# Copyright (C) 2013 Dmitry Yakimenko (detunized@gmail.com).
# Licensed under the terms of the MIT license. See LICENCE for details.

require "spec_helper"
require_relative "test_data"

describe LastPass::Parser do
    let(:key_iteration_count) { 5000 }
    let(:blob) { LastPass::Blob.new TEST_BLOB, key_iteration_count }
    let(:padding) { "BEEFFACE"}
    let(:encryption_key) { "OfOUvVnQzB4v49sNh4+PdwIFb9Fr5+jVfWRTf+E2Ghg=".decode64 }
    let(:encoded_rsa_key) { "98F3F5518AE7C03EBBF195A616361619033509FB1FFA0408E883B7C5E80381F8" +
                            "C8A343925DDA78FB06A14324BEC77EAF63290D381F54763A2793FE25C3247FC0" +
                            "29022687F453426DE96A9FB34CEB55C02764FB41E5E1619226FE47FA7EA40B41" +
                            "0973132F7AB2DE2D7F08C181C7D56BBF92CD4D44BC7DEE4253DEC36C77D28E30" +
                            "6F41B8BB26B0EDB97BADCEE912D3671C22339036FC064F5AF60D3545D47B8263" +
                            "6BBA1896ECDCF5EBE99A1061EFB8FBBD6C3500EA06A28BB8863F413702D9C05B" +
                            "9A54120F1BEFA0D98A48E82622A36DBD79772B5E4AD957045DC2B97311983592" +
                            "A357037DDA172C284B4FEC7DF8962A11B42079D6F943C8F9C0FEDFEA0C43A362" +
                            "B550E217715FD82D9F3BB168A006B0880B1F3660076158FE8CF6B706CF2FEAA1" +
                            "A731D1F68B1BC20E7ADE15097D2CD84606B4B0756DFE25DAF110D62841F44265" +
                            "73A676B904972B31AD7B02093C536341E1DA943F1AFF88DF2005BD04C6897FB6" +
                            "F9E307DA1C2BD219AB39F911FF90C6B1EA658C72C67C1EADC36CD5202654B4E1" +
                            "99A88F13DCE1148CC04F81485896627BB1DB5C73969520CC66652492383930E3" +
                            "3AFD57BE171F4BA25016EC9C3662F5B054101E381565433E46CB9FD517B59AE8" +
                            "A5CE7D11005282E551E9DCAA1996763E41B49677F906F122AAB76E852F35B31F" +
                            "397B70949D5F6C8DAA244AF16E9D48E0801E5C6D3FCEAFD2C3E157968B3E796C" +
                            "87E1F3FFF86B62FE5263D1A597E3906BF697C019F1F543D7BB1E11B08837B47F" +
                            "4528E4B47EB77508CFC0581B2A005383D0A238EA5BDE2E2602E0D2408B139735" +
                            "F4BAF8D6CF260BBC81833A85F14C5746AC6081B878486F5A4BD23B821F3F5F6B" +
                            "DAC8A9B57E25E24EDB8D701F01AE142D63A8A7D0F1CC8FAFF5F0320551CEB29B" +
                            "DB6907C57E38602927AD7240003FEB238AC5437FE4BAD11BB5038CA74D539523" +
                            "A167B8EBB1210608EB7DA53B4155D05B87D21848E58905EFA550EA5A51E0A68D" +
                            "5FF0F9E0CC0D5105DD98BE9E2C41362794A71A573CCA87B57147115B86FC8A6B" +
                            "B1778CED1920787271C75D69C5D63CD798915BF8F9877808F841F9269B2EA809" +
                            "0E11F6C89FDB537F341142CA29BAC761E1CF9D58FFB0C44A26E5EF7FA14142C8" +
                            "A84BC9304A221D5F961DB41B5925B06823A12A6F8950E47325021A747A02A28F" +
                            "DAE65997EBDF5D2BDBCA7C8D689AE186A9FE85A170B76EE92595C9E33639C993" +
                            "07C377FA4DA975E191810E993CDC0A33EE494B0EE8A1B6A9408285012967C17A" +
                            "8CB5EE8E7973CF9186A98000FE00F1CC76420089C6BDCE9E39D403C320DF1135" +
                            "1597FF8B231689389CCE12844289FEFE468BFCAEE9A2CFB1A8DD066AEC974DA9" +
                            "C8530C9A17593E25DC89934E056B178329C4BBF7113657677AB25EE66A1E1D92" +
                            "F62154B2451B37727F05B3AC0F2501F7A95845C9BE210D411028C27A9AD4B0E8" +
                            "31A6C46D26883A8AA2D1E2BD3E8E122A6FC21CECB7AE2B91C6FCFA793C5CAFF6" +
                            "53C6670D914A29EAD81CD5C29FFB048C81CC80EDD693B4D8091B2D5DE88EA042" +
                            "11AC551F406B713278BD14667E437C610953D6186C2986BA60361C2013395E8E" +
                            "A9D14CD00EC5C61147BE03D8965B5376DF32E2C3740128398E0D47900C888FD0" +
                            "D1F7D583808AFBC0712806E11462B37815C20692FB38E61CC0B1AAF66A854982" +
