// SPDX-License-Identifier: GPL-2.0-only
/*
 * Digital Voice Modem - Converged FNE Software
 * GPLv2 Open Source. Use is subject to license terms.
 * DO NOT ALTER OR REMOVE COPYRIGHT NOTICES OR THIS FILE HEADER.
 *
 *  Copyright (C) 2024-2025 Bryan Biedenkapp, N2PLL
 *  Copyright (C) 2024 Patrick McDonnell, W3AXL
 *
 */
#include "fne/Defines.h"
#include "common/edac/SHA256.h"
#include "common/lookups/AffiliationLookup.h"
#include "common/network/json/json.h"
#include "common/Log.h"
#include "common/Utils.h"
#include "fne/network/callhandler/TagDMRData.h"
#include "fne/network/callhandler/TagP25Data.h"
#include "fne/network/RESTAPI.h"
#include "HostFNE.h"

using namespace network;
using namespace network::rest;
using namespace network::rest::http;

using namespace lookups;

#include <cstdio>
#include <cstdlib>
#include <cassert>
#include <cstring>

#include <memory>
#include <stdexcept>
#include <unordered_map>

// ---------------------------------------------------------------------------
//  Macros
// ---------------------------------------------------------------------------

#define REST_API_BIND(funcAddr, classInstance) std::bind(&funcAddr, classInstance, std::placeholders::_1,  std::placeholders::_2, std::placeholders::_3)

// ---------------------------------------------------------------------------
//  Global Functions
// ---------------------------------------------------------------------------

/**
 * @brief Helper to format string.
 * 
 * @tparam FormatArgs 
 * @param format String format.
 * @param args 
 * @returns std::string Output string.
 */
template<typename ... FormatArgs>
std::string string_format(const std::string& format, FormatArgs ... args)
{
    int size_s = std::snprintf(nullptr, 0, format.c_str(), args ...) + 1; // extra space for '\0'
    if (size_s <= 0)
        throw std::runtime_error("Error during string formatting.");

    auto size = static_cast<size_t>(size_s);
    std::unique_ptr<char[]> buf(new char[ size ]);
    std::snprintf(buf.get(), size, format.c_str(), args ...);

    return std::string(buf.get(), buf.get() + size - 1);
}

/**
 * @brief Helper to set the default response status.
 * @param obj JSON object to fill with default status.
 */
void setResponseDefaultStatus(json::object& obj)
{
    int s = (int)HTTPPayload::OK;
    obj["status"].set<int>(s);
}

/**
 * @brief Helper to generate a error payload.
 * @param reply HTTP reply.
 * @param message Textual error message to send.
 * @param status HTTP status to send.
 */
void errorPayload(HTTPPayload& reply, std::string message, HTTPPayload::StatusType status = HTTPPayload::BAD_REQUEST)
{
    HTTPPayload rep;
    rep.status = status;

    json::object response = json::object();

    int s = (int)rep.status;
    response["status"].set<int>(s);
    response["message"].set<std::string>(message);

    reply.payload(response);
}

/**
 * @brief Helper to parse the request body as a JSON object.
 * @param request HTTP request.
 * @param reply HTTP reply.
 * @param obj JSON object to fille with parsed request body.
 * @returns bool True, if request body was parsed, otherwise false.
 */
bool parseRequestBody(const HTTPPayload& request, HTTPPayload& reply, json::object& obj)
{
    std::string contentType = request.headers.find("Content-Type");
    if (contentType != "application/json") {
        reply = HTTPPayload::statusPayload(HTTPPayload::BAD_REQUEST, "application/json");
        return false;
    }

    // parse JSON body
    json::value v;
    std::string err = json::parse(v, request.content);
    if (!err.empty()) {
        errorPayload(reply, err);
        return false;
    }

    // ensure parsed JSON is an object
    if (!v.is<json::object>()) {
        errorPayload(reply, "Request was not a valid JSON object.");
        return false;
    }

    obj = v.get<json::object>();
    return true;
}

/**
 * @brief Helper to convert a TalkgroupRuleGroupVoice to JSON.
 * @param groupVoice Instance of TalkgroupRuleGroupVoice to convert to JSON.
 * @returns json::object JSON object.
 */
json::object tgToJson(const TalkgroupRuleGroupVoice& groupVoice) 
{
    json::object tg = json::object();

    std::string tgName = groupVoice.name();
    tg["name"].set<std::string>(tgName);
    std::string tgAlias = groupVoice.nameAlias();
    tg["alias"].set<std::string>(tgAlias);
    bool invalid = groupVoice.isInvalid();
    tg["invalid"].set<bool>(invalid);

    // source stanza
    {
        json::object source = json::object();
        uint32_t tgId = groupVoice.source().tgId();
        source["tgid"].set<uint32_t>(tgId);
        uint8_t tgSlot = groupVoice.source().tgSlot();
        source["slot"].set<uint8_t>(tgSlot);
        tg["source"].set<json::object>(source);
    }

    // config stanza
    {
        json::object config = json::object();
        bool active = groupVoice.config().active();
        config["active"].set<bool>(active);
        bool affiliated = groupVoice.config().affiliated();
        config["affiliated"].set<bool>(affiliated);
        bool parrot = groupVoice.config().parrot();
        config["parrot"].set<bool>(parrot);

        json::array inclusions = json::array();
        std::vector<uint32_t> inclusion = groupVoice.config().inclusion();
        if (inclusion.size() > 0) {
            for (auto inclEntry : inclusion) {
                uint32_t peerId = inclEntry;
                inclusions.push_back(json::value((double)peerId));
            }
        }
        config["inclusion"].set<json::array>(inclusions);

        json::array exclusions = json::array();
        std::vector<uint32_t> exclusion = groupVoice.config().exclusion();
        if (exclusion.size() > 0) {
            for (auto exclEntry : exclusion) {
                uint32_t peerId = exclEntry;
                exclusions.push_back(json::value((double)peerId));
            }
        }
        config["exclusion"].set<json::array>(exclusions);

        json::array rewrites = json::array();
        std::vector<lookups::TalkgroupRuleRewrite> rewrite = groupVoice.config().rewrite();
        if (rewrite.size() > 0) {
            for (auto rewrEntry : rewrite) {
                json::object rewrite = json::object();
                uint32_t peerId = rewrEntry.peerId();
                rewrite["peerid"].set<uint32_t>(peerId);
                uint32_t tgId = rewrEntry.tgId();
                rewrite["tgid"].set<uint32_t>(tgId);
                uint8_t tgSlot = rewrEntry.tgSlot();
                rewrite["slot"].set<uint8_t>(tgSlot);

                rewrites.push_back(json::value(rewrite));
            }
        }
        config["rewrite"].set<json::array>(rewrites);

        json::array always = json::array();
        std::vector<uint32_t> alwaysSend = groupVoice.config().alwaysSend();
        if (alwaysSend.size() > 0) {
            for (auto alwaysEntry : alwaysSend) {
                uint32_t peerId = alwaysEntry;
                always.push_back(json::value((double)peerId));
            }
        }
        config["always"].set<json::array>(always);

