import webob.exc

import paste.httpexceptions

import paste.auth.basic

import paste.httpheaders

from webhelpers.pylonslib import secure_form

from tg import config, tmpl_context as c, request, response, session, render_template

from tg import TGController

from tg.i18n import ugettext as _

from kallithea import __version__, BACKENDS

from kallithea.config.routing import url

from kallithea.lib.utils2 import str2bool, safe_unicode, AttributeDict, \

    safe_str, safe_int

from kallithea.lib import auth_modules

from kallithea.lib.auth import AuthUser, HasPermissionAnyMiddleware

from kallithea.lib.compat import json

from kallithea.lib.utils import get_repo_slug

from kallithea.lib.exceptions import UserCreationError

from kallithea.lib.vcs.exceptions import RepositoryError, EmptyRepositoryError, ChangesetDoesNotExistError

from kallithea.model import meta

from kallithea.model.db import PullRequest, Repository, Ui, User, Setting

from kallithea.model.scm import ScmModel

log = logging.getLogger(__name__)

def render(template_path):

    return render_template({'url': url}, 'mako', template_path)

def _filter_proxy(ip):

    """

    HEADERS can have multiple ips inside the left-most being the original

    client, and each successive proxy that passed the request adding the IP

    address where it received the request from.

    :param ip:

    """

    if ',' in ip:

        _ips = ip.split(',')

        _first_ip = _ips[0].strip()

        log.debug('Got multiple IPs %s, using %s', ','.join(_ips), _first_ip)

        return _first_ip

    return ip

            c.ga_code = '''<script type="text/javascript">

                var _gaq = _gaq || [];

                _gaq.push(['_setAccount', '%s']);

                _gaq.push(['_trackPageview']);

                (function() {

                    var ga = document.createElement('script'); ga.type = 'text/javascript'; ga.async = true;

                    ga.src = ('https:' == document.location.protocol ? 'https://ssl' : 'http://www') + '.google-analytics.com/ga.js';

                    var s = document.getElementsByTagName('script')[0]; s.parentNode.insertBefore(ga, s);

                    })();

            </script>''' % c.ga_code

        c.site_name = rc_config.get('title')

        c.clone_uri_tmpl = rc_config.get('clone_uri_tmpl')

        ## INI stored

        c.visual.allow_repo_location_change = str2bool(config.get('allow_repo_location_change', True))

        c.visual.allow_custom_hooks_settings = str2bool(config.get('allow_custom_hooks_settings', True))

        c.instance_id = config.get('instance_id')

        c.issues_url = config.get('bugtracker', url('issues_url'))

        # END CONFIG VARS

        c.repo_name = get_repo_slug(request)  # can be empty

        c.backends = BACKENDS.keys()

        self.cut_off_limit = safe_int(config.get('cut_off_limit'))

        c.my_pr_count = PullRequest.query(reviewer_id=request.authuser.user_id, include_closed=False).count()

        self.scm_model = ScmModel()

    @staticmethod

    def _determine_auth_user(api_key, bearer_token, session_authuser):

        """

        Create an `AuthUser` object given the API key/bearer token

        (if any) and the value of the authuser session cookie.

        """

        # Authenticate by bearer token

        if bearer_token is not None:

            api_key = bearer_token

        # Authenticate by API key

        if api_key is not None:

            au = AuthUser(dbuser=User.get_by_api_key(api_key),

                authenticating_api_key=api_key, is_external_auth=True)

            if au.is_anonymous:

                log.warning('API key ****%s is NOT valid', api_key[-4:])

      </li>

    % elif request.authuser.repositories_admin or request.authuser.repository_groups_admin or request.authuser.user_groups_admin:

    <li class="${'active' if current == 'admin' else ''} dropdown">

        <a class="menu_link dropdown-toggle" data-toggle="dropdown" role="button" title="${_('Admin')}" href="">

          <i class="icon-gear"></i>${_('Admin')}

        </a>

        ${admin_menu_simple(request.authuser.repositories_admin,

                            request.authuser.repository_groups_admin,

                            request.authuser.user_groups_admin or h.HasPermissionAny('hg.usergroup.create.true')())}

    </li>

    % endif

    <li class="${'active' if current == 'my_pullrequests' else ''}">

      <a class="menu_link" title="${_('My Pull Requests')}" href="${h.url('my_pullrequests')}">

        <i class="icon-git-pull-request"></i>${_('My Pull Requests')}

        %if c.my_pr_count != 0:

          <span class="badge">${c.my_pr_count}</span>

        %endif

      </a>

    </li>

    ## USER MENU

    <li class="dropdown">

      <a class="menu_link dropdown-toggle" data-toggle="dropdown" role="button" id="quick_login_link"

          ${h.gravatar_div(request.authuser.email, size=20, div_class="icon")}

          %if request.authuser.username != 'default':

            <span class="menu_link_user">${request.authuser.username}</span>

          %else:

              <span>${_('Not Logged In')}</span>

          %endif

          <i class="caret"></i>

      </a>

      <div class="dropdown-menu user-menu" role="menu">

        <div id="quick_login" role="form" aria-describedby="quick_login_h" aria-hidden="true" class="container-fluid">

          %if request.authuser.username == 'default' or request.authuser.user_id is None:

            ${h.form(h.url('login_home', came_from=request.path_qs), class_='form clearfix')}

                <h4 id="quick_login_h">${_('Login to Your Account')}</h4>

                <label>

                    ${_('Username')}:

                    ${h.text('username',class_='form-control')}

                </label>

                <label>

                    ${_('Password')}:

                    ${h.password('password',class_='form-control')}

                </label>

                <div class="password_forgotten">

                    ${h.link_to(_('Forgot password?'),h.url('reset_password'))}

                </div>

                <div class="register">

                    %if h.HasPermissionAny('hg.admin', 'hg.register.auto_activate', 'hg.register.manual_activate')():

                        ${h.link_to(_("Don't have an account?"),h.url('register'))}

                    %endif

                </div>

                <div class="submit">

                    ${h.submit('sign_in',_('Log In'),class_="btn btn-default btn-xs")}

                </div>

            ${h.end_form()}

          %else:

            <div class="pull-left">

                ${h.gravatar_div(request.authuser.email, size=48, div_class="big_gravatar")}

                <b class="full_name">${request.authuser.full_name_or_username}</b>

                <div class="email">${request.authuser.email}</div>

            </div>

            <div id="quick_login_h" class="pull-right list-group text-right">

              ${h.link_to(_('My Account'),h.url('my_account'),class_='list-group-item')}

              %if not request.authuser.is_external_auth:

                ## Cannot log out if using external (container) authentication.

                ${h.link_to(_('Log Out'), h.url('logout_home'),class_='list-group-item')}

              %endif

            </div>

          %endif

        </div>

      </div>

    </li>

  </ul>

    <script type="text/javascript">

        $(document).ready(function(){

            var visual_show_public_icon = ${h.js(c.visual.show_public_icon)};

            var cache = {}

            /*format the look of items in the list*/

            var format = function(state){

                if (!state.id){

                  return state.text; // optgroup

                }

                var obj_dict = state.obj;

                var tmpl = '';