// Copyright 2014 The Chromium Authors. All rights reserved.
// Use of this source code is governed by a BSD-style license that can be
// found in the LICENSE file.

#include "chrome/browser/extensions/api/gcd_private/privet_v3_session.h"

#include "base/base64.h"
#include "base/strings/stringprintf.h"
#include "base/thread_task_runner_handle.h"
#include "chrome/browser/extensions/api/gcd_private/privet_v3_context_getter.h"
#include "content/public/test/test_browser_thread_bundle.h"
#include "content/public/test/test_utils.h"
#include "crypto/hmac.h"
#include "crypto/p224_spake.h"
#include "net/http/http_response_headers.h"
#include "net/url_request/test_url_fetcher_factory.h"
#include "net/url_request/url_request_test_util.h"
#include "testing/gmock/include/gmock/gmock.h"
#include "testing/gtest/include/gtest/gtest.h"

namespace extensions {

namespace {

using testing::_;
using testing::ElementsAreArray;
using testing::Field;
using testing::InSequence;
using testing::Invoke;
using testing::InvokeWithoutArgs;
using testing::Return;
using testing::SaveArg;
using testing::StrictMock;
using testing::WithArgs;

using PairingType = PrivetV3Session::PairingType;
using Result = PrivetV3Session::Result;

const char kInfoResponse[] =
    "{\"version\":\"3.0\","
    "\"endpoints\":{\"httpsPort\": 1443},"
    "\"authentication\":{"
    "  \"mode\":[\"anonymous\",\"pairing\",\"cloud\"],"
    "  \"pairing\":[\"pinCode\",\"embeddedCode\"],"
    "  \"crypto\":[\"p224_spake2\"]"
    "}}";

}  // namespace

class PrivetV3SessionTest : public testing::Test {
 public:
  PrivetV3SessionTest()
      : thread_bundle_(content::TestBrowserThreadBundle::REAL_IO_THREAD),
        fetcher_factory_(nullptr,
                         base::Bind(&PrivetV3SessionTest::CreateFakeURLFetcher,
                                    base::Unretained(this))) {}

  void OnInitialized(Result result, const base::DictionaryValue& info) {
    info_.MergeDictionary(&info);
    OnInitializedMock(result, info);
  }

  MOCK_METHOD2(OnInitializedMock, void(Result, const base::DictionaryValue&));
  MOCK_METHOD1(OnPairingStarted, void(Result));
  MOCK_METHOD1(OnCodeConfirmed, void(Result));
  MOCK_METHOD2(OnMessageSend, void(Result, const base::DictionaryValue&));
  MOCK_METHOD1(OnPostData, void(const base::DictionaryValue&));

 protected:
  void SetUp() override {
    scoped_refptr<PrivetV3ContextGetter> context_getter =
        new PrivetV3ContextGetter(base::ThreadTaskRunnerHandle::Get());

    session_.reset(
        new PrivetV3Session(context_getter, net::HostPortPair("host", 180)));

    session_->on_post_data_ =
        base::Bind(&PrivetV3SessionTest::OnPostData, base::Unretained(this));
  }

  scoped_ptr<net::FakeURLFetcher> CreateFakeURLFetcher(
      const GURL& url,
      net::URLFetcherDelegate* fetcher_delegate,
      const std::string& response_data,
      net::HttpStatusCode response_code,
      net::URLRequestStatus::Status status) {
    scoped_ptr<net::FakeURLFetcher> fetcher(new net::FakeURLFetcher(
        url, fetcher_delegate, response_data, response_code, status));
    scoped_refptr<net::HttpResponseHeaders> headers =
        new net::HttpResponseHeaders("");
    headers->AddHeader("Content-Type: application/json");
    fetcher->set_response_headers(headers);
    return fetcher;
  }

  content::TestBrowserThreadBundle thread_bundle_;
  net::FakeURLFetcherFactory fetcher_factory_;
  base::DictionaryValue info_;
  scoped_ptr<PrivetV3Session> session_;
};