        json::array preferreds = json::array();
        std::vector<uint32_t> preferred = groupVoice.config().preferred();
        if (preferred.size() > 0) {
            for (auto prefEntry : preferred) {
                uint32_t peerId = prefEntry;
                preferreds.push_back(json::value((double)peerId));
            }
        }
        config["preferred"].set<json::array>(preferreds);

        json::array permittedRIDs = json::array();
        std::vector<uint32_t> permittedRID = groupVoice.config().permittedRIDs();
        if (permittedRID.size() > 0) {
            for (auto entry : permittedRID) {
                uint32_t rid = entry;
                permittedRIDs.push_back(json::value((double)rid));
            }
        }
        config["permittedRids"].set<json::array>(permittedRIDs);

        tg["config"].set<json::object>(config);
    }

    return tg;
}

/**
 * @brief Helper to convert JSON to a TalkgroupRuleGroupVoice.
 * @param req JSON request.
 * @param reply HTTP reply.
 * @returns TalkgroupRuleGroupVoice TalkgroupRuleGroupVoice object.
 */
TalkgroupRuleGroupVoice jsonToTG(json::object& req, HTTPPayload& reply) 
{
    TalkgroupRuleGroupVoice groupVoice = TalkgroupRuleGroupVoice();

    // validate parameters
    if (!req["name"].is<std::string>()) {
        errorPayload(reply, "TG \"name\" was not a valid string");
        LogDebug(LOG_REST, "TG \"name\" was not a valid string");
        return TalkgroupRuleGroupVoice();
    }

    groupVoice.name(req["name"].get<std::string>());

    if (!req["alias"].is<std::string>()) {
        errorPayload(reply, "TG \"alias\" was not a valid string");
        LogDebug(LOG_REST, "TG \"alias\" was not a valid string");
        return TalkgroupRuleGroupVoice();
    }

    groupVoice.nameAlias(req["alias"].get<std::string>());

    // source stanza
    {
        if (!req["source"].is<json::object>()) {
            errorPayload(reply, "TG \"source\" was not a valid JSON object");
            LogDebug(LOG_REST,  "TG \"source\" was not a valid JSON object");
            return TalkgroupRuleGroupVoice();
        }
        json::object sourceObj = req["source"].get<json::object>();

        if (!sourceObj["tgid"].is<uint32_t>()) {
            errorPayload(reply, "TG source \"tgid\" was not a valid number");
            LogDebug(LOG_REST,  "TG source \"tgid\" was not a valid number");
            return TalkgroupRuleGroupVoice();
        }

        if (!sourceObj["slot"].is<uint8_t>()) {
            errorPayload(reply, "TG source \"slot\" was not a valid number");
            LogDebug(LOG_REST,  "TG source \"slot\" was not a valid number");
            return TalkgroupRuleGroupVoice();
        }

        TalkgroupRuleGroupVoiceSource source = groupVoice.source();
        source.tgId(sourceObj["tgid"].get<uint32_t>());
        source.tgSlot(sourceObj["slot"].get<uint8_t>());

        groupVoice.source(source);
    }

    // config stanza
    {
        if (!req["config"].is<json::object>()) {
            errorPayload(reply, "TG \"config\" was not a valid JSON object");
            LogDebug(LOG_REST,  "TG \"config\" was not a valid JSON object");
            return TalkgroupRuleGroupVoice();
        }
        json::object configObj = req["config"].get<json::object>();

        if (!configObj["active"].is<bool>()) {
            errorPayload(reply, "TG configuration \"active\" was not a valid boolean");
            LogDebug(LOG_REST,  "TG configuration \"active\" was not a valid boolean");
            return TalkgroupRuleGroupVoice();
        }

        if (!configObj["affiliated"].is<bool>()) {
            errorPayload(reply, "TG configuration \"affiliated\" was not a valid boolean");
            LogDebug(LOG_REST,  "TG configuration \"affiliated\" was not a valid boolean");
            return TalkgroupRuleGroupVoice();
        }

        if (!configObj["parrot"].is<bool>()) {
            errorPayload(reply, "TG configuration \"parrot\" slot was not a valid boolean");
            LogDebug(LOG_REST,  "TG configuration \"parrot\" slot was not a valid boolean");
            return TalkgroupRuleGroupVoice();
        }

        TalkgroupRuleConfig config = groupVoice.config();
        config.active(configObj["active"].get<bool>());
        config.affiliated(configObj["affiliated"].get<bool>());
        config.parrot(configObj["parrot"].get<bool>());

        if (!configObj["inclusion"].is<json::array>()) {
            errorPayload(reply, "TG configuration \"inclusion\" was not a valid JSON array");
            LogDebug(LOG_REST,  "TG configuration \"inclusion\" was not a valid JSON array");
            return TalkgroupRuleGroupVoice();
        }
        json::array inclusions = configObj["inclusion"].get<json::array>();

        std::vector<uint32_t> inclusion = groupVoice.config().inclusion();
        if (inclusions.size() > 0) {
            for (auto inclEntry : inclusions) {
                if (!inclEntry.is<uint32_t>()) {
                    errorPayload(reply, "TG configuration inclusion value was not a valid number");
                    LogDebug(LOG_REST,  "TG configuration inclusion value was not a valid number (was %s)", inclEntry.to_type().c_str());
                    return TalkgroupRuleGroupVoice();
                }

                inclusion.push_back(inclEntry.get<uint32_t>());
            }
            config.inclusion(inclusion);
        }

        if (!configObj["exclusion"].is<json::array>()) {
            errorPayload(reply, "TG configuration \"exclusion\" was not a valid JSON array");
            LogDebug(LOG_REST,  "TG configuration \"exclusion\" was not a valid JSON array");
            return TalkgroupRuleGroupVoice();
        }
        json::array exclusions = configObj["exclusion"].get<json::array>();

        std::vector<uint32_t> exclusion = groupVoice.config().exclusion();
        if (exclusions.size() > 0) {
            for (auto exclEntry : exclusions) {
                if (!exclEntry.is<uint32_t>()) {
                    errorPayload(reply, "TG configuration exclusion value was not a valid number");
                    LogDebug(LOG_REST,  "TG configuration exclusion value was not a valid number");
                    return TalkgroupRuleGroupVoice();
                }

                exclusion.push_back(exclEntry.get<uint32_t>());
            }
            config.exclusion(exclusion);
        }

        if (!configObj["rewrite"].is<json::array>()) {
            errorPayload(reply, "TG configuration \"rewrite\" was not a valid JSON array");
            LogDebug(LOG_REST,  "TG configuration \"rewrite\" was not a valid JSON array");
            return TalkgroupRuleGroupVoice();
        }
        json::array rewrites = configObj["rewrite"].get<json::array>();

        std::vector<lookups::TalkgroupRuleRewrite> rewrite = groupVoice.config().rewrite();
        if (rewrites.size() > 0) {
            for (auto rewrEntry : rewrites) {
                if (!rewrEntry.is<json::object>()) {
                    errorPayload(reply, "TG rewrite value was not a valid JSON object");
                    LogDebug(LOG_REST,  "TG rewrite value was not a valid JSON object");
                    return TalkgroupRuleGroupVoice();
                }
                json::object rewriteObj = rewrEntry.get<json::object>();

