/*
 * Copyright (c) 2013, 2018 Oracle and/or its affiliates. All rights reserved.
 *
 * This program and the accompanying materials are made available under the
 * terms of the Eclipse Public License v. 2.0, which is available at
 * http://www.eclipse.org/legal/epl-2.0.
 *
 * This Source Code may also be made available under the following Secondary
 * Licenses when the conditions for such availability set forth in the
 * Eclipse Public License v. 2.0 are satisfied: GNU General Public License,
 * version 2 with the GNU Classpath Exception, which is available at
 * https://www.gnu.org/software/classpath/license.html.
 *
 * SPDX-License-Identifier: EPL-2.0 OR GPL-2.0 WITH Classpath-exception-2.0
 */

package org.glassfish.jacc.test.mr8;

import java.net.*;
import java.io.*;
import java.util.Enumeration;
import java.util.Hashtable;

import com.sun.ejte.ccl.reporter.SimpleReporterAdapter;

public class Client {
	private static SimpleReporterAdapter stat = new SimpleReporterAdapter("appserv-tests");
	private static String testSuite = "Security::JACCMR8";
	private static String contextPath = "/jaccmr8";
	
	private String host;
	private String port;
	private String username;
	private String password;
	private String rolename;
	private String otheruser;
	private String ejbmode = "None";

	public static void main(String[] args) {
		stat.addDescription(testSuite);
		Client client = new Client(args);
		client.doTests();
		stat.printSummary();
	}

	public Client(String[] args) {
		host = args[0];
		port = args[1];
		username = args[2];
		password = args[3];
		rolename = args[4];
		otheruser = args[5];
		System.out.println("      Host: " + host);
		System.out.println("      Port: " + port);
		System.out.println("  Username: " + username);
		System.out.println("  Rolename: " + rolename);
		System.out.println("Other User: " + otheruser);
	}

	public void doTests() {
		// Use the stateful EJB inside the servlet
		// The stateful EJB uses annotations to protect the EJB
		ejbmode = "stateful";
		testAnyAuthUser();
		testAnyAuthUserOther();
		testAnyAuthUserNone();
		testDenyUncovered();
		testDenyUncoveredOther();
		testDenyUncoveredNone();
		testStar();
		testStarOther();
		testStarNone();
		testServlet();
		testServletOther();
		testServletNone();
		testAuthUser();
		testAuthUserOther();
		testAuthUserNone();

		// Use the stateless EJB inside the servlet
		// The stateless EJB uses the deployment descriptor to protect the EJB
		// Only repeat tests that actually can invoke the servlet
		ejbmode = "stateless";
		testAnyAuthUser();
		testAnyAuthUserOther();
		testStar();
		testAuthUser();
		testServlet();
		testServletOther();
		testServletNone();
	}

	public void testAnyAuthUser() {
		String servlet = "/anyauthuser";
		String description = servlet+"-"+username+"-"+ejbmode;
		StringBuffer output = new StringBuffer();
		boolean success = doIndividualTest(servlet, 200, username, ejbmode, output);
		if (!success) {
			stat.addStatus(description, stat.FAIL);
			return;
		}

		// Check results in output
		success = checkResults(output,true,true,true,true,true,true);
		if (!success) {
			System.out.println("Incorrect results:" + description);
			stat.addStatus(description, stat.FAIL);
			return;
		}

		stat.addStatus(description, stat.PASS);
	}

	public void testAnyAuthUserOther() {
		String servlet = "/anyauthuser";
		String description = servlet+"-"+otheruser+"-"+ejbmode;
		StringBuffer output = new StringBuffer();
		boolean success = doIndividualTest(servlet, 200, otheruser, ejbmode, output);
		if (!success) {
			stat.addStatus(description, stat.FAIL);
			return;
		}

		// Check results in output
		success = checkResults(output,false,true,true,false,false,true);
		if (!success) {
			System.out.println("Incorrect results:" + description);
			stat.addStatus(description, stat.FAIL);
			return;
		}

		stat.addStatus(description, stat.PASS);
	}

	public void testAnyAuthUserNone() {
		String servlet = "/anyauthuser";
		String description = servlet+"--"+ejbmode;
		StringBuffer output = new StringBuffer();
		boolean success = doIndividualTest(servlet, 401, null, ejbmode, output);
		if (!success) {
			stat.addStatus(description, stat.FAIL);
			return;
		}

		// No results to check!
		stat.addStatus(description, stat.PASS);
	}

	public void testAuthUser() {
		String servlet = "/authuser";
		String description = servlet+"-"+username+"-"+ejbmode;
		StringBuffer output = new StringBuffer();
		boolean success = doIndividualTest(servlet, 200, username, ejbmode, output);
		if (!success) {
			stat.addStatus(description, stat.FAIL);
			return;
		}

		// Check results in output
		success = checkResults(output,true,true,true,true,true,true);
		if (!success) {
			System.out.println("Incorrect results:" + description);
			stat.addStatus(description, stat.FAIL);
			return;
		}

		stat.addStatus(description, stat.PASS);
	}

	public void testAuthUserOther() {
		String servlet = "/authuser";
		String description = servlet+"-"+otheruser+"-"+ejbmode;
		StringBuffer output = new StringBuffer();
		boolean success = doIndividualTest(servlet, 403, otheruser, ejbmode, output);
		if (!success) {
			stat.addStatus(description, stat.FAIL);
			return;
		}

