-- Copyright 2008 Steven Barth <steven@midlink.org>
-- Copyright 2008 Jo-Philipp Wich <jow@openwrt.org>
-- Licensed to the public under the Apache License 2.0.

local http = require "luci.http"
local syslog = require "nixio".syslog
local sys = require "luci.sys"
local json = require "luci.json"
local nw = require "luci.model.network".init()
local string = require "string"
local uci = require "luci.model.uci".cursor()
local math = math
local json = require "luci.json"

module("luci.controller.okos.index", package.seeall)

function index()
    local root = node()
    if not root.lock then
        root.target = alias("okos")
    end
    local page = entry({"okos"}, alias("okos", "haspasscode"), _("OKOS"))
    --page.sysauth = "root"
    --page.sysauth_authenticator = "htmlauth"

    entry({"okos", "getnetmodel"}, call("action_getnetmodel"), _("GetNetModel"))
    entry({"okos", "setnetmodel"}, call("action_setnetmodel"), _("SetNetModel"))
    entry({"okos", "getmqttsrv"}, call("action_getmqttsrv"), _("GetMQTTSrv"))
    entry({"okos", "setmqttsrv"}, call("action_setmqttsrv"), _("SetMQTTSrv"))
    entry({"okos", "haspasscode"}, call("action_haspasscode"), _("CheckHasPasscode"))
    entry({"okos", "hassdc"}, call("action_hassdc"), _("HasSDC"))
    entry({"okos", "login"}, call("action_login"), _("Login)"))
    entry({"okos", "internetstatus"}, call("action_internetstatus"), _("InternetStatus"))
    entry({"okos", "configname"}, call("action_configname"), _("ConfigNAME"))
    entry({"okos", "queryname"}, call("action_queryname"), _("QueryNAME"))
    entry({"okos", "queryifs"}, call("action_queryifs"), _("QueryInterfaces"))
    entry({"okos", "configwan"}, call("action_configwan"), _("ConfigWAN"))
    entry({"okos", "configlan"}, call("action_configlan"), _("ConfigLAN"))
    entry({"okos", "renewip"}, call("action_renewip"), _("RenewIP"))
    entry({"okos", "diag"}, call("action_diag"), _("Diag"))
    entry({"okos", "querydiag"}, call("action_querydiag"), _("QueryDiag"))
    entry({"okos", "devumac"}, call("action_devumac"), _("DeviceUniqueMAC"))
    entry({"okos", "oakreboot"}, call("action_oakreboot"), _("DeviceOakreboot"))
    entry({"okos", "regdev"}, call("action_regdev"), _("RegDev"))
    entry({"okos", "setgre"}, call("action_setgre"), _("SetGRE"))
end

function update_conf_version()
    math.randomseed(tostring(os.time()):reverse():sub(1,6))
    local version = math.random(268435455)
    uci:set("system", "system", "config_version_webui", version)
    uci:commit("system")
end

function dumptable(t)
    if type(t) ~= "table" then
        syslog("err", "LUCI:-> " .. tostring(t))
        return
    end
    for k,v in pairs(t) do
        syslog("err", "LUCI:-> " .. tostring(k) .. "\t" .. tostring(v))
        if type(v) == "table" then
            dumptable(v)
        end
    end
end

function sanity_check_json()
    -- sanity check
    local hm = http.getenv("REQUEST_METHOD")
    local ct = http.getenv("CONTENT_TYPE")
    if hm == "OPTIONS" then
        http.header("access-control-allow-credentials", "true")
        http.header("access-control-allow-methods", "GET, POST, OPTIONS, PUT, PATCH, DELETE")
        http.header("access-control-allow-origin", "*")
        http.header("access-control-allow-headers", "content-type")
        http.header("content-type", "application/json")
        http.status(200, "OK") 
        http.close()
        return false
    elseif hm ~= "POST" or not ct:match("^application/json") then
        http.status(400, "Bad Request")
        http.close()
        return false
    end
    return true
end