                TalkgroupRuleRewrite rewriteRule = TalkgroupRuleRewrite();

                if (!rewriteObj["peerid"].is<uint32_t>()) {
                    errorPayload(reply, "TG rewrite rule \"peerid\" was not a valid number");
                    LogDebug(LOG_REST,  "TG rewrite rule \"peerid\" was not a valid number");
                    return TalkgroupRuleGroupVoice();
                }

                if (!rewriteObj["tgid"].is<uint32_t>()) {
                    errorPayload(reply, "TG rewrite rule \"tgid\" was not a valid number");
                    LogDebug(LOG_REST,  "TG rewrite rule \"tgid\" was not a valid number");
                    return TalkgroupRuleGroupVoice();
                }

                if (!rewriteObj["slot"].is<uint8_t>()) {
                    errorPayload(reply, "TG rewrite rule \"slot\" was not a valid number");
                    LogDebug(LOG_REST,  "TG rewrite rule \"slot\" was not a valid number");
                    return TalkgroupRuleGroupVoice();
                }

                rewriteRule.peerId(rewriteObj["peerid"].get<uint32_t>());
                rewriteRule.tgId(rewriteObj["tgid"].get<uint32_t>());
                rewriteRule.tgSlot(rewriteObj["slot"].get<uint8_t>());

                rewrite.push_back(rewriteRule);
            }
            config.rewrite(rewrite);
        }

        if (!configObj["always"].is<json::array>()) {
            errorPayload(reply, "TG configuration \"always\" was not a valid JSON array");
            LogDebug(LOG_REST,  "TG configuration \"always\" was not a valid JSON array");
            return TalkgroupRuleGroupVoice();
        }
        json::array always = configObj["always"].get<json::array>();

        std::vector<uint32_t> alwaysSend = groupVoice.config().alwaysSend();
        if (always.size() > 0) {
            for (auto alwaysEntry : always) {
                if (!alwaysEntry.is<uint32_t>()) {
                    errorPayload(reply, "TG configuration always value was not a valid number");
                    LogDebug(LOG_REST,  "TG configuration always value was not a valid number");
                    return TalkgroupRuleGroupVoice();
                }

                alwaysSend.push_back(alwaysEntry.get<uint32_t>());
            }
            config.alwaysSend(alwaysSend);
        }

        if (!configObj["preferred"].is<json::array>()) {
            errorPayload(reply, "TG configuration \"preferred\" was not a valid JSON array");
            LogDebug(LOG_REST,  "TG configuration \"preferred\" was not a valid JSON array");
            return TalkgroupRuleGroupVoice();
        }
        json::array preferreds = configObj["preferred"].get<json::array>();

        std::vector<uint32_t> preferred = groupVoice.config().preferred();
        if (preferreds.size() > 0) {
            for (auto prefEntry : preferreds) {
                if (!prefEntry.is<uint32_t>()) {
                    errorPayload(reply, "TG configuration preferred value was not a valid number");
                    LogDebug(LOG_REST,  "TG configuration preferred value was not a valid number");
                    return TalkgroupRuleGroupVoice();
                }

                preferred.push_back(prefEntry.get<uint32_t>());
            }
            config.preferred(preferred);
        }

        if (!configObj["permittedRids"].is<json::array>()) {
            errorPayload(reply, "TG configuration \"permittedRids\" was not a valid JSON array");
            LogDebug(LOG_REST,  "TG configuration \"permittedRids\" was not a valid JSON array");
            return TalkgroupRuleGroupVoice();
        }
        json::array permittedRIDs = configObj["permittedRids"].get<json::array>();

        std::vector<uint32_t> permittedRID = groupVoice.config().permittedRIDs();
        if (permittedRIDs.size() > 0) {
            for (auto entry : permittedRIDs) {
                if (!entry.is<uint32_t>()) {
                    errorPayload(reply, "TG configuration permitted RID value was not a valid number");
                    LogDebug(LOG_REST,  "TG configuration permitted RID value was not a valid number");
                    return TalkgroupRuleGroupVoice();
                }

                permittedRID.push_back(entry.get<uint32_t>());
            }
            config.permittedRIDs(permittedRID);
        }

        groupVoice.config(config);
    }

    return groupVoice;
}

// ---------------------------------------------------------------------------
//  Public Class Members
// ---------------------------------------------------------------------------

/* Initializes a new instance of the RESTAPI class. */

RESTAPI::RESTAPI(const std::string& address, uint16_t port, const std::string& password,
    const std::string& keyFile, const std::string& certFile, bool enableSSL, HostFNE* host, bool debug) :
    m_dispatcher(debug),
    m_restServer(address, port, debug),
#if defined(ENABLE_SSL)
    m_restSecureServer(address, port, debug),
    m_enableSSL(enableSSL),
#endif // ENABLE_SSL
    m_random(),
    m_password(password),
    m_passwordHash(nullptr),
    m_debug(debug),
    m_host(host),
    m_network(nullptr),
    m_ridLookup(nullptr),
    m_tidLookup(nullptr),
    m_peerListLookup(nullptr),
    m_authTokens()
{
    assert(!address.empty());
    assert(port > 0U);
    assert(!password.empty());

    size_t size = password.size();

    uint8_t* in = new uint8_t[size];
    for (size_t i = 0U; i < size; i++)
        in[i] = password.at(i);

    m_passwordHash = new uint8_t[32U];
    ::memset(m_passwordHash, 0x00U, 32U);

    edac::SHA256 sha256;
    sha256.buffer(in, (uint32_t)(size), m_passwordHash);

    delete[] in;

    if (m_debug) {
        Utils::dump("REST Password Hash", m_passwordHash, 32U);
    }

#if defined(ENABLE_SSL)
    if (m_enableSSL) {
        if (!m_restSecureServer.setCertAndKey(keyFile, certFile)) {
            m_enableSSL = false;
            ::LogError(LOG_REST, "failed to initialize SSL for HTTPS, disabling SSL");
        }
    }
#endif // ENABLE_SSL

    std::random_device rd;
    std::mt19937 mt(rd());
    m_random = mt;
}

/* Finalizes a instance of the RESTAPI class. */

RESTAPI::~RESTAPI()
{
    if (m_passwordHash != nullptr) {
        delete[] m_passwordHash;
    }
}

/* Sets the instances of the Radio ID and Talkgroup ID lookup tables. */

void RESTAPI::setLookups(lookups::RadioIdLookup* ridLookup, lookups::TalkgroupRulesLookup* tidLookup, ::lookups::PeerListLookup* peerListLookup)
{
    m_ridLookup = ridLookup;
    m_tidLookup = tidLookup;
    m_peerListLookup = peerListLookup;
}

/* Sets the instance of the FNE network. */

void RESTAPI::setNetwork(network::FNENetwork* network)
{
    m_network = network;
}

