package com.atlassian.sal.core.net;
   
   import com.atlassian.sal.core.net.auth.TrustedTokenAuthenticator;
   import com.atlassian.sal.core.trusted.CertificateFactory;
   import com.atlassian.security.auth.trustedapps.EncryptedCertificate;
   import com.atlassian.security.auth.trustedapps.TrustedApplicationUtils;
   
   import org.apache.commons.httpclient.HttpClient;
   import org.apache.commons.httpclient.HttpMethod;
  import org.apache.commons.httpclient.methods.GetMethod;
  import org.junit.Before;
  import org.junit.Test;
  import org.junit.runner.RunWith;
  import org.mockito.Mock;
  import org.mockito.runners.MockitoJUnitRunner;
  
  import static org.hamcrest.CoreMatchers.is;
  import static org.junit.Assert.assertNull;
  import static org.junit.Assert.assertThat;
  import static org.mockito.Mockito.when;
  
  @RunWith(MockitoJUnitRunner.class)
  public class TestTrustedTokenAuthenticator
  {
      private HttpClient client;
  
      private final String userName = "bob";
      private final String url = "http://foo.bar/";
      private final String id = "12345";
      private final String secret = "WheelOfDeath";
      private final String magic = "TonyLamezma";
      private final String certificate = "gcse";
      private final String signature = "x";
      private final Integer version = 2;
  
      private @Mock CertificateFactory certificateFactory;
      private @Mock EncryptedCertificate encryptedCertificate;
  
      @Before
      public void createClient()
      {
          client = new HttpClient();
          // mock v3 protocol certificate
          when(encryptedCertificate.getID()).thenReturn(id);
          when(encryptedCertificate.getCertificate()).thenReturn(certificate);
          when(encryptedCertificate.getMagicNumber()).thenReturn(null);
          when(encryptedCertificate.getSecretKey()).thenReturn(null);
          when(encryptedCertificate.getProtocolVersion()).thenReturn(version);
          when(encryptedCertificate.getSignature()).thenReturn(signature);
  
          when(certificateFactory.createCertificate(userName, url)).thenReturn(encryptedCertificate);
      }
      
      @Test
      public void verifyThatNullUsernameErrors()
      {
  
          HttpMethod method = new GetMethod(this.url);
          TrustedTokenAuthenticator auth = new TrustedTokenAuthenticator(null, url, certificateFactory);
          auth.process(client, method);
  
          assertNull(method.getRequestHeader(TrustedApplicationUtils.Header.Request.ID));
          assertNull(method.getRequestHeader(TrustedApplicationUtils.Header.Request.CERTIFICATE));
          assertNull(method.getRequestHeader(TrustedApplicationUtils.Header.Request.SECRET_KEY));
          assertNull(method.getRequestHeader(TrustedApplicationUtils.Header.Request.VERSION));
          assertNull(method.getRequestHeader(TrustedApplicationUtils.Header.Request.MAGIC));
          assertNull(method.getRequestHeader(TrustedApplicationUtils.Header.Request.SIGNATURE));
      }
  
      @Test
      public void verifyThatNullUrlErrors()
      {
  
          HttpMethod method = new GetMethod(this.url);
          TrustedTokenAuthenticator auth = new TrustedTokenAuthenticator(userName, null, certificateFactory);
          auth.process(client, method);
  
          assertNull(method.getRequestHeader(TrustedApplicationUtils.Header.Request.ID));
          assertNull(method.getRequestHeader(TrustedApplicationUtils.Header.Request.CERTIFICATE));
          assertNull(method.getRequestHeader(TrustedApplicationUtils.Header.Request.SECRET_KEY));
          assertNull(method.getRequestHeader(TrustedApplicationUtils.Header.Request.VERSION));
          assertNull(method.getRequestHeader(TrustedApplicationUtils.Header.Request.MAGIC));
          assertNull(method.getRequestHeader(TrustedApplicationUtils.Header.Request.SIGNATURE));
      }
  
      @Test
      public void verifyThatHeadersAreSetForValidV2ProtocolCertificate()
      {
          when(encryptedCertificate.getMagicNumber()).thenReturn(magic);
          when(encryptedCertificate.getSecretKey()).thenReturn(secret);
  
          HttpMethod method = new GetMethod(this.url);
          TrustedTokenAuthenticator auth = new TrustedTokenAuthenticator(userName, url, certificateFactory);
          auth.process(client, method);
  
          assertThat(method.getRequestHeader(TrustedApplicationUtils.Header.Request.ID).getValue(), is(id));
          assertThat(method.getRequestHeader(TrustedApplicationUtils.Header.Request.CERTIFICATE).getValue(), is(certificate));
          assertThat(method.getRequestHeader(TrustedApplicationUtils.Header.Request.SECRET_KEY).getValue(), is(secret));
          assertThat(method.getRequestHeader(TrustedApplicationUtils.Header.Request.VERSION).getValue(), is(version.toString()));
         assertThat(method.getRequestHeader(TrustedApplicationUtils.Header.Request.MAGIC).getValue(), is(magic));
         assertThat(method.getRequestHeader(TrustedApplicationUtils.Header.Request.SIGNATURE).getValue(), is(signature));
     }
 
     @Test
     public void verifyThatHeadersAreSetForValidV3ProtocolCertificate()
     {
         when(encryptedCertificate.getProtocolVersion()).thenReturn(3);
 
         HttpMethod method = new GetMethod(this.url);
         TrustedTokenAuthenticator auth = new TrustedTokenAuthenticator(userName, url, certificateFactory);
         auth.process(client, method);
 
         assertThat(method.getRequestHeader(TrustedApplicationUtils.Header.Request.ID).getValue(), is(id));
         assertThat(method.getRequestHeader(TrustedApplicationUtils.Header.Request.CERTIFICATE).getValue(), is(certificate));
         assertNull(method.getRequestHeader(TrustedApplicationUtils.Header.Request.SECRET_KEY).getValue());
         assertThat(method.getRequestHeader(TrustedApplicationUtils.Header.Request.VERSION).getValue(), is("3"));
         assertNull(method.getRequestHeader(TrustedApplicationUtils.Header.Request.MAGIC).getValue());
         assertThat(method.getRequestHeader(TrustedApplicationUtils.Header.Request.SIGNATURE).getValue(), is(signature));
     }
 }