<?php

/**
 * Class which wraps simpleSAMLphp errors in exceptions.
 *
 * @author Olav Morken, UNINETT AS.
 * @package simpleSAMLphp
 */
class SimpleSAML_Error_Error extends SimpleSAML_Error_Exception {


	/**
	 * The error code.
	 *
	 * @var string
	 */
	private $errorCode;


	/**
	 * The http code.
	 *
	 * @var integer
	 */
	protected $httpCode = 500;


	/**
	 * The error title tag in dictionary.
	 *
	 * @var string
	 */
	private $dictTitle;


	/**
	 * The error description tag in dictionary.
	 *
	 * @var string
	 */
	private $dictDescr;


	/**
	 * The name of module which throw error.
	 *
	 * @var string|NULL
	 */
	private $module = NULL;


	/**
	 * The parameters for the error.
	 *
	 * @var array
	 */
	private $parameters;


	/**
	 * Name of custom include template for the error.
	 *
	 * @var string|NULL
	 */
	protected $includeTemplate = NULL;


	/**
	 * Constructor for this error.
	 *
	 * The error can either be given as a string, or as an array. If it is an array, the
	 * first element in the array (with index 0), is the error code, while the other elements
	 * are replacements for the error text.
	 *
	 * @param mixed $errorCode  One of the error codes defined in the errors dictionary.
	 * @param Exception $cause  The exception which caused this fatal error (if any).
	 */
	public function __construct($errorCode, Exception $cause = NULL, $httpCode = NULL) {
		assert('is_string($errorCode) || is_array($errorCode)');

		if (is_array($errorCode)) {
			$this->parameters = $errorCode;
			unset($this->parameters[0]);
			$this->errorCode = $errorCode[0];
		} else {
			$this->parameters = array();
			$this->errorCode = $errorCode;
		}

		if (isset($httpCode)) {
			$this->httpCode = $httpCode;
		}

		$moduleCode = explode(':', $this->errorCode, 2);
		if (count($moduleCode) === 2) {
			$this->module = $moduleCode[0];
			$this->dictTitle = '{' . $this->module . ':errors:title_' . $moduleCode[1] . '}';
			$this->dictDescr = '{' . $this->module . ':errors:descr_' . $moduleCode[1] . '}';
		} else {
			$this->dictTitle = '{errors:title_' . $this->errorCode . '}';
			$this->dictDescr = '{errors:descr_' . $this->errorCode . '}';
		}

		if (!empty($this->parameters)) {
			$msg = $this->errorCode . '(';
			foreach ($this->parameters as $k => $v) {
				if ($k === 0) {
					continue;
				}

				$msg .= var_export($k, TRUE) . ' => ' . var_export($v, TRUE) . ', ';
			}
			$msg = substr($msg, 0, -2) . ')';
		} else {
			$msg = $this->errorCode;
		}
		parent::__construct($msg, -1, $cause);
	}


	/**
	 * Retrieve the error code given when throwing this error.
	 *
	 * @return string  The error code.
	 */
	public function getErrorCode() {
		return $this->errorCode;
	}


	/**
	 * Retrieve the error parameters given when throwing this error.
	 *
	 * @return array  The parameters.
	 */
	public function getParameters() {
		return $this->parameters;
	}


	/**
	 * Retrieve the error title tag in dictionary.
	 *
	 * @return string  The error title tag.
	 */
	public function getDictTitle() {
		return $this->dictTitle;
	}


	/**
	 * Retrieve the error description tag in dictionary.
	 *
	 * @return string  The error description tag.
	 */
	public function getDictDescr() {
		return $this->dictDescr;
	}


	/**
	 * Set the HTTP return code for this error.
	 *
	 * This should be overridden by subclasses who want a different return code than 500 Internal Server Error.
	 */
	protected function setHTTPCode() {
		// Some mostly used HTTP codes.
		$httpCodesMap = array(
			400 => 'HTTP/1.0 400 Bad Request',
			403 => 'HTTP/1.0 403 Forbidden',
			404 => 'HTTP/1.0 404 Not Found',
			405 => 'HTTP/1.0 405 Method Not Allowed',
			500 => 'HTTP/1.0 500 Internal Server Error',
			501 => 'HTTP/1.0 501 Method Not Implemented',
			503 => 'HTTP/1.0 503 Service Temporarily Unavailable',
		);