/* Opens connection to the network. */

bool RESTAPI::open()
{
    initializeEndpoints();
#if defined(ENABLE_SSL)
    if (m_enableSSL) {
        m_restSecureServer.open();
        m_restSecureServer.setHandler(m_dispatcher);
    } else {
#endif // ENABLE_SSL
        m_restServer.open();
        m_restServer.setHandler(m_dispatcher);
#if defined(ENABLE_SSL)
    }
#endif // ENABLE_SSL

    return run();
}

/* Closes connection to the network. */

void RESTAPI::close()
{
#if defined(ENABLE_SSL)
    if (m_enableSSL) {
        m_restSecureServer.stop();
    } else {
#endif // ENABLE_SSL
        m_restServer.stop();
#if defined(ENABLE_SSL)
    }
#endif // ENABLE_SSL
    wait();
}

// ---------------------------------------------------------------------------
//  Private Class Members
// ---------------------------------------------------------------------------

/* Thread entry point. This function is provided to run the thread for the REST API services. */

void RESTAPI::entry()
{
#if defined(ENABLE_SSL)
    if (m_enableSSL) {
        m_restSecureServer.run();
    } else {
#endif // ENABLE_SSL
        m_restServer.run();
#if defined(ENABLE_SSL)
    }
#endif // ENABLE_SSL
}

/* Helper to initialize REST API endpoints. */

void RESTAPI::initializeEndpoints()
{
    m_dispatcher.match(PUT_AUTHENTICATE).put(REST_API_BIND(RESTAPI::restAPI_PutAuth, this));

    m_dispatcher.match(GET_VERSION).get(REST_API_BIND(RESTAPI::restAPI_GetVersion, this));
    m_dispatcher.match(GET_STATUS).get(REST_API_BIND(RESTAPI::restAPI_GetStatus, this));

    m_dispatcher.match(FNE_GET_PEER_QUERY).get(REST_API_BIND(RESTAPI::restAPI_GetPeerQuery, this));
    m_dispatcher.match(FNE_GET_PEER_COUNT).get(REST_API_BIND(RESTAPI::restAPI_GetPeerCount, this));
    m_dispatcher.match(FNE_PUT_PEER_RESET).put(REST_API_BIND(RESTAPI::restAPI_PutPeerReset, this));

    m_dispatcher.match(FNE_GET_RID_QUERY).get(REST_API_BIND(RESTAPI::restAPI_GetRIDQuery, this));
    m_dispatcher.match(FNE_PUT_RID_ADD).put(REST_API_BIND(RESTAPI::restAPI_PutRIDAdd, this));
    m_dispatcher.match(FNE_PUT_RID_DELETE).put(REST_API_BIND(RESTAPI::restAPI_PutRIDDelete, this));
    m_dispatcher.match(FNE_GET_RID_COMMIT).get(REST_API_BIND(RESTAPI::restAPI_GetRIDCommit, this));

    m_dispatcher.match(FNE_GET_TGID_QUERY).get(REST_API_BIND(RESTAPI::restAPI_GetTGQuery, this));
    m_dispatcher.match(FNE_PUT_TGID_ADD).put(REST_API_BIND(RESTAPI::restAPI_PutTGAdd, this));
    m_dispatcher.match(FNE_PUT_TGID_DELETE).put(REST_API_BIND(RESTAPI::restAPI_PutTGDelete, this));
    m_dispatcher.match(FNE_GET_TGID_COMMIT).get(REST_API_BIND(RESTAPI::restAPI_GetTGCommit, this));

    m_dispatcher.match(FNE_GET_PEER_LIST).get(REST_API_BIND(RESTAPI::restAPI_GetPeerList, this));
    m_dispatcher.match(FNE_PUT_PEER_ADD).put(REST_API_BIND(RESTAPI::restAPI_PutPeerAdd, this));
    m_dispatcher.match(FNE_PUT_PEER_DELETE).put(REST_API_BIND(RESTAPI::restAPI_PutPeerDelete, this));
    m_dispatcher.match(FNE_GET_PEER_COMMIT).get(REST_API_BIND(RESTAPI::restAPI_GetPeerCommit, this));
    m_dispatcher.match(FNE_GET_PEER_MODE).get(REST_API_BIND(RESTAPI::restAPI_GetPeerMode, this));

    m_dispatcher.match(FNE_GET_FORCE_UPDATE).get(REST_API_BIND(RESTAPI::restAPI_GetForceUpdate, this));

    m_dispatcher.match(FNE_GET_RELOAD_TGS).get(REST_API_BIND(RESTAPI::restAPI_GetReloadTGs, this));
    m_dispatcher.match(FNE_GET_RELOAD_RIDS).get(REST_API_BIND(RESTAPI::restAPI_GetReloadRIDs, this));

    m_dispatcher.match(FNE_GET_AFF_LIST).get(REST_API_BIND(RESTAPI::restAPI_GetAffList, this));

    /*
    ** Digital Mobile Radio
    */

    m_dispatcher.match(PUT_DMR_RID).put(REST_API_BIND(RESTAPI::restAPI_PutDMRRID, this));

    /*
    ** Project 25
    */

    m_dispatcher.match(PUT_P25_RID).put(REST_API_BIND(RESTAPI::restAPI_PutP25RID, this));
}

/* Helper to invalidate a host token. */

void RESTAPI::invalidateHostToken(const std::string host)
{
    auto token = std::find_if(m_authTokens.begin(), m_authTokens.end(), [&](const AuthTokenValueType& tok) { return tok.first == host; });
    if (token != m_authTokens.end()) {
        m_authTokens.erase(host);
    }
}

/* Helper to validate authentication for REST API. */

bool RESTAPI::validateAuth(const HTTPPayload& request, HTTPPayload& reply)
{
    std::string host = request.headers.find("RemoteHost");
    std::string headerToken = request.headers.find("X-DVM-Auth-Token");
#if DEBUG_HTTP_PAYLOAD
    ::LogDebugEx(LOG_REST, "RESTAPI::validateAuth()", "token, host = %s, token = %s", host.c_str(), headerToken.c_str());
#endif
    if (headerToken.empty()) {
        errorPayload(reply, "no authentication token", HTTPPayload::UNAUTHORIZED);
        return false;
    }

    for (auto& token : m_authTokens) {
#if DEBUG_HTTP_PAYLOAD
        ::LogDebugEx(LOG_REST, "RESTAPI::validateAuth()", "valid list, host = %s, token = %s", token.first.c_str(), std::to_string(token.second).c_str());
#endif
        if (token.first.compare(host) == 0) {
#if DEBUG_HTTP_PAYLOAD
            ::LogDebugEx(LOG_REST, "RESTAPI::validateAuth()", "storedToken = %s, passedToken = %s", std::to_string(token.second).c_str(), headerToken.c_str());
#endif
            if (std::to_string(token.second).compare(headerToken) == 0) {
                return true;
            } else {
                m_authTokens.erase(host); // devalidate host
                errorPayload(reply, "invalid authentication token", HTTPPayload::UNAUTHORIZED);
                return false;
            }
        }
    }

    errorPayload(reply, "illegal authentication token", HTTPPayload::UNAUTHORIZED);
    return false;
}

