package com.atlassian.sal.core.xsrf;
   
   import org.junit.Before;
   import org.junit.Test;
   import org.springframework.mock.web.MockHttpServletRequest;
   import org.springframework.mock.web.MockHttpServletResponse;
   
   import javax.servlet.http.Cookie;
   
  import static com.atlassian.sal.core.xsrf.IndependentXsrfTokenAccessor.XSRF_COOKIE_KEY;
  import static org.junit.Assert.assertEquals;
  import static org.junit.Assert.assertFalse;
  import static org.junit.Assert.assertNotNull;
  import static org.junit.Assert.assertNull;
  import static org.junit.Assert.assertTrue;
  
  /**
   * @since 2.4
   */
  public class TestIndependentXsrfTokenAccessor {
      private IndependentXsrfTokenAccessor accessor;
      private MockHttpServletRequest request;
      private MockHttpServletResponse response;
  
      @Before
      public void setUp() {
          accessor = new IndependentXsrfTokenAccessor();
          request = new MockHttpServletRequest();
          response = new MockHttpServletResponse();
      }
  
      @Test
      public void testGetExistingToken() {
          request.setCookies(new Cookie[]{new Cookie(XSRF_COOKIE_KEY, "cookievalue")});
          assertEquals("cookievalue", accessor.getXsrfToken(request, response, true));
          assertNull(response.getCookie(XSRF_COOKIE_KEY));
      }
  
      @Test
      public void testGetExistingTokenNoCreate() {
          request.setCookies(new Cookie[]{new Cookie(XSRF_COOKIE_KEY, "cookievalue")});
          assertEquals("cookievalue", accessor.getXsrfToken(request, response, false));
          assertNull(response.getCookie(XSRF_COOKIE_KEY));
      }
  
      @Test
      public void testCreateToken() {
          String token = accessor.getXsrfToken(request, response, true);
          assertNotNull(token);
          Cookie cookie = response.getCookie(XSRF_COOKIE_KEY);
          assertNotNull(cookie);
          assertEquals(token, cookie.getValue());
      }
  
      @Test
      public void testCreateTokenForASecureRequestCreatesASecureCookie() {
          request.setSecure(true);
          String token = accessor.getXsrfToken(request, response, true);
          Cookie cookie = response.getCookie(XSRF_COOKIE_KEY);
          assertTrue(cookie.getSecure());
          assertEquals(token, cookie.getValue());
      }
  
      @Test
      public void testCreateTokenForANonSecureRequestCreatesANonSecureCookie() {
          request.setSecure(false);
          String token = accessor.getXsrfToken(request, response, true);
          Cookie cookie = response.getCookie(XSRF_COOKIE_KEY);
          assertFalse(cookie.getSecure());
          assertEquals(token, cookie.getValue());
      }
  
      @Test
      public void testGetTokenNoCreate() {
          assertNull(accessor.getXsrfToken(request, response, false));
          assertNull(response.getCookie(XSRF_COOKIE_KEY));
      }
  
  }