xquery version "3.0";
(: $Id: admin.xql 14995 2011-07-30 19:57:47Z dizzzz $ :)
(:
    Main module of the database administration interface.
:)

module namespace eml = "http://exist-db.org/xquery/rebind/rebind-xform-eml";

declare namespace admin = "http://exist-db.org/xquery/admin-interface";

declare namespace request = "http://exist-db.org/xquery/request";
declare namespace response = "http://exist-db.org/xquery/response";
declare namespace session = "http://exist-db.org/xquery/session";
declare namespace util = "http://exist-db.org/xquery/util";
declare namespace xdb = "http://exist-db.org/xquery/xmldb";

import module namespace metadata="http://exist-db.org/xquery/rebind/edit-metadata" at "xform-eml.xqm";

(: if a page needs custom html headers :)
declare function admin:header() as element()*
{
    metadata:header()
};

(:
    Select the page to show. Every page is defined in its own module 
:)
declare function admin:panel() as element()*
{
    
    let $action := request:get-parameter("action", ())[1] 
    return if($action eq "save-form") then(
        let $fileName := request:get-parameter("name", "test.xml")[1]
        return (<div id="save-dialog" class="info-dialog" style="background:#88ff88; position:fixed; padding:10px; top:5px; right:30px; z-index:200;">File '<a href="/exist/rest//db/test/xform/{$fileName}">{$fileName}</a>' was successfully saved!</div>,metadata:main())
    )else(
        metadata:main()
    )
};

(:~  
    Display the login form.
:)
declare function admin:display-login-form() as element()
{
   let $code := response:set-status-code(200) 
   
   return <div xmlns="http://www.w3.org/1999/xhtml" class="panel">
        <div class="panel-head">Login</div>
        <p>This is a protected resource. Only registered database users can log
        in.</p>

        <form action="{session:encode-url(request:get-uri())}" method="post">
            <table class="login" cellpadding="5">
                <tr>
                    <th colspan="2" align="left">Please Login</th>
                </tr>
                <tr>
                    <td align="left">Username:</td>
                    <td><input name="username" type="text" size="20"/></td>
                </tr>
                <tr>
                    <td align="left">Password:</td>
                    <td><input name="password" type="password" size="20"/></td>
                </tr>
                <tr>
                    <td colspan="2" align="left"><input type="submit"/></td>
                </tr>
            </table>
            {
                for $param in request:get-parameter-names()
                return
                    if ( $param = ("username","password") ) then
                        ()
                    else 
                        <input type="hidden" name="{$param}" value="{request:get-parameter($param, ())}"/>
                        
            }
        </form>
    </div>
};

declare function admin:convertParameters() as xs:string*{
    for $param in request:get-parameter-names()
                return
                    if ( $param = ("username","password") ) then
                        ()
                    else 
                        concat($param,'=',request:get-parameter($param, ()))
 };

declare function admin:isLoggedIn() as xs:boolean{

    let $userParam := request:get-parameter("username", ())
    let $passwdParam := request:get-parameter("password", ())
    
    return if(xdb:get-current-user() eq "guest") then
    (
        (: is this a login attempt? :)
        if($userParam and not(empty($passwdParam)))then
        (
            if($userParam = ("", "guest") )then
            (
                (: prevent the guest user from accessing the admin webapp :)
                false()
            )
            else
            (
                (: try and log the user in :)
                let $successful := xdb:login( "/db", $userParam, $passwdParam, true() )
                (: this is a small hack to bypass a bug caused by betterform when the login is finished :)
                let $params := string-join(admin:convertParameters(),"&amp;")
                let $redirect := response:redirect-to(xs:anyURI(concat(request:get-url(),"?",$params)))
                return $successful
            )
        )
        else
        (
            (: prevent the guest user from accessing the admin webapp :)
            false()
        )
    )
    else
    (
        (: if we are already logged in, are we logging out - i.e. set permissions back to guest :)
        if(request:get-parameter("logout",()))then
        (
            let $null  := xdb:login("/db", "guest", "guest") 
            let $inval := session:invalidate()
            
            return false()
        )
        else
        (
             (: we are already logged in and we are not the guest user :)
            true()
        )
    )
 };

declare function admin:process-action($fileName as xs:string) as element()*
{
    (: TODO: check for rights #25 :)
    let $action := request:get-parameter("action", ())[1] 
    let $protectedRoot  := rebind:getSetting('db-protected-folder')
    return
        util:catch("java.lang.Exception",
            if($action eq "save-form") then
            (
                admin:save-metadata($fileName)
            )else(),
            <div xmlns="http://www.w3.org/1999/xhtml" class="error">
                An error occurred while processing the action:<br/>
                {$util:exception-message}
            </div>
        )
};

 

(:
    Save metadata file.
:)
declare function admin:save-metadata($fileName as xs:string) as element()
{
    
    let $data := request:get-data()
    
    return if($data)then( 
    <div xmlns="http://www.w3.org/1999/xhtml" class="process">
            <h3>Actions:</h3>
            <ul>
                <li>Saved metadata file at: {$fileName}</li>
                {
                    xdb:decode-uri(xs:anyURI(xdb:store("/db/test/xform/", $fileName, $data)))
                }
            </ul>
    </div>
    )else()
};

declare function eml:get-metadata-form() as element()
{
declare option exist:serialize "indent=yes method=xhtml media-type=text/html doctype-public=-//W3C//DTD&#160;XHTML&#160;1.0&#160;Strict//EN doctype-system=http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd";

(: main entry point :)
let $isLoggedIn :=  admin:isLoggedIn()

return (
    
    <html xml:lang="en" xmlns="http://www.w3.org/1999/xhtml" xmlns:xf="http://www.w3.org/2002/xforms" lang="en">
    
