use LWP::UserAgent;
use JSON;

sub persona_login :Path('/persona-login') Args(0) {
    my ($self, $c) = @_;
    $c->stash->{json} = {};
    die if $c->request->method ne "POST";
    my $assertion = $c->req->params->{assertion} or die;
    my $ua = new LWP::UserAgent;
    my $response = $ua->post(
        'https://verifier.login.persona.org/verify',
        { assertion => $assertion,
          audience => "http://localhost:3000/"
        });
    Catalyst::Exception->throw("Did not get a response from Persona.") unless $response->is_success;

    my $d = decode_json($response->decoded_content) or die;
    Catalyst::Exception->throw("Persona says: $d->{reason}") if $d->{status} ne "okay";

    my $email = $d->{email} or die;
    my $user = $c->find_user({ username => $email });
    if (!$user) {
        $c->model('DB::Users')->create(
            { username => $email
            , password => "!"
            , emailaddress => $email,
            });
        $user = $c->find_user({ username => $email }) or die;
    }
    $c->set_authenticated($user);
    $c->stash->{json}->{result} = "ok";
}

    <meta http-equiv="X-UA-Compatible" content="IE=Edge" />

          You are logged in as <tt>[% c.user.username %]</tt>.

          You are logged in as <tt>[% HTML.escape(c.user.username) %]</tt>.

    <script src="https://login.persona.org/include.js"></script>
    <script>
      navigator.id.watch({
        loggedInUser: [% c.user_exists ? '"' _ HTML.escape(c.user.username) _ '"' : "null" %],
        onlogin: function(assertion) {
          $.post("[% c.uri_for('/persona-login') %]", { assertion: assertion })
            .done(function(data) {
              if (data.error)
                bootbox.alert("Login failed: " + data.error);
              else
                window.location.reload();
            })
            .fail(function() { bootbox.alert("Server request failed!"); });
        },
        onlogout: function() {
          $.ajax({
            type: 'POST',
            url: '/logout',
            success: function(res, status, xhr) { window.location.reload(); },
            error: function(xhr, status, err) { alert("Logout failure: " + err); }
          });
        }
      });

      $("#persona-signin").click(function() {
        navigator.id.request();
      });
      $("#persona-signout").click(function() {
        navigator.id.logout();
      });
    </script>

<br/>

<!--

-->

    <a href="[% uri %]">[% title %]</a>

    <a [% HTML.attributes(href => uri) %]>[% title %]</a>

    [% INCLUDE menuItem uri = c.uri_for(c.controller('Root').action_for('logout')) title = "Sign out" %]

    <li>
      <a href="#" id="persona-signout">Sign out</a>
    </li>

    [% INCLUDE menuItem uri = c.uri_for(c.controller('Root').action_for('login')) title = "Sign in" %]

    <li>
      <a href="#" id="persona-signin">Sign in</a>
    </li>