                            "6A1F5FFFF2436B0B9F9EDFF4F5B59B362AA1D25A4E3C398EB18445483F8419BD" +
                            "1511A5177E9C4B7034375A2D91B95153535E6CD5F023F4EED0E15B5415A3B7A7" +
                            "7E390AA698DF00F4FD897B0454C00959AF0CB54B272DE63968815B971C44B273" +
                            "6AC737FAE6A19F544907833F13C6F424D30E3B85054A4402EC94079C1473C20B" +
                            "E4C1B33525486BB098EF960082DB4DF5FE9CAF71681B03CB2D4BE7382FF0C03F" +
                            "18144DE554256591773DC3F381116955233FDA7223D71C402E558783F221E25A" +
                            "94FECD350654A9CD8EE8C39E4B1CFBA0D5FD46891527F2D0FC9EA61584A76D59" +
                            "99719811B2BAFC99769E6911733ED389A731C327CB5D7BB6D79CE030D3285586" +
                            "C6681FC8C110EFE30CEE883FFEF5FB511B4421863E2A15F8CDCFA7B84B931121" +
                            "5B23093DE3B5E7F4CFCCE60BE7857B7442B8FCC3E43C46C4BFA3E9ABD2F479F6" +
                            "BD8D3F3D36C0FAC1F4D72FBE96C644AB56F73CAF956D5544B2EB9C589ED30FF3" +
                            "0BB03D09DB455764EF4A33C24F93170A98A21455826390B13A8F338A820EC08D" +
                            "6E9F562282C2F815BB57CE511AB6B0DE75EFA63F28C6D0B25298CDAAC76742D5" +
                            "353B26B77C1533B4DFE2D95F3E89315C0D806A90FCDFDC31CE04A9E29937680D" +
                            "32D8B503352388109C1F5F41E8496302E13A61917F70A9AA3C5ECDBD88163E3C" +
                            "F0580C5EB1382BB66194AC0983BAA16B4D220756F4B7E3DDFFC5BF343FA7E31D" +
                            "14FED4409AD0FE9BBE01AF79DA4852253CBF166FDCA90E894B5267A502F73347" +
                            "06F8C767EC861324CC7734352D76DB007E25105E7994CF91D79532221316F4DE" +
                            "56BAE4351D3E3C6549FBFEF13BBE2636071794AD9EC3787B4A71E5438B86C358" +
                            "65ECF2EA5980318F82D8B113C0EC8FEE41C243E0A1A09F373A0CF546FA18E1EC" +
                            "7DB4842A6B8B03D115654222B87DA6034EFDE2224DBD23AB104BF3723856C03D" +
                            "B639BA073F2CC8E4AB05BAADDB5DEACC1874F4D6F86B95710019114DACBFE48F" +
                            "EF2AE2DF27356B5C17948B26A41FD1A8F07E8068E176F995910C373886DB47D2" +
                            "6C2FE5CD97AAF1829EBC1EEBA4D88343A322E810385138F51F0E5149183699C4" +
                            "05E49ED13C2889A22742893A52567B0F7D4A3BC9F4DC6D29F713AA7FB4EF6B13" +
                            "5F92F598404A80E7D6515CE234AFA68A4B562AF203162C60D578F0D00E302958" +
                            "174E1A712FD449D257C6AA5F56E4DBD0363573931463BC910858AF1EC40C1F4A" +
                            "7BE27DE8E170D4AACF6C34B0CDE15190FD81FA5676136A4D73E2AA4BBFBB8E7C" +
                            "1178EF47362188D9288E822B10BBF2C8BE075A5BD1D3E1F08108BA8C4E6FB173" +
                            "DCECB5771E9D8AE4CD776EA3409DF30FA2252D3C3769AF12177F4A1929DC8E74" +
                            "D5AEAC94CF94EEBA0E9AC012C57B40A8BB57530C25846B841005767B9AABE436" +
                            "D4590977FDDA519B9B284CF8B8922A0E8B659ECE3745A95800EE1B3DDD33E0FF" +
                            "230C0528BC7A4CB80604411E59E08775A42C634E93BA9C77D015659AC912F436" +
                            "94F774E94050E4B3BF84290368D5AFD7F043BDCA3BD0CC8C0E267069B6F1386A" +
                            "E1D9C8B5512AAAA292FDA9CA07E27BAF983E1E25A11732797425F2BB396B302E" +
                            "0782BA183D4BC1F682365774520EAC8A321C7A0BD08027021EA0063D471E0AD1" +
                            "E1469AD803C311D3FBF50B5538265D4262B6716D90E89A8C906D08533D650000" +
                            "6BF1B8ABAAFE1CA3AFDD1A19ACABE5B86A804D36AE27163CAF390FD266D5FFEF" +
                            "FC7CE6FEF9458E4AF0C4108E32EFD11C19751B1D9883E803F7C2E1A5786F3385" +
                            "1A7CA3772ECD7CB0E9782A7D30E0A9FD09EED361B774A277C618C995FD7F7634" +
                            "E7DB3834690B58DDFF6B721157D0EC02" }
    let(:rsa_key_encryption_key) { "v4uHomAR0tAXC3fA5Nfq7DjyJxuvYErMSCcZIWZKjpM=".decode64 }

