<?php
/*
    Flexisip Account Manager is a set of tools to manage SIP accounts.
    Copyright (C) 2020 Belledonne Communications SARL, All rights reserved.

    This program is free software: you can redistribute it and/or modify
    it under the terms of the GNU Affero General Public License as
    published by the Free Software Foundation, either version 3 of the
    License, or (at your option) any later version.

    This program is distributed in the hope that it will be useful,
    but WITHOUT ANY WARRANTY; without even the implied warranty of
    MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
    GNU Affero General Public License for more details.

    You should have received a copy of the GNU Affero General Public License
    along with this program.  If not, see <http://www.gnu.org/licenses/>.
*/

namespace Tests\Feature;

use App\Account;
use App\Space;
use App\AccountCreationRequestToken;
use App\AccountCreationToken;
use App\Http\Middleware\ValidateJSON;
use Tests\TestCase;
use Carbon\Carbon;

class ApiAccountCreationTokenTest extends TestCase
{
    protected $tokenRoute = '/api/account_creation_tokens/send-by-push';
    protected $tokenConsumeRoute = '/api/account_creation_tokens/consume';
    protected $tokenRequestRoute = '/api/account_creation_request_tokens';
    protected $tokenUsingCreationTokenRoute = '/api/account_creation_tokens/using-account-creation-request-token';
    protected $accountRoute = '/api/accounts/with-account-creation-token';
    protected $adminRoute = '/api/account_creation_tokens';
    protected $method = 'POST';

    protected $pnProvider = 'fcm';
    protected $pnParam = 'param';
    protected $pnPrid = 'id';

    public function testInvalidJSON()
    {
        $this->call(
            $this->method,
            $this->tokenRoute,
            [],
            [],
            [],
            $this->transformHeadersToServerVars(
                [
                    'content-type' => 'application/json',
                    'accept' => 'application/json',
                ]
            ),
            '{"first_name": "John", "last_name": "Smith", "is_alive": true, "age": 27,'
        )->assertStatus(400)
        ->assertJsonPath(
            'message',
            fn ($error) => substr($error, 0, strlen(ValidateJSON::$message)) == ValidateJSON::$message
        );
    }

    public function testCorrectParameters()
    {
        Space::factory()->create();

        $this->assertSame(AccountCreationToken::count(), 0);
        $this->json($this->method, $this->tokenRoute, [
            'pn_provider' => 'wrong',
            'pn_param' => $this->pnParam,
            'pn_prid' => $this->pnPrid,
        ])->assertJsonValidationErrors(['pn_provider']);

        $this->assertSame(AccountCreationToken::count(), 0);
        $this->json($this->method, $this->tokenRoute, [
            'pn_provider' => $this->pnProvider,
            'pn_param' => '@wrong',
            'pn_prid' => $this->pnPrid,
        ])->assertJsonValidationErrors(['pn_param']);

        $this->assertSame(AccountCreationToken::count(), 0);
        $this->json($this->method, $this->tokenRoute, [
            'pn_provider' => $this->pnProvider,
            'pn_param' => $this->pnParam,
            'pn_prid' => '@wrong',
        ])->assertJsonValidationErrors(['pn_prid']);

        $this->assertSame(AccountCreationToken::count(), 0);
        $this->json($this->method, $this->tokenRoute, [
            'pn_provider' => $this->pnProvider,
            'pn_param' => $this->pnParam,
            'pn_prid' => $this->pnPrid,
        ])->assertStatus(503);
    }

    public function testMandatoryParameters()
    {
        Space::factory()->create();

        $this->json($this->method, $this->tokenRoute)->assertStatus(422);

        $this->json($this->method, $this->tokenRoute, [
            'pn_provider' => null,
            'pn_param' => null,
            'pn_prid' => null,
        ])->assertStatus(422);
    }

    public function testThrottling()
    {
        Space::factory()->create();

        AccountCreationToken::factory()->create([
            'pn_provider' => $this->pnProvider,
            'pn_param' => $this->pnParam,
            'pn_prid' => $this->pnPrid,
        ]);

        $this->json($this->method, $this->tokenRoute, [
            'pn_provider' => $this->pnProvider,
            'pn_param' => $this->pnParam,
            'pn_prid' => $this->pnPrid,
        ])->assertStatus(503);

        // Redeem all the tokens
        AccountCreationToken::where('used', false)->update(['used' => true]);

        $this->json($this->method, $this->tokenRoute, [
            'pn_provider' => $this->pnProvider,
            'pn_param' => $this->pnParam,
            'pn_prid' => $this->pnPrid,
        ])->assertStatus(429);
    }

    public function testAdminEndpoint()
    {
        $admin = Account::factory()->admin()->create();
        $admin->generateUserApiKey();

        $response = $this->keyAuthenticated($admin)
            ->json($this->method, $this->adminRoute)
            ->assertStatus(201)
            ->assertJson(['expire_at' => null]);

