package net.curisit.securis;

import java.io.IOException;

import javax.enterprise.context.ApplicationScoped;
import javax.servlet.Filter;
import javax.servlet.FilterChain;
import javax.servlet.FilterConfig;
import javax.servlet.ServletException;
import javax.servlet.ServletRequest;
import javax.servlet.ServletResponse;
import javax.servlet.annotation.WebFilter;
import javax.servlet.http.HttpServletRequest;
import javax.servlet.http.HttpServletResponse;

import org.apache.logging.log4j.LogManager;
import org.apache.logging.log4j.Logger;

@ApplicationScoped
@WebFilter(urlPatterns = "/*")
public class DevFilter implements Filter {

	private static final Logger LOG = LogManager.getLogger(DevFilter.class);

	@Override
	public void init(FilterConfig fc) throws ServletException {
	}

	@Override
	public void doFilter(ServletRequest sreq, ServletResponse sres, FilterChain fc) throws IOException, ServletException {
		HttpServletRequest req = (HttpServletRequest) sreq;
		HttpServletResponse res = (HttpServletResponse) sres;
		// For dev. using JS in different server
		res.addHeader("Access-Control-Allow-Origin", "*");
		//res.addHeader("Access-Control-Request-Headers", "*");
		res.addHeader("Access-Control-Allow-Methods", "GET, POST, PUT, DELETE, OPTIONS");
		res.addHeader("Access-Control-Allow-Headers", "X-SECURIS-TOKEN, Content-Type");
		res.addHeader("Access-Control-Expose-Headers", "X-SECURIS-ERROR-MSG, X-SECURIS-ERROR-CODE, Content-Type");

		// LOG.info("Added header to: " + res.getHeaderNames());
		if (!req.getMethod().equals("OPTIONS")) {
			fc.doFilter(sreq, sres);
		}
	}

	@Override
	public void destroy() {
	}

}