sub login :Local :Args(0) :ActionClass('REST::ForBrowsers') { }

sub login :Local :Args(0) :ActionClass('REST') { }

    $self->status_ok($c, entity => { });

    $self->status_no_content($c);

sub logout :Local :Args(0) :ActionClass('REST::ForBrowsers') { }

sub logout :Local :Args(0) :ActionClass('REST') { }

    $c->stash->{template} = 'user.tt';
    $c->stash->{create} = 1;
    return if $c->request->method ne "POST";

    if ($c->request->method eq "GET") {
        $c->stash->{template} = 'user.tt';
        $c->stash->{create} = 1;
        return;
    }
    die unless $c->request->method eq "PUT";

    backToReferer($c);

    $self->status_no_content($c);

    my $fullName = trim($c->req->params->{fullname} // "");
    error($c, "Your must specify your full name.") if $fullName eq "";

    my $fullName = trim($c->req->params->{fullname} // "");
    error($c, "Your must specify your full name.") if $fullName eq "";

    $self->status_ok(
        $c,

    $self->status_ok($c,

sub deleteUser {
    my ($self, $c, $user) = @_;
    my ($project) = $c->model('DB::Projects')->search({ owner => $user->username });
    error($c, "User " . $user->username . " is still owner of project " . $project->name . ".")
        if defined $project;
    $c->logout() if $user->username eq $c->user->username;
    $user->delete;
}
sub edit :Chained('user') :Args(0) :ActionClass('REST::ForBrowsers') { }

sub edit :Chained('user') :PathPart('') :Args(0) :ActionClass('REST::ForBrowsers') { }

    $c->stash->{template} = 'user.tt';
}

sub edit_PUT {
    my ($self, $c) = @_;

    $c->stash->{template} = 'user.tt';
    $c->session->{referer} = $c->request->referer if !defined $c->session->{referer};

    if (($c->stash->{params}->{submit} // "") eq "reset-password") {
        return;
    }

    $c->stash->{fullname} = $user->fullname;

    txn_do($c->model('DB')->schema, sub {
        updatePreferences($c, $user);
    });

    $c->stash->{emailonerror} = $user->emailonerror;

    $c->flash->{successMsg} = "Your preferences have been updated.";
    $self->status_no_content($c);

sub edit_POST {

sub edit_DELETE {

    $c->stash->{template} = 'user.tt';

    my ($project) = $c->model('DB::Projects')->search({ owner => $user->username });
    error($c, "User " . $user->username . " is still owner of project " . $project->name . ".")
        if defined $project;

    $c->session->{referer} = $c->request->referer if !defined $c->session->{referer};

    $c->logout() if $user->username eq $c->user->username;
    $user->delete;
    $c->flash->{successMsg} = "The user has been deleted.";
    $self->status_no_content($c);
}
sub reset_password :Chained('user') :PathPart('reset-password') :Args(0) {
    my ($self, $c) = @_;
    my $user = $c->stash->{user};

    if (($c->stash->{params}->{submit} // "") eq "delete") {
        deleteUser($self, $c, $user);
        backToReferer($c);
    }

    requirePost($c);

    if (($c->stash->{params}->{submit} // "") eq "reset-password") {
        error($c, "This user's password cannot be reset.") if $user->type ne "hydra";
        $c->stash->{json} = {};
        error($c, "No email address is set for this user.")
            unless $user->emailaddress;
        my $password = Crypt::RandPasswd->word(8,10);
        setPassword($user, $password);
        sendEmail($c,
            $user->emailaddress,
            "Hydra password reset",
            "Hi,\n\n".
            "Your password has been reset. Your new password is '$password'.\n\n".
            "You can change your password at " . $c->uri_for($self->action_for('edit'), [$user->username]) . ".\n\n".
            "With regards,\n\nHydra.\n"
        );
        return;
    }

    error($c, "This user's password cannot be reset.") if $user->type ne "hydra";
    error($c, "No email address is set for this user.")
        unless $user->emailaddress;