        $this->assertDatabaseHas('account_creation_tokens', [
            'token' => $response->json()['token']
        ]);

        config()->set('app.account_creation_token_expiration_minutes', 10);

        $response = $this->keyAuthenticated($admin)
            ->json($this->method, $this->adminRoute)
            ->assertStatus(201)
            ->assertJson(['expire_at' => AccountCreationToken::latest()->first()->expire_at]);
    }

    public function testInvalidToken()
    {
        $token = AccountCreationToken::factory()->create();
        Space::factory()->create();

        // Invalid token
        $this->json($this->method, $this->accountRoute, [
            'username' => 'username',
            'algorithm' => 'SHA-256',
            'password' => '123',
            'account_creation_token' => '0123456789abc'
        ])->assertStatus(422);

        // Valid token
        $this->json($this->method, $this->accountRoute, [
            'username' => 'username',
            'algorithm' => 'SHA-256',
            'password' => '123',
            'account_creation_token' => $token->token
        ])->assertStatus(200);

        // Expired token
        $this->json($this->method, $this->accountRoute, [
            'username' => 'username2',
            'algorithm' => 'SHA-256',
            'password' => '123',
            'account_creation_token' => $token->token
        ])->assertStatus(422);

        $this->assertDatabaseHas('account_creation_tokens', [
            'used' => true,
            'account_id' => Account::where('username', 'username')->first()->id,
        ]);
    }

    public function testTokenExpiration()
    {
        $token = AccountCreationToken::factory()->expired()->create();
        Space::factory()->create();

        config()->set('app.account_creation_token_expiration_minutes', 10);

        $this->json($this->method, $this->accountRoute, [
            'username' => 'username',
            'algorithm' => 'SHA-256',
            'password' => '123',
            'account_creation_token' => $token->token
        ])->assertJsonValidationErrors(['account_creation_token']);
    }

    public function testBlacklistedUsername()
    {
        $token = AccountCreationToken::factory()->create();
        Space::factory()->create();

        config()->set('app.account_blacklisted_usernames', 'foobar,blacklisted,username-.*');

        // Blacklisted username
        $this->json($this->method, $this->accountRoute, [
            'username' => 'blacklisted',
            'algorithm' => 'SHA-256',
            'password' => '123',
            'account_creation_token' => $token->token
        ])->assertJsonValidationErrors(['username']);

        // Blacklisted regex username
        $this->json($this->method, $this->accountRoute, [
            'username' => 'username-gnap',
            'algorithm' => 'SHA-256',
            'password' => '123',
            'account_creation_token' => $token->token
        ])->assertJsonValidationErrors(['username']);

        // Valid username
        $this->json($this->method, $this->accountRoute, [
            'username' => 'valid-username',
            'algorithm' => 'SHA-256',
            'password' => '123',
            'account_creation_token' => $token->token
        ])->assertStatus(200);
    }

    public function testAccountCreationRequestToken()
    {
        Space::factory()->create();

        $response = $this->json($this->method, $this->tokenRequestRoute);
        $response->assertStatus(201);
        $creationRequestToken = $response->json()['token'];

        $this->assertSame($response->json()['validation_url'], route('account.creation_request_token.check', $creationRequestToken));

        // Validate the creation request token
        AccountCreationRequestToken::where('token', $creationRequestToken)->update(['validated_at' => Carbon::now()]);

        $response = $this->json($this->method, $this->tokenUsingCreationTokenRoute, [
            'account_creation_request_token' => $creationRequestToken
        ])->assertStatus(201);

        $creationToken = $response->json()['token'];

        $this->assertDatabaseHas('account_creation_request_tokens', [
            'token' => $creationRequestToken,
            'used' => true
        ]);

        $this->assertDatabaseHas('account_creation_tokens', [
            'token' => $creationToken
        ]);

        $this->assertSame(
            AccountCreationRequestToken::where('token', $creationRequestToken)->first()->accountCreationToken->id,
            AccountCreationToken::where('token', $creationToken)->first()->id
        );
    }

    public function testConsume()
    {
        $account = Account::factory()->create();
        $account->generateUserApiKey();

        $accountCreationToken = AccountCreationToken::factory()->create();
        $token = $accountCreationToken->token;

        $this->keyAuthenticated($account)
            ->json($this->method, $this->tokenConsumeRoute, [
                'account_creation_token' => '123'
            ])
            ->assertStatus(404);

        $this->keyAuthenticated($account)
            ->json($this->method, $this->tokenConsumeRoute, [
                'account_creation_token' => $token
            ])
            ->assertStatus(200);

        $this->keyAuthenticated($account)
            ->json($this->method, $this->tokenConsumeRoute, [
                'account_creation_token' => $token
            ])
            ->assertStatus(404);

        $this->keyAuthenticated($account)
            ->json($this->method, '/api/accounts/me/phone/request', [
                'phone' => '+33612312312'
            ])
            ->assertStatus(200);
    }
}