<?php

if(!defined("COMMON"))
    require("Common.php");

$js = getJsonizedInput();

// Read login parameters
$first = $js['first'];
$last = $js['last'];
$password = $js["password"];

// Password is hashed
// Compare against hash in database + : md5(salt)
$DB = get_DB();

$clientKey = $js['clientKey'];
if($clientKey == CLIENTPSK) {
    // PSK Matches, authorized application

    $res = $DB->query("SELECT * FROM `UserAccounts` INNER JOIN `auth` ON `UserAccounts`.`PrincipalID` = `auth`.`UUID` WHERE `FirstName` = '$first' AND `LastName` = '$last';");
/*
 *
    return User(
        ID: UUID.parse(map['id'] as String),
        FirstName: map['first'] as String,
        LastName: map['last'] as String,
        createdAt: map['rezzed'] as int,
        userTitle: map['title'] as String);
    return S2CLoginResponsePacket(
        loggedIn: map['login'] as bool,
        reason: map['reason'] as String,
        user: User.parseJson(json.encode(map['user'])));
 */
    $id = NULLKEY;
    $first = "";
    $last = "";
    $rezday = 0;
    $title = "";
    $login = false;
    $reason = "Invalid password";
    $active = false;

    if($res->num_rows > 0) {
        $row = $res->fetch_assoc();
        $pwSalt = $row['passwordSalt'];
        $pwHash = $row['passwordHash'];

        if(md5($password.":" . $pwSalt) == $pwHash) {
            // Login Success
            $_SESSION['login'] = "1";
            $id = $row['UUID'];
            $first = $row['FirstName'];
            $last = $row['LastName'];
            $rezday = $row['createdAt'];
            $title = $row['UserTitle'];
            $active = $row['active'] == 1;

            $reason = "success";
            $login=true;
        }
    }
    else {
        $reason = "No such user";
    }

    die(json_encode(
        array(
            "login" => $login,
            "reason" => $reason,
            "type" => "S2CLoginResponse",
            "user" => array(
                "id" => $id,
                "first" => $first,
                "last" => $last,
                "title" => $title,
                "rez" => $rezday,
                "active" => $active
            )
        )
    ));
} else {
    die(json_encode(array(
        "login" => false,
        "reason" => "Unauthorized",
        "type" => "S2CLoginResponse"
    )));
}

?>