//
//
// Copyright 2015 gRPC authors.
//
// Licensed under the Apache License, Version 2.0 (the "License");
// you may not use this file except in compliance with the License.
// You may obtain a copy of the License at
//
//     http://www.apache.org/licenses/LICENSE-2.0
//
// Unless required by applicable law or agreed to in writing, software
// distributed under the License is distributed on an "AS IS" BASIS,
// WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
// See the License for the specific language governing permissions and
// limitations under the License.
//
//

#include <string.h>

#include <functional>
#include <memory>

#include <grpc/byte_buffer.h>
#include <grpc/grpc.h>
#include <grpc/grpc_security.h>
#include <grpc/impl/propagation_bits.h>
#include <grpc/slice.h>
#include <grpc/status.h>
#include <grpc/support/log.h>
#include <grpc/support/time.h>

#include "src/core/lib/channel/channel_args.h"
#include "src/core/lib/security/credentials/credentials.h"
#include "test/core/end2end/cq_verifier.h"
#include "test/core/end2end/end2end_tests.h"
#include "test/core/util/test_config.h"

static const char iam_token[] = "token";
static const char iam_selector[] = "selector";
static const char overridden_iam_token[] = "overridden_token";
static const char overridden_iam_selector[] = "overridden_selector";
static const char fake_md_key[] = "fake_key";
static const char fake_md_value[] = "fake_value";
static const char overridden_fake_md_key[] = "overridden_fake_key";
static const char overridden_fake_md_value[] = "overridden_fake_value";

typedef enum { NONE, OVERRIDE, DESTROY, FAIL } override_mode;

static std::unique_ptr<CoreTestFixture> begin_test(
    const CoreTestConfiguration& config, const char* test_name,
    bool use_secure_call_creds, int fail_server_auth_check) {
  gpr_log(GPR_INFO, "Running test: %s%s/%s", test_name,
          use_secure_call_creds ? "_with_secure_call_creds"
                                : "_with_insecure_call_creds",
          config.name);
  auto f =
      config.create_fixture(grpc_core::ChannelArgs(), grpc_core::ChannelArgs());
  f->InitClient(grpc_core::ChannelArgs());
  grpc_core::ChannelArgs server_args;
  if (fail_server_auth_check) {
    server_args = server_args.Set(FAIL_AUTH_CHECK_SERVER_ARG_NAME, true);
  }
  f->InitServer(server_args);
  return f;
}

static void print_auth_context(int is_client, const grpc_auth_context* ctx) {
  const grpc_auth_property* p;
  grpc_auth_property_iterator it;
  gpr_log(GPR_INFO, "%s peer:", is_client ? "client" : "server");
  gpr_log(GPR_INFO, "\tauthenticated: %s",
          grpc_auth_context_peer_is_authenticated(ctx) ? "YES" : "NO");
  it = grpc_auth_context_peer_identity(ctx);
  while ((p = grpc_auth_property_iterator_next(&it)) != nullptr) {
    gpr_log(GPR_INFO, "\t\t%s: %s", p->name, p->value);
  }
  gpr_log(GPR_INFO, "\tall properties:");
  it = grpc_auth_context_property_iterator(ctx);
  while ((p = grpc_auth_property_iterator_next(&it)) != nullptr) {
    gpr_log(GPR_INFO, "\t\t%s: %s", p->name, p->value);
  }
}

static void request_response_with_payload_and_call_creds(
    const char* test_name, const CoreTestConfiguration& config,
    override_mode mode, bool use_secure_call_creds) {
  grpc_call* c = nullptr;
  grpc_call* s = nullptr;
  grpc_slice request_payload_slice =
      grpc_slice_from_copied_string("hello world");
  grpc_slice response_payload_slice =
      grpc_slice_from_copied_string("hello you");
  grpc_byte_buffer* request_payload =
      grpc_raw_byte_buffer_create(&request_payload_slice, 1);
  grpc_byte_buffer* response_payload =
      grpc_raw_byte_buffer_create(&response_payload_slice, 1);

  grpc_op ops[6];
  grpc_op* op;
  grpc_metadata_array initial_metadata_recv;
  grpc_metadata_array trailing_metadata_recv;
  grpc_metadata_array request_metadata_recv;
  grpc_byte_buffer* request_payload_recv = nullptr;
  grpc_byte_buffer* response_payload_recv = nullptr;
  grpc_call_details call_details;
  grpc_status_code status;
  grpc_call_error error;
  grpc_slice details;
  int was_cancelled = 2;
  grpc_call_credentials* creds = nullptr;
  grpc_auth_context* server_auth_context = nullptr;
  grpc_auth_context* client_auth_context = nullptr;

