/**
 * This file is part of the Meeds project (https://meeds.io/).
 *
 * Copyright (C) 2020 - 2025 Meeds Association contact@meeds.io
 *
 * This program is free software; you can redistribute it and/or
 * modify it under the terms of the GNU Lesser General Public
 * License as published by the Free Software Foundation; either
 * version 3 of the License, or (at your option) any later version.
 * This program is distributed in the hope that it will be useful,
 * but WITHOUT ANY WARRANTY; without even the implied warranty of
 * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU
 * Lesser General Public License for more details.
 *
 * You should have received a copy of the GNU Lesser General Public License
 * along with this program; if not, write to the Free Software Foundation,
 * Inc., 51 Franklin Street, Fifth Floor, Boston, MA 02110-1301, USA.
 */
package io.meeds.social.space.service;

import static org.exoplatform.social.core.space.SpaceUtils.AUTHENTICATED;
import static org.exoplatform.social.core.space.SpaceUtils.EVERYONE;
import static org.exoplatform.social.core.space.SpaceUtils.INTERNAL;
import static org.exoplatform.social.core.space.SpaceUtils.MANAGER;
import static org.exoplatform.social.core.space.SpaceUtils.MEMBER;
import static org.exoplatform.social.core.space.SpaceUtils.PLATFORM_PUBLISHER_GROUP;
import static org.exoplatform.social.core.space.SpaceUtils.PLATFORM_USERS_GROUP;
import static org.exoplatform.social.core.space.SpaceUtils.PUBLISHER;
import static org.exoplatform.social.core.space.SpaceUtils.addUserToGroupWithManagerMembership;
import static org.exoplatform.social.core.space.SpaceUtils.addUserToGroupWithMemberMembership;
import static org.exoplatform.social.core.space.SpaceUtils.addUserToGroupWithPublisherMembership;
import static org.exoplatform.social.core.space.SpaceUtils.addUserToGroupWithRedactorMembership;
import static org.exoplatform.social.core.space.SpaceUtils.createGroup;
import static org.exoplatform.social.core.space.SpaceUtils.removeGroup;
import static org.exoplatform.social.core.space.SpaceUtils.removeMembershipFromGroup;
import static org.exoplatform.social.core.space.SpaceUtils.removeUserFromGroupWithAnyMembership;
import static org.exoplatform.social.core.space.SpaceUtils.removeUserFromGroupWithManagerMembership;
import static org.exoplatform.social.core.space.SpaceUtils.removeUserFromGroupWithMemberMembership;
import static org.exoplatform.social.core.space.SpaceUtils.removeUserFromGroupWithPublisherMembership;
import static org.exoplatform.social.core.space.SpaceUtils.removeUserFromGroupWithRedactorMembership;
import static org.exoplatform.social.core.space.SpaceUtils.setPermissionsFromTemplate;

import java.net.URLEncoder;
import java.nio.charset.StandardCharsets;
import java.security.SecureRandom;
import java.time.Instant;
import java.util.*;
import java.util.stream.Stream;

import io.meeds.social.space.invitation.model.SpaceInvitationLink;
import io.meeds.social.space.invitation.storage.SpaceInvitationLinkStorage;
import io.meeds.social.space.model.SpaceCreationInstance;
import io.meeds.social.util.JsonUtils;
import org.apache.commons.collections4.CollectionUtils;
import org.apache.commons.lang3.ArrayUtils;
import org.apache.commons.lang3.StringUtils;

import org.exoplatform.commons.exception.ObjectNotFoundException;
import org.exoplatform.commons.file.model.FileItem;
import org.exoplatform.commons.file.services.FileService;
import org.exoplatform.commons.utils.CommonsUtils;
import org.exoplatform.commons.utils.ListAccess;
import org.exoplatform.commons.utils.ListAccessImpl;
import org.exoplatform.container.ExoContainerContext;
import org.exoplatform.container.xml.InitParams;
import org.exoplatform.portal.config.UserACL;
import org.exoplatform.services.log.ExoLogger;
import org.exoplatform.services.log.Log;
import org.exoplatform.services.organization.Group;
import org.exoplatform.services.organization.GroupHandler;
import org.exoplatform.services.organization.OrganizationService;
import org.exoplatform.services.resources.LocaleConfigService;
import org.exoplatform.services.resources.ResourceBundleService;
import org.exoplatform.services.security.MembershipEntry;
import org.exoplatform.social.common.Utils;
import org.exoplatform.social.core.binding.model.GroupSpaceBinding;
import org.exoplatform.social.core.identity.model.Identity;
import org.exoplatform.social.core.identity.model.Profile;
import org.exoplatform.social.core.identity.provider.SpaceIdentityProvider;
import org.exoplatform.social.core.jpa.storage.SpaceStorage;
import org.exoplatform.social.core.manager.IdentityManager;
import org.exoplatform.social.core.model.BannerAttachment;
import org.exoplatform.social.core.model.SpaceExternalInvitation;
import org.exoplatform.social.core.space.SpaceException;
import org.exoplatform.social.core.space.SpaceException.Code;
import org.exoplatform.social.core.space.SpaceFilter;
import org.exoplatform.social.core.space.SpaceLifecycle;
import org.exoplatform.social.core.space.SpaceListAccess;
import org.exoplatform.social.core.space.SpaceListAccessType;
import org.exoplatform.social.core.space.SpaceListenerPlugin;
import org.exoplatform.social.core.space.model.Space;
import org.exoplatform.social.core.space.spi.SpaceLifeCycleEvent.Type;
import org.exoplatform.social.core.space.spi.SpaceLifeCycleListener;
import org.exoplatform.social.core.space.spi.SpaceService;
import org.exoplatform.social.core.storage.api.GroupSpaceBindingStorage;
import org.exoplatform.web.security.codec.AbstractCodec;
import org.exoplatform.web.security.codec.CodecInitializer;
import org.exoplatform.web.security.security.CookieTokenService;
import org.exoplatform.web.security.security.RemindPasswordTokenService;

import io.meeds.social.search.SpaceSearchConnector;
import io.meeds.social.space.template.model.SpaceTemplate;
import io.meeds.social.space.template.service.SpaceTemplateService;

import lombok.SneakyThrows;
import org.exoplatform.web.security.security.SecureRandomService;
import org.exoplatform.web.security.security.TokenServiceInitializationException;

public class SpaceServiceImpl implements SpaceService {

  private static final Log            LOG                          = ExoLogger.getLogger(SpaceServiceImpl.class);

  private static final int            MAX_SPACE_NAME_LENGTH        = 200;

  private static final int            MIN_NONCE_LENGTH             = 8;

  private static final int            DEFAULT_MAX_NONCE_LENGTH     = 12;

  private static final String         NONCE_MAX_LENGTH_VALUE_PARAM = "space.invitation.token.nonce.maxLength";

  private static final Base64.Encoder URL_ENCODER                  = Base64.getUrlEncoder().withoutPadding();

  private SpaceStorage                spaceStorage;

  private SpaceInvitationLinkStorage  spaceInvitationLinkStorage;

  private SpaceSearchConnector        spaceSearchConnector;

  private GroupSpaceBindingStorage    groupSpaceBindingStorage;

  private IdentityManager             identityManager;

  private UserACL                     userAcl;

  private ResourceBundleService       resourceBundleService;

  private LocaleConfigService         localeConfigService;

  private OrganizationService         organizationService;

  private SpaceTemplateService        spaceTemplateService;

  private FileService                 fileService;

  private CookieTokenService          cookieTokenService;

  private SpaceLifecycle              spaceLifeCycle               = new SpaceLifecycle();

  private CodecInitializer            codecInitializer;
  
  private SecureRandomService         secureRandomService;

  private int invitationTokenNonceMaxLength;

  public SpaceServiceImpl(SpaceStorage spaceStorage, // NOSONAR
                          GroupSpaceBindingStorage groupSpaceBindingStorage,
                          SpaceSearchConnector spaceSearchConnector,
                          IdentityManager identityManager,
                          UserACL userAcl,
                          ResourceBundleService resourceBundleService,
                          LocaleConfigService localeConfigService,
                          FileService fileService,
                          CookieTokenService cookieTokenService,
                          InitParams initParams) {
    this.spaceStorage = spaceStorage;
    this.groupSpaceBindingStorage = groupSpaceBindingStorage;
    this.spaceSearchConnector = spaceSearchConnector;
    this.identityManager = identityManager;
    this.userAcl = userAcl;
    this.resourceBundleService = resourceBundleService;
    this.localeConfigService = localeConfigService;
    this.fileService = fileService;
    this.cookieTokenService = cookieTokenService;

    this.invitationTokenNonceMaxLength = DEFAULT_MAX_NONCE_LENGTH;
    if (initParams != null && initParams.containsKey(NONCE_MAX_LENGTH_VALUE_PARAM)) {
      String value = initParams.getValueParam(NONCE_MAX_LENGTH_VALUE_PARAM).getValue();
      try {
        this.invitationTokenNonceMaxLength = Integer.parseInt(value);
      } catch (NumberFormatException e) {
        LOG.warn("Invalid value for {}: '{}', using default {}",
                    NONCE_MAX_LENGTH_VALUE_PARAM, value, DEFAULT_MAX_NONCE_LENGTH, e);
      }
    }
  }

