<%
  # API
  my $api = gitprep_api;
  
  # Operator
  my $op = param('op') || '';
  
  # DBI
  my $dbi = $self->app->dbi;
  
  # Errors
  my $error;
  
  # Login
  if ($op eq 'login') {
    
    # Validation
    my $params = $api->params;
    my $vc = $self->app->vc;
    my $password_check = sub {
      my $values = shift;
      
      my ($id, $password) = @$values;
      
      my $row
        = $dbi->model('user')->select(['password', 'salt'], id => $id)->one;
      
      return unless defined $password;

      my $is_valid = $api->check_password(
        $password,
        $row->{salt},
        $row->{password}
      );
      
      return $is_valid;
    };
    my $rule = [
      id => [
        'any'
      ],
      password => [
        'any'
      ],
      {password_check => [qw/id password/]}
        => {copy => 0},
        => [
          $password_check
        ],
      save => {require => 0} => [
        'defined'
      ]
    ];
    my $vresult = $self->app->vc->validate($params, $rule);
    
    if ($vresult->is_ok) {
      
      # Login success
      my $safe_params = $vresult->data;
      my $id = $safe_params->{id};
      my $password = $safe_params ->{password};
      my $row = $self->app->dbi->model('user')->select(['admin', 'password'], id => $id)->one;
      my $password_encrypted = $row->{password};
      my $admin = $row->{admin};
      session(user => $id);
      session(password => $password_encrypted);
      
      if ($safe_params->{save}) {
        # 2 weeks save
        session(expires => time + 60 * 60 * 24 * 14);
      }
      
      # Go to admin page
      if ($admin) {
        $self->redirect_to('/_admin');
        return 1;
      }
      # Go to user page
      else {
        $self->redirect_to("/$id");
        return 1;
      }
    }
    else { $error = 'User name or password is wrong' }
  }
%>

% layout 'common', title => 'Sign in';

  <!-- Login page -->
  
  %= include '/include/header';

  <div class="container">
    % my $id = '';
    % if (flash('admin_user_created')) {
      % $id = 'admin';
      <div class="alert alert-success">
        <button type="button" class="close" data-dismiss="alert">&times;</button>
        Admin user is created. Let's login as admin user.
      </div>
    % }

    % if (my $messages = flash('messages')) {
      <div class="alert alert-success">
        <button type="button" class="close" data-dismiss="alert">&times;</button>
        % for my $message (@$messages) {
          <p><%= $message %></p>
        % }
      </div>
    % }
    
    % if ($error) {
      <div class="alert alert-error">
        <button type="button" class="close" data-dismiss="alert">&times;</button>
        <div><%= $error %></div>
      </div>
    % }
      
    <div class="well border-gray"
      style="background:white;padding-top:15px;padding-left:60px;width:300px;margin-left:auto;margin-right:auto"
    >
      <form action="<%= url_for->query(op => 'login') %>" method="post">
        <div class="control-group">
          <label class="control-label" for="user-name">User name</label>
          <div class="controls">
            <%= input_tag id => $id, type => 'text', placeholder => 'User', id =>'user-name'%>
          </div>
        </div>
        <div class="control-group">
          <label class="control-label" for="input-password">Password</label>
          <div class="controls">
            <%= password_field 'password', id => 'input-password', placeholder => 'Password' %>
          </div>
        </div>
        <div class="control-group">
          <label class="checkbox">
            <input type="checkbox" name="save" value="1"> Save
          </label>
        </div>
        <div class="control-group">
          <div class="controls">
            <button type="submit" class="btn">Sign in</button>
          </div>
        </div>
      </form>
    </div>
  </div>

  %= include '/include/footer';