class OauthClientsController < ApplicationController
  layout "site"

  before_action :authorize_web
  before_action :set_locale

  authorize_resource :class => ClientApplication

  def index
    @client_applications = current_user.client_applications
    @tokens = current_user.oauth_tokens.authorized
  end

  def show
    @client_application = current_user.client_applications.find(params[:id])
  rescue ActiveRecord::RecordNotFound
    @type = "client application"
    render :action => "not_found", :status => :not_found
  end

  def new
    if Settings.oauth_10_registration
      @client_application = ClientApplication.new
    else
      flash[:error] = t ".disabled"
      redirect_to :action => "index"
    end
  end

  def edit
    @client_application = current_user.client_applications.find(params[:id])
  rescue ActiveRecord::RecordNotFound
    @type = "client application"
    render :action => "not_found", :status => :not_found
  end

  def create
    @client_application = current_user.client_applications.build(application_params)
    if @client_application.save
      flash[:notice] = t ".flash"
      redirect_to :action => "show", :id => @client_application.id
    else
      render :action => "new"
    end
  end

  def update
    @client_application = current_user.client_applications.find(params[:id])
    if @client_application.update(application_params)
      flash[:notice] = t ".flash"
      redirect_to :action => "show", :id => @client_application.id
    else
      render :action => "edit"
    end
  rescue ActiveRecord::RecordNotFound
    @type = "client application"
    render :action => "not_found", :status => :not_found
  end

  def destroy
    @client_application = current_user.client_applications.find(params[:id])
    @client_application.destroy
    flash[:notice] = t ".flash"
    redirect_to :action => "index"
  rescue ActiveRecord::RecordNotFound
    @type = "client application"
    render :action => "not_found", :status => :not_found
  end

  private

  def application_params
    params.require(:client_application).permit(:name, :url, :callback_url, :support_url, ClientApplication.all_permissions)
  end
end