  @Override
  public Space getSpaceByPrettyName(String spacePrettyName) {
    return spaceStorage.getSpaceByPrettyName(spacePrettyName);
  }

  @Override
  public Instant getSpaceMembershipDate(long spaceId, String username) {
    return spaceStorage.getSpaceMembershipDate(spaceId, username);
  }

  @Override
  public Space getSpaceByGroupId(String groupId) {
    return spaceStorage.getSpaceByGroupId(groupId);
  }

  @Override
  public Space getSpaceById(long spaceId) {
    return spaceStorage.getSpaceById(spaceId);
  }

  @Override
  public ListAccess<Space> getAccessibleSpacesWithListAccess(String username) {
    return getAccessibleSpacesByFilter(username, new SpaceFilter());
  }

  @Override
  public ListAccess<Space> getAccessibleSpacesByFilter(String username, SpaceFilter spaceFilter) {
    if (userAcl.isAnonymousUser(username)) {
      return new ListAccessImpl<>(Space.class, Collections.emptyList());
    }
    return new SpaceListAccess(spaceStorage,
                               spaceSearchConnector,
                               getSpaceTemplateService(),
                               username,
                               spaceFilter,
                               SpaceListAccessType.ACCESSIBLE_FILTER);
  }

  @Override
  public ListAccess<Space> getVisibleSpacesWithListAccess(String username, SpaceFilter spaceFilter) {
    return new SpaceListAccess(spaceStorage,
                               spaceSearchConnector,
                               getSpaceTemplateService(),
                               username,
                               spaceFilter,
                               SpaceListAccessType.VISIBLE);
  }

  @Override
  public ListAccess<Space> getPendingSpacesWithListAccess(String username) {
    if (userAcl.isAnonymousUser(username)) {
      return new ListAccessImpl<>(Space.class, Collections.emptyList());
    }
    return new SpaceListAccess(spaceStorage,
                               spaceSearchConnector,
                               username,
                               SpaceListAccessType.PENDING);
  }

  @Override
  public ListAccess<Space> getAllSpacesWithListAccess() {
    return new SpaceListAccess(spaceStorage,
                               spaceSearchConnector,
                               SpaceListAccessType.ALL);
  }

  @Override
  public ListAccess<Space> getAllSpacesByFilter(SpaceFilter spaceFilter) {
    return new SpaceListAccess(spaceStorage,
                               spaceSearchConnector,
                               getSpaceTemplateService(),
                               spaceFilter,
                               SpaceListAccessType.ALL_FILTER);
  }

  @Override
  public ListAccess<Space> getInvitedSpacesWithListAccess(String username) {
    if (userAcl.isAnonymousUser(username)) {
      return new ListAccessImpl<>(Space.class, Collections.emptyList());
    }
    return new SpaceListAccess(spaceStorage,
                               spaceSearchConnector,
                               username,
                               SpaceListAccessType.INVITED);
  }

  @Override
  public ListAccess<Space> getInvitedSpacesByFilter(String username, SpaceFilter spaceFilter) {
    if (userAcl.isAnonymousUser(username)) {
      return new ListAccessImpl<>(Space.class, Collections.emptyList());
    }
    return new SpaceListAccess(spaceStorage, spaceSearchConnector, username, spaceFilter, SpaceListAccessType.INVITED_FILTER);
  }

  @Override
  public ListAccess<Space> getMemberSpaces(String username) {
    if (userAcl.isAnonymousUser(username)) {
      return new ListAccessImpl<>(Space.class, Collections.emptyList());
    }
    return new SpaceListAccess(spaceStorage, spaceSearchConnector, username, SpaceListAccessType.MEMBER);
  }

  @Override
  public ListAccess<Space> getMemberSpacesByFilter(String username, SpaceFilter spaceFilter) {
    if (userAcl.isAnonymousUser(username)) {
      return new ListAccessImpl<>(Space.class, Collections.emptyList());
    }
    return new SpaceListAccess(spaceStorage, spaceSearchConnector, username, spaceFilter, SpaceListAccessType.MEMBER_FILTER);
  }

  @Override
  public ListAccess<Space> getManagerSpaces(String username) {
    if (userAcl.isAnonymousUser(username)) {
      return new ListAccessImpl<>(Space.class, Collections.emptyList());
    }
    return new SpaceListAccess(spaceStorage, spaceSearchConnector, username, SpaceListAccessType.MANAGER);
  }

  @Override
  public ListAccess<Space> getManagerSpacesByFilter(String username, SpaceFilter spaceFilter) {
    if (userAcl.isAnonymousUser(username)) {
      return new ListAccessImpl<>(Space.class, Collections.emptyList());
    }
    return new SpaceListAccess(spaceStorage,
                               spaceSearchConnector,
                               username,
                               spaceFilter,
                               SpaceListAccessType.MANAGER_FILTER);
  }

  @Override
  public ListAccess<Space> getEditableSpacesByFilter(String username, SpaceFilter spaceFilter) {
    if (userAcl.isAnonymousUser(username)) {
      return new ListAccessImpl<>(Space.class, Collections.emptyList());
    }
    return new SpaceListAccess(spaceStorage,
                               spaceSearchConnector,
                               getSpaceTemplateService(),
                               username,
                               spaceFilter,
                               SpaceListAccessType.MANAGER_FILTER);
  }

  @Override
  public ListAccess<Space> getFavoriteSpacesByFilter(String username, SpaceFilter spaceFilter) {
    if (userAcl.isAnonymousUser(username)) {
      return new ListAccessImpl<>(Space.class, Collections.emptyList());
    }
    return new SpaceListAccess(spaceStorage,
                               spaceSearchConnector,
                               getSpaceTemplateService(),
                               username,
                               spaceFilter,
                               SpaceListAccessType.FAVORITE_FILTER);
  }

  @Override
  public ListAccess<Space> getPendingSpacesByFilter(String username, SpaceFilter spaceFilter) {
    if (userAcl.isAnonymousUser(username)) {
      return new ListAccessImpl<>(Space.class, Collections.emptyList());
    }
    return new SpaceListAccess(spaceStorage, spaceSearchConnector, username, spaceFilter, SpaceListAccessType.PENDING_FILTER);
  }

  @Override
  public ListAccess<Space> getPendingSpaceRequestsToManage(String username) {
    if (userAcl.isAnonymousUser(username)) {
      return new ListAccessImpl<>(Space.class, Collections.emptyList());
    }
    return new SpaceListAccess(spaceStorage, spaceSearchConnector, username, SpaceListAccessType.PENDING_REQUESTS);
  }

  @Override
  public ListAccess<Space> getLastAccessedSpace(String username) {
    if (userAcl.isAnonymousUser(username)) {
      return new ListAccessImpl<>(Space.class, Collections.emptyList());
    }
    return new SpaceListAccess(spaceStorage,
                               spaceSearchConnector,
                               username,
                               SpaceListAccessType.LASTEST_ACCESSED);
  }

  @Override
  public ListAccess<Space> getLastAccessedSpaceByFilter(String username, SpaceFilter spaceFilter) {
    if (userAcl.isAnonymousUser(username)) {
      return new ListAccessImpl<>(Space.class, Collections.emptyList());
    }
    return new SpaceListAccess(spaceStorage,
                               spaceSearchConnector,
                               username,
                               spaceFilter,
                               SpaceListAccessType.LASTEST_ACCESSED);
  }

