// Copyright 2019 Google LLC
//
// Licensed under the Apache License, Version 2.0 (the "License");
// you may not use this file except in compliance with the License.
// You may obtain a copy of the License at
//
//     https://www.apache.org/licenses/LICENSE-2.0
//
// Unless required by applicable law or agreed to in writing, software
// distributed under the License is distributed on an "AS IS" BASIS,
// WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
// See the License for the specific language governing permissions and
// limitations under the License.

package com.google.sps.servlets;

import static com.google.sps.Utils.getParameter;

import com.google.appengine.api.datastore.DatastoreService;
import com.google.appengine.api.datastore.DatastoreServiceFactory;
import com.google.appengine.api.datastore.Entity;
import com.google.appengine.api.datastore.EntityNotFoundException;
import com.google.appengine.api.datastore.Key;
import com.google.appengine.api.datastore.KeyFactory;
import com.google.appengine.api.datastore.Query;
import com.google.gson.Gson;
import com.google.sps.Firebase;
import com.google.sps.Utils;
import java.io.IOException;
import java.util.Arrays;
import java.util.logging.Logger;
import javax.servlet.ServletException;
import javax.servlet.annotation.WebServlet;
import javax.servlet.http.HttpServlet;
import javax.servlet.http.HttpServletRequest;
import javax.servlet.http.HttpServletResponse;

@WebServlet("/confirm-user")
public class DeleteEventServlet extends HttpServlet {

  private static final Logger LOGGER = Logger.getLogger(LoadEventServlet.class.getName());

  @Override
  public void doPost(HttpServletRequest request, HttpServletResponse response) throws IOException {
    String userToken = request.getParameter("userToken");
    String userID = Firebase.authenticateUser(userToken);

    Key keyRequested = getEventKey(request, "event");
    Query query = new Query("Event", keyRequested);

    DatastoreService datastore = DatastoreServiceFactory.getDatastoreService();
    Entity eventRequested = datastore.prepare(query).asSingleEntity();

    String creator = eventRequested.getProperty("creator").toString();

    response.setContentType("text/html");
    PrintWriter out = response.getWriter();
    if (creator.equals(userID)) {
      out.append("true");
    } else {
      out.append("false");
    }
    out.close();
  }

  /**
   * Retrieves the key string (if any) from the request parameter and converts it to type Key.
   *
   * @return the key from the request parameter.
   */
  private Key getEventKey(HttpServletRequest request, String name)
      throws IllegalArgumentException, IOException {
    Key eventKey = null;

    if (request.getParameter(name) == null) {
      throw new IOException("Request is missing parameter");
    }

    // Get the event key string from the request.
    String eventKeyString = request.getParameter(name);

    // Convert String to type Key.
    eventKey = KeyFactory.stringToKey(eventKeyString);

    return eventKey;
  }
}

@@ -620,58 +620,8 @@
 s;%0A%0A
-import static com.google.sps.Utils.getParameter;%0A%0A
 impo
@@ -797,75 +797,8 @@
 ty;%0A
-import com.google.appengine.api.datastore.EntityNotFoundException;%0A
 impo
@@ -947,37 +947,8 @@
 ry;%0A
-import com.google.gson.Gson;%0A
 impo
@@ -1036,33 +1036,8 @@
 on;%0A
-import java.util.Arrays;%0A
 impo
@@ -1327,19 +1327,19 @@
 ass 
-DeleteEvent
+ConfirmUser
 Serv
@@ -1425,17 +1425,19 @@
 ger(
-LoadEvent
+ConfirmUser
 Serv
@@ -1491,11 +1491,10 @@
 d do
-Pos
+Ge
 t(Ht
@@ -1548,16 +1548,22 @@
 esponse)
+%0A     
  throws 
@@ -1569,24 +1569,42 @@
  IOException
+, ServletException
  %7B%0A    Strin
@@ -1648,24 +1648,25 @@
 serToken%22);%0A
+%0A
     String u
@@ -1677,45 +1677,309 @@
 D = 
-Firebase.authenticateUser(userToken);
+null;%0A    try %7B%0A      if (Firebase.isUserLoggedIn(userToken)) %7B%0A        userID = Firebase.authenticateUser(userToken);%0A      %7D else %7B%0A        throw new IOException(%22User is not logged in.%22);%0A      %7D%0A    %7D catch (IllegalArgumentException %7C IOException e) %7B%0A      LOGGER.info(%22Login error: %22 + e);%0A    %7D
 %0A%0A  
@@ -2021,17 +2021,17 @@
 quest, %22
-e
+E
 vent%22);%0A
@@ -2315,88 +2315,31 @@
     
-response.setContentType(%22text/html%22);%0A    PrintWriter out = response.getWriter()
+boolean belongs = false
 ;%0A  
@@ -2380,88 +2380,142 @@
     
-out.append(%22
+belongs = 
 true
-%22)
 ;%0A    %7D
- else %7B%0A      out.append(%22false%22);%0A    %7D%0A    out.close(
+%0A%0A    response.setContentType(%22application/json;%22);%0A    response.getWriter().println(Utils.convertToJson(belongs)
 );%0A 

Add secondary check for login