		$httpCode = $this->httpCode;

		if (function_exists('http_response_code')) {
			http_response_code($httpCode);
			return;
		}

		if (!array_key_exists($this->httpCode, $httpCodesMap)) {
			$httpCode = 500;
			SimpleSAML_Logger::warning('HTTP response code not defined: ' . var_export($this->httpCode, TRUE));
		}

		header($httpCodesMap[$httpCode]);
	}


	/**
	 * Save an error report.
	 *
	 * @return array  The array with the error report data.
	 */
	protected function saveError() {

		$data = $this->format();
		$emsg = array_shift($data);
		$etrace = implode("\n", $data);

		$reportId = SimpleSAML_Utilities::stringToHex(SimpleSAML_Utilities::generateRandomBytes(4));
		SimpleSAML_Logger::error('Error report with id ' . $reportId . ' generated.');

		$config = SimpleSAML_Configuration::getInstance();
		$session = SimpleSAML_Session::getSessionFromRequest();

		if (isset($_SERVER['HTTP_REFERER'])) {
			$referer = $_SERVER['HTTP_REFERER'];
			/*
			 * Remove anything after the first '?' or ';', just
			 * in case it contains any sensitive data.
			 */
			$referer = explode('?', $referer, 2);
			$referer = $referer[0];
			$referer = explode(';', $referer, 2);
			$referer = $referer[0];
		} else {
			$referer = 'unknown';
		}
		$errorData = array(
			'exceptionMsg' => $emsg,
			'exceptionTrace' => $etrace,
			'reportId' => $reportId,
			'trackId' => $session->getTrackID(),
			'url' => SimpleSAML_Utilities::selfURLNoQuery(),
			'version' => $config->getVersion(),
			'referer' => $referer,
		);
		$session->setData('core:errorreport', $reportId, $errorData);

		return $errorData;
	}


	/**
	 * Display this error.
	 *
	 * This method displays a standard simpleSAMLphp error page and exits.
	 */
	public function show() {

		$this->setHTTPCode();

		/* Log the error message. */
		$this->logError();

		$errorData = $this->saveError();

		$config = SimpleSAML_Configuration::getInstance();

		$data['showerrors'] = $config->getBoolean('showerrors', true);
		$data['error'] = $errorData;
		$data['errorCode'] = $this->errorCode;
		$data['parameters'] = $this->parameters;
		$data['module'] = $this->module;
		$data['dictTitle'] = $this->dictTitle;
		$data['dictDescr'] = $this->dictDescr;
		$data['includeTemplate'] = $this->includeTemplate;

		/* Check if there is a valid technical contact email address. */
		if($config->getBoolean('errorreporting', TRUE) &&
			$config->getString('technicalcontact_email', 'na@example.org') !== 'na@example.org') {
			/* Enable error reporting. */
			$baseurl = SimpleSAML_Utilities::getBaseURL();
			$data['errorReportAddress'] = $baseurl . 'errorreport.php';
		}

		$session = SimpleSAML_Session::getSessionFromRequest();
		$attributes = $session->getAttributes();
		if (is_array($attributes) && array_key_exists('mail', $attributes) && count($attributes['mail']) > 0) {
			$data['email'] = $attributes['mail'][0];
		} else {
			$data['email'] = '';
		}

		$show_function = $config->getArray('errors.show_function', NULL);
		if (isset($show_function)) {
			assert('is_callable($show_function)');
			call_user_func($show_function, $config, $data);
			assert('FALSE');
		} else {
			$t = new SimpleSAML_XHTML_Template($config, 'error.php', 'errors');
			$t->data = array_merge($t->data, $data);
			$t->show();
		}

		exit;
	}

}