  @Override
  public ListAccess<Space> getCommonSpaces(String username, String otherUserId) {
    if (userAcl.isAnonymousUser(username)) {
      return new ListAccessImpl<>(Space.class, Collections.emptyList());
    }
    return new SpaceListAccess(spaceStorage, spaceSearchConnector, SpaceListAccessType.COMMON, username, otherUserId);
  }

  @Override
  public List<String> getMemberSpacesIds(String username, int offset, int limit) {
    Identity identity = identityManager.getOrCreateUserIdentity(username);
    if (identity == null) {
      return Collections.emptyList();
    } else {
      return this.spaceStorage.getMemberRoleSpaceIds(identity.getId(), offset, limit);
    }
  }

  @Override
  public List<String> getManagerSpacesIds(String username, int offset, int limit) {
    Identity identity = identityManager.getOrCreateUserIdentity(username);
    if (identity == null) {
      return Collections.emptyList();
    } else {
      return this.spaceStorage.getManagerRoleSpaceIds(identity.getId(), offset, limit);
    }
  }

  @Override
  public int getManagerSpacesCount(String username) {
    Identity identity = identityManager.getOrCreateUserIdentity(username);
    if (identity == null) {
      return 0;
    } else {
      return this.spaceStorage.getManagerSpacesCount(identity.getRemoteId());
    }
  }

  @Override
  public List<Space> getLastSpaces(int limit) {
    return spaceStorage.getLastSpaces(limit);
  }

  @Override
  @SneakyThrows
  public Space createSpace(Space space, String username) {
    return createSpace(space, username, null);
  }

  @Override
  public Space createSpace(Space space, String username, List<Identity> identitiesToInvite) throws SpaceException {
    return createSpace(space, username, identitiesToInvite, 0);
  }

  @Override
  public Space createSpace(Space space,
                           String username,
                           List<Identity> identitiesToInvite,
                           long parentSpaceId) throws SpaceException {
    if (!getSpaceTemplateService().canCreateSpace(space.getTemplateId(), username)) {
      throw new SpaceException(Code.SPACE_PERMISSION,
                               String.format("User %s isn't allowed to create space with template %s",
                                             username,
                                             space.getTemplateId()));
    }
    parentSpaceId = resolveParentSpaceId(space.getTemplateId(), parentSpaceId, username);
    checkSubspaceCreationAllowed(space, parentSpaceId, username);

    // Copy only settable properties from provided DTO
    Space spaceToCreate = new Space();
    spaceToCreate.setDisplayName(space.getDisplayName());
    spaceToCreate.setPrettyName(space.getPrettyName());
    spaceToCreate.setDescription(space.getDescription());
    spaceToCreate.setRegistration(space.getRegistration());
    spaceToCreate.setVisibility(space.getVisibility());
    spaceToCreate.setTemplateId(space.getTemplateId());
    spaceToCreate.setSovereign(space.isSovereign());
    spaceToCreate.setEditor(username);
    spaceToCreate.setMembers(new String[] { username });
    spaceToCreate.setManagers(new String[] { username });
    spaceToCreate.setUrl(Space.HOME_URL);

    SpaceTemplate spaceTemplate = getSpaceTemplateService().getSpaceTemplate(spaceToCreate.getTemplateId());
    if (spaceTemplate == null || !spaceTemplate.isEnabled() || spaceTemplate.isDeleted()) {
      throw new SpaceException(Code.UNKNOWN_SPACE_TEMPLATE);
    }
    copySpaceTemplateProperties(spaceToCreate, spaceTemplate, username, getUsersToInvite(identitiesToInvite));

    spaceLifeCycle.setCurrentEvent(Type.SPACE_CREATED);
    Space createdSpace;
    try {
      createdSpace = spaceStorage.saveSpace(spaceToCreate, parentSpaceId, true);
      space.setId(createdSpace.getId());
      spaceLifeCycle.spaceCreated(spaceToCreate, username);
    } catch (Exception e) {
      throw new SpaceException(Code.ERROR_DATASTORE,
                               String.format("Failed to save the space %s", spaceToCreate.getPrettyName()),
                               e);
    } finally {
      spaceLifeCycle.resetCurrentEvent(Type.SPACE_CREATED);
    }

    long bannerId = getSpaceTemplateService().getSpaceTemplateBannerId(spaceTemplate.getId());
    if (bannerId > 0) {
      duplicateBannerById(createdSpace, bannerId, username);
    }

    try {
      createdSpace.setEditor(username);
      inviteIdentities(createdSpace, identitiesToInvite);
    } catch (Exception e) {
      LOG.warn("Error inviting identities {} to space {}", identitiesToInvite, spaceToCreate.getDisplayName(), e);
    }
    return getSpaceById(createdSpace.getId());
  }

  @Override
  public void inviteIdentities(Space space, List<Identity> identitiesToInvite) {
    if (CollectionUtils.isEmpty(identitiesToInvite)) {
      return;
    }

    // Get a fresh instance in case changes made by listeners
    Space existingSpace = getSpaceById(space.getId());
    existingSpace.setEditor(space.getEditor());
    List<String> usernames = getUsersToInvite(identitiesToInvite);
    for (String username : usernames) {
      if (isMember(existingSpace, username)) {
        continue;
      }

      if (!isInvitedUser(existingSpace, username)) {
        addInvitedUser(existingSpace, username);
      }
    }
  }

  @Override
  public boolean isSpaceContainsExternals(Long spaceId) {
    return spaceStorage.countExternalMembers(spaceId) != 0;
  }

  @Override
  public Space createSpace(Space space) {
    if (ArrayUtils.isEmpty(space.getManagers()) && space.getEditor() == null) {
      throw new IllegalArgumentException("Can't Find Space editor username");
    }
    String username = space.getEditor() == null ? space.getManagers()[0] : space.getEditor();
    return createSpace(space, username);
  }

  @Override
  public void renameSpace(Space space, String newDisplayName) {
    spaceLifeCycle.setCurrentEvent(Type.SPACE_RENAMED);
    try {
      space.setDisplayName(newDisplayName);
      space.setPrettyName(buildPrettyName(newDisplayName));
      spaceStorage.renameSpace(space);
      spaceLifeCycle.spaceRenamed(space, space.getEditor());
    } finally {
      spaceLifeCycle.resetCurrentEvent(Type.SPACE_RENAMED);
    }
  }

  @Override
  public void renameSpace(Space space, String newDisplayName, String username) throws SpaceException {
    if (username == null || !canManageSpace(getSpaceById(space.getId()), username)) {
      throw new SpaceException(Code.UNAUTHORIZED_TO_RENAME_SPACE);
    }
    renameSpace(space, newDisplayName);
  }

  @Override
  public void deleteSpace(Space space) throws SpaceException {
    deleteSpace(space, true);
  }

  @Override
  @SneakyThrows
  public void deleteSpace(Space space, boolean deleteGroup) throws SpaceException {
    spaceLifeCycle.setCurrentEvent(Type.SPACE_REMOVED);
    try {
      List<GroupSpaceBinding> groupSpaceBindings = groupSpaceBindingStorage.findGroupSpaceBindingsBySpace(space.getId());
      groupSpaceBindings.stream().map(GroupSpaceBinding::getId).forEach(groupSpaceBindingStorage::deleteGroupBinding);

      // remove memberships of users with deleted space.
      removeMembershipFromGroup(space);

      Identity spaceIdentity = null;
      if (identityManager.identityExisted(SpaceIdentityProvider.NAME, space.getPrettyName())) {
        spaceIdentity = identityManager.getOrCreateSpaceIdentity(space.getPrettyName());
      }
      spaceStorage.deleteSpace(space.getId());
      if (spaceIdentity != null) {
        identityManager.hardDeleteIdentity(spaceIdentity);
      }

      if (deleteGroup) {
        GroupHandler groupHandler = getOrganizationService().getGroupHandler();
        Group spaceGroup = groupHandler.findGroupById(space.getGroupId());
        List<String> mandatories = userAcl.getMandatoryGroups();
        if (spaceGroup != null && !isMandatory(groupHandler, spaceGroup, mandatories)) {
          removeGroup(space);
        }
      }
      spaceLifeCycle.spaceRemoved(space, space.getEditor());
    } finally {
      spaceLifeCycle.resetCurrentEvent(Type.SPACE_REMOVED);
    }
  }