function sanity_check_get()
    -- sanity check
    local hm = http.getenv("REQUEST_METHOD")
    if hm == "OPTIONS" then
        http.header("access-control-allow-credentials", "true")
        http.header("access-control-allow-methods", "GET, POST, OPTIONS, PUT, PATCH, DELETE")
        http.header("access-control-allow-origin", "*")
        http.header("access-control-allow-headers", "content-type")
        http.header("content-type", "application/json")
        http.status(200, "OK") 
        http.close()
        return false
    elseif hm ~= "GET" then
        http.status(400, "Bad Request")
        http.close()
        return false
    end
    return true
end

function response_json(response)
    http.header("Access-Control-Allow-Origin", "*")
    http.header("Access-Control-Allow-Credentials", "true")
    http.prepare_content("application/json")
    http.write_json(response)
    http.close()
end

-- check if needs passcoe to login
function action_haspasscode()
    -- sanity check --
    if not sanity_check_get() then
        return
    end

    -- process --
    local response = { }
    --[[
    response = {
        errcode = 0
    }
    ]]--

    -- no passcode
    if sys.user.checkpasswd("root", "dyiot123") then
        response = { 
            errcode = 1
        }
    else -- has passcode
        response = { 
            errcode = 0
        }
    end

    -- response --
    response_json(response)

end

-- check if sdc works well
function action_hassdc()
    -- sanity check --
    if not sanity_check_get() then
        return
    end

    -- process --
    local response = { }
    --[[
    response = {
        errcode = 0
        url = "alpha1.oakridge.io"
    }
    ]]--

    -- try to access 
    --[[ post_data = {
            'mac' : self.productinfo_data['mac'],
            'delay' : const.HEARTBEAT_DELAY,
            'list' : []
        }
    url = 'http://{server}:{port}/{path}/api/device/router/info'.format(server=server[0], port=server[1], path=server[2])
    ]]--
    response.errcode = 1
    local mac = uci:get("productinfo", "productinfo", "mac")
    local mas_server = uci:get("capwapc", "server", "mas_server")
    local url = 'http://' .. mas_server .. '/nms/api/device/router/check'
    local post_data = '{"mac":"' .. mac .. '"}'
    local cmd = 'curl -m 30 -i -s -X POST -H "Content-type: application/json" -H "charset: utf-8" -H "Accept: */*" -d \'' .. post_data .. '\' "' .. url .. '" 2>/dev/null'
 
    local result = sys.exec(cmd)
    response.url = mas_server
    if result ~= nil and result:match("\"error_code\" : 0")  then
        response.errcode = 0
    end
    
    -- response --
    response_json(response)

end


-- check login
function action_login()
    -- sanity check --
    if not sanity_check_json() then
        return
    end

    -- parse json
    local hc = http.content()
    local input, rc, err = json.decode(hc)
    local user = input.username
    local pass = input.password
    
    -- process --
    local response = { }
    --[[
    response = {
        errcode = 0
    }
    ]]--
    response.errcode = 0
    if user == nil or pass == nil then
        http.status(400, "Bad Request");
        http.close()
        return
    end

    -- incorrect
    if not sys.user.checkpasswd(user, pass) then
        response.errcode = 1
    end

    -- response --
    response_json(response)
end

-- check current internet status
function action_internetstatus()
    -- sanity check --
    if not sanity_check_get() then
        return
    end

    -- process --
    local response = { }
    --[[
    response = {
        errcode = 0
    }
    ]]--
    response.errcode = 0
    local file = "/app/config/mqtt_server.json"
    local host  = sys.exec("awk -F'[ \t:\"]+' '/host/{print $3}' " .. file):sub(1,-2)
    if sys.net.pingtest(host) ~= 0 and sys.net.pingtest("114.114.114.114") ~= 0 then
        response.errcode = 1
    end

    -- response --
    response_json(response)
end

-- config device name
function action_queryname()
     -- sanity check --
    if not sanity_check_get() then
        return
    end

