<%

  # API

  my $api = gitprep_api;

  # Parameters

  my $op = param('op') || '';

  my $user = param('user') || '';

  # Authentication

  unless ($api->logined($user)) {

    $self->redirect_to('/');

    return;

  }

  # Process form

  my $errors;

  if (lc $self->req->method eq 'post') {

    # Add ssh key

    if ($op eq 'add') {

      # Paramters

      my $params = $api->params;

      # Rule

      my $rule = [

        title => [

          ['not_blank' => 'title is empty'],

          ['ascii' => 'title contains invalid character'],

        ],

        key => [

          ['not_blank' => 'key is empty'],

          # Check if key format is valid

          sub {

            my ($original_key, $args, $vc) = @_;

            my $type;

            my $original_key_edit;

            if ($original_key =~ /^(ssh-rsa|ssh-dss|ecdsa-sha2-nistp25|ecdsa-sha2-nistp384|ecdsa-sha2-nistp521) +(\S+)/) {

              $type = $1;

              $original_key_edit = $2;

            }

            if ($type) {

              if ($vc->constraints->{ascii}->($original_key_edit)) {

                my $key = "$type $original_key_edit";

                my $row = app->dbi->model('ssh_public_key')->select(id => $key)->one;

                if ($row) {

                  return {result => 0, message => 'Key already exists'};

                }

                else {

                  my $key_is_contained;

                  my $authorized_keys_file = app->manager->authorized_keys_file;

                  if (defined $authorized_keys_file) {

                    my $result

                      = app->manager->parse_authorized_keys_file($authorized_keys_file);

                    my $before_part = $result->{before_part};

                    my $after_part = $result->{after_part};

                    my $other_part = "$before_part\n$after_part";

                    if ($other_part =~ /\s\Q$original_key_edit\E(\s|$)/) {

                      $key_is_contained = 1;

                    }

                  }

                  if ($key_is_contained) {

                    return {

                      result => 0,

                      message => "authorized_keys file already contain this key"

                    };

                  }

                  else {

                    return {result => 1, output => $key}

                  }

                }

              }

              else {

                return {

                  result => 0,

                  message => "Key contains invalid character."

                }

              }

            }

            else {

              return {

                result => 0,

                message => "Key is invalid. It must begin with 'ssh-rsa', 'ssh-dss', 'ecdsa-sha2-nistp256',"

                  . "'ecdsa-sha2-nistp384', or 'ecdsa-sha2-nistp521'. Check that you're copying the public half of the key"

              };

            }

          }

        ]

      ];

      # Validation

      my $vresult = app->vc->validate($params, $rule);

      # Register ssh key

      if ($vresult->is_ok) {

        my $safe_params = $vresult->data;

        my $title = $safe_params->{title};

        my $key = $safe_params->{key};

        my $p = {

          user_id => $user,

          title => $title,

          key => $key

        };

        eval {

          app->dbi->connector->txn(sub {

            app->dbi->model('ssh_public_key')->insert($p);

            $self->app->manager->update_authorized_keys_file;

          });

        };

        if (my $e = $@) {

          app->log->error(url_for . ":$e");

          $errors = ['Internal error'];

        }

        else {

          flash('message' => 'Success: ssh key is added');

          $self->redirect_to('current');

          return;

        }

      }

      else {

        $errors = $vresult->messages;

      }

    }

    # Delete ssh public key

    elsif ($op eq 'delete') {

      my $row_id = param('row-id');

      eval {

        app->dbi->connector->txn(sub {

          app->dbi->model('ssh_public_key')->delete(where => {row_id => $row_id});

          $self->app->manager->update_authorized_keys_file;

        });

      };

      if (my $e = $@) {

        app->log->error(url_with . ": $e");

        $errors = ['Internal Error'];

      }

      else {

        flash(message => 'Success: a key is deleted');

        $self->redirect_to('current');

      }

    }

  }

  my $keys = app->dbi->model('ssh_public_key')->select(where => {user_id => $user})->all;

%>

% layout 'common', title => 'SSH keys';

  %= include '/include/header';

  <div class="container">

    <div class="user-settings">

      <div class="left">

        <ul>

          <li>

            <a href="<%= url_for("/$user/_settings") %>">Profile</a>

          </li>

          <li class="active">

            <a href="<%= url_for("/$user/_settings/ssh") %>">SSH keys</a>

          </li>

        </ul>

      </div>

      <div class="right">

        <%= include '/include/errors', errors => $errors %>

        <%= include '/include/message', message => flash('message') %>

        <div class="user-settings-container ssh-keys">

          <div>

            <div>

              <span>SSH Keys</span> (<a href="<%= url_for("/$user.keys") %>">see</a>)

            </div>

          </div>

          <div>

            % if (@$keys > 0) {

              <div>

                This is a list of SSH keys associated with your account. Remove any keys that you do not recognize.

              </div>

              % for my $key (@$keys) {

                <form action="<%= url_for->query(op => 'delete') %>" method="post">

                  <div>

                    <b><%= $key->{title} %></b>

                    <a class="btn btn-small btn-danger" href="javascript:void(0)" onclick="$(this).closest('form').submit()">Delete</a>

                    <%= hidden_field 'row-id' => $key->{row_id} %>

                  </div>

                </form>

              % }

            % } else {

              <div>

                SSH key don't exists.

              </div>

            % }

          </div>

        </div>

        <div class="user-settings-container ssh-key-add">

          <div>

            <div>

              Add an SSH Key

            </div>

          </div>

          <div>

            <form action="<%= url_for->query(op => 'add') %>" method="post" %>

              <div>

                Title

              </div>

              <div>

                <%= text_field 'title' %>

              </div>

              <div>

                Key

              </div>

              <div>

                <%= text_area 'key' %>

              </div>

              <input type="submit" class="btn btn-success" value="Add key">

            </form>

          </div>

        </div>

      </div>

    </div>

  </div>

  %= include '/include/footer';