    txn_do($c->model('DB')->schema, sub {
        updatePreferences($c, $user);
    });

    my $password = Crypt::RandPasswd->word(8,10);
    setPassword($user, $password);
    sendEmail($c,
        $user->emailaddress,
        "Hydra password reset",
        "Hi,\n\n".
        "Your password has been reset. Your new password is '$password'.\n\n".
        "You can change your password at " . $c->uri_for($self->action_for('edit'), [$user->username]) . ".\n\n".
        "With regards,\n\nHydra.\n"
    );

    if ($c->request->looks_like_browser) {
        $c->flash->{successMsg} = "Your preferences have been updated.";
        backToReferer($c);
    } else {
        $self->status_no_content($c);
    }

    $c->flash->{successMsg} = "A new password has been sent to ${\$user->emailaddress}.";
    $self->status_no_content($c);

function backToReferrer() {
    // FIXME: should only do this if the referrer is another Hydra
    // page.
    window.location = document.referrer;
}

[% WRAPPER layout.tt title=(create ? "Register new user" : "Editing user $user.username") %]

[% WRAPPER layout.tt title=(create ? "Add new user" : "Editing user $user.username") %]

<form class="form-horizontal" method="post">

<form class="form-horizontal">

        <input type="text" class="span3" name="fullname" [% HTML.attributes(value => fullname) %]/>

        <input type="text" class="span3" name="fullname" [% HTML.attributes(value => create ? '' : user.fullname) %]/>

          <input type="checkbox" name="emailonerror" [% IF emailonerror; 'checked="checked"'; END %]/>Receive evaluation error notifications

          <input type="checkbox" name="emailonerror" [% IF !create && user.emailonerror; 'checked="checked"'; END %]/>Receive evaluation error notifications

      <button type="submit" class="btn btn-primary">

      <button id="submit-user" class="btn btn-primary">

        <button id="reset-password" type="submit" class="btn btn-warning" name="submit" value="reset-password">

        <button id="reset-password" class="btn btn-warning">

        <script type="text/javascript">
          $("#reset-password").click(function() {
            bootbox.confirm(
              'Are you sure you want to reset the password for this user?',
              function(c) {
                if (!c) return;
                $.post("[% c.uri_for(c.controller('User').action_for('edit'), [user.username]) %]", { submit: 'reset-password' })
                  .done(function(data) {
                    if (data.error)
                      bootbox.alert("Unable to reset password: " + data.error);
                    else
                      bootbox.alert("An email containing the new password has been sent to the user.");
                  })
                  .fail(function() { bootbox.alert("Server request failed!"); });
              });
            return false;
          });
        </script>

        <button id="delete-user" type="submit" class="btn btn-danger" name="submit" value="delete">

        <button id="delete-user" class="btn btn-danger">

        <script type="text/javascript">
          $("#delete-user").click(function() {
            return confirm("Are you sure you want to delete this user?");
          });
        </script>

<script>
  $("#submit-user").click(function() {
    requestJSON({
      [% IF create %]
        url: "[% c.uri_for(c.controller('User').action_for('register')) %]",
      [% ELSE %]
        url: "[% c.uri_for(c.controller('User').action_for('edit'), c.req.captures) %]",
      [% END %]
      data: $(this).parents("form").serialize(),
      type: 'PUT',
      success: backToReferrer
    });
    return false;
  });
  $("#reset-password").click(function() {
    bootbox.confirm(
      'Are you sure you want to reset the password for this user?',
      function(c) {
        if (!c) return;
        requestJSON({
          url: "[% c.uri_for(c.controller('User').action_for('reset_password'), [user.username]) %]",
          type: 'POST',
          success: backToReferrer
        });
      });
    return false;
  });
  $("#delete-user").click(function() {
    bootbox.confirm(
      'Are you sure you want to delete this user?',
      function(c) {
        if (!c) return;
        requestJSON({
          url: "[% c.uri_for(c.controller('User').action_for('edit'), c.req.captures) %]",
          type: 'DELETE',
          success: backToReferrer
        });
      });
    return false;
  });
</script>