    -- process --
    local response = { }
    --[[
    response = {
        name = "okos_gw", 
        errcode = 0
    }
    ]]--
    response.errcode = 0

    response.name = uci:get("system", "system", "device_name")
    --sys.call("echo 'stop auto downloading okos, as you activate webui' > /dev/tty0")
    --sys.call("/etc/init.d/handle_cloud stop")
    --sys.call("echo 'restart device, or complete webui wizard to continue' > /dev/tty0")

    -- response --
    response_json(response)

end

-- get mqtt server config
function action_getmqttsrv()
     -- sanity check --
    if not sanity_check_get() then
        return
    end

    -- process --
    local response = { }
    --[[
    response = {
        host = "183.129.159.166", 
        port = 10203,
        errcode = 0
    }
    ]]--
    response.errcode = 0
    local file = "/app/config/mqtt_server.json"
    response.host  = sys.exec("awk -F'[ \t:\",]+' '/host/{print $3}' " .. file):sub(1,-2)
    response.port = sys.exec("awk -F'[ \t:\",]+' '/port/{print $3}' " .. file):sub(1,-2)
    response.user = sys.exec("awk -F'[ \t:\",]+' '/user/{print $3}' " .. file):sub(1,-2)
    response.pass = sys.exec("awk -F'[ \t:\",]+' '/pass/{print $3}' " .. file):sub(1,-2)
    if response.host == nil then
        response.errcode = 1
        return
    end

    -- response --
    response_json(response)

end

-- set mqtt server
function action_setmqttsrv()
    -- sanity check --
    if not sanity_check_json() then
        return
    end
    
    -- parse json
    local hc = http.content()
    local input, rc, err = json.decode(hc)
    --[[
    input = {
        host="192.168.254.119",
        port="3399"
    }
    ]]--
    if input.host == nil then
        http.status(400, "Bad Request");
        http.close()
        return
    end
    
    -- process --
    local response = {}
    --[[
    response = {
        errcode = 0
    }
    ]]--
    response.errcode = 0
    if input['user'] == nil then
        input.user=""
    end
    if input['pass'] == nil then
        input.pass=""
    end
    
    cmd = '{\n\"host\":\"' .. input.host .. '\",\n\"port\":' .. input.port .. ',\n\"user\":\"' .. input.user .. '\",\n\"pass\":\"' .. input.pass ..'\"\n}'
    local file = "/app/config/mqtt_server.json"
    sys.exec("echo -e '" .. cmd .. "' > " .. file .. ";")
    sys.exec("/etc/init.d/app stop")
    

    -- response --
    response_json(response)
end

-- get netmodel config
function action_getnetmodel()
     -- sanity check --
    if not sanity_check_get() then
        return
    end

    -- process --
    local response = { }
    --[[
    response = {
        netmodel = "0", - 0:W/L, 1:L/L 
        errcode = 0
    }
    ]]--
    response.errcode = 0

    response.netmodel = uci:get("system", "system", "netmodel")

    -- response --
    response_json(response)

end

-- set net model
function action_setnetmodel()
    -- sanity check --
    if not sanity_check_json() then
        return
    end
    
    -- parse json
    local hc = http.content()
    local input, rc, err = json.decode(hc)
    --[[
    input = {
        netmodel="0"
    }
    ]]--
    if input.netmodel == nil then
        http.status(400, "Bad Request");
        http.close()
        return
    end
    
    -- process --
    local response = {}
    --[[
    response = {
        errcode = 0
    }
    ]]--
    response.errcode = 0


    local netmodel = uci:get("system", "system", "netmodel")
    if input.netmodel == netmodel then
        -- response --
        response_json(response)
        return
    end

    -- W/L
    if input.netmodel == "0" then
        -- WAN
        uci:set("network", "wan", "proto", "dhcp")
        uci:set("network", "wan", "ifname", "eth0")
        -- LAN
        uci:set("network", "lan", "ifname", "eth1")
    else
        -- WAN
        uci:set("network", "wan", "proto", "none")
        uci:set("network", "wan", "ifname", "eth0")
        --LAN
        uci:set("network", "lan", "ifname", "eth0 eth1")
    end
    uci:commit("network")

    uci:set("system", "system", "netmodel", input.netmodel)
    uci:commit("system")

    sys.exec("/etc/init.d/network restart")

