from django.http import JsonResponse
from django.shortcuts import redirect
from django.utils.translation import gettext as _
from django.urls import Resolver404, resolve

from accounts.models import UserAttributes

ALLOWED_VIEWS = {"accounts:change_password", "accounts:logout", "accounts:login"}


class ForcePasswordChangeMiddleware:
    """Send users who must change their password (the generated admin one, or one
    an administrator set) to the change form."""

    def __init__(self, get_response):
        self.get_response = get_response

    def __call__(self, request):
        if request.user.is_authenticated and UserAttributes.objects.filter(
            user=request.user, must_change_password=True
        ).exists():
            try:
                view_name = resolve(request.path_info).view_name
            except Resolver404:
                view_name = None
            if view_name not in ALLOWED_VIEWS:
                if request.path_info.startswith("/api/"):  # as for a token (accounts.auth)
                    return JsonResponse({"detail": _("Change your password before using the API.")}, status=403)
                return redirect("accounts:change_password")
        return self.get_response(request)