  @Override
  public void addMember(Space space, String username) {
    spaceLifeCycle.setCurrentEvent(Type.JOINED);
    try {
      String[] members = space.getMembers();
      space = this.removeInvited(space, username);
      space = this.removePending(space, username);
      if (!ArrayUtils.contains(members, username)) {
        members = ArrayUtils.add(members, username);
        space.setMembers(members);
        spaceStorage.saveSpace(space, false);
        // Add User to Group after adding member to space to not
        // invoke twice the membership change
        addUserToGroupWithMemberMembership(username, space.getGroupId());
        spaceLifeCycle.memberJoined(space, username);
      }
    } finally {
      spaceLifeCycle.resetCurrentEvent(Type.JOINED);
    }
  }

  @Override
  public void removeMember(Space space, String username) {
    if (groupSpaceBindingStorage.countUserBindings(space.getId(), username) > 0) {
      throw new IllegalStateException("space.cantLeaveBoundSpace");
    }
    if (isManager(space, username)) {
      setManager(space, username, false);
    }
    if (isManager(space, username)) {
      setManager(space, username, false);
    }
    if (isRedactor(space, username)) {
      removeRedactor(space, username);
    }
    if (isPublisher(space, username)) {
      removePublisher(space, username);
    }
    spaceLifeCycle.setCurrentEvent(Type.LEFT);
    try {
      Identity spaceIdentity = identityManager.getOrCreateSpaceIdentity(space.getPrettyName());
      if (spaceIdentity != null && spaceIdentity.isDeleted()) {
        return;
      }
      String[] members = space.getMembers();
      List<String> disabledMembers = identityManager.getDisabledSpaceMembers(Long.parseLong(space.getId()));
      if (disabledMembers != null && !disabledMembers.isEmpty()) {
        members = ArrayUtils.addAll(members, disabledMembers.toArray(String[]::new));
      }
      if (ArrayUtils.contains(members, username)) {
        removeUserFromGroupWithMemberMembership(username, space.getGroupId());
        members = ArrayUtils.removeAllOccurrences(members, username);
        space.setMembers(members);
        spaceStorage.saveSpace(space, false);
        setManager(space, username, false);
        removeRedactor(space, username);
        removeUserFromGroupWithAnyMembership(username, space.getGroupId());
        spaceLifeCycle.memberLeft(space, username);
      }
    } finally {
      spaceLifeCycle.resetCurrentEvent(Type.LEFT);
    }
  }

  @Override
  public boolean isMember(Space space, String username) {
    return space != null && ArrayUtils.contains(space.getMembers(), username);
  }

  @Override
  public boolean isIgnored(Space space, String username) {
    return space != null && spaceStorage.isSpaceIgnored(space.getId(), username);
  }

  @Override
  public void setIgnored(String spaceId, String username) {
    spaceLifeCycle.setCurrentEvent(Type.DENY_INVITED_USER);
    try {
      spaceStorage.ignoreSpace(spaceId, username);
      spaceLifeCycle.removeInvitedUser(getSpaceById(spaceId), username);
    } finally {
      spaceLifeCycle.resetCurrentEvent(Type.DENY_INVITED_USER);
    }
  }

  @Override
  public void registerSpaceLifeCycleListener(SpaceLifeCycleListener listener) {
    spaceLifeCycle.addListener(listener);
  }

  @Override
  public void unregisterSpaceLifeCycleListener(SpaceLifeCycleListener listener) {
    spaceLifeCycle.removeListener(listener);
  }

  @Override
  public void addInvitedUser(Space space, String username) {
    if (ArrayUtils.contains(space.getMembers(), username)) {
      // user is already member. Do nothing
      return;
    }

    if (isPendingUser(space, username)) {
      removePending(space, username);
      addMember(space, username);
    } else {
      addInvited(space, username);
    }
    spaceStorage.saveSpace(space, false);
    spaceLifeCycle.addInvitedUser(space, username);
  }

  @Override
  public void addPendingUser(Space space, String username) {
    if (ArrayUtils.contains(space.getMembers(), username)) {
      // user is already member. Do nothing
      return;
    }

    if (ArrayUtils.contains(space.getPendingUsers(), username)) {
      // user is already pending. Do nothing
      return;
    }

    if (ArrayUtils.contains(space.getInvitedUsers(), username)) {
      addMember(space, username);
      removeInvited(space, username);
      spaceStorage.saveSpace(space, false);
      return;
    }

    String registration = space.getRegistration();
    String visibility = space.getVisibility();
    if (visibility.equals(Space.HIDDEN) && registration.equals(Space.CLOSED)) {
      LOG.warn("Unable request to join hidden");
      return;
    }
    if (registration.equals(Space.OPEN)) {
      addMember(space, username);
    } else if (registration.equals(Space.VALIDATION)) {
      spaceLifeCycle.setCurrentEvent(Type.ADD_PENDING_USER);
      try {
        addPending(space, username);
        spaceStorage.saveSpace(space, false);
        spaceLifeCycle.addPendingUser(space, username);
      } finally {
        spaceLifeCycle.resetCurrentEvent(Type.ADD_PENDING_USER);
      }
    } else {
      LOG.warn("Unable request to join");
    }
  }

  @Override
  public boolean hasSettingPermission(Space space, String username) {
    return canManageSpace(space, username);
  }

  @Override
  public boolean canDeleteSpace(Space space, String username) {
    return hasSpacePermission(space,
                              space.getDeletePermissions(),
                              username);
  }

  @Override
  public boolean canAccessSpacePublicSite(Space space, String username) {
    if (space == null
        || space.getPublicSiteId() == 0
        || StringUtils.isBlank(space.getPublicSiteVisibility())) {
      return false;
    } else if (StringUtils.equals(space.getPublicSiteVisibility(), EVERYONE)) {
      return true;
    } else if (userAcl.isAnonymousUser(username)) {
      return false;
    } else if (StringUtils.equals(space.getPublicSiteVisibility(), AUTHENTICATED)) {
      return true;
    } else if (StringUtils.equals(space.getPublicSiteVisibility(), INTERNAL)) {
      return userAcl.getUserIdentity(username).isMemberOf(PLATFORM_USERS_GROUP);
    } else if (StringUtils.equals(space.getPublicSiteVisibility(), MEMBER)) {
      return canViewSpace(space, username);
    } else if (StringUtils.equals(space.getPublicSiteVisibility(), MANAGER)) {
      return canManageSpace(space, username);
    }
    return false;
  }

  @Override
  public boolean canManageSpace(Space space, String username) {
    if (username == null || space == null) {
      return false;
    } else if (isMember(space, username) && isManager(space, username)) {
      return true;
    } else {
      return isSuperManager(space, username);
    }
  }

  @Override
  public boolean isInvitedUser(Space space, String username) {
    return space != null && ArrayUtils.contains(space.getInvitedUsers(), username);
  }

  @Override
  public boolean isManager(Space space, String username) {
    return space != null && ArrayUtils.contains(space.getManagers(), username);
  }

  @Override
  public boolean isRedactor(Space space, String username) {
    return space != null && ArrayUtils.contains(space.getRedactors(), username);
  }

  @Override
  public boolean isPublisher(Space space, String username) {
    return space != null && ArrayUtils.contains(space.getPublishers(), username);
  }

  @Override
  public boolean hasRedactor(Space space) {
    return space != null && space.getRedactors() != null && space.getRedactors().length > 0;
  }

  @Override
  public boolean isOnlyManager(Space space, String username) {
    return space.getManagers() != null
           && space.getManagers().length == 1
           && StringUtils.equals(space.getManagers()[0], username);
  }

  @Override
  public boolean isPendingUser(Space space, String username) {
    return ArrayUtils.contains(space.getPendingUsers(), username);
  }

  @Override
  public void registerSpaceListenerPlugin(SpaceListenerPlugin spaceListenerPlugin) {
    spaceLifeCycle.addListener(spaceListenerPlugin);
  }

  @Override
  public void removeInvitedUser(Space space, String username) {
    if (ArrayUtils.contains(space.getInvitedUsers(), username)) {
      spaceLifeCycle.setCurrentEvent(Type.DENY_INVITED_USER);
      try {
        space = removeInvited(space, username);
        spaceStorage.saveSpace(space, false);
        spaceLifeCycle.removeInvitedUser(space, username);
      } finally {
        spaceLifeCycle.resetCurrentEvent(Type.DENY_INVITED_USER);
      }
    }
  }

