package edu.utah.nanofab.coralapiserver.resources;


import javax.validation.Valid;
import javax.ws.rs.POST;
import javax.ws.rs.Path;
import javax.ws.rs.Produces;
import javax.ws.rs.core.MediaType;

import org.slf4j.Logger;
import org.slf4j.LoggerFactory;

import com.google.common.base.Optional;
import io.dropwizard.auth.Auth;
import com.codahale.metrics.annotation.Timed;

import edu.utah.nanofab.coralapiserver.auth.User;
import edu.utah.nanofab.coralapiserver.core.PasswordResetRequest;
import edu.utah.nanofab.coralapiserver.resources.operations.PasswordResetOperationPost;

@Path("/v0/resetPassword")
@Produces(MediaType.APPLICATION_JSON)
public class CoralApiPasswordResetResource {
  

  private String coralIor;
  private String coralConfigUrl;
  public static final Logger logger = LoggerFactory.getLogger(CoralApiPasswordResetResource.class);
  
  /**
   * Constructs a new password reset resource with the supplied coralIor and coralConfigUrl.
   * 
   * @param coralIor The URL endpoint for the CORBA Interoperable Object Reference.
   * @param coralConfigUrl The URL endpoint for the CORBA configurations.
   */
  public CoralApiPasswordResetResource(String coralIor, String coralConfigUrl) {
    this.coralIor = coralIor;
    this.coralConfigUrl = coralConfigUrl;
  }
  
  /**
   * Updates a coral member's password with the new password that is supplied.
   * 
   * @param name The user name of the coral member who's password will be updated.
   * @param newPass The new password for the coral account.
   * @param user The authenticated user.
   * 
   * @return True if the member's password was successfully updated. False otherwise.
   */
  @POST
  @Timed
  public Object updatePassword(@Valid PasswordResetRequest request, @Auth User user) {
    PasswordResetOperationPost operation = new PasswordResetOperationPost();
    
    operation.init(this.coralIor, 
             this.coralConfigUrl, 
             Optional.<String> absent(), 
             Optional.<Object> of(request), 
             user
    );
    
    return operation.perform();
  }
}

@@ -1835,24 +1835,127 @@
 ost();%0A    %0A
+    if (request.getName().equals(%22auth-token%22)) %7B%0A    %09request.setName(user.getUsername());%0A    %7D%0A    %0A
     operatio

add special case for resetting password with auth-token