/*
 * Copyright Camunda Services GmbH and/or licensed to Camunda Services GmbH
 * under one or more contributor license agreements. See the NOTICE file
 * distributed with this work for additional information regarding copyright
 * ownership. Camunda licenses this file to you under the Apache License,
 * Version 2.0; you may not use this file except in compliance with the License.
 * You may obtain a copy of the License at
 *
 *     http://www.apache.org/licenses/LICENSE-2.0
 *
 * Unless required by applicable law or agreed to in writing, software
 * distributed under the License is distributed on an "AS IS" BASIS,
 * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
 * See the License for the specific language governing permissions and
 * limitations under the License.
 */
package org.camunda.bpm.spring.boot.starter.webapp.filter.authcache.it;

import org.camunda.bpm.engine.IdentityService;
import org.camunda.bpm.spring.boot.starter.webapp.filter.util.HttpClientRule;
import org.camunda.bpm.spring.boot.starter.webapp.filter.util.TestApplication;
import org.junit.Rule;
import org.junit.Test;
import org.junit.runner.RunWith;
import org.springframework.beans.factory.annotation.Autowired;
import org.springframework.boot.test.context.SpringBootTest;
import org.springframework.boot.test.web.server.LocalServerPort;
import org.springframework.test.annotation.DirtiesContext;
import org.springframework.test.context.TestPropertySource;
import org.springframework.test.context.junit4.SpringRunner;

import java.util.HashMap;
import java.util.Map;

import static org.assertj.core.api.Assertions.assertThat;

@RunWith(SpringRunner.class)
@SpringBootTest(classes = { TestApplication.class }, webEnvironment = SpringBootTest.WebEnvironment.RANDOM_PORT)
@TestPropertySource(properties = {
  "camunda.bpm.admin-user.id=demo",
  "camunda.bpm.admin-user.password=demo",
  "camunda.bpm.webapp.auth.cache.time-to-live=0"
})
@DirtiesContext
public class AuthCacheTTLValidateAllRequestsIT {

  @Rule
  public HttpClientRule httpClientRule = new HttpClientRule();

  @LocalServerPort
  public int port;

  @Autowired
  protected IdentityService identityService;

  @Test
  public void shouldRemoveCache() {
    // given
    httpClientRule.performRequest("http://localhost:" + port + "/camunda/app/welcome/default");

    Map<String, String> headers = new HashMap<>();
    headers.put("X-XSRF-TOKEN", httpClientRule.getHeaderXsrfToken());
    headers.put("Cookie", httpClientRule.getSessionCookieValue());
    headers.put("Content-Type", "application/x-www-form-urlencoded");
    headers.put("Accept", "application/json");
    httpClientRule.performPostRequest("http://localhost:" + port +
        "/camunda/api/admin/auth/user/default/login/welcome", headers, "username=demo&password=demo");

    headers = new HashMap<>();
    headers.put("Cookie", httpClientRule.getSessionCookieValue());
    headers.put("Accept", "application/json");
    doGetRequestToProfileEndpoint(headers);

    // assume
    assertThat(httpClientRule.getHeader("X-Authorized-Apps"))
        .isEqualTo("admin,tasklist,welcome,cockpit");

    identityService.deleteUser("demo");

    // when
    doGetRequestToProfileEndpoint(headers);

    // then
    assertThat(httpClientRule.getErrorResponseContent())
        .contains("\"status\":401,\"error\":\"Unauthorized\"");
  }

  protected void doGetRequestToProfileEndpoint(Map<String, String> headers) {
    String baseUrl = "http://localhost:" + port;
    String profileEndpointPath = "/camunda/api/engine/engine/default/user/demo/profile";
    httpClientRule.performRequest( baseUrl + profileEndpointPath, headers);
  }

}
