class ActionMailbox::BaseController

def self.prepare
  # Override in concrete controllers to run code on load.
end

def authenticate_by_password
  if password.present?
    http_basic_authenticate_or_request_with username: "actionmailbox", password: password, realm: "Action Mailbox"
  else
    raise ArgumentError, "Missing required ingress credentials"
  end
end

def ensure_configured
  unless ActionMailbox.ingress == ingress_name
    head :not_found
  end
end

def http_basic_authenticate_or_request_with(username:, password:, realm: nil)
  authenticate_or_request_with_http_basic(realm || "Application") do |given_username, given_password|
    ActiveSupport::SecurityUtils.secure_compare(given_username, username) &
      ActiveSupport::SecurityUtils.secure_compare(given_password, password)
  end
end

def ingress_name
  self.class.name.remove(/\AActionMailbox::Ingresses::/, /::InboundEmailsController\z/).underscore.to_sym
end

def password
  Rails.application.credentials.dig(:action_mailbox, :ingress_password) || ENV["RAILS_INBOUND_EMAIL_PASSWORD"]
end