## This Source Code Form is subject to the terms of the Mozilla Public
## License, v. 2.0. If a copy of the MPL was not distributed with this
## file, You can obtain one at https://mozilla.org/MPL/2.0/.
##
## Copyright (c) 2007-2025 Broadcom. All Rights Reserved. The term “Broadcom” refers to Broadcom Inc. and/or its subsidiaries.  All rights reserved.

defmodule RabbitMQ.CLI.Ctl.Commands.HashPasswordCommand do
  alias RabbitMQ.CLI.Core.{Input}

  @behaviour RabbitMQ.CLI.CommandBehaviour
  use RabbitMQ.CLI.Core.MergesNoDefaults

  def run([cleartextpassword], _opts) do
    hash_password(cleartextpassword)
  end

  def run([], opts) do
    case Input.infer_password("Password: ", opts) do
      :eof ->
        {:error, :not_enough_args}

      password ->
        hash_password(password)
    end
  end

  def hash_password(password) do
    hashed_pwd = :rabbit_password.hash(password)
    Base.encode64(hashed_pwd)
  end

  def validate(args, _options) when length(args) > 1 do
    {:validation_failure, :too_many_args}
  end

  def validate([""], _options) do
    {:bad_argument, "password cannot be an empty string"}
  end

  def validate([_arg], _options) do
    :ok
  end

  def validate([], _options) do
    :ok
  end

  ## Use default output for all non-special case outputs
  use RabbitMQ.CLI.DefaultOutput

  def usage, do: "hash_password <cleartext_password>"

  def banner([arg], _options),
    do: "Will hash password #{arg}"

  def banner([], _options),
    do: "Will hash provided password"

  def description(), do: "Hashes a plaintext password"
end
