var friendProxy = bridge.getFriendServiceProxy();
var EXTERNALAUTHTYPE = "ssoSaml";
var PREREGISTRATION_SUPPORT = true;
function findPreregisteredUserByEmail( email ) {
    var emailLookupResult = friendProxy.getProfileInfoForCredential(email, "Email")
    // Check to see if a user with this email has been precreated
    // Note this searches by email authentication type, not contact email...
    if (emailLookupResult.status == 200) {
        bridge.logInfoJson("getProfileInfoForCredential (" + email + ")", emailLookupResult.data );  
        // Note that they MUST NOT have an External identity
        // We would try to exclude only EXTERNALAUTHTYPE identities, but that isn't directly supported...
        var emailSession = bridge.getSessionForProfile( emailLookupResult.data.playerId );
        var identitiesProxy = bridge.getIdentityServiceProxy( emailSession );
        var identitiesLookupResult = identitiesProxy.getIdentities();
        bridge.logInfoJson("getIdentities (" + email + ")", identitiesLookupResult.data );
        if ( identitiesLookupResult.status == 200 ) {
            /*
            if (identitiesLookupResult.data.identities.hasOwnProperty('External') ) {
                 bridge.logInfoJson("User " + email + " rejected because already has an external identity", identitiesLookupResult.data );
                return null;
            } else {
                bridge.logInfoJson("User " + email + " accepted/identified because has no external identity", identitiesLookupResult.data );
                return emailLookupResult.data.playerId; // Email matches and doesn't have external auth (yet)
            }
            */
            return emailLookupResult.data.playerId;
        }
    } else {
        bridge.logInfo("Could not find user with " + email + " email identity", null );
        return null;
    }
}
function findUserBySAMLEmail( samlEmail ) {
    var extLookupResult = friendProxy.getProfileInfoForExternalAuthId(samlEmail, EXTERNALAUTHTYPE);
    if (extLookupResult.status == 200) {
        return extLookupResult.data.playerId; // Success!
    } else {
        return null;
    }
}
function main() {
    bridge.logInfoJson("Script inputs", data);
    // load service proxy
    var proxy = bridge.getSamlServiceProxy();
    // retrieve response attributes
    var attributesResp = proxy.sysGetResponseAttributes(data.authenticationToken);
    bridge.logInfoJson("Call result", attributesResp);
    if (attributesResp.status == 200) {
        var attributes = attributesResp.data.responseAttributes;
    	bridge.logInfoJson("Attributes", attributes);
    	bridge.logInfoJson("Data", attributesResp.data);
        // get email list
        var emailList = attributes.Email;
        // email is first item in list
        var email = emailList[0];
        var response = {};
        response.valid = false;
        if (email === data.externalId) 
        {
            var saml = {};
            saml.token = data.authenticationToken;
            saml.email = attributes.Email;
            saml.name = attributes.FirstName + " " + attributes.LastName;
            var authPayload = getAuthPayload();
            response.valid = true;
            response.authPayload = authPayload;
            bridge.setSessionCacheObject( "saml", saml );
            if (PREREGISTRATION_SUPPORT) 
            {
                var samlLinkedProfile = findUserBySAMLEmail( saml.email);
                // user doens't exist
                if ( samlLinkedProfile === null ) 
                {
                    var preRegistered = findPreregisteredUserByEmail( saml.email );
                    if ( preRegistered !== null ) 
                    {
                        // Tell the system to link to this user profile
                        response.useProfileId = preRegistered;
                    }
                }
            }
        }
        return response;
    } 
    return false;
    }
    function getAuthPayload() {
    // load service proxy
    var proxy = bridge.getSamlServiceProxy();
    // retrieve response attributes
    var logoutResp = proxy.sysGetLogoutRequestUrl(data.authenticationToken);
    if (logoutResp.status == 200) {
        var logoutRequestUrl = logoutResp.data.logoutRequestUrl;
        var authPayload = {};
        authPayload.logoutRequestUrl = logoutRequestUrl;
        return authPayload;
    }
    return null;  
}
main();