    -- response --
    response_json(response)
end

-- config device name
function action_configname()
    -- sanity check --
    if not sanity_check_json() then
        return
    end
    
    -- parse json
    local hc = http.content()
    local input, rc, err = json.decode(hc)
    --[[
    input = {
        name="okos_gw"
    }
    ]]--
    if input.name == nil then
        http.status(400, "Bad Request");
        http.close()
        return
    end
    
    -- process --
    local response = {}
    --[[
    response = {
        errcode = 0
    }
    ]]--
    response.errcode = 0

    uci:set("system", "system", "device_name", input.name)
    uci:commit("system")

    -- updte version --
    update_conf_version()
    
    -- response --
    response_json(response)
end

function swport_is_up(ifname)
    local port = ifname:sub(-1)
    local str = sys.exec("swconfig dev switch0 port " .. port .. " show 2>/dev/null")
    if str == nil or str:match("up") == nil then
        return false
    else
        return true
    end
end

-- get all interfaces information
function action_queryifs()
    -- sanity check --
    if not sanity_check_get() then
        return
    end

    -- process --
    local response = { }
    --[[
    response = {
    wan: {
        ifname = "eth0",
        mac = "F0:9F:C2:6D:24:7F",
        proto = "dhcp",
        ipaddr = "192.165.1.183",
        netmask = "255.255.255.0",
        gateway = "192.165.1.254",
        dns = ["114.114.114.114", "8.8.8.8"],
        username = "oakridge", 
        password = "oakridge",
        mtu = "1500",
        up = "1"
    }
    lan: {
        ifname = "eth1", "eth0 eth1"
        mac = "F0:9F:C2:6D:24:7F",
        proto = "dhcp",
        ipaddr = "192.165.1.183",
        netmask = "255.255.255.0",
        gateway = "192.165.1.254",
        dns = ["114.114.114.114", "8.8.8.8"],
        mtu = "1500"
        up = "1"
    }
    wwan: {
    }
    }
    ]]--
                                                           
    for _,nt in pairs(nw:get_networks()) do
        if nt.sid ~= "loopback" and not (nt.sid):match("gre") then
            local tp = nw:get_protocol("static", nt.sid)
            local np = nw:get_protocol(tp:get("proto"), nt.sid)            
            if np ~= nil then
                local npdev = np:get_interface()
                if npdev ~= nil then
                local ifname = np:ifname()
                if np:proto() == "pppoe" then
                    ifname = np:get("ifname")
                end
                response[#response+1] = { }
                local res = response[#response]
                res.ifname = ifname
                if nt.sid == "wan" then
                    res.lname = "eth0"
                    res.mac = uci:get("network", "wan", "macaddr")
                else
                    if nt.sid == "lan" then
                        res.lname = "eth1"
                        res.ifname = np:get("ifname")
                    end
                end
                if res.mac == nil then
                    res.mac = npdev:mac()
                end
                res.up = npdev:is_up()
                res.sid = nt.sid
                res.mtu = npdev:_ubus("mtu")
                if res.mtu == nil then
                    res.mtu = np:get("mtu")
                end
                res.proto = np:proto()
                if res.up then
                    res.ipaddr = np:ipaddr()            
                    res.netmask = np:netmask()        
                    res.gateway = np:gwaddr()
                    res.dns = np:dnsaddrs()                                
                else
                    -- not up, should get static from config
                    if res.proto == "static" then
                        res.ipaddr = np:get("ipaddr")
                        res.netmask = np:get("netmask")
                        res.gateway = np:get("gateway")
                        res.dns = np:get("dns")
                    end
                end
                res.username = np:get("username")
                res.password = np:get("password")
                if nt.sid == "lan"  then
                    res.ipaddr = uci:get("webui_config", "lan", "ipaddr")
                    res.netmask = uci:get("webui_config", "lan", "netmask")
                    res.dhcp_start = uci:get("webui_config", "lan", "dhcp_start")
                    res.dhcp_limit = uci:get("webui_config", "lan", "dhcp_limit")
                    res.dhcp_leasetime = uci:get("webui_config", "lan", "dhcp_leasetime")
                    res.dhcp_server_enable = uci:get("webui_config", "lan", "dhcp_server_enable")
                end
                end
            end
        end
    end      