TEST_F(PrivetV3SessionTest, InitError) {
  EXPECT_CALL(*this, OnInitializedMock(Result::STATUS_CONNECTIONERROR, _))
      .Times(1);
  fetcher_factory_.SetFakeResponse(GURL("http://host:180/privet/info"), "",
                                   net::HTTP_OK, net::URLRequestStatus::FAILED);
  session_->Init(
      base::Bind(&PrivetV3SessionTest::OnInitialized, base::Unretained(this)));
  base::RunLoop().RunUntilIdle();
}

TEST_F(PrivetV3SessionTest, VersionError) {
  std::string response(kInfoResponse);
  base::ReplaceFirstSubstringAfterOffset(&response, 0, "3.0", "4.1");

  EXPECT_CALL(*this, OnInitializedMock(Result::STATUS_SESSIONERROR, _))
      .Times(1);
  fetcher_factory_.SetFakeResponse(GURL("http://host:180/privet/info"),
                                   response, net::HTTP_OK,
                                   net::URLRequestStatus::SUCCESS);
  session_->Init(
      base::Bind(&PrivetV3SessionTest::OnInitialized, base::Unretained(this)));
  base::RunLoop().RunUntilIdle();
}

TEST_F(PrivetV3SessionTest, ModeError) {
  std::string response(kInfoResponse);
  base::ReplaceFirstSubstringAfterOffset(&response, 0, "mode", "mode_");

  EXPECT_CALL(*this, OnInitializedMock(Result::STATUS_SESSIONERROR, _))
      .Times(1);
  fetcher_factory_.SetFakeResponse(GURL("http://host:180/privet/info"),
                                   response, net::HTTP_OK,
                                   net::URLRequestStatus::SUCCESS);
  session_->Init(
      base::Bind(&PrivetV3SessionTest::OnInitialized, base::Unretained(this)));
  base::RunLoop().RunUntilIdle();
}

TEST_F(PrivetV3SessionTest, NoHttpsError) {
  EXPECT_CALL(*this, OnInitializedMock(Result::STATUS_SUCCESS, _)).Times(1);
  fetcher_factory_.SetFakeResponse(GURL("http://host:180/privet/info"),
                                   kInfoResponse, net::HTTP_OK,
                                   net::URLRequestStatus::SUCCESS);

  session_->Init(
      base::Bind(&PrivetV3SessionTest::OnInitialized, base::Unretained(this)));
  base::RunLoop().RunUntilIdle();

  EXPECT_CALL(*this, OnMessageSend(Result::STATUS_SESSIONERROR, _)).Times(1);
  session_->SendMessage(
      "/privet/v3/state", base::DictionaryValue(),
      base::Bind(&PrivetV3SessionTest::OnMessageSend, base::Unretained(this)));
  base::RunLoop().RunUntilIdle();
}

TEST_F(PrivetV3SessionTest, Pairing) {
  EXPECT_CALL(*this, OnInitializedMock(Result::STATUS_SUCCESS, _)).Times(1);
  fetcher_factory_.SetFakeResponse(GURL("http://host:180/privet/info"),
                                   kInfoResponse, net::HTTP_OK,
                                   net::URLRequestStatus::SUCCESS);

  session_->Init(
      base::Bind(&PrivetV3SessionTest::OnInitialized, base::Unretained(this)));
  base::RunLoop().RunUntilIdle();

  const base::ListValue* pairing = nullptr;
  ASSERT_TRUE(info_.GetList("authentication.pairing", &pairing));

  std::string pairing_string;
  ASSERT_TRUE(pairing->GetString(0, &pairing_string));
  EXPECT_EQ("pinCode", pairing_string);

  ASSERT_TRUE(pairing->GetString(1, &pairing_string));
  EXPECT_EQ("embeddedCode", pairing_string);

  crypto::P224EncryptedKeyExchange spake(
      crypto::P224EncryptedKeyExchange::kPeerTypeServer, "testPin");