  @Override
  public void removePendingUser(Space space, String username) {
    if (ArrayUtils.contains(space.getPendingUsers(), username)) {
      removePending(space, username);
      spaceStorage.saveSpace(space, false);
      spaceLifeCycle.removePendingUser(space, username);
    }
  }

  @Override
  public void addRedactor(Space space, String username) {
    String[] redactors = space.getRedactors();
    if (!ArrayUtils.contains(redactors, username)) {
      spaceLifeCycle.setCurrentEvent(Type.ADD_REDACTOR_USER);
      try {
        redactors = ArrayUtils.add(redactors, username);
        space.setRedactors(redactors);
        spaceStorage.saveSpace(space, false);
        // Add User to Group after adding member to space to not
        // invoke twice the membership change
        addUserToGroupWithRedactorMembership(username, space.getGroupId());
        spaceLifeCycle.addRedactorUser(space, username);
      } finally {
        spaceLifeCycle.resetCurrentEvent(Type.ADD_REDACTOR_USER);
      }
    }
  }

  @Override
  public void removeRedactor(Space space, String username) {
    String[] redactors = space.getRedactors();
    if (ArrayUtils.contains(redactors, username)) {
      spaceLifeCycle.setCurrentEvent(Type.REMOVE_REDACTOR_USER);
      try {
        redactors = ArrayUtils.removeAllOccurrences(redactors, username);
        space.setRedactors(redactors);
        spaceStorage.saveSpace(space, false);
        removeUserFromGroupWithRedactorMembership(username, space.getGroupId());
        spaceLifeCycle.removeRedactorUser(space, username);
      } finally {
        spaceLifeCycle.resetCurrentEvent(Type.REMOVE_REDACTOR_USER);
      }
    }
  }

  @Override
  public void addPublisher(Space space, String username) {
    String[] publishers = space.getPublishers();
    if (!ArrayUtils.contains(publishers, username)) {
      spaceLifeCycle.setCurrentEvent(Type.ADD_PUBLISHER_USER);
      try {
        publishers = ArrayUtils.add(publishers, username);
        space.setPublishers(publishers);
        spaceStorage.saveSpace(space, false);
        // Add User to Group after adding member to space to not
        // invoke twice the membership change
        addUserToGroupWithPublisherMembership(username, space.getGroupId());
        spaceLifeCycle.addPublisherUser(space, username);
      } finally {
        spaceLifeCycle.resetCurrentEvent(Type.ADD_PUBLISHER_USER);
      }
    }
  }

  @Override
  public void removePublisher(Space space, String username) {
    String[] publishers = space.getPublishers();
    if (ArrayUtils.contains(publishers, username)) {
      spaceLifeCycle.setCurrentEvent(Type.REMOVE_PUBLISHER_USER);
      try {
        publishers = ArrayUtils.removeAllOccurrences(publishers, username);
        space.setPublishers(publishers);
        spaceStorage.saveSpace(space, false);
        removeUserFromGroupWithPublisherMembership(username, space.getGroupId());
        spaceLifeCycle.removePublisherUser(space, username);
      } finally {
        spaceLifeCycle.resetCurrentEvent(Type.REMOVE_PUBLISHER_USER);
      }
    }
  }

  @Override
  public void setManager(Space space, String username, boolean isManager) {
    String[] managers = space.getManagers();
    if (isManager) {
      if (!ArrayUtils.contains(managers, username)) {
        spaceLifeCycle.setCurrentEvent(Type.GRANTED_LEAD);
        try {
          managers = ArrayUtils.add(managers, username);
          space.setManagers(managers);
          spaceStorage.saveSpace(space, false);
          // Add User to Group after adding member to space to not
          // invoke twice the membership change
          addUserToGroupWithManagerMembership(username, space.getGroupId());
          spaceLifeCycle.grantedLead(space, username);
        } finally {
          spaceLifeCycle.resetCurrentEvent(Type.GRANTED_LEAD);
        }
      }
    } else {
      if (ArrayUtils.contains(managers, username)) {
        spaceLifeCycle.setCurrentEvent(Type.REVOKED_LEAD);
        try {
          removeUserFromGroupWithManagerMembership(username, space.getGroupId());
          managers = ArrayUtils.removeAllOccurrences(managers, username);
          space.setManagers(managers);
          spaceStorage.saveSpace(space, false);
          Space updatedSpace = getSpaceById(space.getId());
          if (isMember(updatedSpace, username)) {
            spaceLifeCycle.revokedLead(space, username);
          }
        } finally {
          spaceLifeCycle.resetCurrentEvent(Type.REVOKED_LEAD);
        }
      }
    }
  }

  @Override
  public void unregisterSpaceListenerPlugin(SpaceListenerPlugin spaceListenerPlugin) {
    spaceLifeCycle.removeListener(spaceListenerPlugin);
  }

  @Override
  public Space updateSpace(Space existingSpace) {
    return updateSpace(existingSpace, null);
  }

  @Override
  public Space updateSpace(Space space, List<Identity> identitiesToInvite) {
    Space storedSpace = spaceStorage.getSpaceById(space.getSpaceId());
    spaceStorage.saveSpace(space, false);
    triggerSpaceUpdate(space, storedSpace);

    inviteIdentities(space, identitiesToInvite);
    return getSpaceById(space.getId());
  }

  @Override
  public Space updateSpaceAvatar(Space existingSpace, String username) {
    existingSpace.setEditor(username);
    checkSpaceEditorPermissions(existingSpace);

    Identity spaceIdentity = identityManager.getOrCreateSpaceIdentity(existingSpace.getPrettyName());
    Profile profile = spaceIdentity.getProfile();
    if (existingSpace.getAvatarAttachment() != null) {
      profile.setProperty(Profile.AVATAR, existingSpace.getAvatarAttachment());
    } else {
      profile.removeProperty(Profile.AVATAR);
      profile.setAvatarUrl(null);
      profile.setAvatarLastUpdated(null);
    }
    identityManager.updateProfile(profile);
    spaceLifeCycle.spaceAvatarEdited(existingSpace, existingSpace.getEditor());

    existingSpace = spaceStorage.getSpaceById(existingSpace.getSpaceId());
    existingSpace.setAvatarLastUpdated(System.currentTimeMillis());
    spaceStorage.saveSpace(existingSpace, false);
    return existingSpace;
  }

  @Override
  public Space updateSpaceBanner(Space existingSpace, String username) {
    existingSpace.setEditor(username);
    checkSpaceEditorPermissions(existingSpace);

    Identity spaceIdentity = identityManager.getOrCreateSpaceIdentity(existingSpace.getPrettyName());
    if (spaceIdentity != null) {
      Profile profile = spaceIdentity.getProfile();
      if (existingSpace.getBannerAttachment() != null) {
        profile.setProperty(Profile.BANNER, existingSpace.getBannerAttachment());
      } else {
        profile.removeProperty(Profile.BANNER);
      }
      identityManager.updateProfile(profile);

      existingSpace = spaceStorage.getSpaceById(existingSpace.getSpaceId());
      existingSpace.setBannerLastUpdated(System.currentTimeMillis());
      spaceStorage.saveSpace(existingSpace, false);

      spaceLifeCycle.spaceBannerEdited(existingSpace, existingSpace.getEditor());
    } else {
      throw new IllegalStateException("Can not update space banner. Space identity " + existingSpace.getPrettyName() +
          " not found");
    }
    return existingSpace;
  }

  @Override
  public void updateSpaceAccessed(String remoteId, Space space) {
    if (isMember(space, remoteId)) {
      spaceStorage.updateSpaceAccessed(remoteId, space);
    }
  }

  @Override
  public List<SpaceExternalInvitation> findSpaceExternalInvitationsBySpaceId(String spaceId) {
    return spaceStorage.findSpaceExternalInvitationsBySpaceId(spaceId);
  }

  @Override
  public void saveSpaceExternalInvitation(String spaceId, String email, String tokenId) {
    spaceStorage.saveSpaceExternalInvitation(spaceId, email, tokenId);
  }

  @Override
  public SpaceExternalInvitation getSpaceExternalInvitationById(String invitationId) {
    return spaceStorage.findSpaceExternalInvitationById(invitationId);
  }