        -- response --
    response_json(response)
    
end

-- config lan
function action_configlan()
    -- sanity check --
    if not sanity_check_json() then
        return
    end
    
    -- parse json
    local hc = http.content()
    local input, rc, err = json.decode(hc)
    --[[
    input = {
        proto = "static",
        ifname = "eth0 eth1",
        ipaddr = "192.168.1.1",
        netmask = "255.255.255.0",
        dhcp_server_enable = 1,
        dhcp_start = "1",
        dhcp_limit = "200", 
        dhcp_leasetime = "1200" # seconds
    }
    ]]--
    if input.proto == nil or input.ifname == nil or input.proto ~= "static" then
        http.status(400, "Bad Request");
        http.close()
        return
    end
    
    -- process --
    local response = {}
    --[[
    response = {
        errcode = 0
    }
    ]]--
    response.errcode = 0

    uci:set("webui_config", "lan", "ipaddr", input.ipaddr)
    uci:set("webui_config", "lan", "netmask", input.netmask)
    uci:set("webui_config", "lan", "dhcp_server_enable", input.dhcp_server_enable)
    uci:set("webui_config", "lan", "dhcp_start", input.dhcp_start)
    uci:set("webui_config", "lan", "dhcp_limit", input.dhcp_limit)
    uci:set("webui_config", "lan", "dhcp_leasetime", input.dhcp_leasetime)
    uci:commit("webui_config")

    -- response --
    response_json(response)
end

-- config wan 
function action_configwan()
    -- sanity check --
    if not sanity_check_json() then
        return
    end
    
    -- parse json
    local hc = http.content()
    local input, rc, err = json.decode(hc)
    --[[
    input = {
        proto = "dhcp",
        lname = "e4",
        ifname = "eth0.4050",
        ipaddr = "192.165.1.168",
        netmask = "255.255.255.0",
        gateway = "192.165.1.254",
        dns = [ "192.165.1.254", "114.114.114.114" ],
        username = "oakridge",
        password = "oakridge",
        mtu = "1500"
        mac = "00:25:33:44:55:66"
    }
    ]]--
    if input.proto == nil or input.ifname == nil or input.ifname ~= "eth0" then
        http.status(400, "Bad Request");
        http.close()
        return
    end
    if input.proto == "static" and (input.ipaddr == nil or input.netmask == nil or input.gateway == nil or input.dns == nil) then
        http.status(400, "Bad Request");
        http.close()
        return
    end
    if input.proto == "pppoe" and (input.username == nil or input.password == nil or input.mtu == nil) then
        http.status(400, "Bad Request");
        http.close()
        return
    end
    
    -- process --
    local response = {}
    --[[
    response = {
        errcode = 0
    }
    ]]--
    response.errcode = 0

    -- del existing ifname network
    local ifn = nw:get_interface(input.ifname)
    if ifn == nil then
        -- no vlan interface
        response.errcode = 1
        response_json(response)
        return
    else
        local n = ifn:get_network() 
        nw:del_network(n.sid)
    end
    -- del existing wan network
    local np = nw:get_protocol("dhcp", "wan")            
    local wifname = np:ifname()
    nw:del_network("wan")
    -- set free lan interface
    --if (wifname == input.ifname) then
    --    nw:add_network("lan" .. wifname:sub(4,-1), {proto="none", ifname=wifname})
    --end
    -- setup new network
    local net =  { }
    if input.proto == "static" then
        net = nw:add_network("wan", {proto=input.proto, ipaddr=input.ipaddr, netmask=input.netmask, gateway=input.gateway, dns=input.dns, macaddr=input.mac, metric="0", defaultroute="1"})
    elseif input.proto == "dhcp" then
        net = nw:add_network("wan", {proto=input.proto, macaddr=input.mac, metric="0", defaultroute="1"})
    elseif input.proto == "pppoe" then
        input.mtu="1492"
        net = nw:add_network("wan", {proto=input.proto, username=input.username, password=input.password, mtu=input.mtu, macaddr=input.mac, metric="0", defaultroute="1"})
    end
    if net then
        net:add_interface(input.ifname)
        nw:commit("network")
        -- updte version --
        update_conf_version()
    else
        nw:revert("network")
        response.errcode = 1
    end
    
