package Koha::REST::V1::Auth::Password;

# This file is part of Koha.

#

# Koha is free software; you can redistribute it and/or modify it

# under the terms of the GNU General Public License as published by

# the Free Software Foundation; either version 3 of the License, or

# (at your option) any later version.

#

# Koha is distributed in the hope that it will be useful, but

# WITHOUT ANY WARRANTY; without even the implied warranty of

# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the

# GNU General Public License for more details.

#

# You should have received a copy of the GNU General Public License

# along with Koha; if not, see <http://www.gnu.org/licenses>.

use Modern::Perl;

use Mojo::Base 'Mojolicious::Controller';

use C4::Auth qw/checkpw/;

use Koha::Patrons;

=head1 NAME

Koha::REST::V1::Auth::Password - Controller library for handling

validation of username and password.

Intended use case is authenticating Koha patrons in external

applications via Koha's REST API.

=head2 Operations

=head3 validate

Controller method that checks a patron's password

=cut

sub validate {

    my $c = shift->openapi->valid_input or return;

    my $body   = $c->validation->param('body');

    my $username = $body->{username} // '';

    my $patron = Koha::Patrons->find({ userid => $username });

    unless ($patron) {

        return $c->render( status => 400, openapi => { error => "Validation failed" } );

    }

    my $password   = $body->{password}   // "";

    return try {

        my ($status, $cardnumber, $userid) = C4::Auth::checkpw($patron->userid, $password );

        warn $status;

        warn $cardnumber;

        warn $userid;

        unless ( $status ) {

            return $c->render(

                status  => 400,

                openapi => { error => "Validation failed" }

            );

        }

        return $c->render( status => 204, openapi => '' );

    }

    catch {

        if ( blessed $_ and $_->isa('Koha::Exceptions::Password') ) {

            return $c->render(

                status  => 400,

                openapi => { error => "$_" }

            );

        }

        $c->unhandled_exception($_);

    };

}

1;

  "/auth/password/validation":

    $ref: "./paths/auth.yaml#/~1auth~1password~1validation"