#!/bin/sh
# Copyright (c) 2000-2020 Synology Inc. All rights reserved.

PKG_PATH="/var/packages/SecureSignIn"
PKG_ETC_PATH="${PKG_PATH}/etc"
PKG_TARGET_PATH="${PKG_PATH}/target"

start()
{
	ln -sf "${PKG_TARGET_PATH}/pam-module/pam_syno_authenticator.so" "/usr/lib/security/"
	ln -sf "${PKG_TARGET_PATH}/pam-module/pam_syno_fido.so" "/usr/lib/security/"
	ln -sf "${PKG_TARGET_PATH}/etc/secure_signin.auth" "/usr/syno/synoman/webapi/"
	ln -sf "${PKG_TARGET_PATH}/etc/secure_signin.pam" "/etc/pam.d/secure_signin"
	ln -sf "${PKG_TARGET_PATH}/etc/amfa.pam" "/etc/pam.d/amfa"
	ln -sf "${PKG_TARGET_PATH}/etc/emergency_code.pam" "/etc/pam.d/emergency_code"
	ln -sf "${PKG_TARGET_PATH}/tool/synoabnormalloginnotify" "/usr/syno/bin/synoabnormalloginnotify"

	cp -a "${PKG_TARGET_PATH}/etc/notification_filter.settings" "${PKG_ETC_PATH}/notification_filter.settings"
	if [ ! -f ${PKG_ETC_PATH}/secure_signin.conf ]; then
		cp -a "${PKG_TARGET_PATH}/etc/secure_signin.conf" "${PKG_ETC_PATH}/secure_signin.conf"
	fi

	systemctl start pkg-invoked

	tmp_space=$(df -BM /tmp | awk 'NR==2 {print $4}' | sed 's/M//')
	threshold=100

	rm -f /tmp/SynologyAuthService-block
	rm -rf /tmp/SynologyAuthService/
	mkdir -p /tmp/SynologyAuthService/
	if [ "$tmp_space" -gt "$threshold" ]; then
		dd if=/dev/zero of=/tmp/SynologyAuthService-block bs=1M count=32
		mkfs -t ext4 /tmp/SynologyAuthService-block
		mount -t ext4 /tmp/SynologyAuthService-block /tmp/SynologyAuthService/
	fi
	chmod 0777 /tmp/SynologyAuthService/
}

stop()
{
	rm -f "/usr/lib/security/pam_syno_authenticator.so"
	rm -f "/usr/lib/security/pam_syno_fido.so"
	rm -f "/usr/syno/synoman/webapi/secure_signin"
	rm -f "/etc/pam.d/secure_signin"
	rm -f "/etc/pam.d/amfa"
	rm -f "/etc/pam.d/emergency_code"
	rm -f "/usr/syno/bin/synoabnormalloginnotify"

	systemctl stop pkg-invoked

	umount -q /tmp/SynologyAuthService/
	rm -rf /tmp/SynologyAuthService/
	rm -f /tmp/SynologyAuthService-block
}

case $1 in
	start)
		start
		exit 0
	;;
	stop)
		stop
		exit 0
	;;
	status)
		if [ -e ${APP_PATH} ]; then
			exit 0
		else
			exit 1
		fi
	;;
esac