  auto f = begin_test(config, test_name, use_secure_call_creds, 0);
  grpc_core::CqVerifier cqv(f->cq());

  gpr_timespec deadline = grpc_timeout_seconds_to_deadline(5);
  c = grpc_channel_create_call(f->client(), nullptr, GRPC_PROPAGATE_DEFAULTS,
                               f->cq(), grpc_slice_from_static_string("/foo"),
                               nullptr, deadline, nullptr);
  GPR_ASSERT(c);
  if (use_secure_call_creds) {
    creds =
        grpc_google_iam_credentials_create(iam_token, iam_selector, nullptr);
  } else {
    creds = grpc_md_only_test_credentials_create(fake_md_key, fake_md_value);
  }
  GPR_ASSERT(creds != nullptr);
  GPR_ASSERT(grpc_call_set_credentials(c, creds) == GRPC_CALL_OK);
  switch (mode) {
    case NONE:
      break;
    case OVERRIDE:
      grpc_call_credentials_release(creds);
      if (use_secure_call_creds) {
        creds = grpc_google_iam_credentials_create(
            overridden_iam_token, overridden_iam_selector, nullptr);
      } else {
        creds = grpc_md_only_test_credentials_create(overridden_fake_md_key,
                                                     overridden_fake_md_value);
      }
      GPR_ASSERT(creds != nullptr);
      GPR_ASSERT(grpc_call_set_credentials(c, creds) == GRPC_CALL_OK);
      break;
    case DESTROY:
      GPR_ASSERT(grpc_call_set_credentials(c, nullptr) == GRPC_CALL_OK);
      break;
    case FAIL:
      // Do nothing
      break;
  }
  grpc_call_credentials_release(creds);

  grpc_metadata_array_init(&initial_metadata_recv);
  grpc_metadata_array_init(&trailing_metadata_recv);
  grpc_metadata_array_init(&request_metadata_recv);
  grpc_call_details_init(&call_details);

  memset(ops, 0, sizeof(ops));
  op = ops;
  op->op = GRPC_OP_SEND_INITIAL_METADATA;
  op->data.send_initial_metadata.count = 0;
  op->flags = 0;
  op->reserved = nullptr;
  op++;
  op->op = GRPC_OP_SEND_MESSAGE;
  op->data.send_message.send_message = request_payload;
  op->flags = 0;
  op->reserved = nullptr;
  op++;
  op->op = GRPC_OP_SEND_CLOSE_FROM_CLIENT;
  op->flags = 0;
  op->reserved = nullptr;
  op++;
  op->op = GRPC_OP_RECV_INITIAL_METADATA;
  op->data.recv_initial_metadata.recv_initial_metadata = &initial_metadata_recv;
  op->flags = 0;
  op->reserved = nullptr;
  op++;
  op->op = GRPC_OP_RECV_MESSAGE;
  op->data.recv_message.recv_message = &response_payload_recv;
  op->flags = 0;
  op->reserved = nullptr;
  op++;
  op->op = GRPC_OP_RECV_STATUS_ON_CLIENT;
  op->data.recv_status_on_client.trailing_metadata = &trailing_metadata_recv;
  op->data.recv_status_on_client.status = &status;
  op->data.recv_status_on_client.status_details = &details;
  op->flags = 0;
  op->reserved = nullptr;
  op++;
  error = grpc_call_start_batch(c, ops, static_cast<size_t>(op - ops),
                                grpc_core::CqVerifier::tag(1), nullptr);
  GPR_ASSERT(GRPC_CALL_OK == error);

  if (mode == FAIL) {
    // Expect the call to fail since the channel credentials did not satisfy the
    // minimum security level requirements.
    cqv.Expect(grpc_core::CqVerifier::tag(1), true);
    cqv.Verify();
    GPR_ASSERT(status == GRPC_STATUS_UNAUTHENTICATED);
  } else {
    error = grpc_server_request_call(f->server(), &s, &call_details,
                                     &request_metadata_recv, f->cq(), f->cq(),
                                     grpc_core::CqVerifier::tag(101));
    GPR_ASSERT(GRPC_CALL_OK == error);
    cqv.Expect(grpc_core::CqVerifier::tag(101), true);
    cqv.Verify();
    server_auth_context = grpc_call_auth_context(s);
    GPR_ASSERT(server_auth_context != nullptr);
    print_auth_context(0, server_auth_context);
    grpc_auth_context_release(server_auth_context);

    client_auth_context = grpc_call_auth_context(c);
    GPR_ASSERT(client_auth_context != nullptr);
    print_auth_context(1, client_auth_context);
    grpc_auth_context_release(client_auth_context);