/* REST API endpoint; implements authentication request. */

void RESTAPI::restAPI_PutAuth(const HTTPPayload& request, HTTPPayload& reply, const RequestMatch& match)
{
    std::string host = request.headers.find("RemoteHost");
    json::object response = json::object();
    setResponseDefaultStatus(response);

    json::object req = json::object();
    if (!parseRequestBody(request, reply, req)) {
        return;
    }

    // validate auth is a string within the JSON blob
    if (!req["auth"].is<std::string>()) {
        invalidateHostToken(host);
        errorPayload(reply, "password was not a valid string");
        return;
    }

    std::string auth = req["auth"].get<std::string>();
    if (auth.empty()) {
        invalidateHostToken(host);
        errorPayload(reply, "auth cannot be empty");
        return;
    }

    if (auth.size() > 64) {
        invalidateHostToken(host);
        errorPayload(reply, "auth cannot be longer than 64 characters");
        return;
    }

    if (!(auth.find_first_not_of("0123456789abcdefABCDEF", 2) == std::string::npos)) {
        invalidateHostToken(host);
        errorPayload(reply, "auth contains invalid characters");
        return;
    }

    if (m_debug) {
        ::LogDebug(LOG_REST, "/auth auth = %s", auth.c_str());
    }

    const char* authPtr = auth.c_str();
    uint8_t* passwordHash = new uint8_t[32U];
    ::memset(passwordHash, 0x00U, 32U);

    for (uint8_t i = 0; i < 32U; i++) {
        char t[4] = {authPtr[0], authPtr[1], 0};
        passwordHash[i] = (uint8_t)::strtoul(t, NULL, 16);
        authPtr += 2 * sizeof(char);
    }

    if (m_debug) {
        Utils::dump("Password Hash", passwordHash, 32U);
    }

    // compare hashes
    if (::memcmp(m_passwordHash, passwordHash, 32U) != 0) {
        invalidateHostToken(host);
        errorPayload(reply, "invalid password");
        return;
    }

    delete[] passwordHash;

    invalidateHostToken(host);
    std::uniform_int_distribution<uint64_t> dist(DVM_RAND_MIN, DVM_REST_RAND_MAX);
    uint64_t salt = dist(m_random);

    m_authTokens[host] = salt;
    response["token"].set<std::string>(std::to_string(salt));
    reply.payload(response);
}

/* REST API endpoint; implements get version request. */

void RESTAPI::restAPI_GetVersion(const HTTPPayload& request, HTTPPayload& reply, const RequestMatch& match)
{
    if (!validateAuth(request, reply)) {
        return;
    }

    json::object response = json::object();
    setResponseDefaultStatus(response);
    response["version"].set<std::string>(std::string((__PROG_NAME__ " " __VER__ " (built " __BUILD__ ")")));

    reply.payload(response);
}

/* REST API endpoint; implements get status request. */

void RESTAPI::restAPI_GetStatus(const HTTPPayload& request, HTTPPayload& reply, const RequestMatch& match)
{
    if (!validateAuth(request, reply)) {
        return;
    }

    json::object response = json::object();
    setResponseDefaultStatus(response);

    yaml::Node systemConf = m_host->m_conf["system"];
    yaml::Node masterConf = m_host->m_conf["master"];
    {
        uint8_t state = FNE_STATE;
        response["state"].set<uint8_t>(state);
        response["dmrEnabled"].set<bool>(m_host->m_dmrEnabled);
        response["p25Enabled"].set<bool>(m_host->m_p25Enabled);
        response["nxdnEnabled"].set<bool>(m_host->m_nxdnEnabled);

        uint32_t peerId = masterConf["peerId"].as<uint32_t>();
        response["peerId"].set<uint32_t>(peerId);
    }

    reply.payload(response);
}

/* REST API endpoint; implements get peer query request. */

void RESTAPI::restAPI_GetPeerQuery(const HTTPPayload& request, HTTPPayload& reply, const RequestMatch& match)
{
    if (!validateAuth(request, reply)) {
        return;
    }

    json::object response = json::object();
    setResponseDefaultStatus(response);

    json::array peers = json::array();
    if (m_network != nullptr) {
        if (m_network->m_peers.size() > 0) {
            for (auto entry : m_network->m_peers) {
                uint32_t peerId = entry.first;
                network::FNEPeerConnection* peer = entry.second;
                if (peer != nullptr) {
                    if (m_debug) {
                        LogDebug(LOG_REST, "Preparing Peer %u (%s) for REST API query", peerId, peer->address().c_str());
                    }

                    json::object peerObj = m_network->fneConnObject(peerId, peer);
                    peers.push_back(json::value(peerObj));
                }
            }
        }
        else {
            LogDebug(LOG_REST, "No peers connected to this FNE");
        }

        // report any Peer-Link reported peers
        if (m_network->m_peerLinkPeers.size() > 0) {
            for (auto entry : m_network->m_peerLinkPeers) {
                json::array peerObjs = entry.second;
                if (entry.second.size() > 0) {
                    for (auto linkEntry : entry.second) {
                        if (linkEntry.is<json::object>()) {
                            peers.push_back(json::value(linkEntry));
                        }
                    }
                }
            }
        }
    }
    else {
        LogDebug(LOG_REST, "Network not set up, no peers to return");
    }

    response["peers"].set<json::array>(peers);
    reply.payload(response);
}

/* REST API endpoint; implements get peer count request. */

void RESTAPI::restAPI_GetPeerCount(const HTTPPayload& request, HTTPPayload& reply, const RequestMatch& match)
{
    if (!validateAuth(request, reply)) {
        return;
    }

    json::object response = json::object();
    setResponseDefaultStatus(response);

    json::array peers = json::array();
    if (m_network != nullptr) {
        uint32_t count = m_network->m_peers.size();
        response["peerCount"].set<uint32_t>(count);
    }

    reply.payload(response);
}

/* REST API endpoint; implements get peer reset request. */

void RESTAPI::restAPI_PutPeerReset(const HTTPPayload& request, HTTPPayload& reply, const RequestMatch& match)
{
    if (!validateAuth(request, reply)) {
        return;
    }

    json::object req = json::object();
    if (!parseRequestBody(request, reply, req)) {
        return;
    }

    errorPayload(reply, "OK", HTTPPayload::OK);

    if (!req["peerId"].is<uint32_t>()) {
        errorPayload(reply, "peerId was not a valid integer");
        return;
    }

    uint32_t peerId = req["peerId"].get<uint32_t>();

    m_network->resetPeer(peerId);
}

/* REST API endpoint; implements get radio ID query request. */

void RESTAPI::restAPI_GetRIDQuery(const HTTPPayload& request, HTTPPayload& reply, const RequestMatch& match)
{
    if (!validateAuth(request, reply)) {
        return;
    }

    json::object response = json::object();
    setResponseDefaultStatus(response);

    json::array rids = json::array();
    if (m_ridLookup != nullptr) {
        if (m_ridLookup->table().size() > 0) {
            for (auto entry : m_ridLookup->table()) {
                json::object ridObj = json::object();

