module.exports = adduser

var url = require("url")

function adduser (base, username, password, email, cb) {
  if (!base) return cb(new Error("Required base URI not supplied"))

  username = ("" + (username || "")).trim()
  if (!username) return cb(new Error("No username supplied."))

  password = ("" + (password || "")).trim()
  if (!password) return cb(new Error("No password supplied."))

  email = ("" + (email || "")).trim()
  if (!email) return cb(new Error("No email address supplied."))
  if (!email.match(/^[^@]+@[^\.]+\.[^\.]+/)) {
    return cb(new Error("Please use a real email address."))
  }

  var userobj =
      { name : username
      , password : password
      , email : email
      , _id : 'org.couchdb.user:'+username
      , type : "user"
      , roles : []
      , date: new Date().toISOString()
      }

  // pluck off any other username/password/token.  it needs to be the
  // same as the user we're becoming now.  replace them on error.
  var c = this.conf.getCredentialsByURI(base)
  var pre = { username: c.username
            , password: c.password
            , email: c.email
            , token: this.conf.get('_token') }

  this.conf.del('_token')
  if (this.couchLogin) {
    this.couchLogin.token = null
  }

  cb = done.call(this, cb, pre)

  var logObj = Object.keys(userobj).map(function (k) {
    if (k === 'password') return [k, 'XXXXX']
    return [k, userobj[k]]
  }).reduce(function (s, kv) {
    s[kv[0]] = kv[1]
    return s
  }, {})

  this.log.verbose("adduser", "before first PUT", logObj)

  var uri = url.resolve(base, '/-/user/org.couchdb.user:' + encodeURIComponent(username))
  this.request('PUT'
    , uri
    , { body : userobj }
    , function (error, data, json, response) {
        // if it worked, then we just created a new user, and all is well.
        // but if we're updating a current record, then it'll 409 first
        var c = this.conf.getCredentialsByURI(base)
        if (error && !c.auth) {
          // must be trying to re-auth on a new machine.
          // use this info as auth
          this.conf.setCredentialsByURI(base, {
            username : username,
            password : password,
            email    : email
          })
        }

        if (!error || !response || response.statusCode !== 409) {
          return cb(error, data, json, response)
        }

        this.log.verbose("adduser", "update existing user")
        return this.request('GET'
          , uri + '?write=true'
          , null
          , function (er, data, json, response) {
              if (er || data.error) {
                return cb(er, data, json, response)
              }
              Object.keys(data).forEach(function (k) {
                if (!userobj[k] || k === 'roles') {
                  userobj[k] = data[k]
                }
              })
              this.log.verbose("adduser", "userobj", logObj)
              this.request('PUT'
                , uri + "/-rev/" + userobj._rev
                , { body : userobj }
                , cb)
            }.bind(this))
      }.bind(this))

  function done (cb, pre) {
    return function (error, data, json, response) {
      if (!error && (!response || response.statusCode === 201)) {
        return cb(error, data, json, response)
      }

      // there was some kind of error, re-instate previous auth/token/etc.
      this.conf.set('_token', pre.token)
      if (this.couchLogin) {
        this.couchLogin.token = pre.token
        if (this.couchLogin.tokenSet) {
          this.couchLogin.tokenSet(pre.token)
        }
      }
      this.conf.setCredentialsByURI(base, {
        username : pre.username,
        password : pre.password,
        email    : pre.email
      })

      this.log.verbose("adduser", "back", [error, data, json])
      if (!error) {
        error = new Error(
          (response && response.statusCode || "") + " " +
          "Could not create user\n" + JSON.stringify(data)
        )
      }

      if (response && (response.statusCode === 401 || response.statusCode === 403)) {
        this.log.warn("adduser", "Incorrect username or password\n" +
                                 "You can reset your account by visiting:\n" +
                                 "\n" +
                                 "    https://npmjs.org/forgot\n")
      }

      return cb(error)
    }.bind(this)
  }
}