/*
 * Copyright (c) 2018 Oracle and/or its affiliates. All rights reserved.
 *
 * Licensed under the Apache License, Version 2.0 (the "License");
 * you may not use this file except in compliance with the License.
 * You may obtain a copy of the License at
 *
 *     http://www.apache.org/licenses/LICENSE-2.0
 *
 * Unless required by applicable law or agreed to in writing, software
 * distributed under the License is distributed on an "AS IS" BASIS,
 * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
 * See the License for the specific language governing permissions and
 * limitations under the License.
 */
package io.helidon.security.provider.httpauth;

import java.io.IOException;
import java.net.URI;
import java.nio.charset.StandardCharsets;
import java.util.Base64;
import java.util.Optional;

import javax.ws.rs.client.ClientRequestContext;
import javax.ws.rs.core.MultivaluedHashMap;
import javax.ws.rs.core.MultivaluedMap;

import io.helidon.common.CollectionsHelper;
import io.helidon.security.Security;
import io.helidon.security.SecurityContext;
import io.helidon.security.jersey.ClientSecurityFeature;
import io.helidon.security.jersey.ClientSecurityFilter;

import org.junit.jupiter.api.Test;

import static org.hamcrest.CoreMatchers.endsWith;
import static org.hamcrest.CoreMatchers.notNullValue;
import static org.hamcrest.CoreMatchers.startsWith;
import static org.hamcrest.MatcherAssert.assertThat;
import static org.mockito.Mockito.mock;
import static org.mockito.Mockito.when;

/**
 * TODO javadoc.
 */
public class BasicAuthOutboundOverrideTest {
    @Test
    void testSecureClientOverride() throws IOException {
        String user = "jack";
        String password = "password";
        String base64Encoded = Base64.getEncoder().encodeToString((user + ":" + password).getBytes(StandardCharsets.UTF_8));

        Security security = Security.builder()
                .addProvider(HttpBasicAuthProvider.builder()
                                     .userStore(login -> Optional.empty())
                                     .build(), "http-basic-auth")
                .build();
        SecurityContext context = security.createContext(getClass().getName() + ".testSecureClientOverride()");

        MultivaluedMap<String, Object> jerseyHeaders = new MultivaluedHashMap<>();

        ClientRequestContext requestContext = mock(ClientRequestContext.class);

        when(requestContext.getProperty(ClientSecurityFeature.PROPERTY_CONTEXT)).thenReturn(context);
        when(requestContext.getProperty(ClientSecurityFeature.PROPERTY_PROVIDER)).thenReturn("http-basic-auth");
        when(requestContext.getProperty(HttpBasicAuthProvider.EP_PROPERTY_OUTBOUND_USER)).thenReturn(user);
        when(requestContext.getProperty(HttpBasicAuthProvider.EP_PROPERTY_OUTBOUND_PASSWORD)).thenReturn(password);
        when(requestContext.getUri()).thenReturn(URI.create("http://localhost:7070/test"));
        when(requestContext.getStringHeaders()).thenReturn(new MultivaluedHashMap<>());
        when(requestContext.getHeaders()).thenReturn(jerseyHeaders);
        when(requestContext.getPropertyNames()).thenReturn(CollectionsHelper.listOf(
                ClientSecurityFeature.PROPERTY_CONTEXT,
                ClientSecurityFeature.PROPERTY_PROVIDER,
                HttpBasicAuthProvider.EP_PROPERTY_OUTBOUND_USER,
                HttpBasicAuthProvider.EP_PROPERTY_OUTBOUND_PASSWORD
        ));

        ClientSecurityFilter csf = new ClientSecurityFilter();
        csf.filter(requestContext);

        assertThat(jerseyHeaders.getFirst("Authorization"), notNullValue());
        assertThat(jerseyHeaders.getFirst("Authorization").toString().toLowerCase(), startsWith("basic "));
        assertThat(jerseyHeaders.getFirst("Authorization").toString(), endsWith(base64Encoded));

    }
}