                uint32_t rid = entry.first;
                ridObj["id"].set<uint32_t>(rid);
                bool enabled = entry.second.radioEnabled();
                ridObj["enabled"].set<bool>(enabled);
                std::string alias = entry.second.radioAlias();
                ridObj["alias"].set<std::string>(alias);

                rids.push_back(json::value(ridObj));
            }
        }
    }

    response["rids"].set<json::array>(rids);
    reply.payload(response);
}

/* REST API endpoint; implements put radio ID add request. */

void RESTAPI::restAPI_PutRIDAdd(const HTTPPayload& request, HTTPPayload& reply, const RequestMatch& match)
{
    if (!validateAuth(request, reply)) {
        return;
    }

    json::object req = json::object();
    if (!parseRequestBody(request, reply, req)) {
        return;
    }

    errorPayload(reply, "OK", HTTPPayload::OK);

    if (!req["rid"].is<uint32_t>()) {
        errorPayload(reply, "rid was not a valid integer");
        return;
    }

    uint32_t rid = req["rid"].get<uint32_t>();

    if (!req["enabled"].is<bool>()) {
        errorPayload(reply, "enabled was not a valid boolean");
        return;
    }

    bool enabled = req["enabled"].get<bool>();

    std::string alias = "";
    // Check if we were provided an alias in the request
    if (req.find("alias") != req.end()) {
        alias = req["alias"].get<std::string>();
    }

    // The addEntry function will automatically update an existing entry, so no need to check for an exisitng one here
    m_ridLookup->addEntry(rid, enabled, alias);
/*    
    if (m_network != nullptr) {
        m_network->m_forceListUpdate = true;
    }
*/    
}

/* REST API endpoint; implements put radio ID delete request. */

void RESTAPI::restAPI_PutRIDDelete(const HTTPPayload& request, HTTPPayload& reply, const RequestMatch& match)
{
    if (!validateAuth(request, reply)) {
        return;
    }

    json::object req = json::object();
    if (!parseRequestBody(request, reply, req)) {
        return;
    }

    errorPayload(reply, "OK", HTTPPayload::OK);

    if (!req["rid"].is<uint32_t>()) {
        errorPayload(reply, "rid was not a valid integer");
        return;
    }

    uint32_t rid = req["rid"].get<uint32_t>();

    RadioId radioId = m_ridLookup->find(rid);
    if (radioId.radioDefault()) {
        errorPayload(reply, "failed to find specified RID to delete");
        return;
    }

    m_ridLookup->eraseEntry(rid);
/*    
    if (m_network != nullptr) {
        m_network->m_forceListUpdate = true;
    }
*/    
}

/* REST API endpoint; implements put radio ID commit request. */

void RESTAPI::restAPI_GetRIDCommit(const HTTPPayload& request, HTTPPayload& reply, const RequestMatch& match)
{
    if (!validateAuth(request, reply)) {
        return;
    }

    json::object response = json::object();
    setResponseDefaultStatus(response);

    m_ridLookup->commit();

    reply.payload(response);
}

/* REST API endpoint; implements get talkgroup ID query request. */

void RESTAPI::restAPI_GetTGQuery(const HTTPPayload& request, HTTPPayload& reply, const RequestMatch& match)
{
    if (!validateAuth(request, reply)) {
        return;
    }

    json::object response = json::object();
    setResponseDefaultStatus(response);

    json::array tgs = json::array();
    if (m_tidLookup != nullptr) {
        if (m_tidLookup->groupVoice().size() > 0) {
            for (auto entry : m_tidLookup->groupVoice()) {
                json::object tg = tgToJson(entry);
                tgs.push_back(json::value(tg));
            }
        }
    }

    response["tgs"].set<json::array>(tgs);
    reply.payload(response);
}

/* REST API endpoint; implements put talkgroup ID add request. */

void RESTAPI::restAPI_PutTGAdd(const HTTPPayload& request, HTTPPayload& reply, const RequestMatch& match)
{
    if (!validateAuth(request, reply)) {
        return;
    }

    json::object req = json::object();
    if (!parseRequestBody(request, reply, req)) {
        return;
    }

    errorPayload(reply, "OK", HTTPPayload::OK);

    TalkgroupRuleGroupVoice groupVoice = jsonToTG(req, reply);
    if (groupVoice.isInvalid()) {
        ::LogError(LOG_REST, "Unable to parse TG JSON from REST TgAdd");
        return;
    }

    std::string groupName = groupVoice.name();
    uint32_t tgId = groupVoice.source().tgId();
    uint8_t tgSlot = groupVoice.source().tgSlot();
    bool active = groupVoice.config().active();
    bool parrot = groupVoice.config().parrot();

    uint32_t incCount = groupVoice.config().inclusion().size();
    uint32_t excCount = groupVoice.config().exclusion().size();
    uint32_t rewrCount = groupVoice.config().rewrite().size();
    uint32_t prefCount = groupVoice.config().preferred().size();

    if (incCount > 0 && excCount > 0) {
        ::LogWarning(LOG_REST, "Talkgroup (%s) defines both inclusions and exclusions! Inclusions take precedence and exclusions will be ignored.", groupName.c_str());
    }

    ::LogInfoEx(LOG_REST, "Talkgroup NAME: %s SRC_TGID: %u SRC_TS: %u ACTIVE: %u PARROT: %u INCLUSIONS: %u EXCLUSIONS: %u REWRITES: %u PREFERRED: %u", groupName.c_str(), tgId, tgSlot, active, parrot, incCount, excCount, rewrCount, prefCount);

    m_tidLookup->addEntry(groupVoice);
/*    
    if (m_network != nullptr) {
        m_network->m_forceListUpdate = true;
    }
*/    
}

/* REST API endpoint; implements put talkgroup ID delete request. */

void RESTAPI::restAPI_PutTGDelete(const HTTPPayload& request, HTTPPayload& reply, const RequestMatch& match)
{
    if (!validateAuth(request, reply)) {
        return;
    }

    json::object req = json::object();
    if (!parseRequestBody(request, reply, req)) {
        return;
    }

    errorPayload(reply, "OK", HTTPPayload::OK);

    // validate state is a string within the JSON blob
    if (!req["tgid"].is<uint32_t>()) {
        errorPayload(reply, "tgid was not a valid integer");
        return;
    }

    // Validate slot
    if (!req["slot"].is<uint8_t>()) {
        errorPayload(reply, "slot was not a valid char");
    }

    uint32_t tgid = req["tgid"].get<uint32_t>();
    uint8_t slot = req["slot"].get<uint8_t>();

    TalkgroupRuleGroupVoice groupVoice = m_tidLookup->find(tgid, slot);
    if (groupVoice.isInvalid()) {
        errorPayload(reply, "failed to find specified TGID to delete");
        return;
    }

    m_tidLookup->eraseEntry(groupVoice.source().tgId(), groupVoice.source().tgSlot());
/*    
    if (m_network != nullptr) {
        m_network->m_forceListUpdate = true;
    }
*/    
}

