text: 'use strict';
  
  /**
   * Module dependencies.
   */
  var _ = require('lodash'),
      errorHandler = require('../errors'),
      mongoose = require('mongoose'),
      passport = require('passport'),
      User = mongoose.model('User');
  
  /**
   * Signup
   */
  exports.signup = function(req, res) {
      // For security measurement we remove the roles from the req.body object
      delete req.body.roles;
  
      // Init Variables
      var user = new User(req.body);
      var message = null;
  
      // Add missing user fields
      user.provider = 'local';
      user.displayName = user.firstName + ' ' + user.lastName;
  
      // Then save the user
      user.save(function(err) {
          if (err) {
              return res.status(400).send({
                  message: errorHandler.getErrorMessage(err)
              });
          } else {
              // Remove sensitive data before login
              user.password = undefined;
              user.salt = undefined;
  
              req.login(user, function(err) {
                  if (err) {
                      res.status(400).send(err);
                  } else {
                      res.jsonp(user);
                  }
              });
          }
      });
  };
  
  /**
   * Signin after passport authentication
   */
  exports.signin = function(req, res, next) {
      passport.authenticate('local', function(err, user, info) {
          if (err || !user) {
              res.status(400).send(info);
          } else {
              // Remove sensitive data before login
              user.password = undefined;
              user.salt = undefined;
  
              req.login(user, function(err) {
                  if (err) {
                      res.status(400).send(err);
                  } else {
                      res.jsonp(user);
                  }
              });
          }
      })(req, res, next);
  };
  
  /**
   * Signout
   */
  exports.signout = function(req, res) {
      req.logout();
      res.redirect('/');
  };
  
  /**
   * OAuth callback
   */
  exports.oauthCallback = function(strategy) {
      return function(req, res, next) {
          passport.authenticate(strategy, function(err, user, redirectURL) {
              if (err || !user) {
                  return res.redirect('/#!/signin');
              }
              req.login(user, function(err) {
                  if (err) {
                      return res.redirect('/#!/signin');
                  }
  
                  return res.redirect(redirectURL || '/');
              });
          })(req, res, next);
      };
  };
  
  /**
   * Helper function to save or update a OAuth user profile
   */
  exports.saveOAuthUserProfile = function(req, providerUserProfile, done) {
      if (!req.user) {
          // Define a search query fields
          var searchMainProviderIdentifierField = 'providerData.' + providerUserProfile.providerIdentifierField;
          var searchAdditionalProviderIdentifierField = 'additionalProvidersData.' + providerUserProfile.provider + '.' + providerUserProfile.providerIdentifierField;
  
          // Define main provider search query
          var mainProviderSearchQuery = {};
          mainProviderSearchQuery.provider = providerUserProfile.provider;
          mainProviderSearchQuery[searchMainProviderIdentifierField] = providerUserProfile.providerData[providerUserProfile.providerIdentifierField];
  
          // Define additional provider search query
          var additionalProviderSearchQuery = {};
          additionalProviderSearchQuery[searchAdditionalProviderIdentifierField] = providerUserProfile.providerData[providerUserProfile.providerIdentifierField];
  
          // Define a search query to find existing user with current provider profile
          var searchQuery = {
              $or: [mainProviderSearchQuery, additionalProviderSearchQuery]
          };
  
          User.findOne(searchQuery, function(err, user) {
              if (err) {
                  return done(err);
              } else {
                  if (!user) {
                      var possibleUsername = providerUserProfile.username || ((providerUserProfile.email) ? providerUserProfile.email.split('@')[0] : '');
  
                      User.findUniqueUsername(possibleUsername, null, function(availableUsername) {
                          user = new User({
                              firstName: providerUserProfile.firstName,
                              lastName: providerUserProfile.lastName,
                              username: availableUsername,
                              displayName: providerUserProfile.displayName,
                              email: providerUserProfile.email,
                              provider: providerUserProfile.provider,
                              providerData: providerUserProfile.providerData
                          });
  
                          // And save the user
                          user.save(function(err) {
                              return done(err, user);
                          });
                      });
                  } else {
                      return done(err, user);
                  }
              }
          });
      } else {
          // User is already logged in, join the provider data to the existing user
          var user = req.user;
  
          // Check if user exists, is not signed in using this provider, and doesn't have that provider data already configured
          if (user.provider !== providerUserProfile.provider && (!user.additionalProvidersData || !user.additionalProvidersData[providerUserProfile.provider])) {
              // Add the provider data to the additional provider data field
              if (!user.additionalProvidersData) user.additionalProvidersData = {};
              user.additionalProvidersData[providerUserProfile.provider] = providerUserProfile.providerData;
  
              // Then tell mongoose that we've updated the additionalProvidersData field
              user.markModified('additionalProvidersData');
  
              // And save the user
              user.save(function(err) {
                  return done(err, user, '/#!/settings/accounts');
              });
          } else {
              return done(new Error('User is already connected using this provider'), user);
          }
      }
  };
  
  /**
   * Remove OAuth provider
   */
  exports.removeOAuthProvider = function(req, res, next) {
      var user = req.user;
      var provider = req.param('provider');
  
      if (user && provider) {
          // Delete the additional provider
          if (user.additionalProvidersData[provider]) {
              delete user.additionalProvidersData[provider];
  
              // Then tell mongoose that we've updated the additionalProvidersData field
              user.markModified('additionalProvidersData');
          }
  
          user.save(function(err) {
              if (err) {
                  return res.status(400).send({
                      message: errorHandler.getErrorMessage(err)
                  });
              } else {
                  req.login(user, function(err) {
                      if (err) {
                          res.status(400).send(err);
                      } else {
                          res.jsonp(user);
                      }
                  });
              }
          });
      }
  };
  