/**
 * Licensed under the Apache License, Version 2.0 (the "License");
 * you may not use this file except in compliance with the License.
 * You may obtain a copy of the License at
 *
 *     http://www.apache.org/licenses/LICENSE-2.0
 *
 * Unless required by applicable law or agreed to in writing, software
 * distributed under the License is distributed on an "AS IS" BASIS,
 * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
 * See the License for the specific language governing permissions and
 * limitations under the License.
 */
package org.apache.aurora.scheduler.http.api.security;

import java.io.File;

import javax.security.auth.kerberos.KerberosPrincipal;

import com.google.inject.Guice;
import com.google.inject.Module;

import org.apache.aurora.common.testing.easymock.EasyMockTest;
import org.easymock.EasyMock;
import org.ietf.jgss.GSSCredential;
import org.ietf.jgss.GSSManager;
import org.ietf.jgss.Oid;
import org.junit.Before;
import org.junit.Test;

import static org.easymock.EasyMock.anyObject;
import static org.easymock.EasyMock.eq;
import static org.easymock.EasyMock.expect;

public class Kerberos5ShiroRealmModuleTest extends EasyMockTest {
  private static final KerberosPrincipal SERVER_PRINCIPAL =
      new KerberosPrincipal("HTTP/aurora.example.com@EXAMPLE.COM");

  private File serverKeytab;
  private GSSManager gssManager;

  private GSSCredential gssCredential;

  private Module module;

  @Before
  public void setUp() {
    serverKeytab = createMock(File.class);
    gssManager = createMock(GSSManager.class);
    gssCredential = createMock(GSSCredential.class);

    module = new Kerberos5ShiroRealmModule(serverKeytab, SERVER_PRINCIPAL, gssManager);
  }

  @Test
  public void testConfigure() throws Exception {
    expect(serverKeytab.getAbsolutePath()).andReturn("path.keytab");
    expect(
        gssManager.createCredential(
            EasyMock.isNull(),
            eq(GSSCredential.INDEFINITE_LIFETIME),
            anyObject(Oid[].class),
            eq(GSSCredential.ACCEPT_ONLY)))
        .andReturn(gssCredential);

    control.replay();

    Guice.createInjector(module).getInstance(Kerberos5Realm.class);
  }
}