  @Override
  public List<Long> getSpaceCategoryIds() {
    return spaceStorage.getSpaceCategoryIds();
  }

  @Override
  public void deleteSpaceExternalInvitation(String invitationId) {
    SpaceExternalInvitation spaceExternalInvitation = spaceStorage.findSpaceExternalInvitationById(invitationId);
    spaceStorage.deleteSpaceExternalInvitation(spaceExternalInvitation);
    // Delete the token from store
    RemindPasswordTokenService remindPasswordTokenService = CommonsUtils.getService(RemindPasswordTokenService.class);
    if (remindPasswordTokenService != null) {
      remindPasswordTokenService.deleteToken(spaceExternalInvitation.getTokenId(),
                                             CookieTokenService.EXTERNAL_REGISTRATION_TOKEN);
    }
  }

  @Override
  public List<String> findExternalInvitationsSpacesByEmail(String email) {
    return spaceStorage.findExternalInvitationsSpacesByEmail(email);
  }

  @Override
  public void deleteExternalUserInvitations(String email) {
    spaceStorage.deleteExternalUserInvitations(email);
  }

  @Override
  public boolean isSuperManager(String username) {
    return userAcl.isAdministrator(userAcl.getUserIdentity(username));
  }

  @Override
  public boolean isSuperManager(Space space, String username) {
    if (space == null || space.getTemplateId() == 0) {
      return isSuperManager(username);
    } else {
      SpaceTemplate spaceTemplate = getSpaceTemplateService().getSpaceTemplate(space.getTemplateId());
      org.exoplatform.services.security.Identity userIdentity = userAcl.getUserIdentity(username);
      if (spaceTemplate == null || spaceTemplate.isDeleted()) {
        return isSuperManager(username);
      } else {
        return isSuperManager(username)
               || (CollectionUtils.isNotEmpty(spaceTemplate.getAdminPermissions())
                   && userIdentity != null
                   && spaceTemplate.getAdminPermissions()
                                   .stream()
                                   .anyMatch(permission -> userIdentity.isMemberOf(getMembershipEntry(permission))));
      }
    }
  }

  @Override
  public boolean canManageSpacePublicSite(Space space, String username) {
    return hasSpacePermission(space,
                              space.getPublicSitePermissions(),
                              username);
  }

  @Override
  public boolean canManageSpaceLayout(Space space, String username) {
    return hasSpacePermission(space,
                              space.getLayoutPermissions(),
                              username);
  }

  @Override
  public boolean isContentManager(String username) {
    if (userAcl.isAnonymousUser(username)) {
      return false;
    } else if (isSuperManager(username)) {
      return true;
    }
    org.exoplatform.services.security.Identity identity = userAcl.getUserIdentity(username);
    return identity != null && identity.isMemberOf(PLATFORM_PUBLISHER_GROUP, MANAGER);
  }

  @Override
  public boolean isContentPublisher(String username) {
    if (userAcl.isAnonymousUser(username)) {
      return false;
    } else if (isSuperManager(username)) {
      return true;
    }
    org.exoplatform.services.security.Identity identity = userAcl.getUserIdentity(username);
    return identity != null && identity.isMemberOf(PLATFORM_PUBLISHER_GROUP, PUBLISHER);
  }

  @Override
  public Map<Long, Long> countSpacesByTemplate() {
    return spaceStorage.countSpacesByTemplate();
  }

  @Override
  public String prepareSpaceInstance(SpaceCreationInstance spaceCreationInstance) {
    return cookieTokenService.createToken(JsonUtils.toJsonString(spaceCreationInstance), "SPACE_CREATION_INSTANCE");
  }

  public void addSpaceListener(SpaceListenerPlugin plugin) {
    registerSpaceLifeCycleListener(plugin);
  }

  @Override
  public String generateInvitationLink(Long spaceId, Long userIdentityId) throws Exception {
    Space space = getSpaceById(spaceId);
    if (space == null) {
        throw new ObjectNotFoundException("space not found");
    }

    String payload = "%s:%s:%s:%s".formatted(generateNonce(), spaceId, userIdentityId, generateNonce());
    String token = getCodec().encode(payload);
    String domain = CommonsUtils.getCurrentDomain();
    String encodedToken = URLEncoder.encode(token, StandardCharsets.UTF_8);
    return String.format("%s/portal/s/%d?invitation_id=%s", domain, spaceId, encodedToken);
  }

  @Override
  public void saveSpaceInvitationLink(String invitationToken, String username) throws ObjectNotFoundException {
    String payload;
    try {
      payload = getCodec().decode(invitationToken);
    } catch (Exception e) {
      throw new IllegalArgumentException("Invalid invitation token");
    }

    String[] parts = payload.split(":");
    if (parts.length != 4) {
      throw new IllegalArgumentException("Invalid invitation token format");
    }

    long spaceId;
    long inviterId;
    try {
      spaceId = Long.parseLong(parts[1]);
      inviterId = Long.parseLong(parts[2]);
    } catch (NumberFormatException e) {
      throw new IllegalArgumentException("Invalid invitation token content");
    }

    Space space = getSpaceById(spaceId);
    if (space == null) {
      throw new ObjectNotFoundException("Space not found");
    }

  getSpaceInvitationLinkStorage().saveInvitationLink(
      new SpaceInvitationLink(null, spaceId, identityManager.getIdentity(inviterId).getRemoteId(), username));
  }

  @Override
  public void removeSpaceInvitationLink(long spaceId, String username) {
    getSpaceInvitationLinkStorage().deleteInvitationLinkBySpaceAndUserAndType(spaceId, username);
	}

  @Override
  public SpaceInvitationLink getSpaceInvitationLink(long spaceId, String username) {
    return getSpaceInvitationLinkStorage().getInvitationLinkBySpaceAndUserAndType(spaceId, username);
  }

  @Override
  public void triggerUserJoinedByInvitationLink(Space space, String userId, String inviterId) {
    spaceLifeCycle.userJoinedByInvitationLink(space, userId, inviterId);
  }

  private String generateNonce() {
    SecureRandom secureRandom = getSecureRandomService().getSecureRandom();
    int maxLength = Math.max(invitationTokenNonceMaxLength, DEFAULT_MAX_NONCE_LENGTH);
    int randomLength = secureRandom.nextInt(maxLength - MIN_NONCE_LENGTH + 1) + MIN_NONCE_LENGTH;

    byte[] bytes = new byte[randomLength];
    secureRandom.nextBytes(bytes);
    return URL_ENCODER.encodeToString(bytes);
  }

  private SecureRandomService getSecureRandomService() {
    if(secureRandomService == null) {
      secureRandomService = CommonsUtils.getService(SecureRandomService.class);
    }
    return  secureRandomService;
  }

  private AbstractCodec getCodec() throws TokenServiceInitializationException {
    if (codecInitializer == null) {
      codecInitializer = CommonsUtils.getService(CodecInitializer.class);
    }
    return codecInitializer.getCodec();
  }

  private void copySpaceTemplateProperties(Space space,
                                           SpaceTemplate spaceTemplate,
                                           String username,
                                           List<String> invitees) throws SpaceException {
    setSpaceAccess(space, spaceTemplate);
    setSpaceDisplayName(space, invitees);
    setSpacePrettyName(space);