    -- response --
    response_json(response)
end


-- do renew ip
function action_renewip()
    -- sanity check --
    if not sanity_check_json() then
        return
    end
    
    -- parse json
    local hc = http.content()
    local input, rc, err = json.decode(hc)
    --[[
    input = {
        lname = 'e0',
        ifname = 'eth0.4050'
    }
    ]]--

    -- process --
    -- del existing ifname network
    local ifn = nw:get_interface(input.ifname)
    if ifn == nil then
        -- no vlan interface
        response.errcode = 1
        response_json(response)
        return
    else
        local n = ifn:get_network() 
        nw:del_network(n.sid)
    end
    -- del existing wan network
    nw:del_network("wan")
    -- setup new network
    local net =  { }
    net = nw:add_network("wan", {proto="dhcp", metric="0"})

    local response = { }
    --[[
    response = {
        lname = "e0",
        ifname = "eth0.4050",
        ipaddr = "192.165.1.183",
        netmask = "255.255.255.0",
        gateway = "192.165.1.254",
        dns = {"114.114.114.114", "8.8.8.8"},
        errcode = 0
    }
    ]]--
    if net then
        net:add_interface(input.ifname)
        nw:save("network")
        response.errcode = sys.call("ifdown wan;sleep 1;ifup wan;sleep 7")
        if response.errcode == 0 then
            local wanp = nw:get_protocol("dhcp", "wan") 
            response.lname = input.lname
            response.ifname = wanp:ifname()
            response.ipaddr = wanp:ipaddr()
            response.netmask = wanp:netmask()
            response.gateway = wanp:gwaddr()
            response.dns = wanp:dnsaddrs()
            response.errcode = 0
            if response.ipaddr == nil then
                response.errcode = 1
            end
            nw:revert("network")
            sys.call("ifdown wan; sleep 1; ifup wan")
        end
    else
        response.errcode = 1
    end
   
    -- response --
    response_json(response)
 
end

-- do diag
function action_diag()
    -- sanity check --
    if not sanity_check_get() then
        return
    end

    -- process --
    local response = { }
    --[[
    response = {
        proto = "dhcp",
        step = 2,
        errcode = 0
    }
    ]]--
    --- sys.call("uci del_list dhcp.@dnsmasq[0].address='/#/172.16.254.254';/etc/init.d/dnsmasq reload;")
    sys.call("/etc/init.d/log restart;sleep 1")
    response.errcode = sys.call("ifdown wan; sleep 1; ifup wan;sleep 6")
    local tp = nw:get_protocol("static", "wan")
    local tmp = nw:get_protocol(tp:get("proto"), "wan")
    response.proto = tmp:get("proto")

    if response.proto == "static" then
        response.step = 4
    elseif response.proto == "dhcp" then
        response.step = 3
    elseif response.proto == "pppoe" then
        response.step = 1
    elseif response.proto == "none" then
        response.step = 3
    end

    -- response --
    response_json(response)
end

-- query result
function action_querydiag()
    -- sanity check --
    if not sanity_check_json() then
        return
    end

    -- parse json
    local hc = http.content()
    local input, rc, err = json.decode(hc)
    --[[
    input = {
        step = 1
    }
    ]]--

