//  Created by Juan Leon, NotOptimal.net, Feb 08.
//  Free to use, as long as the credit line above is included in the source.
//

- (NSArray*) authenticateWithGoogleClientLogin:(NSString *)userName withPassword:(NSString*)password {
	/*	Google clientLogin API:
	Content-type: application/x-www-form-urlencoded
	Email=userName
	Passwd=password
	accountType=HOSTED_OR_GOOGLE
	service=xapi
	source = @"myComp-myApp-1.0"
	*/

	//define our return objects
	BOOL authOK;
	NSString *authMessage = [[NSString alloc] init];
	NSArray *returnArray = nil;
	//begin NSURLConnection prep:
	NSMutableURLRequest *httpReq = [[NSMutableURLRequest alloc] initWithURL:[NSURL URLWithString:GOOGLE_CLIENT_AUTH_URL] ];
	[httpReq setTimeoutInterval:30.0];
	//[httpReq setCachePolicy:NSURLRequestReloadIgnoringCacheData];
	[httpReq setHTTPMethod:@"POST"];
	//set headers
	[httpReq addValue:@"Content-Type" forHTTPHeaderField:@"application/x-www-form-urlencoded"];
	//set post body
	NSString *requestBody = [[NSString alloc] 
						initWithFormat:@"Email=%@&Passwd=%@&service=xapi&accountType=HOSTED_OR_GOOGLE&source=%@",
										userName, password, [NSString stringWithFormat:@"%@%d", pluginVersion]];

	[httpReq setHTTPBody:[requestBody dataUsingEncoding:NSASCIIStringEncoding]];

	NSHTTPURLResponse *response = nil;
	NSError *error = nil;
	NSData *data = nil;
	NSString *responseStr = nil;
	NSArray *responseLines = nil;
	NSString *errorString;
	//NSDictionary *dict;
	int responseStatus = 0;
	//this should be quick, and to keep same workflow, we'll do this sync.
	//this should also get us by without messing with threads and run loops on Tiger.
	data = [NSURLConnection sendSynchronousRequest:httpReq returningResponse:&response error:&error];

	if ([data length] > 0) {
		responseStr = [[NSString alloc] initWithData:data encoding:NSASCIIStringEncoding];
		//NSLog(@"Response From Google: %@", responseStr);
		responseStatus = [response statusCode];
		//dict = [[NSDictionary alloc] initWithDictionary:[response allHeaderFields]];
		//if we got 200 authentication was successful
		if (responseStatus == 200 ) {
			authOK = TRUE;
			authMessage = @"Authentication Successful...";
		}
		//403 = authentication failed.
		else if (responseStatus == 403) {
			authOK = FALSE;
			//get Error code.
			responseLines  = [responseStr componentsSeparatedByString:@"\n"];
			//find the line with the error string:
			int i;
			for (i =0; i < [responseLines count]; i++ ) {
				if ([[responseLines objectAtIndex:i] rangeOfString:@"Error="].length != 0) {
					errorString = [responseLines objectAtIndex:i] ;
				}
			}
			
			errorString = [errorString stringByTrimmingCharactersInSet:[NSCharacterSet whitespaceAndNewlineCharacterSet]];
			/*
			Official Google clientLogin Error Codes:
			Error Code	Description
			BadAuthentication	The login request used a username or password that is not recognized.
			NotVerified	The account email address has not been verified. The user will need to access their Google account directly to resolve the issue before logging in using a non-Google application.
			TermsNotAgreed	The user has not agreed to terms. The user will need to access their Google account directly to resolve the issue before logging in using a non-Google application.
			CaptchaRequired	A CAPTCHA is required. (A response with this error code will also contain an image URL and a CAPTCHA token.)
			Unknown	The error is unknown or unspecified; the request contained invalid input or was malformed.
			AccountDeleted	The user account has been deleted.
			AccountDisabled	The user account has been disabled.
			ServiceDisabled	The user's access to the specified service has been disabled. (The user account may still be valid.)
			ServiceUnavailable	The service is not available; try again later.
			*/

			if ([errorString  rangeOfString:@"BadAuthentication" ].length != 0) {
				authMessage = @"Please Check your Username and Password and try again.";
			}else if ([errorString  rangeOfString:@"NotVerified"].length != 0) {
				authMessage = @"This account has not been verified. You will need to access your Google account directly to resolve this";
			}else if ([errorString  rangeOfString:@"TermsNotAgreed" ].length != 0) {
				authMessage = @"You have not agreed to Google terms of use. You will need to access your Google account directly to resolve this";
			}else if ([errorString  rangeOfString:@"CaptchaRequired" ].length != 0) {
				authMessage = @"Google is requiring a CAPTCHA response to continue. Please complete the CAPTCHA challenge in your browser, and try authenticating again";
				//NSString *captchaURL = [responseStr substringFromIndex: [responseStr rangeOfString:@"CaptchaURL="].length]; 
				//either open the standard URL in a browser, or show a custom sheet with the image and send it back...
				//parse URL to append to GOOGLE_CAPTCHA_URL_PREFIX
				//but for now... just launch the standard URL.
				[[NSWorkspace sharedWorkspace] openURL:[NSURL URLWithString:GOOGLE_CAPTCHA_STANDARD_UNLOCK_URL]];			
			}else if ([errorString  rangeOfString:@"Unknown" ].length != 0) {
				authMessage = @"An Unknow error has occurred; the request contained invalid input or was malformed.";
			}else if ([errorString  rangeOfString:@"AccountDeleted" ].length != 0) {
				authMessage = @"This user account previously has been deleted.";
			}else if ([errorString  rangeOfString:@"AccountDisabled" ].length != 0) {
				authMessage = @"This user account has been disabled.";
			}else if ([errorString  rangeOfString:@"ServiceDisabled" ].length != 0) {
				authMessage = @"Your access to the specified service has been disabled. Please try again later.";
			}else if ([errorString  rangeOfString:@"ServiceUnavailable" ].length != 0) {
				authMessage = @"The service is not available; please try again later.";
			}
				
		}//end 403 if
			
	}
	//check most likely: no internet connection error:
	if (error != nil) {
		authOK = FALSE;
		if ( [error domain]  == NSURLErrorDomain) {
			authMessage = @"Could not reach Google.com. Please check your Internet Connection";
		}else {
			//other error
			authMessage = [authMessage stringByAppendingFormat:@"Internal Error. Please contact notoptimal.net for further assistance. Error: %@", [error localizedDescription] ];
		}
	}
	//NSLog (@"err localized description %@", [error localizedDescription]) ;
	//NSLog (@"err localized failure reasons %@", [error localizedFailureReason]) ;
	//NSLog(@"err code  %d", [error code]) ;
	//NSLog (@"err domain %@", [error domain]) ;

	//build return array [0] = authOK [1] = authMessage
	returnArray =  [NSArray arrayWithObjects: [NSNumber numberWithBool:authOK], authMessage, responseLines, nil ];
	return returnArray;

}