#!/bin/bash
# Copyright (c) 2026 Broadcom Inc. and its subsidiaries. All Rights Reserved.

#set the current working directory to where this script lives
umask 0007
whereami=$0
cd `dirname $whereami`

if [ -z "${JAVA_HOME}" ] ; then
  JAVA_HOME="/opt/SecureSpan/JDK"
fi

if [ ! -x "${JAVA_HOME}/bin/java" ] ; then
  echo "Java not found."
  exit 1
fi

OPTIONS="$OPTIONS --add-opens=java.base/java.lang=ALL-UNNAMED --add-opens=jdk.crypto.ec/sun.security.ec=ALL-UNNAMED"

# this puts the necessary "id" that supports -u first in the path on Solaris, and is a noop on other OSes
OLDPATH=$PATH
PATH="/usr/xpg4/bin:$PATH"
USERID=`id -u`
SSGCONFIG_USERID=`id -u layer7`
PATH=$OLDPATH

launch(){
    #check who we are
    if [ "${USERID}" != "${SSGCONFIG_USERID}" ]; then
        su layer7 -c "${JAVA_HOME}/bin/java ${OPTIONS} -jar ${1}.jar ${2}"
    else
        ${JAVA_HOME}/bin/java ${OPTIONS} -jar ${1}.jar ${2}
    fi

    return $?
}

launchRoot(){
    if [ "${USERID}" = "0" ]; then
        ${JAVA_HOME}/bin/java ${OPTIONS} -jar ${1}.jar
    fi
    return $?
}

if [ "${1}" == "-changeMasterPassphrase" ] ; then
  shift
  launch "ConfigMasterPassphrase" "$*"
elif [ "${1}" == "-changeClusterPassphrase" ] ; then
  launch "ConfigClusterPassphrase" "$*"
elif [ "${1}" == "-databaseUgrade" ] ; then
  launch "DatabaseUpgrader" "$*"
elif [ "${1}" == "-passwordReset" ] ; then
  launch "PasswordReset" "$*"
elif [ "${1}" == "-databaseAdminUser" ] ; then
  launch "DatabaseAdminUserConfig" "$*"
elif [ "${1}" == "-keystoreProperty" ] ; then
  shift
  launch "ConfigKeystoreFileProperty" "$*"
elif [ "${1}" == "-headless" ] ; then
  shift
  launch "ConfigHeadless" "$*"
else
  launch "ConfigWizard" "$*" && launchRoot "ConfigClusterAddress"
fi