/**
 * Licensed to the Apache Software Foundation (ASF) under one
 * or more contributor license agreements.  See the NOTICE file
 * distributed with this work for additional information
 * regarding copyright ownership.  The ASF licenses this file
 * to you under the Apache License, Version 2.0 (the
 * "License"); you may not use this file except in compliance
 * with the License.  You may obtain a copy of the License at
 *
 * http://www.apache.org/licenses/LICENSE-2.0
 *
 * Unless required by applicable law or agreed to in writing, software
 * distributed under the License is distributed on an "AS IS" BASIS,
 * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
 * See the License for the specific language governing permissions and
 * limitations under the License.
 */

package org.apache.ambari.server.topology;

import static org.easymock.EasyMock.capture;
import static org.junit.Assert.assertTrue;

import java.util.HashMap;
import java.util.Map;

import org.apache.ambari.server.orm.dao.KerberosDescriptorDAO;
import org.apache.ambari.server.orm.entities.KerberosDescriptorEntity;
import org.apache.ambari.server.state.SecurityType;
import org.easymock.Capture;
import org.easymock.EasyMock;
import org.easymock.EasyMockRule;
import org.easymock.EasyMockSupport;
import org.easymock.Mock;
import org.easymock.MockType;
import org.junit.Assert;
import org.junit.Before;
import org.junit.Rule;
import org.junit.Test;

import com.google.gson.Gson;

public class SecurityConfigurationFactoryTest {
  private static final String TEST_KERBEROS_DESCRIPTOR_REFERENCE = "test-kd-reference";
  private static final String TEST_KERBEROS_DESCRIPTOR_JSON = "{\"test\":\"test json\"}";

  @Rule
  public EasyMockRule mocks = new EasyMockRule(this);

  @Mock(type = MockType.STRICT)
  private KerberosDescriptorDAO kerberosDescriptorDAO;

  private SecurityConfigurationFactory testSubject;

  @Before
  public void before() {
    testSubject = new SecurityConfigurationFactory(new Gson(), kerberosDescriptorDAO, new KerberosDescriptorFactory());
    EasyMockSupport.injectMocks(testSubject);
  }


  @Test
  public void testShouldLoadKerberosDescriptorWhenKDReferenceFoundInRequest() throws Exception {

    EasyMock.expect(kerberosDescriptorDAO.findByName(TEST_KERBEROS_DESCRIPTOR_REFERENCE)).andReturn(testKDEntity());

    Map<String, Object> reuqestMap = new HashMap<>();
    Map<String, Object> security = new HashMap<>();
    security.put(SecurityConfigurationFactory.TYPE_PROPERTY_ID, SecurityType.KERBEROS.toString());
    security.put(SecurityConfigurationFactory.KERBEROS_DESCRIPTOR_REFERENCE_PROPERTY_ID, TEST_KERBEROS_DESCRIPTOR_REFERENCE);
    reuqestMap.put(SecurityConfigurationFactory.SECURITY_PROPERTY_ID, security);

    EasyMock.replay(kerberosDescriptorDAO);
    SecurityConfiguration securityConfiguration = testSubject.createSecurityConfigurationFromRequest(reuqestMap, false);

    EasyMock.verify(kerberosDescriptorDAO);
    assertTrue(securityConfiguration.getType() == SecurityType.KERBEROS);
  }

  @Test
  public void testShouldPersistKDWhenKDFoundInRequest() throws Exception {
    // GIVEN
    Capture<KerberosDescriptorEntity> kdEntityCaptor = EasyMock.newCapture();
    kerberosDescriptorDAO.create(capture(kdEntityCaptor));
    EasyMock.replay(kerberosDescriptorDAO);

    Map<String, Object> reuqestMap = new HashMap<>();
    Map<String, Object> security = new HashMap<>();
    security.put(SecurityConfigurationFactory.TYPE_PROPERTY_ID, SecurityType.KERBEROS.toString());
    security.put(SecurityConfigurationFactory.KERBEROS_DESCRIPTOR_PROPERTY_ID, testKDReqPropertyMap());
    reuqestMap.put(SecurityConfigurationFactory.SECURITY_PROPERTY_ID, security);

    // WHEN
    testSubject.createSecurityConfigurationFromRequest(reuqestMap, true);


    // THEN
    EasyMock.verify(kerberosDescriptorDAO);
    Assert.assertEquals("The persisted descriptortext is not as expected",
        "{\"test\":\"{\\\"test\\\":\\\"test json\\\"}\"}",
        kdEntityCaptor.getValue().getKerberosDescriptorText());
    Assert.assertNotNull("There is no generated kerberos descriptor reference in the persisting entity!",
        kdEntityCaptor.getValue().getName());
  }

  @Test
  public void testCreateKerberosSecurityWithoutDescriptor() throws Exception {
    Map<String, Object> reuqestMap = new HashMap<>();
    Map<String, Object> security = new HashMap<>();
    security.put(SecurityConfigurationFactory.TYPE_PROPERTY_ID, SecurityType.KERBEROS.toString());
    reuqestMap.put(SecurityConfigurationFactory.SECURITY_PROPERTY_ID, security);

    SecurityConfiguration securityConfiguration = testSubject.createSecurityConfigurationFromRequest(reuqestMap, false);

    assertTrue(securityConfiguration.getType() == SecurityType.KERBEROS);
  }

  @Test
  public void testCreateEmpty() throws Exception {
    Map<String, Object> reuqestMap = new HashMap<>();

    SecurityConfiguration securityConfiguration = testSubject.createSecurityConfigurationFromRequest(reuqestMap, false);

    assertTrue(securityConfiguration == null);
  }

  @Test(expected = IllegalArgumentException.class)
  public void testCreateInvalidSecurityType() throws Exception {
    Map<String, Object> reuqestMap = new HashMap<>();
    Map<String, Object> security = new HashMap<>();
    security.put(SecurityConfigurationFactory.TYPE_PROPERTY_ID, "INVALID_SECURITY_TYPE");
    reuqestMap.put(SecurityConfigurationFactory.SECURITY_PROPERTY_ID, security);

    SecurityConfiguration securityConfiguration = testSubject.createSecurityConfigurationFromRequest(reuqestMap, false);

    assertTrue(securityConfiguration.getType() == SecurityType.KERBEROS);
  }

  @Test
  public void testCreateKerberosSecurityTypeNone() throws Exception {
    Map<String, Object> reuqestMap = new HashMap<>();
    Map<String, Object> security = new HashMap<>();
    security.put(SecurityConfigurationFactory.TYPE_PROPERTY_ID, SecurityType.NONE.toString());
    reuqestMap.put(SecurityConfigurationFactory.SECURITY_PROPERTY_ID, security);

    SecurityConfiguration securityConfiguration = testSubject.createSecurityConfigurationFromRequest(reuqestMap, false);

    assertTrue(securityConfiguration.getType() == SecurityType.NONE);
  }

  private KerberosDescriptorEntity testKDEntity() {
    KerberosDescriptorEntity testDescriptorEntity = new KerberosDescriptorEntity();
    testDescriptorEntity.setName(TEST_KERBEROS_DESCRIPTOR_REFERENCE);
    testDescriptorEntity.setKerberosDescriptorText(TEST_KERBEROS_DESCRIPTOR_JSON);
    return testDescriptorEntity;
  }

  private Map<String, Object> testKDReqPropertyMap() {
    Map<String, Object> kdMap = new HashMap<>();
    kdMap.put("test", TEST_KERBEROS_DESCRIPTOR_JSON);
    return kdMap;
  }

}