    -- process--
    local response = { }
    --[[
    response = {
        step = 1
        errcode = 0 
    }
    ]]--
    response.errcode = -1
    response.step = input.step
    sys.call("sleep 2")
    local file = "/app/config/mqtt_server.json"
    local host  = sys.exec("awk -F'[ \t:\"]+' '/host/{print $3}' " .. file):sub(1,-2)
    local log = sys.syslog()
    local tmp =nw:get_protocol("static","wan")
    local np =nw:get_protocol(tmp:get("proto"),"wan")
    if np:get("proto") == "none" then
        tmp =nw:get_protocol("static","wwan")
        np =nw:get_protocol(tmp:get("proto"),"wwan")
    end
    if input.step == 1 then
        if log:match("ppp") == nil then
            response.errcode = 1
            response.step = 1
        else
            if log:match("Unable to complete PPPoE Discovery") ~= nil then
                response.errcode = 1
                response.step = 1
            else
                response.errcode = 0
                response.step = 2
            end
        end
    elseif input.step == 2 then
        if log:match("ppp") == nil then
            response.errcode = 1
            response.step = 2
        else
            if log:match("authentication succeeded") == nil then
                response.errcode = 1
                response.step = 2
            else
                response.errcode = 0
                response.step = 3
            end
        end
    elseif input.step == 3 then
        if np:ipaddr() == nil then
            response.errcode = 1
            response.step = 3
        else
            response.errcode = 0
            response.step = 4
        end
    elseif input.step == 4 then

        if sys.net.pingtest("www.baidu.com") ~= 0 and sys.net.pingtest(host) ~= 0 then
            response.step = 4
            response.errcode = 1
        else
            response.errcode = 0
            response.step = 5
        end
    elseif input.step == 5 then
        if sys.net.pingtest("iot.lnxall.com") ~=0 and sys.net.pingtest(host) ~=0 then
            response.errcode = 1
            response.step = 5
        else
            response.errcode = 0
            response.step = -1
        end
    end

    if response.errcode == 1 then
        sys.call("uci revert dhcp;/etc/init.d/dnsmasq reload;sleep 3")
    end

    ---if response.errocode == 0 and response.step == -1 then
    ---    sys.call("uci del_list dhcp.@dnsmasq[0].address='/#/172.16.254.254';uci commit dhcp;/etc/init.d/dnsmasq reload;sleep 3")
    ---end

    -- response --
    response_json(response)
end

-- fetch device unique mac
function action_devumac()
    -- sanity check --
    if not sanity_check_get() then
        return
    end

    -- process --
    local response = { }
    --[[
    response = {
        errocode = 0,
        mac = "00:11:22:33:44:55",
        is_sysloader = 0
    }
    ]]--
    response.errcode = 0
    local result = sys.exec("cat /app/config/fac.ini | awk '/sn =/{print $3}'")
    response.mac = result
    response.is_sysloader = 1


    -- response --
    response_json(response)
end

--  reboot
function action_oakreboot()
    -- sanity check --
    if not sanity_check_get() then
        return
    end

    -- process --
    local response = { }
    --[[
    response = {
        errocode = 0,
    }
    ]]--
    response.errcode = 0
    local ipaddr = uci:get("webui_config", "lan", "ipaddr")
    local netmask = uci:get("webui_config", "lan", "netmask")
    local dhcp_start = uci:get("webui_config", "lan", "dhcp_start")
    local dhcp_limit = uci:get("webui_config", "lan", "dhcp_limit")
    local dhcp_leasetime = uci:get("webui_config", "lan", "dhcp_leasetime")
    local dhcp_server_enable = uci:get("webui_config", "lan", "dhcp_server_enable")
    uci:set("network", "lan", "ipaddr", ipaddr) 
    uci:set("network", "lan", "netmask", netmask) 
    uci:commit("network")
    uci:set("dhcp", "lan", "start", dhcp_start) 
    uci:set("dhcp", "lan", "limit", dhcp_limit) 
    uci:set("dhcp", "lan", "leasetime", dhcp_leasetime) 
    uci:set("dhcp", "lan", "ignore", dhcp_server_enable and 0 or 1) 
    uci:set("dhcp", "dyiot_gw", "ip", ipaddr) 
    uci:commit("dhcp")
    sys.call("/etc/init.d/network restart;/etc/init.d/dnsmasq restart")

