<?php
declare(strict_types=1);
namespace MRBS\Session;

use MRBS\Form\Form;
use MRBS\User;
use phpCAS;
use function MRBS\auth;
use function MRBS\location_header;
use function MRBS\this_page;


class SessionCas extends SessionWithLogin
{

  public function __construct()
  {
    $this->checkTypeMatchesSession();
    $this->samesite = self::SAMESITE_LAX;
    auth()->init();  // Initialise CAS
    parent::__construct();
  }


  public function init(int $lifetime) : void
  {
    // phpCAS does its own session initialisation and handling
  }


  public function authGet(?string $target_url=null, ?string $returl=null, ?string $error=null, bool $raw=false) : void
  {
    if (!phpCAS::isAuthenticated())
    {
      phpCAS::forceAuthentication();
    }
  }


  public function getCurrentUser() : ?User
  {
    return (phpCAS::isAuthenticated()) ? auth()->getUser(phpCAS::getUser()) : parent::getCurrentUser();
  }


  public function getLogonFormParams() : ?array
  {
    $target_url = this_page(true);

    return array(
        'action' => $target_url,
        'method' => Form::METHOD_POST,
        'hidden_inputs' =>  array('target_url' => $target_url,
                                  'action'     => 'QueryName')
      );
  }


  public function processForm() : void
  {
    if (isset($this->form['action']))
    {
      // Target of the form with sets the URL argument "action=QueryName".
      if ($this->form['action'] == 'QueryName')
      {
        phpCAS::forceAuthentication();
      }

      // Target of the form with sets the URL argument "action=SetName".
      // Will eventually return to URL argument "target_url=whatever".
      if ($this->form['action'] == 'SetName')
      {
        // If we're going to do something then check the CSRF token first
        Form::checkToken();

        // You should only get here using CAS authentication after clicking the logoff
        // link, no matter what the value of the form parameters.
        $this->logoffUser();

        location_header($this->form['target_url']); // Redirect browser to initial page
      }
    }
  }


  public function logoffUser() : void
  {
    phpCAS::logout();
  }

}