		// No results to check!
		stat.addStatus(description, stat.PASS);
	}

	public void testAuthUserNone() {
		String servlet = "/authuser";
		String description = servlet+"--"+ejbmode;
		StringBuffer output = new StringBuffer();
		boolean success = doIndividualTest(servlet, 401, null, ejbmode, output);
		if (!success) {
			stat.addStatus(description, stat.FAIL);
			return;
		}

		// No results to check!
		stat.addStatus(description, stat.PASS);
	}

	public void testStar() {
		String servlet = "/star";
		String description = servlet+"-"+username+"-"+ejbmode;
		StringBuffer output = new StringBuffer();
		boolean success = doIndividualTest(servlet, 200, username, ejbmode, output);
		if (!success) {
			stat.addStatus(description, stat.FAIL);
			return;
		}

		// Check results in output
		success = checkResults(output,true,true,true,true,true,true);
		if (!success) {
			System.out.println("Incorrect results:" + description);
			stat.addStatus(description, stat.FAIL);
			return;
		}

		stat.addStatus(description, stat.PASS);
	}

	public void testStarOther() {
		String servlet = "/star";
		String description = servlet+"-"+otheruser+"-"+ejbmode;
		StringBuffer output = new StringBuffer();
		boolean success = doIndividualTest(servlet, 403, otheruser, ejbmode, output);
		if (!success) {
			stat.addStatus(description, stat.FAIL);
			return;
		}

		// No results to check!
		stat.addStatus(description, stat.PASS);
	}

	public void testStarNone() {
		String servlet = "/star";
		String description = servlet+"--"+ejbmode;
		StringBuffer output = new StringBuffer();
		boolean success = doIndividualTest(servlet, 401, null, ejbmode, output);
		if (!success) {
			stat.addStatus(description, stat.FAIL);
			return;
		}

		// No results to check!
		stat.addStatus(description, stat.PASS);
	}

	public void testServlet() {
		String servlet = "/servlet";
		String description = servlet+"-"+username+"-"+ejbmode;
		StringBuffer output = new StringBuffer();
		boolean success = doIndividualTest(servlet, 200, username, ejbmode, output);
		if (!success) {
			stat.addStatus(description, stat.FAIL);
			return;
		}

		// Check results in output
		success = checkResults(output,false,false,false,false,false,false);
		if (!success) {
			System.out.println("Incorrect results:" + description);
			stat.addStatus(description, stat.FAIL);
			return;
		}

		stat.addStatus(description, stat.PASS);
	}

	public void testServletOther() {
		String servlet = "/servlet";
		String description = servlet+"-"+otheruser+"-"+ejbmode;
		StringBuffer output = new StringBuffer();
		boolean success = doIndividualTest(servlet, 200, otheruser, ejbmode, output);
		if (!success) {
			stat.addStatus(description, stat.FAIL);
			return;
		}

		// Check results in output
		success = checkResults(output,false,false,false,false,false,false);
		if (!success) {
			System.out.println("Incorrect results:" + description);
			stat.addStatus(description, stat.FAIL);
			return;
		}

		stat.addStatus(description, stat.PASS);
	}

	public void testServletNone() {
		String servlet = "/servlet";
		String description = servlet+"--"+ejbmode;
		StringBuffer output = new StringBuffer();
		boolean success = doIndividualTest(servlet, 200, null, ejbmode, output);
		if (!success) {
			stat.addStatus(description, stat.FAIL);
			return;
		}

		// Check results in output
		success = checkResults(output,false,false,false,false,false,false);
		if (!success) {
			System.out.println("Incorrect results:" + description);
			stat.addStatus(description, stat.FAIL);
			return;
		}

		stat.addStatus(description, stat.PASS);
	}

	public void testDenyUncovered() {
		String servlet = "/denyuncoveredpost";
		String description = servlet+"-"+username+"-"+ejbmode;
		StringBuffer output = new StringBuffer();
		boolean success = doIndividualTest(servlet, 403, username, ejbmode, output);
		if (!success) {
			stat.addStatus(description, stat.FAIL);
			return;
		}

		// No results to check!
		stat.addStatus(description, stat.PASS);
	}

	public void testDenyUncoveredOther() {
		String servlet = "/denyuncoveredpost";
		String description = servlet+"-"+otheruser+"-"+ejbmode;
		StringBuffer output = new StringBuffer();
		boolean success = doIndividualTest(servlet, 403, otheruser, ejbmode, output);
		if (!success) {
			stat.addStatus(description, stat.FAIL);
			return;
		}

		// No results to check!
		stat.addStatus(description, stat.PASS);
	}

	public void testDenyUncoveredNone() {
		String servlet = "/denyuncoveredpost";
		String description = servlet+"--"+ejbmode;
		StringBuffer output = new StringBuffer();
		boolean success = doIndividualTest(servlet, 403, null, ejbmode, output);
		if (!success) {
			stat.addStatus(description, stat.FAIL);
			return;
		}

