package com.simperium.client;

import com.simperium.SimperiumException;

public class AuthException extends SimperiumException {

    static public final String GENERIC_FAILURE_MESSAGE = "Invalid username or password";
    static public final String EXISTING_USER_FAILURE_MESSAGE = "Account already exists";
    static public final String COMPROMISED_PASSWORD_MESSAGE = "Password has been compromised";

    static public final int ERROR_STATUS_CODE = -1;

    public final FailureType failureType;

    public enum FailureType {
        INVALID_ACCOUNT, EXISTING_ACCOUNT, COMPROMISED_PASSWORD
    }

    public AuthException(FailureType code, String message){
        super(message);
        failureType = code;
    }

    public AuthException(FailureType code, String message, Throwable cause){
        super(message, cause);
        failureType = code;
    }

    public static AuthException defaultException() {
        return exceptionForStatusCode(ERROR_STATUS_CODE);
    }

    public static AuthException exceptionForStatusCode(int statusCode) {
        return exceptionForStatusCode(statusCode, null);
    }

    public static AuthException exceptionForStatusCode(int statusCode, Throwable cause){
        switch (statusCode) {
            case 409:
                return new AuthException(FailureType.EXISTING_ACCOUNT, EXISTING_USER_FAILURE_MESSAGE, cause);
            case 401:
                return new AuthException(FailureType.COMPROMISED_PASSWORD, COMPROMISED_PASSWORD_MESSAGE, cause);
            default:
                return new AuthException(FailureType.INVALID_ACCOUNT, GENERIC_FAILURE_MESSAGE, cause);
        }
    }
}
@@ -66,16 +66,43 @@
 ption;%0A%0A
+import java.util.Objects;%0A%0A
 public c
@@ -422,16 +422,85 @@
 omised%22;
+%0A    static public final String INVALID_LOGIN_BODY = %22invalid login%22;
 %0A%0A    st
@@ -1480,16 +1480,444 @@
 se 401:%0A
+                // Code 401 can be obtain because credentials are wrong or the user's password has been compromised%0A                // To differentiate both responses, we check the response's body%0A                if (cause != null && Objects.equals(cause.getMessage(), INVALID_LOGIN_BODY)) %7B%0A                    return new AuthException(FailureType.INVALID_ACCOUNT, GENERIC_FAILURE_MESSAGE, cause);%0A                %7D else %7B%0A    
         
@@ -2013,32 +2013,50 @@
 ESSAGE, cause);%0A
+                %7D%0A
             defa

Handle two kind of results for 401 responses during authentication