<?php

namespace UnicaenAuth\Authentication\Storage;

use UnicaenAuth\Authentication\SessionIdentity;
use UnicaenAuth\Entity\Shibboleth\ShibUser;
use UnicaenAuth\Service\Traits\ShibServiceAwareTrait;

/**
 * Shibboleth authentication storage.
 *
 * @author Unicaen
 */
class Shib extends AbstractStorage
{
    use ShibServiceAwareTrait;

    const TYPE = \UnicaenAuth\Authentication\Adapter\Shib::TYPE;

    /**
     * @var string
     */
    protected $type = self::TYPE;

    /**
     * @var ShibUser
     */
    protected $resolvedIdentity;

    /**
     * @return bool
     */
    protected function isEnabled(): bool
    {
        $config = $this->moduleOptions->getShib();

        return isset($config['enabled']) && (bool) $config['enabled'];
    }

    /**
     * @return null|ShibUser
     */
    protected function findIdentity(): ?ShibUser
    {
        /** @var SessionIdentity $sessionIdentity */
        $sessionIdentity = $this->storage->read();
        $username = $sessionIdentity->getUsername();

//        // L'identité en session doit ressembler à un EPPN.
//        $looksLikeEppn = strpos($username, '@') !== false;
//        if (! $looksLikeEppn) {
//            return null;
//        }

        return $this->shibService->getAuthenticatedUser();
    }

    /**
     * @inheritDoc
     */
    public function clear(ChainEvent $e)
    {
        parent::clear($e);

        $this->shibService->deactivateUsurpation();
    }
}