/* REST API endpoint; implements put talkgroup ID commit request. */

void RESTAPI::restAPI_GetTGCommit(const HTTPPayload& request, HTTPPayload& reply, const RequestMatch& match)
{
    if (!validateAuth(request, reply)) {
        return;
    }

    json::object response = json::object();
    setResponseDefaultStatus(response);

    if(!m_tidLookup->commit()) {
        errorPayload(reply, "failed to write new TGID file");
        return;
    }

    reply.payload(response);
}

/* REST API endpoint; implements get peer list query request. */

void RESTAPI::restAPI_GetPeerList(const HTTPPayload& request, HTTPPayload& reply, const RequestMatch& match)
{
    if (!validateAuth(request, reply)) {
        return;
    }

    json::object response = json::object();
    setResponseDefaultStatus(response);

    json::array peers = json::array();
    if (m_peerListLookup != nullptr) {
        if (m_peerListLookup->table().size() > 0) {
            for (auto entry : m_peerListLookup->table()) {
                json::object peerObj = json::object();

                uint32_t peerId = entry.first;
                std::string peerAlias = entry.second.peerAlias();
                bool peerLink = entry.second.peerLink();
                bool peerPassword = !entry.second.peerPassword().empty();   // True if password is not empty, otherwise false
                peerObj["peerId"].set<uint32_t>(peerId);
                peerObj["peerAlias"].set<std::string>(peerAlias);
                peerObj["peerLink"].set<bool>(peerLink);
                peerObj["peerPassword"].set<bool>(peerPassword);
                peers.push_back(json::value(peerObj));
            }
        }
    }

    response["peers"].set<json::array>(peers);
    reply.payload(response);
}

/* REST API endpoint; implements put peer add request. */

void RESTAPI::restAPI_PutPeerAdd(const HTTPPayload& request, HTTPPayload& reply, const RequestMatch& match)
{
    if (!validateAuth(request, reply)) {
        return;
    }

    json::object req = json::object();
    if (!parseRequestBody(request, reply, req)) {
        return;
    }

    errorPayload(reply, "OK", HTTPPayload::OK);

    // Validate peer ID (required)
    if (!req["peerId"].is<uint32_t>()) {
        errorPayload(reply, "peerId was not a valid integer");
        return;
    }
    // Get
    uint32_t peerId = req["peerId"].get<uint32_t>();

    // Get peer alias (optional)
    std::string peerAlias = "";
    if (req.find("peerAlias") != req.end()) {
        // Validate
        if (!req["peerAlias"].is<std::string>()) {
            errorPayload(reply, "peerAlias was not a valid string");
            return;
        }
        // Get
        peerAlias = req["peerAlias"].get<std::string>();
    }

    // Get peer link setting (optional)
    bool peerLink = false;
    if (req.find("peerLink") != req.end()) {
        // Validate
        if (!req["peerLink"].is<bool>()) {
            errorPayload(reply, "peerLink was not a valid boolean");
            return;
        }
        // Get
        peerLink = req["peerLink"].get<bool>();
    }

    // Get peer password (optional)
    std::string peerPassword = "";
    if (req.find("peerPassword") != req.end()) {
        // Validate
        if (!req["peerPassword"].is<std::string>()) {
            errorPayload(reply, "peerPassword was not a valid string");
            return;
        }
        // Get
        peerPassword = req["peerPassword"].get<std::string>();
    }

    m_peerListLookup->addEntry(peerId, peerAlias, peerPassword, peerLink);
}

/* REST API endpoint; implements put peer delete request. */

void RESTAPI::restAPI_PutPeerDelete(const HTTPPayload& request, HTTPPayload& reply, const RequestMatch& match)
{
    if (!validateAuth(request, reply)) {
        return;
    }

    json::object req = json::object();
    if (!parseRequestBody(request, reply, req)) {
        return;
    }

    errorPayload(reply, "OK", HTTPPayload::OK);

    if (!req["peerId"].is<uint32_t>()) {
        errorPayload(reply, "peerId was not a valid integer");
        return;
    }

    uint32_t peerId = req["peerId"].get<uint32_t>();

    m_peerListLookup->eraseEntry(peerId);
}

/* REST API endpoint; implements put peer list commit request. */

void RESTAPI::restAPI_GetPeerCommit(const HTTPPayload& request, HTTPPayload& reply, const RequestMatch& match)
{
    if (!validateAuth(request, reply)) {
        return;
    }

    json::object response = json::object();
    setResponseDefaultStatus(response);

    m_peerListLookup->commit();

    reply.payload(response);
}

/* */

void RESTAPI::restAPI_GetPeerMode(const HTTPPayload& request, HTTPPayload& reply, const RequestMatch& match)
{
    if (!validateAuth(request, reply)) {
        return;
    }

    json::object response = json::object();
    setResponseDefaultStatus(response);

    lookups::PeerListLookup::Mode mode = m_peerListLookup->getMode();
    bool acl = m_peerListLookup->getACL();

    std::string modeStr;

    if (acl) {
        switch (mode) {
            case lookups::PeerListLookup::WHITELIST:
                modeStr = "WHITELIST";
                break;
            case lookups::PeerListLookup::BLACKLIST:
                modeStr = "BLACKLIST";
                break;
            default:
                modeStr = "UNKNOWN";
                break;
        }
    }
    else {
        modeStr = "DISABLED";
    }

    response["mode"].set<std::string>(modeStr);
    reply.payload(response);
}

/* */

void RESTAPI::restAPI_GetForceUpdate(const HTTPPayload& request, HTTPPayload& reply, const RequestMatch& match)
{
    if (!validateAuth(request, reply)) {
        return;
    }

    json::object response = json::object();
    setResponseDefaultStatus(response);

    if (m_network != nullptr) {
        m_network->m_forceListUpdate = true;
    }

    reply.payload(response);
}

/* REST API endpoint; implements get reload talkgroup ID list request. */

void RESTAPI::restAPI_GetReloadTGs(const HTTPPayload& request, HTTPPayload& reply, const RequestMatch& match)
{
    if (!validateAuth(request, reply)) {
        return;
    }

    json::object response = json::object();
    setResponseDefaultStatus(response);

    if (m_network != nullptr) {
        m_network->m_tidLookup->reload();
    }

    reply.payload(response);
}

/* REST API endpoint; implements get reload radio ID list request. */

void RESTAPI::restAPI_GetReloadRIDs(const HTTPPayload& request, HTTPPayload& reply, const RequestMatch& match)
{
    if (!validateAuth(request, reply)) {
        return;
    }

    json::object response = json::object();
    setResponseDefaultStatus(response);

    if (m_network != nullptr) {
        m_network->m_ridLookup->reload();
    }

    reply.payload(response);
}

/* REST API endpoint; implements get affiliation list request. */

void RESTAPI::restAPI_GetAffList(const HTTPPayload& request, HTTPPayload& reply, const RequestMatch& match)
{
    if (!validateAuth(request, reply)) {
        return;
    }

    json::object response = json::object();
    setResponseDefaultStatus(response);

    json::array affs = json::array();
    if (m_network != nullptr) {
        if (m_network->m_peers.size() > 0) {
            for (auto entry : m_network->m_peers) {
                uint32_t peerId = entry.first;
                network::FNEPeerConnection* peer = entry.second;
                if (peer != nullptr) {
                    lookups::AffiliationLookup* affLookup = m_network->m_peerAffiliations[peerId];
                    if (affLookup != nullptr) {
                        std::unordered_map<uint32_t, uint32_t> affTable = affLookup->grpAffTable();