        <head>
        
            <title>Metadata Editor</title>
            
                               <style type="text/css">
       <![CDATA[
       @namespace xf url("http://www.w3.org/2002/xforms");

       .term-name .xforms-value {width: 50ex;}
       .definition .xforms-value {
           height: 5em;
           width: 600px;
       }
           
       /* align the labels but not the save label */
       xf|output xf|label, xf|input xf|label, xf|textarea xf|label, xf|select1 xf|label {
           display: inline-block;
           text-align: right;
           vertical-align: top;
           font-weight: bold;
       }

xf|input xf|label {
   display: table-cell; 
}
 
/* each value (pseudo-element) is also a cell in the input row */
xf|input::value {
   display: table-cell;
}
 
       ]]>
       </style>
            
            <meta http-equiv="Content-Type" content="application/xhtml+xml; charset=utf-8" />
            <script type="text/javascript" src="/exist/rebind/$shared/resources/scripts/jquery/jquery-1.7.1.min.js"></script>
            <script type="text/javascript" src="/exist/rebind/$shared/resources/scripts/jquery/jquery-ui-1.8.custom.min.js"></script>
            <script type="text/javascript" src="script.js"></script>
            
            <meta http-equiv="Content-Type" content="application/xhtml+xml; charset=utf-8" />
            
            <link rel="stylesheet" href="leaflet/leaflet.css" />
            <!--[if lte IE 8]>
                 <link rel="stylesheet" href="http://cdn.leafletjs.com/leaflet-0.5/leaflet.ie.css" />
            <![endif]-->
            <link rel="stylesheet" href="rebind-leaflet.css" />
            <link rel="stylesheet" href="metadata-editor.css" />
            <script type="text/javascript" src="leaflet/leaflet.js"></script>
            <script type="text/javascript" src="rebind-leaflet.js"></script>
            
            
            {if($isLoggedIn)then(admin:header())else()}
        </head>
        <body class="rebind" onload="">
            <div class="header">
                {
                 let $fileName := request:get-parameter("name", "test.xml")[1]
                
                    return 
                    if($isLoggedIn) then (
                        <div class="info">
                            {admin:process-action($fileName)}
                        </div> 
                    ) else ()
                }
            </div>
            
            <div class="content">
                {
                    if($isLoggedIn)then
                    (
                        admin:panel()
                    )
                    else
                    (
                        admin:display-login-form()
                    )
                }
                        
                <div id="blackout">
                    <div id="blackoutBackground"></div>
                    <div id="formContainer">
                    </div>
                </div>
            </div>
        </body>
    </html>
)
};


declare option exist:serialize "indent=yes method=xhtml media-type=text/html doctype-public=-//W3C//DTD&#160;XHTML&#160;1.0&#160;Strict//EN doctype-system=http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd";

(: main entry point :)
let $isLoggedIn :=  admin:isLoggedIn()

return (
    
    <html xml:lang="en" xmlns="http://www.w3.org/1999/xhtml" xmlns:xf="http://www.w3.org/2002/xforms" lang="en">
    
        <head>
        
            <title>Metadata Editor</title>
            
                               <style type="text/css">
       <![CDATA[
       @namespace xf url("http://www.w3.org/2002/xforms");

       .term-name .xforms-value {width: 50ex;}
       .definition .xforms-value {
           height: 5em;
           width: 600px;
       }
           
       /* align the labels but not the save label */
       xf|output xf|label, xf|input xf|label, xf|textarea xf|label, xf|select1 xf|label {
           display: inline-block;
           text-align: right;
           vertical-align: top;
           font-weight: bold;
       }

xf|input xf|label {
   display: table-cell; 
}
 
/* each value (pseudo-element) is also a cell in the input row */
xf|input::value {
   display: table-cell;
}
 
       ]]>
       </style>
            
            <meta http-equiv="Content-Type" content="application/xhtml+xml; charset=utf-8" />
            <script type="text/javascript" src="/exist/rebind/$shared/resources/scripts/jquery/jquery-1.7.1.min.js"></script>
            <script type="text/javascript" src="/exist/rebind/$shared/resources/scripts/jquery/jquery-ui-1.8.custom.min.js"></script>
            <script type="text/javascript" src="script.js"></script>
            
            <meta http-equiv="Content-Type" content="application/xhtml+xml; charset=utf-8" />
            
            <link rel="stylesheet" href="leaflet/leaflet.css" />
            <!--[if lte IE 8]>
                 <link rel="stylesheet" href="http://cdn.leafletjs.com/leaflet-0.5/leaflet.ie.css" />
            <![endif]-->
            <link rel="stylesheet" href="rebind-leaflet.css" />
            <link rel="stylesheet" href="metadata-editor.css" />
            <script type="text/javascript" src="leaflet/leaflet.js"></script>
            <script type="text/javascript" src="rebind-leaflet.js"></script>
            
            
            {if($isLoggedIn)then(admin:header())else()}
        </head>
        <body class="rebind" onload="">
            <div class="header">
                {
                 let $fileName := request:get-parameter("name", "test.xml")[1]
                
                    return 
                    if($isLoggedIn) then (
                        <div class="info">
                            {admin:process-action($fileName)}
                        </div> 
                    ) else ()
                }
            </div>
            
            <div class="content">
                {
                    if($isLoggedIn)then
                    (
                        admin:panel()
                    )
                    else
                    (
                        admin:display-login-form()
                    )
                }
                        
                <div id="blackout">
                    <div id="blackoutBackground"></div>
                    <div id="formContainer">
                    </div>
                </div>
            </div>
        </body>
    </html>
)