    // Cannot set creds on the server call object.
    GPR_ASSERT(grpc_call_set_credentials(s, nullptr) != GRPC_CALL_OK);

    memset(ops, 0, sizeof(ops));
    op = ops;
    op->op = GRPC_OP_SEND_INITIAL_METADATA;
    op->data.send_initial_metadata.count = 0;
    op->flags = 0;
    op->reserved = nullptr;
    op++;
    op->op = GRPC_OP_RECV_MESSAGE;
    op->data.recv_message.recv_message = &request_payload_recv;
    op->flags = 0;
    op->reserved = nullptr;
    op++;
    error = grpc_call_start_batch(s, ops, static_cast<size_t>(op - ops),
                                  grpc_core::CqVerifier::tag(102), nullptr);
    GPR_ASSERT(GRPC_CALL_OK == error);

    cqv.Expect(grpc_core::CqVerifier::tag(102), true);
    cqv.Verify();

    memset(ops, 0, sizeof(ops));
    op = ops;
    op->op = GRPC_OP_RECV_CLOSE_ON_SERVER;
    op->data.recv_close_on_server.cancelled = &was_cancelled;
    op->flags = 0;
    op->reserved = nullptr;
    op++;
    op->op = GRPC_OP_SEND_MESSAGE;
    op->data.send_message.send_message = response_payload;
    op->flags = 0;
    op->reserved = nullptr;
    op++;
    op->op = GRPC_OP_SEND_STATUS_FROM_SERVER;
    op->data.send_status_from_server.trailing_metadata_count = 0;
    op->data.send_status_from_server.status = GRPC_STATUS_OK;
    grpc_slice status_details = grpc_slice_from_static_string("xyz");
    op->data.send_status_from_server.status_details = &status_details;
    op->flags = 0;
    op->reserved = nullptr;
    op++;
    error = grpc_call_start_batch(s, ops, static_cast<size_t>(op - ops),
                                  grpc_core::CqVerifier::tag(103), nullptr);
    GPR_ASSERT(GRPC_CALL_OK == error);

    cqv.Expect(grpc_core::CqVerifier::tag(103), true);
    cqv.Expect(grpc_core::CqVerifier::tag(1), true);
    cqv.Verify();

    GPR_ASSERT(status == GRPC_STATUS_OK);
    GPR_ASSERT(0 == grpc_slice_str_cmp(details, "xyz"));
    GPR_ASSERT(0 == grpc_slice_str_cmp(call_details.method, "/foo"));
    GPR_ASSERT(was_cancelled == 0);
    GPR_ASSERT(byte_buffer_eq_string(request_payload_recv, "hello world"));
    GPR_ASSERT(byte_buffer_eq_string(response_payload_recv, "hello you"));