  EXPECT_CALL(*this, OnPairingStarted(Result::STATUS_SUCCESS)).Times(1);
  EXPECT_CALL(*this, OnPostData(_))
      .WillOnce(Invoke([this, &spake](const base::DictionaryValue& data) {
        std::string pairing_type;
        EXPECT_TRUE(data.GetString("pairing", &pairing_type));
        EXPECT_EQ("embeddedCode", pairing_type);

        std::string crypto_type;
        EXPECT_TRUE(data.GetString("crypto", &crypto_type));
        EXPECT_EQ("p224_spake2", crypto_type);

        std::string device_commitment;
        base::Base64Encode(spake.GetNextMessage(), &device_commitment);
        fetcher_factory_.SetFakeResponse(
            GURL("http://host:180/privet/v3/pairing/start"),
            base::StringPrintf(
                "{\"deviceCommitment\":\"%s\",\"sessionId\":\"testId\"}",
                device_commitment.c_str()),
            net::HTTP_OK, net::URLRequestStatus::SUCCESS);
      }));
  session_->StartPairing(PairingType::PAIRING_TYPE_EMBEDDEDCODE,
                         base::Bind(&PrivetV3SessionTest::OnPairingStarted,
                                    base::Unretained(this)));
  base::RunLoop().RunUntilIdle();

  EXPECT_EQ("Privet anonymous", session_->privet_auth_token_);

  std::string fingerprint("testFingerprint  testFingerprint");
  net::SHA256HashValue sha_fingerprint;
  ASSERT_EQ(sizeof(sha_fingerprint.data), fingerprint.size());
  memcpy(sha_fingerprint.data, fingerprint.data(), fingerprint.size());

  EXPECT_CALL(*this, OnCodeConfirmed(Result::STATUS_SUCCESS)).Times(1);
  EXPECT_CALL(*this, OnPostData(_))
      .WillOnce(Invoke(
          [this, &spake, fingerprint](const base::DictionaryValue& data) {
            std::string commitment_base64;
            EXPECT_TRUE(data.GetString("clientCommitment", &commitment_base64));
            std::string commitment;
            EXPECT_TRUE(base::Base64Decode(commitment_base64, &commitment));

            std::string session_id;
            EXPECT_TRUE(data.GetString("sessionId", &session_id));
            EXPECT_EQ("testId", session_id);

            EXPECT_EQ(spake.ProcessMessage(commitment),
                      crypto::P224EncryptedKeyExchange::kResultPending);

            std::string fingerprint_base64;
            base::Base64Encode(fingerprint, &fingerprint_base64);

            crypto::HMAC hmac(crypto::HMAC::SHA256);
            const std::string& key = spake.GetUnverifiedKey();
            EXPECT_TRUE(hmac.Init(key));
            std::string signature(hmac.DigestLength(), ' ');
            EXPECT_TRUE(hmac.Sign(fingerprint, reinterpret_cast<unsigned char*>(
                                                   string_as_array(&signature)),
                                  signature.size()));

            std::string signature_base64;
            base::Base64Encode(signature, &signature_base64);

            fetcher_factory_.SetFakeResponse(
                GURL("http://host:180/privet/v3/pairing/confirm"),
                base::StringPrintf(
                    "{\"certFingerprint\":\"%s\",\"certSignature\":\"%s\"}",
                    fingerprint_base64.c_str(), signature_base64.c_str()),
                net::HTTP_OK, net::URLRequestStatus::SUCCESS);
          }))
      .WillOnce(Invoke([this, &spake](const base::DictionaryValue& data) {
        std::string access_token_base64;
        EXPECT_TRUE(data.GetString("authCode", &access_token_base64));
        std::string access_token;
        EXPECT_TRUE(base::Base64Decode(access_token_base64, &access_token));