    // Creates the associated group to the space
    String groupId = createSpaceGroup(space, username);
    setDeletePermissions(space, spaceTemplate, groupId);
    setLayoutPermissions(space, spaceTemplate, groupId);
    setPublicSitePermissions(space, spaceTemplate, groupId);
    setSpaceDefaultRedactors(space, spaceTemplate, username, groupId);
  }

  private void setSpaceDefaultRedactors(Space space, SpaceTemplate spaceTemplate, String username, String groupId) {
    if (spaceTemplate.isSpaceAllowContentCreation()) {
      space.setRedactors(new String[] { username });
      addUserToGroupWithRedactorMembership(username, groupId);
    } else {
      space.setRedactors(new String[0]);
    }
  }

  private void setSpaceAccess(Space space, SpaceTemplate spaceTemplate) {
    if (!spaceTemplate.getSpaceFields().contains("access")) {
      if (StringUtils.isEmpty(space.getRegistration())) {
        space.setRegistration(spaceTemplate.getSpaceDefaultRegistration().name().toLowerCase());
      }
      if (StringUtils.isEmpty(space.getVisibility())) {
        space.setVisibility(spaceTemplate.getSpaceDefaultVisibility().name().toLowerCase());
      }
    }
  }

  private void setSpaceDisplayName(Space space, List<String> invitees) throws SpaceException {
    if (StringUtils.isBlank(space.getDisplayName())) {
      if (CollectionUtils.isNotEmpty(invitees)) {
        invitees = new ArrayList<>(invitees);
        invitees.removeAll(Arrays.asList(space.getMembers()));
      }
      String[] users = ArrayUtils.addAll(space.getMembers(),
                                         CollectionUtils.isEmpty(invitees) ? new String[0] :
                                                                           invitees.toArray(new String[invitees.size()]));
      List<String> userFullNames = Arrays.stream(users)
                                         .limit(2)
                                         .map(u -> {
                                           Profile profile = identityManager.getOrCreateUserIdentity(u).getProfile();
                                           String firstName = (String) profile.getProperty(Profile.FIRST_NAME);
                                           String lastName = (String) profile.getProperty(Profile.LAST_NAME);
                                           String fullName = profile.getFullName();
                                           return StringUtils.firstNonBlank(firstName, lastName, fullName);
                                         })
                                         .toList();
      String displayName = StringUtils.join(userFullNames, ", ");
      if (users.length > 2) {
        String moreLabel = resourceBundleService.getSharedString("space.name.more",
                                                                 localeConfigService.getDefaultLocaleConfig().getLocale());
        displayName +=
                    " " + StringUtils.firstNonBlank(moreLabel, "and {0} more").replace("{0}", String.valueOf(users.length - 2));
        if (displayName.length() > MAX_SPACE_NAME_LENGTH) {
          displayName = displayName.substring(0, MAX_SPACE_NAME_LENGTH);
        }
      }
      space.setDisplayName(displayName);
    } else if (space.getDisplayName() == null
               || space.getDisplayName().length() < 3
               || space.getDisplayName().length() > MAX_SPACE_NAME_LENGTH) {
      throw new SpaceException(Code.INVALID_SPACE_NAME);
    }
  }

  private void setSpacePrettyName(Space space) {
    space.setPrettyName(buildPrettyName(space.getPrettyName(), space.getDisplayName()));
  }

  private String createSpaceGroup(Space space, String username) throws SpaceException {
    String groupId = createGroup(space.getDisplayName(), space.getPrettyName(), username);
    space.setGroupId(groupId);
    space.setPrettyName(groupId.replace("/spaces/", ""));
    return groupId;
  }

  private void setLayoutPermissions(Space space, SpaceTemplate spaceTemplate, String groupId) {
    setPermissionsFromTemplate(spaceTemplate::getSpaceLayoutPermissions,
                               space::setLayoutPermissions,
                               groupId);
  }

  private void setPublicSitePermissions(Space space, SpaceTemplate spaceTemplate, String groupId) {
    setPermissionsFromTemplate(spaceTemplate::getSpacePublicSitePermissions,
                               space::setPublicSitePermissions,
                               groupId);
  }

  public static void setDeletePermissions(Space space, SpaceTemplate spaceTemplate, String groupId) {
    setPermissionsFromTemplate(spaceTemplate::getSpaceDeletePermissions,
                               space::setDeletePermissions,
                               groupId);
  }

  private String checkSpaceEditorPermissions(Space space) {
    String editor = space.getEditor();
    if (StringUtils.isBlank(editor) || !canManageSpace(space, editor)) {
      throw new IllegalStateException("User " + editor + " is not authorized to change space.");
    }
    return editor;
  }

  private boolean hasSpacePermission(Space space, List<String> permissions, String username) {
    if (space.getTemplateId() == 0 && CollectionUtils.isEmpty(permissions)) {
      return canManageSpace(space, username);
    } else if (CollectionUtils.isEmpty(permissions)) {
      return isSuperManager(space, username);
    } else {
      org.exoplatform.services.security.Identity userIdentity = userAcl.getUserIdentity(username);
      return isSuperManager(space, username)
             || (isMember(space, username)
                 && permissions.stream().anyMatch(permission -> userIdentity.isMemberOf(getMembershipEntry(permission))));
    }
  }

  private void triggerSpaceUpdate(Space newSpace, Space oldSpace) { // NOSONAR
    if (oldSpace != null) {
      if (StringUtils.isBlank(newSpace.getEditor())
          && ArrayUtils.isNotEmpty(oldSpace.getManagers())) {
        newSpace.setEditor(oldSpace.getManagers()[0]);
      }
      if (!StringUtils.equals(oldSpace.getDescription(), newSpace.getDescription())) {
        spaceLifeCycle.spaceDescriptionEdited(newSpace, newSpace.getEditor());
      }
      if (!oldSpace.getVisibility().equals(newSpace.getVisibility())) {
        spaceLifeCycle.spaceAccessEdited(newSpace, newSpace.getEditor());
      }
      if (oldSpace.isSovereign() != newSpace.isSovereign()) {
        spaceLifeCycle.spaceSovereigntyEdited(newSpace, newSpace.getEditor());
      }
      if (oldSpace.getTemplateId()!= newSpace.getTemplateId()) {
        spaceLifeCycle.spaceTemplateApplied(newSpace, newSpace.getEditor());
      }
      List<Long> categoryIds = oldSpace.getCategoryIds() == null ? Collections.emptyList() : oldSpace.getCategoryIds();
      List<Long> newCategoryIds = newSpace.getCategoryIds() == null ? Collections.emptyList() : newSpace.getCategoryIds();
      if (!CollectionUtils.isEqualCollection(categoryIds, newCategoryIds)) {
        List<Long> categoryIdsToAdd = new ArrayList<>(newCategoryIds);
        categoryIdsToAdd.removeAll(categoryIds);
        categoryIdsToAdd.forEach(categoryId -> spaceLifeCycle.spaceCategoryAdded(newSpace, newSpace.getEditor(), categoryId));

        List<Long> categoryIdsToRemove = new ArrayList<>(categoryIds);
        categoryIdsToRemove.removeAll(newCategoryIds);
        categoryIdsToRemove.forEach(categoryId -> spaceLifeCycle.spaceCategoryRemoved(newSpace,
                                                                                      newSpace.getEditor(),
                                                                                      categoryId));
      }
      if (oldSpace.getPublicSiteId() == 0 && newSpace.getPublicSiteId() != oldSpace.getPublicSiteId()) {
        spaceLifeCycle.spacePublicSiteCreated(newSpace, newSpace.getEditor());
      } else if (newSpace.getPublicSiteId() != oldSpace.getPublicSiteId()
                 || !StringUtils.equals(newSpace.getPublicSiteVisibility(), oldSpace.getPublicSiteVisibility())) {
        spaceLifeCycle.spacePublicSiteUpdated(newSpace, newSpace.getEditor());
      }
      String oldRegistration = oldSpace.getRegistration();
      String registration = newSpace.getRegistration();
      if ((oldRegistration == null && registration != null)
          || (oldRegistration != null && !oldRegistration.equals(registration))) {
        spaceLifeCycle.spaceRegistrationEdited(newSpace, newSpace.getEditor());
      }
    }
  }

  private List<String> getUsersToInvite(List<Identity> identities) {
    if (identities == null) {
      return Collections.emptyList();
    }
    return identities.stream()
                     .filter(identity -> identity != null
                                         && StringUtils.isNotBlank(identity.getRemoteId())
                                         && StringUtils.isNotBlank(identity.getProviderId()))
                     .map(identity -> identityManager.getOrCreateIdentity(identity.getProviderId(), identity.getRemoteId()))
                     .filter(Objects::nonNull)
                     .flatMap(identity -> {
                       if (identity.isSpace()) {
                         Space space = getSpaceByPrettyName(identity.getRemoteId());
                         if (space != null) {
                           return Arrays.stream(space.getMembers());
                         } else {
                           return Stream.empty();
                         }
                       } else if (identity.isUser()) { // Otherwise, it's an
                                                       // user
                         return Stream.of(identity.getRemoteId());
                       } else {
                         return Stream.empty();
                       }
                     })
                     .distinct()
                     .toList();
  }

  @SneakyThrows
  private boolean isMandatory(GroupHandler groupHandler, Group group, List<String> mandatories) {
    if (mandatories.contains(group.getId()))
      return true;
    Collection<Group> children = groupHandler.findGroups(group);
    for (Group g : children) {
      if (isMandatory(groupHandler, g, mandatories))
        return true;
    }
    return false;
  }