    switch (mode) {
      case NONE:
        if (use_secure_call_creds) {
          GPR_ASSERT(contains_metadata(
              &request_metadata_recv, GRPC_IAM_AUTHORIZATION_TOKEN_METADATA_KEY,
              iam_token));
          GPR_ASSERT(contains_metadata(&request_metadata_recv,
                                       GRPC_IAM_AUTHORITY_SELECTOR_METADATA_KEY,
                                       iam_selector));
        } else {
          GPR_ASSERT(contains_metadata(&request_metadata_recv, fake_md_key,
                                       fake_md_value));
        }
        break;
      case OVERRIDE:
        if (use_secure_call_creds) {
          GPR_ASSERT(contains_metadata(
              &request_metadata_recv, GRPC_IAM_AUTHORIZATION_TOKEN_METADATA_KEY,
              overridden_iam_token));
          GPR_ASSERT(contains_metadata(&request_metadata_recv,
                                       GRPC_IAM_AUTHORITY_SELECTOR_METADATA_KEY,
                                       overridden_iam_selector));
        } else {
          GPR_ASSERT(contains_metadata(&request_metadata_recv,
                                       overridden_fake_md_key,
                                       overridden_fake_md_value));
        }
        break;
      case DESTROY:
        GPR_ASSERT(!contains_metadata(&request_metadata_recv,
                                      GRPC_IAM_AUTHORIZATION_TOKEN_METADATA_KEY,
                                      iam_token));
        GPR_ASSERT(!contains_metadata(&request_metadata_recv,
                                      GRPC_IAM_AUTHORITY_SELECTOR_METADATA_KEY,
                                      iam_selector));
        GPR_ASSERT(!contains_metadata(&request_metadata_recv,
                                      GRPC_IAM_AUTHORIZATION_TOKEN_METADATA_KEY,
                                      overridden_iam_token));
        GPR_ASSERT(!contains_metadata(&request_metadata_recv,
                                      GRPC_IAM_AUTHORITY_SELECTOR_METADATA_KEY,
                                      overridden_iam_selector));
        GPR_ASSERT(!contains_metadata(&request_metadata_recv, fake_md_key,
                                      fake_md_value));
        GPR_ASSERT(!contains_metadata(&request_metadata_recv,
                                      overridden_fake_md_key,
                                      overridden_fake_md_value));
        break;
      case FAIL:
        GPR_ASSERT(0);
    }
    grpc_call_unref(s);
  }

  grpc_slice_unref(details);
  grpc_metadata_array_destroy(&initial_metadata_recv);
  grpc_metadata_array_destroy(&trailing_metadata_recv);
  grpc_metadata_array_destroy(&request_metadata_recv);
  grpc_call_details_destroy(&call_details);

  grpc_call_unref(c);

  grpc_byte_buffer_destroy(request_payload);
  grpc_byte_buffer_destroy(response_payload);
  grpc_byte_buffer_destroy(request_payload_recv);
  grpc_byte_buffer_destroy(response_payload_recv);
}

static void test_request_response_with_payload_and_call_creds(
    const CoreTestConfiguration& config, bool use_secure_call_creds) {
  request_response_with_payload_and_call_creds(
      "test_request_response_with_payload_and_call_creds", config, NONE,
      use_secure_call_creds);
}

static void test_request_response_with_payload_and_overridden_call_creds(
    const CoreTestConfiguration& config, bool use_secure_call_creds) {
  request_response_with_payload_and_call_creds(
      "test_request_response_with_payload_and_overridden_call_creds", config,
      OVERRIDE, use_secure_call_creds);
}

static void test_request_response_with_payload_and_deleted_call_creds(
    const CoreTestConfiguration& config, bool use_secure_call_creds) {
  request_response_with_payload_and_call_creds(
      "test_request_response_with_payload_and_deleted_call_creds", config,
      DESTROY, use_secure_call_creds);
}

static void test_request_response_with_payload_fail_to_send_call_creds(
    const CoreTestConfiguration& config, bool use_secure_call_creds) {
  request_response_with_payload_and_call_creds(
      "test_request_response_with_payload_fail_to_send_call_creds", config,
      FAIL, use_secure_call_creds);
}

static void test_request_with_server_rejecting_client_creds(
    const CoreTestConfiguration& config) {
  grpc_op ops[6];
  grpc_op* op;
  grpc_call* c;

  gpr_timespec deadline = grpc_timeout_seconds_to_deadline(5);
  grpc_metadata_array initial_metadata_recv;
  grpc_metadata_array trailing_metadata_recv;
  grpc_metadata_array request_metadata_recv;
  grpc_call_details call_details;
  grpc_status_code status;
  grpc_call_error error;
  grpc_slice details;
  grpc_byte_buffer* response_payload_recv = nullptr;
  grpc_slice request_payload_slice =
      grpc_slice_from_copied_string("hello world");
  grpc_byte_buffer* request_payload =
      grpc_raw_byte_buffer_create(&request_payload_slice, 1);
  grpc_call_credentials* creds;

  auto f = begin_test(config, "test_request_with_server_rejecting_client_creds",
                      false, 1);
  grpc_core::CqVerifier cqv(f->cq());

  c = grpc_channel_create_call(f->client(), nullptr, GRPC_PROPAGATE_DEFAULTS,
                               f->cq(), grpc_slice_from_static_string("/foo"),
                               nullptr, deadline, nullptr);
  GPR_ASSERT(c);