		// No results to check!
		stat.addStatus(description, stat.PASS);
	}

	// Validate that all the passed in results are as expected
	// If any value is not as expected the overall results are false
	private boolean checkResults(StringBuffer results,
			boolean EJBisCallerInRole, boolean EJBisUserInAnyAuthUserRole,
			boolean EJBInvokeAnyAuthUser, boolean EJBInvokeAuthUser,
			boolean WEBisUserInRole, boolean WEBisUserInAnyAuthUserRole) {
		int index;
		boolean result = true;

		if (EJBisCallerInRole)
			index = results.indexOf("EJB isCallerInRole: true");
		else
			index = results.indexOf("EJB isCallerInRole: false");
		if (index == -1)
			result = false;

		if (!result) return result;

		if (EJBisUserInAnyAuthUserRole)
			index = results.indexOf("EJB isUserInAnyAuthUserRole: true");
		else
			index = results.indexOf("EJB isUserInAnyAuthUserRole: false");
		if (index == -1)
			result = false;

		if (!result) return result;

		if (WEBisUserInRole)
			index = results.indexOf("WEB isUserInRole: true");
		else
			index = results.indexOf("WEB isUserInRole: false");
		if (index == -1)
			result = false;

		if (!result) return result;

		if (WEBisUserInAnyAuthUserRole)
			index = results.indexOf("WEB isUserInAnyAuthUserRole: true");
		else
			index = results.indexOf("WEB isUserInAnyAuthUserRole: false");
		if (index == -1)
			result = false;

		if (!result) return result;

		index = results.indexOf("EJB Invoke AnyAuthUser: Yes");
		if (EJBInvokeAnyAuthUser)
			result = (index != -1);
		else
			result = (index == -1);

		if (!result) return result;

		index = results.indexOf("EJB Invoke AuthUser: Yes");
		if (EJBInvokeAuthUser)
			result = (index != -1);
		else
			result = (index == -1);

		return result;
	}

	private boolean doIndividualTest(String servlet, int code, String user, String mode, StringBuffer output) {
		boolean result = false;
		try {
			int rtncode;
			String url = "http://" + host + ":" + port + contextPath + servlet;

			Hashtable ht = new Hashtable();
			ht.put("mode", URLEncoder.encode(mode,"UTF-8"));
			ht.put("name", URLEncoder.encode(rolename,"UTF-8"));

			System.out.println("\nInvoking servlet at " + url);
			rtncode = invokeServlet(url, ht, user, output);
			System.out.println("The servlet return code: " + rtncode);
			if (rtncode != code) {
				System.out.println("Incorrect return code, expecting: " + code);
			}
			else result = true;
		} catch (Exception ex) {
			System.out.println("Exception: " + ex.toString());
			//ex.printStackTrace();
		}
		return result;
	}

	private int invokeServlet(String url, Hashtable contentHash, String user, StringBuffer output) throws Exception {
		URL u = new URL(url);
		HttpURLConnection c1 = (HttpURLConnection) u.openConnection();
		c1.setAllowUserInteraction(true);
		if ((user != null) && (user.length() > 0)) {
			// Add BASIC header for authentication
			String auth =  user + ":" + password;
			String authEncoded = new sun.misc.BASE64Encoder().encode(auth.getBytes());
			c1.setRequestProperty("Authorization", "Basic " + authEncoded);
		}
		c1.setDoOutput(true);
		c1.setUseCaches(false);

		// get the output stream to POST to.
		DataOutputStream out;
		out = new DataOutputStream(c1.getOutputStream());
		String content = "";

		// Create a single String value to be POSTED from the parameters passed
		// to us. This is done by making "name"="value" pairs for all the keys
		// in the Hashtable passed to us.
		Enumeration e = contentHash.keys();
		boolean first = true;
		while (e.hasMoreElements()) {
			// For each key and value pair in the hashtable
			Object key = e.nextElement();
			Object value = contentHash.get(key);

			// If this is not the first key-value pair in the hashtable,
			// concantenate an "&" sign to the constructed String
			if (!first)
				content += "&";

			// append to a single string. Encode the value portion
			content += (String) key + "=" + URLEncoder.encode((String) value,"UTF-8");

			first = false;
		}

		// Write out the bytes of the content string to the stream.
		out.writeBytes(content);
		out.flush();
		out.close();

		// Connect and get the response code and/or output to verify
		c1.connect();
		int code = c1.getResponseCode();
		if (code == HttpURLConnection.HTTP_OK) {
			InputStream is = null;
			BufferedReader input = null;
			String line = null;
			try {
				is = c1.getInputStream();
				input = new BufferedReader(new InputStreamReader(is));
				while ((line = input.readLine()) != null) {
					output.append(line);
					System.out.println(line);
				}
			}
			finally {
				try { if (is != null) is.close(); }
				catch (Exception exc) {}
				try { if (input != null) input.close(); }
				catch (Exception exc) {}
			}
		}
		return code;
	}
}