  @SneakyThrows
  private void duplicateBannerById(Space space, long bannerId, String username) {
    FileItem file = fileService.getFile(bannerId);
    BannerAttachment attachment = new BannerAttachment(null,
                                                       file.getFileInfo().getName(),
                                                       file.getFileInfo().getMimetype(),
                                                       file.getAsStream(),
                                                       System.currentTimeMillis());
    space.setBannerAttachment(attachment);
    updateSpaceBanner(space, username);
  }

  private Space addPending(Space space, String username) {
    String[] pendingUsers = space.getPendingUsers();
    if (!ArrayUtils.contains(pendingUsers, username)) {
      pendingUsers = ArrayUtils.add(pendingUsers, username);
      space.setPendingUsers(pendingUsers);
    }
    return space;
  }

  private Space removePending(Space space, String username) {
    String[] pendingUsers = space.getPendingUsers();
    if (ArrayUtils.contains(pendingUsers, username)) {
      pendingUsers = ArrayUtils.removeAllOccurrences(pendingUsers, username);
      space.setPendingUsers(pendingUsers);
    }
    return space;
  }

  private Space addInvited(Space space, String username) {
    String[] invitedUsers = space.getInvitedUsers();
    if (!ArrayUtils.contains(invitedUsers, username)) {
      invitedUsers = ArrayUtils.add(invitedUsers, username);
      space.setInvitedUsers(invitedUsers);
    }
    return space;
  }

  private MembershipEntry getMembershipEntry(String expression) {
    return expression.contains(":") ? MembershipEntry.parse(expression) : new MembershipEntry(expression);
  }

  private Space removeInvited(Space space, String username) {
    String[] invitedUsers = space.getInvitedUsers();
    if (ArrayUtils.contains(invitedUsers, username)) {
      invitedUsers = ArrayUtils.removeAllOccurrences(invitedUsers, username);
      space.setInvitedUsers(invitedUsers);
    }
    return space;
  }

  private OrganizationService getOrganizationService() {
    if (organizationService == null) {
      organizationService = ExoContainerContext.getService(OrganizationService.class);
    }
    return organizationService;
  }

  private SpaceTemplateService getSpaceTemplateService() {
    if (spaceTemplateService == null) {
      spaceTemplateService = ExoContainerContext.getService(SpaceTemplateService.class);
    }
    return spaceTemplateService;
  }

  private SpaceInvitationLinkStorage getSpaceInvitationLinkStorage() {
    if (spaceInvitationLinkStorage == null) {
      spaceInvitationLinkStorage = ExoContainerContext.getService(SpaceInvitationLinkStorage.class);
    }
    return spaceInvitationLinkStorage;
  }

  private String buildPrettyName(String... names) {
    return Arrays.stream(names)
            .filter(StringUtils::isNotBlank)
            .map(displayName -> {
              String name = Utils.cleanString(displayName);
              int index = 0;
              while (getSpaceByPrettyName(name) != null) {
                // Use the same algorithm to compute new pretty name as for
                // creation
                // used in SpaceUtils.buildGroupId
                name = Utils.cleanString(displayName + " " + ++index);
              }
              return name;
            })
            .findFirst()
            .orElseThrow();
  }

  @SneakyThrows
  private void checkSubspaceCreationAllowed(Space space, long parentSpaceId, String username) {
    if (parentSpaceId <= 0) {
      return;
    }
    Space parentSpace = getSpaceById(parentSpaceId);
    if (!isMember(parentSpace, username) && !isSuperManager(parentSpace, username)) {
      throw new SpaceException(Code.SUBSPACES_PERMISSIONS,
                               String.format("User %s isn't allowed to create subspace under parent space with id %s",
                                             username,
                                             parentSpaceId));
    }
    SpaceTemplate parentTemplate = spaceTemplateService.getSpaceTemplate(parentSpace.getTemplateId());
    if (parentTemplate == null) {
      throw new SpaceException(Code.UNKNOWN_SPACE_TEMPLATE,
                               String.format("Unknown parent space template for space %s", parentSpace.getDisplayName()));
    }

    Integer subspacesMaxLimit = parentTemplate.getSubspacesMaxLimit();

    SpaceFilter spaceFilter = new SpaceFilter();
    spaceFilter.setParentSpaceId(parentSpaceId);
    ListAccess<Space> existingSubspacesAccess = getAllSpacesByFilter(spaceFilter);
    int subspacesCount = getListAccessSpaceSize(existingSubspacesAccess, "Failed to load subspaces count for parent %s".formatted(parentSpaceId));
    if (subspacesMaxLimit != null && subspacesMaxLimit != 0 && subspacesCount >= subspacesMaxLimit) {
      throw new SpaceException(Code.SUBSPACES_LIMIT_REACHED,
                               String.format("Cannot create more subspaces under '%s' (max %d reached)",
                                             parentSpace.getDisplayName(),
                                             subspacesMaxLimit));
    }

    List<String> allowedSubspaceTemplates = parentTemplate.getAllowedSubspaceTemplates();

    if (allowedSubspaceTemplates == null || allowedSubspaceTemplates.isEmpty()) {
      return;
    }

    long templateId = space.getTemplateId();
    String matchedRule =
                       allowedSubspaceTemplates.stream()
                                               .filter(rule -> rule != null && rule.startsWith(templateId + ":")
                                                   && rule.split(":").length == 2)
                                               .findFirst()
                                               .orElseThrow(() -> new SpaceException(Code.SPACE_PERMISSION,
                                                                                     "Subspace template '%s' is not allowed under parent template '%s'".formatted(templateId,
                                                                                                                                                                  parentTemplate.getId())));

    String[] parts = matchedRule.split(":");
    int templateMaxLimit;
    try {
      templateMaxLimit = Integer.parseInt(parts[1]);
    } catch (NumberFormatException e) {
      throw new SpaceException(Code.ERROR_DATASTORE,
                               String.format("Invalid allowedSubspaceTemplates format: %s", matchedRule),
                               e);
    }

    spaceFilter.setTemplateIds(List.of(templateId));
    ListAccess<Space> existingSubspacesAccessByTemplateId = getAllSpacesByFilter(spaceFilter);

    int countForTemplate = existingSubspacesAccessByTemplateId.getSize();

    if (templateMaxLimit != 0 && templateMaxLimit <= countForTemplate) {
      throw new SpaceException(Code.SUBSPACES_LIMIT_REACHED,
                               String.format("Cannot create more subspaces of template '%s' (max %d reached under '%s')",
                                             templateId,
                                             templateMaxLimit,
                                             parentSpace.getDisplayName()));
    }
  }

  @SneakyThrows
  private long resolveParentSpaceId(long templateId, long parentSpaceId, String username) {
    if (parentSpaceId > 0) {
      return parentSpaceId;
    }
    List<Long> parentSpaceTemplateIds = getSpaceTemplateService().getParentSpaceTemplateIds(List.of(templateId), username);
    if (parentSpaceTemplateIds.isEmpty()) {
      return parentSpaceId;
    }
    SpaceFilter spaceFilter = new SpaceFilter();
    spaceFilter.setTemplateIds(parentSpaceTemplateIds);
    ListAccess<Space> existingParentSpacesAccess = getAccessibleSpacesByFilter(username, spaceFilter);
    int parentSpacesCount = getListAccessSpaceSize(existingParentSpacesAccess,
                                                   "Failed to load spaces count for template %s".formatted(templateId));
    if (parentSpacesCount == 0) {
      throw new SpaceException(Code.SUBSPACES_PERMISSIONS,
                               String.format("User %s isn't allowed to create subspace, you need to be member of a parent space first",
                                             username));
    }
    if (parentSpacesCount == 1) {
      parentSpaceId = existingParentSpacesAccess.load(0, 1)[0].getSpaceId();
    }
    if (parentSpacesCount > 1) {
      throw new IllegalArgumentException("Template %s is a subspace template and a parent space must be selected".formatted(templateId));
    }
    return parentSpaceId;
  }

  private int getListAccessSpaceSize(ListAccess<Space> access, String errorMessage) throws SpaceException {
    try {
      return access.getSize();
    } catch (Exception e) {
      throw new SpaceException(Code.ERROR_DATASTORE, errorMessage, e);
    }
  }
}