  creds = grpc_md_only_test_credentials_create(fake_md_key, fake_md_value);
  GPR_ASSERT(creds != nullptr);
  GPR_ASSERT(grpc_call_set_credentials(c, creds) == GRPC_CALL_OK);
  grpc_call_credentials_release(creds);

  grpc_metadata_array_init(&initial_metadata_recv);
  grpc_metadata_array_init(&trailing_metadata_recv);
  grpc_metadata_array_init(&request_metadata_recv);
  grpc_call_details_init(&call_details);

  memset(ops, 0, sizeof(ops));
  op = ops;
  op->op = GRPC_OP_RECV_STATUS_ON_CLIENT;
  op->data.recv_status_on_client.trailing_metadata = &trailing_metadata_recv;
  op->data.recv_status_on_client.status = &status;
  op->data.recv_status_on_client.status_details = &details;
  op->flags = 0;
  op->reserved = nullptr;
  op++;
  op->op = GRPC_OP_SEND_INITIAL_METADATA;
  op->data.send_initial_metadata.count = 0;
  op->flags = 0;
  op->reserved = nullptr;
  op++;
  op->op = GRPC_OP_SEND_MESSAGE;
  op->data.send_message.send_message = request_payload;
  op->flags = 0;
  op->reserved = nullptr;
  op++;
  op->op = GRPC_OP_SEND_CLOSE_FROM_CLIENT;
  op->flags = 0;
  op->reserved = nullptr;
  op++;
  op->op = GRPC_OP_RECV_INITIAL_METADATA;
  op->data.recv_initial_metadata.recv_initial_metadata = &initial_metadata_recv;
  op->flags = 0;
  op->reserved = nullptr;
  op++;
  op->op = GRPC_OP_RECV_MESSAGE;
  op->data.recv_message.recv_message = &response_payload_recv;
  op->flags = 0;
  op->reserved = nullptr;
  op++;
  error = grpc_call_start_batch(c, ops, static_cast<size_t>(op - ops),
                                grpc_core::CqVerifier::tag(1), nullptr);
  GPR_ASSERT(error == GRPC_CALL_OK);

  cqv.Expect(grpc_core::CqVerifier::tag(1), true);
  cqv.Verify();

  GPR_ASSERT(status == GRPC_STATUS_UNAUTHENTICATED);

  grpc_metadata_array_destroy(&initial_metadata_recv);
  grpc_metadata_array_destroy(&trailing_metadata_recv);
  grpc_metadata_array_destroy(&request_metadata_recv);
  grpc_call_details_destroy(&call_details);

  grpc_byte_buffer_destroy(request_payload);
  grpc_byte_buffer_destroy(response_payload_recv);
  grpc_slice_unref(details);

  grpc_call_unref(c);
}

void call_creds(const CoreTestConfiguration& config) {
  // Test fixtures that support call credentials with a minimum security level
  // of GRPC_PRIVACY_AND_INTEGRITY
  if (config.feature_mask & FEATURE_MASK_SUPPORTS_PER_CALL_CREDENTIALS) {
    test_request_response_with_payload_and_call_creds(config, true);
    test_request_response_with_payload_and_overridden_call_creds(config, true);
    test_request_response_with_payload_and_deleted_call_creds(config, true);
  }
  // Test that fixtures that support call credentials with a minimum security
  // level of GRPC_SECURITY_NONE cannot send call credentials that require
  // higher security level
  if (config.feature_mask &
      FEATURE_MASK_SUPPORTS_PER_CALL_CREDENTIALS_LEVEL_INSECURE) {
    test_request_response_with_payload_fail_to_send_call_creds(config, true);
  }
  // Fixtures that support sending call credentials should be able to send call
  // credentials of security level GRPC_SECURITY_NONE.
  if (config.feature_mask & FEATURE_MASK_SUPPORTS_PER_CALL_CREDENTIALS ||
      config.feature_mask &
          FEATURE_MASK_SUPPORTS_PER_CALL_CREDENTIALS_LEVEL_INSECURE) {
    test_request_response_with_payload_and_call_creds(config, false);
    test_request_response_with_payload_and_overridden_call_creds(config, false);
    test_request_response_with_payload_and_deleted_call_creds(config, false);
    test_request_with_server_rejecting_client_creds(config);
  }
}

void call_creds_pre_init(void) {}
