#! /bin/sh
# This source code is released into the public domain.

. __LIBDIR__/init.sh

# begin, done or failed
ACTION=$1
# ACME method, must be http-01.
METHOD=$2
# The full domain name we're authorising.
DOMAIN=$3
# Token name.
TOKEN=$4
# The token value we need to create.
AUTH=$5

if [ "$#" -ne 5 ]; then
	_fatal "missing arguments"
fi

if [ "$METHOD" != "http-01" ]; then
	exit 1
fi

if [ -z "$LFACME_HTTP_CHALLENGE_DIR" ]; then
	_fatal "must set LFACME_HTTP_CHALLENGE_DIR"
fi

if ! [ -d "$LFACME_HTTP_CHALLENGE_DIR" ]; then
	_fatal "missing $LFACME_HTTP_CHALLENGE_DIR"
fi

_file="${LFACME_HTTP_CHALLENGE_DIR}/${TOKEN}"

case "$ACTION" in
	begin)
		_verbose "creating validation token %s" "$_file"
		echo "$AUTH" >"$_file"
		exit $?
		;;

	done|failed)
		_verbose "deleting validation token %s" "$_file"
		rm -f "$_file"
		exit $?
		;;

	*)
		_fatal "unknown action: %s" "$ACTION"
		;;
esac