/*
    * MIT License
    *
    * Copyright (c) 2010-2022 The Waffle Project Contributors: https://github.com/Waffle/waffle/graphs/contributors
    *
    * Permission is hereby granted, free of charge, to any person obtaining a copy
    * of this software and associated documentation files (the "Software"), to deal
    * in the Software without restriction, including without limitation the rights
    * to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
   * copies of the Software, and to permit persons to whom the Software is
   * furnished to do so, subject to the following conditions:
   *
   * The above copyright notice and this permission notice shall be included in all
   * copies or substantial portions of the Software.
   *
   * THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
   * IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
   * FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
   * AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
   * LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
   * OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
   * SOFTWARE.
   */
  package waffle.servlet;
  
  import java.lang.reflect.Field;
  import java.util.Collections;
  import java.util.Enumeration;
  
  import javax.servlet.FilterChain;
  import javax.servlet.FilterConfig;
  import javax.servlet.http.HttpServletRequest;
  import javax.servlet.http.HttpServletResponse;
  
  import mockit.Expectations;
  import mockit.Mocked;
  import mockit.Tested;
  import mockit.Verifications;
  
  import org.junit.jupiter.api.Assertions;
  import org.junit.jupiter.api.Test;
  
  import waffle.util.CorsPreFlightCheck;
  
  /**
   * Negotiate Security Filter Test.
   */
  class NegotiateSecurityFilterTest {
  
      /** The negotiate security filter. */
      @Tested
      private NegotiateSecurityFilter negotiateSecurityFilter;
  
      /** The init parameter names. */
      private final Enumeration<String> initParameterNames = Collections.enumeration(new java.util.ArrayList<String>() {
  
          /** The Constant serialVersionUID. */
          private static final long serialVersionUID = 1L;
  
          {
              this.add("principalFormat");
              this.add("principalFormat");
              this.add("roleFormat");
              this.add("allowGuestLogin");
              this.add("impersonate");
              this.add("securityFilterProviders");
              this.add("excludePatterns");
              this.add("excludeCorsPreflight");
              this.add("excludeBearerAuthorization");
          }
      });
  
      /**
       * Test cors and bearer authorization I init.
       *
       * @param filterConfig
       *            the filter config
       *
       * @throws Exception
       *             the exception
       */
      @Test
      void testCorsAndBearerAuthorizationI_init(@Mocked final FilterConfig filterConfig) throws Exception {
          this.getClass().getClassLoader().getResource("logback.xml");
  
          new Expectations() {
              {
                  filterConfig.getInitParameterNames();
                  this.result = NegotiateSecurityFilterTest.this.initParameterNames;
                  filterConfig.getInitParameter("principalFormat");
                  this.result = "fqn";
                  filterConfig.getInitParameter("roleFormat");
                  this.result = "fqn";
                  filterConfig.getInitParameter("allowGuestLogin");
                  this.result = "false";
                  filterConfig.getInitParameter("impersonate");
                  this.result = "true";
                  filterConfig.getInitParameter("securityFilterProviders");
                  this.result = "waffle.servlet.spi.BasicSecurityFilterProvider\nwaffle.servlet.spi.NegotiateSecurityFilterProvider";
                 filterConfig.getInitParameter("excludePatterns");
                 this.result = ".*/peter/.*";
                 filterConfig.getInitParameter("excludeCorsPreflight");
                 this.result = "true";
                 filterConfig.getInitParameter("excludeBearerAuthorization");
                 this.result = "true";
             }
         };
 
         this.negotiateSecurityFilter.init(filterConfig);
 
         final Field excludeCorsPreflight = this.negotiateSecurityFilter.getClass()
                 .getDeclaredField("excludeCorsPreflight");
         final Field excludeBearerAuthorization = this.negotiateSecurityFilter.getClass()
                 .getDeclaredField("excludeBearerAuthorization");
         excludeCorsPreflight.setAccessible(true);
         excludeBearerAuthorization.setAccessible(true);
         Assertions.assertTrue(excludeCorsPreflight.getBoolean(this.negotiateSecurityFilter));
         Assertions.assertTrue(excludeBearerAuthorization.getBoolean(this.negotiateSecurityFilter));
         Assertions.assertTrue(this.negotiateSecurityFilter.isImpersonate());
         Assertions.assertFalse(this.negotiateSecurityFilter.isAllowGuestLogin());
 
         new Verifications() {
             {
                 filterConfig.getInitParameter(this.withInstanceOf(String.class));
                 this.minTimes = 8;
             }
         };
 
     }
 
     /**
      * Test exclude cors and OAUTH bearer authorization do filter.
      *
      * @param request
      *            the request
      * @param response
      *            the response
      * @param chain
      *            the chain
      * @param filterConfig
      *            the filter config
      *
      * @throws Exception
      *             the exception
      */
     @Test
     void testExcludeCorsAndOAUTHBearerAuthorization_doFilter(@Mocked final HttpServletRequest request,
             @Mocked final HttpServletResponse response, @Mocked final FilterChain chain,
             @Mocked final FilterConfig filterConfig) throws Exception {
         this.getClass().getClassLoader().getResource("logback.xml");
 
         new Expectations() {
             {
                 filterConfig.getInitParameterNames();
                 this.result = NegotiateSecurityFilterTest.this.initParameterNames;
                 filterConfig.getInitParameter("principalFormat");
                 this.result = "fqn";
                 filterConfig.getInitParameter("roleFormat");
                 this.result = "fqn";
                 filterConfig.getInitParameter("allowGuestLogin");
                 this.result = "false";
                 filterConfig.getInitParameter("impersonate");
                 this.result = "false";
                 filterConfig.getInitParameter("securityFilterProviders");
                 this.result = "waffle.servlet.spi.BasicSecurityFilterProvider\nwaffle.servlet.spi.NegotiateSecurityFilterProvider";
                 filterConfig.getInitParameter("excludePatterns");
                 this.result = ".*/peter/.*";
                 filterConfig.getInitParameter("excludeCorsPreflight");
                 this.result = "true";
                 filterConfig.getInitParameter("excludeBearerAuthorization");
                 this.result = "true";
                 CorsPreFlightCheck.isPreflight(request);
                 this.result = true;
                 request.getHeader("Authorization");
                 this.result = "Bearer aBase64hash";
             }
         };
 
         this.negotiateSecurityFilter.init(filterConfig);
         this.negotiateSecurityFilter.doFilter(request, response, chain);
 
         new Verifications() {
             {
                 chain.doFilter(request, response);
                 this.times = 1;
             }
         };
 
     }
 
 }