    -- response --
    response_json(response)
end


-- register device response from cloud
function action_regdev()
    -- sanity check --
    if not sanity_check_json() then
        return
    end
    
    -- parse json
    local hc = http.content()
    local input, rc, err = json.decode(hc)
    --[[
    input = {
        oakmgr = "192.168.254.60",
        passcode = "oakridge"
    }
    ]]--
    if input.passcode == nil then
        http.status(400, "Bad Request");
        http.close()
        return
    end

    -- process --
    local response = { }
    --[[
    response = {
        errcode = 0
    }
    ]]--
    response.errcode = 0

    if input.oakmgr ~= nil then
        response.errcode = sys.call("/sbin/uci set capwapc.server.mas_server=" .. input.oakmgr .. " && /sbin/uci commit capwapc")
    end

    if response.errcode == 0 then
        response.errcode = sys.user.setpasswd("root", input.passcode)
    end
    
    -- response --
    response_json(response)
end

-- set gre interface from ap
function action_setgre()
    -- sanity check --
    if not sanity_check_json() then
        return
    end
    
    -- parse json
    local hc = http.content()
    local input, rc, err = json.decode(hc)
    --[[
    input = {
        has_guestnet = true,
        macaddr = "00:11:22:33:44:55",
        ipaddr = "172.16.0.120",
        gateway = "172.16.0.1",
        timestamp = 1234
    }
    ]]--
    if input.has_guestnet == nil or input.macaddr == nil or input.ipaddr == nil or
        input.gateway == nil then
        http.status(400, "Bad Request");
        http.close()
        return
    end

    -- process --
    local response = { }
    --[[
    response = {
        errcode = 0,
        isolate_guest = 1
    }
    ]]--
    response.errcode = 0
    
    -- 1. get which lan
    local nt
    local gresid
    for _,nt in pairs(nw:get_networks()) do
        local sid = nt.sid
        if sid:match("lan") then
            local np = nw:get_protocol("static", sid)
            if np:get("ipaddr") == input.gateway then
                gresid = sid
                break
            end
        end
    end

    -- 2. which gre bridge lan
    -- lanxxxx - grexxxx gre bridge
    gresid = gresid:gsub("lan","gre")

    response.isolate_guest = false
    for _,nt in pairs(nw:get_networks()) do
        local sid = nt.sid
        if sid:match(gresid) then
            response.isolate_guest = true
        end
    end

    -- 3. which greinterface
    local grenetsid = (input.macaddr):gsub(":","")
    grenetsid = grenetsid:sub(4,-1)
    local grenet = nw:get_protocol("static", grenetsid)
    if grenet:get("proto") ~= "gretap" then
        grenet = nil
    end
    local change = false
    
    if input.has_guestnet and response.isolate_guest then
        -- setup new gre network if no existing gre interface
        if grenet == nil then
            grenet = nw:add_network(grenetsid, {proto="gretap", ipaddr=input.gateway, peeraddr=input.ipaddr, network=gresid})
            change = true
        else
            if grenet:get("ipaddr") ~= input.gateway then
                grenet:set("ipaddr", input.gateway)
                change = true
            end
            if grenet:get("peeraddr") ~= input.ipaddr then
                grenet:set("peeraddr", input.ipaddr)
                change = true
            end
            if grenet:get("network") ~= gresid then
                grenet:set("network", gresid)
                change = true
            end
        end
    else
        -- no guest network, delete protential virtual gre interface
        -- del existing virtual gre interface network
        if grenet ~= nil then
            nw:del_network(grenetsid)
            change = true
        end
    end

    if change then
        nw:commit("network")
        sys.call("/etc/init.d/network restart")
    end


    -- response --
    response_json(response)
end