// Copyright (c) .NET Foundation. All rights reserved.
// Licensed under the Apache License, Version 2.0. See License.txt in the project root for license information.

using System;
using System.Threading;
using System.Threading.Tasks;
using Microsoft.AspNetCore.Authentication.Cookies;
using Microsoft.AspNetCore.Builder;
using Microsoft.AspNetCore.Http;
using Microsoft.Extensions.Logging;
using Microsoft.Extensions.Options;
using Moq;
using Xunit;

namespace Microsoft.AspNetCore.Identity.Service
{
    public class ClientApplicationValidatorTest
    {
        [Theory]
        [InlineData(true)]
        [InlineData(false)]
        public async Task ValidateClientIdAsync_ChecksThatTheClientIdExist(bool exists)
        {
            // Arrange
            var options = new IdentityServiceOptions();
            var store = new Mock<IApplicationStore<IdentityServiceApplication>>();
            store.Setup(s => s.FindByClientIdAsync(It.IsAny<string>(), It.IsAny<CancellationToken>()))
                .ReturnsAsync(exists ? new IdentityServiceApplication() : null);

            var manager = new ApplicationManager<IdentityServiceApplication>(
                Options.Create(new ApplicationOptions()),
                store.Object,
                Mock.Of<IPasswordHasher<IdentityServiceApplication>>(),
                Array.Empty<IApplicationValidator<IdentityServiceApplication>>(),
                Mock.Of<ILogger<ApplicationManager<IdentityServiceApplication>>>(),
                new ApplicationErrorDescriber());

            var clientValidator = new ClientApplicationValidator<IdentityServiceApplication>(
                Options.Create(options),
                GetSessionManager(),
                manager,
                new ProtocolErrorProvider());

            // Act
            var validation = await clientValidator.ValidateClientIdAsync("clientId");

            // Assert
            Assert.Equal(exists, validation);
        }

        [Fact]
        public async Task ValidateClientCredentialsAsync_DelegatesToApplicationManager()
        {
            // Arrange
            var options = new IdentityServiceOptions();
            var store = new Mock<IApplicationStore<IdentityServiceApplication>>();
            store.Setup(s => s.FindByClientIdAsync(It.IsAny<string>(), It.IsAny<CancellationToken>()))
                .ReturnsAsync(new IdentityServiceApplication());
            store.As<IApplicationClientSecretStore<IdentityServiceApplication>>()
                .Setup(s => s.HasClientSecretAsync(It.IsAny<IdentityServiceApplication>(), It.IsAny<CancellationToken>()))
                .ReturnsAsync(false);

            var manager = new ApplicationManager<IdentityServiceApplication>(
                Options.Create(new ApplicationOptions()),
                store.Object,
                Mock.Of<IPasswordHasher<IdentityServiceApplication>>(),
                Array.Empty<IApplicationValidator<IdentityServiceApplication>>(),
                Mock.Of<ILogger<ApplicationManager<IdentityServiceApplication>>>(),
                new ApplicationErrorDescriber());

            var clientValidator = new ClientApplicationValidator<IdentityServiceApplication>(
                Options.Create(options),
                GetSessionManager(),
                manager,
                new ProtocolErrorProvider());

            // Act
            var validation = await clientValidator.ValidateClientCredentialsAsync("clientId", null);

            // Assert
            Assert.True(validation);
        }

        private SessionManager GetSessionManager()
        {
            return new TestSessionManager(
                Mock.Of<IOptions<IdentityServiceOptions>>(),
                Mock.Of<IOptions<IdentityOptions>>(),
                Mock.Of<IOptionsSnapshot<CookieAuthenticationOptions>>(),
                new TimeStampManager(),
                Mock.Of<IHttpContextAccessor>(),
                new ProtocolErrorProvider());
        }

        private class TestSessionManager : SessionManager
        {
            public TestSessionManager(
                IOptions<IdentityServiceOptions> options,
                IOptions<IdentityOptions> identityOptions,
                IOptionsSnapshot<CookieAuthenticationOptions> cookieOptions,
                ITimeStampManager timeStampManager,
                IHttpContextAccessor contextAccessor,
                ProtocolErrorProvider errorProvider) :
                base(options, identityOptions, cookieOptions, timeStampManager, contextAccessor, errorProvider)
            {
            }

            public override Task<Session> CreateSessionAsync(string userId, string clientId)
            {
                throw new NotImplementedException();
            }

            public override Task<AuthorizeResult> IsAuthorizedAsync(AuthorizationRequest request)
            {
                throw new NotImplementedException();
            }
        }
    }
}