class Puppet::Network::AuthConfigParser

# File lib/puppet/network/auth_config_parser.rb, line 10
def initialize(string)
  @string = string
end

# File lib/puppet/network/auth_config_parser.rb, line 6
def self.new_from_file(file)
  self.new(File.read(file))
end

# File lib/puppet/network/auth_config_parser.rb, line 69
def modify_right(right, method, value, msg, count)
  value.split(/\s*,\s*/).each do |val|
    begin
      val.strip!
      right.info msg % val
      right.send(method, val)
    rescue Puppet::AuthStoreError => detail
      raise Puppet::ConfigurationError, "#{detail} at line #{count} of #{@file}"
    end
  end
end

# File lib/puppet/network/auth_config_parser.rb, line 14
def parse
  Puppet::Network::AuthConfig.new(parse_rights)
end

# File lib/puppet/network/auth_config_parser.rb, line 46
def parse_right_directive(right, var, value, count)
  value.strip!
  case var
  when "allow"
    modify_right(right, :allow, value, "allowing %s access", count)
  when "deny"
    modify_right(right, :deny, value, "denying %s access", count)
  when "allow_ip"
    modify_right(right, :allow_ip, value, "allowing IP %s access", count)
  when "deny_ip"
    modify_right(right, :deny_ip, value, "denying IP %s access", count)
  when "method"
    modify_right(right, :restrict_method, value, "allowing 'method' %s", count)
  when "environment"
    modify_right(right, :restrict_environment, value, "adding environment %s", count)
  when /auth(?:enticated)?/
    modify_right(right, :restrict_authenticated, value, "adding authentication %s", count)
  else
    raise Puppet::ConfigurationError,
      "Invalid argument '#{var}' at line #{count}"
  end
end

# File lib/puppet/network/auth_config_parser.rb, line 18
def parse_rights
  rights = Puppet::Network::Rights.new
  right = nil
  count = 1
  @string.each_line { |line|
    case line.chomp
    when /^\s*#/, /^\s*$/
      # skip comments and blank lines
    when /^path\s+((?:~\s+)?[^ ]+)\s*$/ # "path /path" or "path ~ regex"
      name = $1.chomp
      right = rights.newright(name, count, @file)
    when /^\s*(allow(?:_ip)?|deny(?:_ip)?|method|environment|auth(?:enticated)?)\s+(.+?)(\s*#.*)?$/
      parse_right_directive(right, $1, $2, count)
    else
      raise Puppet::ConfigurationError, "Invalid line #{count}: #{line}"
    end
    count += 1
  }

  # Verify each of the rights are valid.
  # We let the check raise an error, so that it can raise an error
  # pointing to the specific problem.
  rights.each { |name, right|
    right.valid?
  }
  rights
end