        crypto::HMAC hmac(crypto::HMAC::SHA256);
        const std::string& key = spake.GetUnverifiedKey();
        EXPECT_TRUE(hmac.Init(key));
        EXPECT_TRUE(hmac.Verify("testId", access_token));

        fetcher_factory_.SetFakeResponse(
            GURL("https://host:1443/privet/v3/auth"),
            "{\"accessToken\":\"567\",\"tokenType\":\"testType\","
            "\"scope\":\"owner\"}",
            net::HTTP_OK, net::URLRequestStatus::SUCCESS);
      }));
  session_->ConfirmCode("testPin",
                        base::Bind(&PrivetV3SessionTest::OnCodeConfirmed,
                                   base::Unretained(this)));
  base::RunLoop().RunUntilIdle();

  EXPECT_TRUE(session_->use_https_);
  EXPECT_EQ("testType 567", session_->privet_auth_token_);
}

TEST_F(PrivetV3SessionTest, Cancel) {
  EXPECT_CALL(*this, OnInitializedMock(Result::STATUS_SUCCESS, _)).Times(1);
  fetcher_factory_.SetFakeResponse(GURL("http://host:180/privet/info"),
                                   kInfoResponse, net::HTTP_OK,
                                   net::URLRequestStatus::SUCCESS);

  session_->Init(
      base::Bind(&PrivetV3SessionTest::OnInitialized, base::Unretained(this)));
  base::RunLoop().RunUntilIdle();

  EXPECT_CALL(*this, OnPairingStarted(Result::STATUS_SUCCESS)).Times(1);
  EXPECT_CALL(*this, OnPostData(_))
      .WillOnce(Invoke([this](const base::DictionaryValue& data) {
        std::string device_commitment;
        base::Base64Encode("1234", &device_commitment);
        fetcher_factory_.SetFakeResponse(
            GURL("http://host:180/privet/v3/pairing/start"),
            base::StringPrintf(
                "{\"deviceCommitment\":\"%s\",\"sessionId\":\"testId\"}",
                device_commitment.c_str()),
            net::HTTP_OK, net::URLRequestStatus::SUCCESS);
      }));
  session_->StartPairing(PairingType::PAIRING_TYPE_EMBEDDEDCODE,
                         base::Bind(&PrivetV3SessionTest::OnPairingStarted,
                                    base::Unretained(this)));
  base::RunLoop().RunUntilIdle();

  fetcher_factory_.SetFakeResponse(
      GURL("http://host:180/privet/v3/pairing/cancel"), kInfoResponse,
      net::HTTP_OK, net::URLRequestStatus::SUCCESS);
  EXPECT_CALL(*this, OnPostData(_))
      .WillOnce(Invoke([this](const base::DictionaryValue& data) {
        std::string session_id;
        EXPECT_TRUE(data.GetString("sessionId", &session_id));
      }));

  session_.reset();
  base::RunLoop().RunUntilIdle();
}

TEST_F(PrivetV3SessionTest, SendMessage) {
  session_->use_https_ = true;
  session_->host_port_.set_port(1443);

  const std::string id = "123123";

  fetcher_factory_.SetFakeResponse(
      GURL("https://host:1443/privet/v3/commands/status"),
      "{\"id\":\"123123\"}", net::HTTP_OK, net::URLRequestStatus::SUCCESS);

  EXPECT_CALL(*this, OnMessageSend(Result::STATUS_SUCCESS, _))
      .WillOnce(WithArgs<1>(Invoke([id](const base::DictionaryValue& data) {
        std::string reply_id;
        EXPECT_TRUE(data.GetString("id", &reply_id));
        EXPECT_EQ(id, reply_id);
      })));

  base::DictionaryValue input;
  input.SetString("id", id);
  session_->SendMessage(
      "/privet/v3/commands/status", input,
      base::Bind(&PrivetV3SessionTest::OnMessageSend, base::Unretained(this)));
  base::RunLoop().RunUntilIdle();
}

}  // namespace extensions