                        json::object peerObj = json::object();
                        peerObj["peerId"].set<uint32_t>(peerId);

                        json::array peerAffs = json::array();
                        if (affLookup->grpAffSize() > 0U) {
                            for (auto entry : affTable) {
                                uint32_t srcId = entry.first;
                                uint32_t dstId = entry.second;

                                json::object affObj = json::object();
                                affObj["srcId"].set<uint32_t>(srcId);
                                affObj["dstId"].set<uint32_t>(dstId);
                                peerAffs.push_back(json::value(affObj));
                            }
                        }

                        peerObj["affiliations"].set<json::array>(peerAffs);
                        affs.push_back(json::value(peerObj));
                    }
                }
            }
        }
    }

    response["affiliations"].set<json::array>(affs);
    reply.payload(response);
}

/*
** Digital Mobile Radio
*/

/* REST API endpoint; implements DMR RID operations request. */

void RESTAPI::restAPI_PutDMRRID(const HTTPPayload& request, HTTPPayload& reply, const RequestMatch& match)
{
    using namespace dmr::defines;
    if (!validateAuth(request, reply)) {
        return;
    }

    json::object req = json::object();
    if (!parseRequestBody(request, reply, req)) {
        return;
    }

    // validate state is a string within the JSON blob
    if (!req["command"].is<std::string>()) {
        errorPayload(reply, "command was not valid");
        return;
    }

    // validate destination ID is a integer within the JSON blob
    if (!req["dstId"].is<uint32_t>()) {
        errorPayload(reply, "destination ID was not valid");
        return;
    }

    // validate destination ID is a integer within the JSON blob
    if (!req["slot"].is<uint8_t>()) {
        errorPayload(reply, "slot was not valid");
        return;
    }

    uint32_t peerId = req["peerId"].getDefault<uint32_t>(0U);
    uint32_t dstId = req["dstId"].get<uint32_t>();
    uint8_t slot = req["slot"].get<uint8_t>();

    if (dstId == 0U) {
        errorPayload(reply, "destination ID was not valid");
        return;
    }

    if (slot == 0U || slot >= 3U) {
        errorPayload(reply, "invalid DMR slot number (slot == 0 or slot > 3)");
        return;
    }

    errorPayload(reply, "OK", HTTPPayload::OK);
    std::string command = req["command"].get<std::string>();
    if (::strtolower(command) == RID_CMD_PAGE) {
        m_network->m_tagDMR->write_Call_Alrt(peerId, slot, WUID_ALL, dstId);
    }
    else if (::strtolower(command) == RID_CMD_CHECK) {
        m_network->m_tagDMR->write_Ext_Func(peerId, slot, ExtendedFunctions::CHECK, WUID_ALL, dstId);
    }
    else if (::strtolower(command) == RID_CMD_INHIBIT) {
        m_network->m_tagDMR->write_Ext_Func(peerId, slot, ExtendedFunctions::INHIBIT, WUID_STUNI, dstId);
    }
    else if (::strtolower(command) == RID_CMD_UNINHIBIT) {
        m_network->m_tagDMR->write_Ext_Func(peerId, slot, ExtendedFunctions::UNINHIBIT, WUID_STUNI, dstId);
    }
    else {
        errorPayload(reply, "invalid command");
        return;
    }
}

/*
** Project 25
*/

/* REST API endpoint; implements P25 RID operation request. */

void RESTAPI::restAPI_PutP25RID(const HTTPPayload& request, HTTPPayload& reply, const RequestMatch& match)
{
    using namespace p25::defines;
    if (!validateAuth(request, reply)) {
        return;
    }

    json::object req = json::object();
    if (!parseRequestBody(request, reply, req)) {
        return;
    }

    // validate state is a string within the JSON blob
    if (!req["command"].is<std::string>()) {
        errorPayload(reply, "command was not valid");
        return;
    }

    // validate destination ID is a integer within the JSON blob
    if (!req["dstId"].is<uint32_t>()) {
        errorPayload(reply, "destination ID was not valid");
        return;
    }

    uint32_t peerId = req["peerId"].getDefault<uint32_t>(0U);
    uint32_t dstId = req["dstId"].get<uint32_t>();

    if (dstId == 0U) {
        errorPayload(reply, "destination ID was not valid");
        return;
    }

    std::string command = req["command"].get<std::string>();

    errorPayload(reply, "OK", HTTPPayload::OK);
    if (::strtolower(command) == RID_CMD_PAGE) {
        m_network->m_tagP25->write_TSDU_Call_Alrt(peerId, WUID_FNE, dstId);
    }
    else if (::strtolower(command) == RID_CMD_CHECK) {
        m_network->m_tagP25->write_TSDU_Ext_Func(peerId, ExtendedFunctions::CHECK, WUID_FNE, dstId);
    }
    else if (::strtolower(command) == RID_CMD_INHIBIT) {
        m_network->m_tagP25->write_TSDU_Ext_Func(peerId, ExtendedFunctions::INHIBIT, WUID_FNE, dstId);
    }
    else if (::strtolower(command) == RID_CMD_UNINHIBIT) {
        m_network->m_tagP25->write_TSDU_Ext_Func(peerId, ExtendedFunctions::UNINHIBIT, WUID_FNE, dstId);
    }
    else if (::strtolower(command) == RID_CMD_DYN_REGRP) {
        // validate source ID is a integer within the JSON blob
        if (!req["tgId"].is<uint32_t>()) {
            errorPayload(reply, "talkgroup ID was not valid");
            return;
        }

        uint32_t tgId = req["tgId"].get<uint32_t>();

        m_network->m_tagP25->write_TSDU_Ext_Func(peerId, ExtendedFunctions::DYN_REGRP_REQ, tgId, dstId);
    }
    else if (::strtolower(command) == RID_CMD_DYN_REGRP_CANCEL) {
        m_network->m_tagP25->write_TSDU_Ext_Func(peerId, ExtendedFunctions::DYN_REGRP_CANCEL, 0U, dstId);
    }
    else if (::strtolower(command) == RID_CMD_DYN_REGRP_LOCK) {
        m_network->m_tagP25->write_TSDU_Ext_Func(peerId, ExtendedFunctions::DYN_REGRP_LOCK, 0U, dstId);
    }
    else if (::strtolower(command) == RID_CMD_DYN_REGRP_UNLOCK) {
        m_network->m_tagP25->write_TSDU_Ext_Func(peerId, ExtendedFunctions::DYN_REGRP_UNLOCK, 0U, dstId);
    }
    else if (::strtolower(command) == RID_CMD_GAQ) {
        m_network->m_tagP25->write_TSDU_Grp_Aff_Q(peerId, dstId);
    }
    else if (::strtolower(command) == RID_CMD_UREG) {
        m_network->m_tagP25->write_TSDU_U_Reg_Cmd(peerId, dstId);
    }
    else {
        errorPayload(reply, "invalid command");
        return;
    }
}