/*
 * Copyright (C) 2015, Google Inc.
 *
 * This program and the accompanying materials are made available
 * under the terms of the Eclipse Distribution License v1.0 which
 * accompanies this distribution, is reproduced below, and is
 * available at http://www.eclipse.org/org/documents/edl-v10.php
 *
 * All rights reserved.
 *
 * Redistribution and use in source and binary forms, with or
 * without modification, are permitted provided that the following
 * conditions are met:
 *
 * - Redistributions of source code must retain the above copyright
 *	 notice, this list of conditions and the following disclaimer.
 *
 * - Redistributions in binary form must reproduce the above
 *	 copyright notice, this list of conditions and the following
 *	 disclaimer in the documentation and/or other materials provided
 *	 with the distribution.
 *
 * - Neither the name of the Eclipse Foundation, Inc. nor the
 *	 names of its contributors may be used to endorse or promote
 *	 products derived from this software without specific prior
 *	 written permission.
 *
 * THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND
 * CONTRIBUTORS "AS IS" AND ANY EXPRESS OR IMPLIED WARRANTIES,
 * INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES
 * OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE
 * ARE DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT OWNER OR
 * CONTRIBUTORS BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL,
 * SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT
 * NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES;
 * LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER
 * CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT,
 * STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE)
 * ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF
 * ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
 */

package org.eclipse.jgit.transport;

import static org.junit.Assert.assertEquals;
import static org.junit.Assert.assertNotEquals;

import org.eclipse.jgit.internal.storage.dfs.DfsRepositoryDescription;
import org.eclipse.jgit.internal.storage.dfs.InMemoryRepository;
import org.eclipse.jgit.lib.Repository;
import org.eclipse.jgit.transport.PushCertificate.NonceStatus;
import org.junit.Before;
import org.junit.Test;

/** Test for HMAC SHA-1 certificate verifier. */
public class HMACSHA1NonceGeneratorTest {
	private static final long TS = 1433954361;

	private HMACSHA1NonceGenerator gen;
	private Repository db;

	@Before
	public void setUp() {
		gen = new HMACSHA1NonceGenerator("sekret");
		db = new InMemoryRepository(new DfsRepositoryDescription("db"));
	}

	@Test
	public void missing() throws Exception {
		assertEquals(NonceStatus.MISSING, gen.verify("", "1234", db, false, 0));
	}

	@Test
	public void unsolicited() throws Exception {
		assertEquals(NonceStatus.UNSOLICITED, gen.verify("1234", "", db, false, 0));
	}

	@Test
	public void invalidFormat() throws Exception {
		String sent = gen.createNonce(db, TS);
		int idx = sent.indexOf('-');
		String sig = sent.substring(idx, sent.length() - idx);
		assertEquals(NonceStatus.BAD,
				gen.verify(Long.toString(TS), sent, db, true, 100));
		assertEquals(NonceStatus.BAD, gen.verify(sig, sent, db, true, 100));
		assertEquals(NonceStatus.BAD, gen.verify("xxx-" + sig, sent, db, true, 100));
		assertEquals(NonceStatus.BAD, gen.verify(sent, "xxx-" + sig, db, true, 100));
	}

	@Test
	public void slop() throws Exception {
		String sent = gen.createNonce(db, TS - 10);
		String received = gen.createNonce(db, TS);
		assertEquals(NonceStatus.BAD,
				gen.verify(received, sent, db, false, 0));
		assertEquals(NonceStatus.BAD,
				gen.verify(received, sent, db, false, 11));
		assertEquals(NonceStatus.SLOP,
				gen.verify(received, sent, db, true, 0));
		assertEquals(NonceStatus.SLOP,
				gen.verify(received, sent, db, true, 9));
		assertEquals(NonceStatus.OK,
				gen.verify(received, sent, db, true, 10));
		assertEquals(NonceStatus.OK,
				gen.verify(received, sent, db, true, 11));
	}

	@Test
	public void ok() throws Exception {
		String sent = gen.createNonce(db, TS);
		assertEquals(NonceStatus.OK, gen.verify(sent, sent, db, false, 0));
	}

	@Test
	public void signedByDifferentKey() throws Exception {
		HMACSHA1NonceGenerator other = new HMACSHA1NonceGenerator("other");
		String sent = gen.createNonce(db, TS);
		String received = other.createNonce(db, TS);
		assertNotEquals(received, sent);
		assertEquals(NonceStatus.BAD,
				gen.verify(received, sent, db, false, 0));
	}

	@Test
	public void signedByDifferentKeyWithSlop() throws Exception {
		HMACSHA1NonceGenerator other = new HMACSHA1NonceGenerator("other");
		String sent = gen.createNonce(db, TS - 10);
		String received = other.createNonce(db, TS);
		assertEquals(NonceStatus.BAD, gen.verify(received, sent, db, true, 100));
	}
}