.index'))

        return function(*args, **kwargs)

    return decorated_function

@APP.context_processor

def inject_variables():

    """ With this decorator we can set some variables to all templates.

    """

    user_admin = is_admin()

    return dict(

        version=__version__,

        admin=user_admin,

        authenticated=authenticated(),

    )

@APP.template_filter('lastcommit_date')

def lastcommit_date_filter(repo):

    """ Template filter returning the last commit date of the provided repo.

    """

    if not repo.is_empty:

        commit = repo[repo.head.target]

        return arrow.get(commit.commit_time).humanize()

@APP.template_filter('humanize')

def humanize_date(date):

    """ Template filter returning the last commit date of the provided repo.

    """

    return arrow.get(date).humanize()

@APP.template_filter('rst2html')

def rst2html(rst_string):

    """ Template filter transforming rst text into html

    """

    if rst_string:

        return progit.doc_utils.convert_doc(unicode(rst_string))

@APP.template_filter('format_loc')

def format_loc(loc):

    """ Template filter putting the provided lines of code into a table

    """

    output = [

        '
',

        ''

    ]

    cnt = 1

    for line in loc.split('\n'):

        output.append(

            '%s' % (cnt, cnt, cnt))

        cnt += 1

        if not line:

            output.append(line)

            continue

        if line == '':

            continue

        if line.startswith('

            line = line.split('
')[1]

        output.append('
%s
' % line)

        output.append('')

    output.append('')

    return '\n'.join(output)

@APP.template_filter('wraps')

def text_wraps(text, size=10):

    """ Template filter to wrap text at a specified size

    """

    if text:

        parts = textwrap.wrap(text, size)

        if len(parts) > 1:

            parts = '%s...' % parts[0]

        else:

            parts = parts[0]

        return parts

@FAS.postlogin

def set_user(return_url):

    ''' After login method. '''

    try:

        progit.lib.set_up_user(

            session=SESSION,

            username=flask.g.fas_user.username,

            fullname=flask.g.fas_user.fullname,

            user_email=flask.g.fas_user.email,

        )

        SESSION.commit()

    except SQLAlchemyError, err:

        SESSION.rollback()

        LOG.debug(err)

        LOG.exception(err)

        flask.flash(

            'Could not set up you as a user properly, please contact '

            'an admin', 'error')

    return flask.redirect(return_url)

@APP.route('/login/', methods=('GET', 'POST'))

def auth_login():

    """ Method to log into the application using FAS OpenID. """

    return_point = flask.url_for('index')

    if 'next' in flask.request.args:

        if is_safe_url(flask.request.args['next']):

            return_point = flask.request.args['next']

    if authenticated():

        return flask.redirect(return_point)

    return FAS.login(return_url=return_point)

@APP.route('/logout/')

def auth_logout():

    """ Method to log out from the application. """

    if not authenticated():

        return flask.redirect(flask.url_for('index'))

    FAS.logout()

    flask.flash('You have been logged out')

    return flask.redirect(flask.url_for('index'))

def __get_file_in_tree(repo_obj, tree, filepath):

    ''' Retrieve the entry corresponding to the provided filename in a

    given tree.

    '''

    filename = filepath[0]

    if isinstance(tree, pygit2.Blob):

        return

    for el in tree:

        if el.name == filename:

            if len(filepath) == 1:

                return repo_obj[el.oid]

            else:

                return __get_file_in_tree(

                    repo_obj, repo_obj[el.oid], filepath[1:])

## Import the application

import progit.app

import progit.admin

import progit.docs

import progit.fork

import progit.issues

import progit.plugins

import progit.repo