/*
 * Licensed under the Apache License, Version 2.0 (the "License");
 * you may not use this file except in compliance with the License.
 * You may obtain a copy of the License at
 *
 *     http://www.apache.org/licenses/LICENSE-2.0
 *
 * Unless required by applicable law or agreed to in writing, software
 * distributed under the License is distributed on an "AS IS" BASIS,
 * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
 * See the License for the specific language governing permissions and
 * limitations under the License.
 */
package io.prestosql.queryeditorui.resources;

import com.google.inject.Inject;
import io.prestosql.queryeditorui.protocol.UserInfo;
import io.prestosql.security.AccessControl;
import io.prestosql.security.AccessControlUtil;
import io.prestosql.server.HttpRequestSessionContext;
import io.prestosql.spi.security.GroupProvider;

import javax.servlet.http.HttpServletRequest;
import javax.ws.rs.GET;
import javax.ws.rs.Path;
import javax.ws.rs.Produces;
import javax.ws.rs.core.Context;
import javax.ws.rs.core.MediaType;
import javax.ws.rs.core.Response;
import javax.ws.rs.core.SecurityContext;

@Path("/api/user")
public class UserResource
{
    private final AccessControl accessControl;
    private final GroupProvider groupProvider;

    @Inject
    public UserResource(AccessControl accessControl, GroupProvider groupProvider)
    {
        this.accessControl = accessControl;
        this.groupProvider = groupProvider;
    }

    @GET
    @Path("")
    @Produces(MediaType.APPLICATION_JSON)
    public Response getCurrentUser(@Context HttpServletRequest request,
            @Context SecurityContext securityContext)
    {
        String user = AccessControlUtil.getUser(accessControl, new HttpRequestSessionContext(request, groupProvider));
        return Response.ok(new UserInfo(user, securityContext.isSecure())).build();
    }
}
