<?php

/*
  |--------------------------------------------------------------------------
  | Application & Route Filters
  |--------------------------------------------------------------------------
  |
  | Below you will find the "before" and "after" events for the application
  | which may be used to do any work before or after a request into your
  | application. Here you may also register your custom route filters.
  |
 */

App::before(function($request) {
	//
});


App::after(function($request, $response) {
	//
});

/*
  |--------------------------------------------------------------------------
  | Authentication Filters
  |--------------------------------------------------------------------------
  |
  | The following filters are used to verify that the user of the current
  | session is logged into this application. The "basic" filter easily
  | integrates HTTP Basic authentication for quick, simple checking.
  |
 */

Route::filter('auth', function() {
	if (!Sentry::check()) {
		return Redirect::guest('login');
	}
});

Route::filter('inGroup', function($route, $request, $value) {
	if (!Sentry::check()) {
		return Redirect::route('login');
	}

	// we need to determine if a non admin user
	// is trying to access their own account.
	$userId = Route::input('users');

	try {
		$user = Sentry::getUser();

		$group = Sentry::findGroupByName($value);

		if ($userId != Session::get('userId') && (!$user->inGroup($group))) {
			Session::flash('error', trans('users.noaccess'));
			return Redirect::route('home');
		}
	}
	catch (Cartalyst\Sentry\Users\UserNotFoundException $e) {
		Session::flash('error', trans('users.notfound'));
		return Redirect::route('login');
	}
	catch (Cartalyst\Sentry\Groups\GroupNotFoundException $e) {
		Session::flash('error', trans('groups.notfound'));
		return Redirect::route('login');
	}
});

Route::filter('hasRole', function($route, $request, $value) {
	if (!Sentry::check()) {
		return Redirect::route('login');
	}

	// we need to determine if a non admin user
	// is trying to access their own account.
	$userId = Route::input('users');

	try {
		$user = User::find(Sentry::getUser()->id);

		if ($userId != Session::get('userId') && (!$user->hasRole($value))) {
			Session::flash('error', trans('users.noaccess'));
			return Redirect::route('home');
		}
	}
	catch (Cartalyst\Sentry\Users\UserNotFoundException $e) {
		Session::flash('error', trans('users.notfound'));
		return Redirect::route('login');
	}
});
// thanks to http://laravelsnippets.com/snippets/sentry-route-filters

/*
  |--------------------------------------------------------------------------
  | Guest Filter
  |--------------------------------------------------------------------------
  |
  | The "guest" filter is the counterpart of the authentication filters as
  | it simply checks that the current user is not logged in. A redirect
  | response will be issued if they are, which you may freely change.
  |
 */

Route::filter('guest', function() {
	if (Auth::check()) {
		return Redirect::to('/');
	}
});

/*
  |--------------------------------------------------------------------------
  | CSRF Protection Filter
  |--------------------------------------------------------------------------
  |
  | The CSRF filter is responsible for protecting your application against
  | cross-site request forgery attacks. If this special token in a user
  | session does not match the one given in this request, we'll bail.
  |
 */

Route::filter('csrf', function() {
	// var_dump($_SESSION);
	//            var_dump($_POST);
	//            die();
	// TODO: Rewrite this tree of conditionals
	if (Session::token() !== Input::get('_token') || Session::token() === null || Input::get('_token') === null) {
		// Session token and form tokens do not match or one is empty
		if (App::environment() === 'testing') {
			// We only want to allow CSRF override if we're running tests
			if (Input::get('IgnoreCSRFTokenError') === true) {
				// Allow CSRF override in testing environment
				return;
			}
			else {
				// Handle CSRF normally
				throw new Illuminate\Session\TokenMismatchException;
			}
		}
		else {
			// @codeCoverageIgnoreStart
			// Handle CSRF normally
			throw new Illuminate\Session\TokenMismatchException;

			// @codeCoverageIgnoreEnd
		}
	}
});