    describe ".extract_chunks" do
        context "returned chunks" do
            let(:chunks) { LastPass::Parser.extract_chunks blob }

            it { expect(chunks).to be_instance_of Array }

            it "all values are instances of Chunk" do
                expect(chunks.map(&:class).uniq).to eq [LastPass::Chunk]
            end
        end
    end

    describe ".parse_ACCT" do
        let(:accounts) {
            LastPass::Parser
                .extract_chunks(blob)
                .select { |i| i.id == "ACCT" }
                .map { |i| LastPass::Parser.parse_ACCT i, TEST_ENCRYPTION_KEY }
        }

        it "parses accounts" do
            expect(accounts.map &:id).to eq TEST_ACCOUNTS.map &:id
        end
    end

    describe ".parse_PRIK" do
        let(:chunk) { LastPass::Chunk.new "PRIK", encoded_rsa_key }
        let(:rsa_key) { LastPass::Parser.parse_PRIK chunk, rsa_key_encryption_key }

        it "parses private key" do
            expect(rsa_key).to be_instance_of OpenSSL::PKey::RSA
            expect(rsa_key.n.to_s).to eq "26119467519435514320618523953258926539081857789201" +
                                         "11592360794055150234493177840791445076164320959092" +
                                         "33977645519805962686071307052774013402170389235283" +
                                         "48398581900094955608774421569689169697285847986479" +
                                         "82303230642077254435741682688235176460351551099267" +
                                         "22581481667367599195203736002065084704013295528661" +
                                         "76687143747593851140122182044652173598693510643390" +
                                         "47711449981712845835960707676646864765530616733341" +
                                         "58401920829305659156984748726238485655720031774127" +
                                         "01900577710668575227691993026576480667273922300137" +
                                         "80405264300989392980537603337301835174777026188388" +
                                         "93147718435999645840214854231168704372464234421315" +
                                         "01138217872658041"
            expect(rsa_key.e.to_s).to eq "65537"
            expect(rsa_key.d.to_s).to eq "20217010678828834626882766446083366137418639853408" +
                                         "07494174069610076841252047428625473158347002598408" +
                                         "18346644251082549844764624454370315666751565294997" +
                                         "10533208173186395672159239558808345075823110774221" +
                                         "61501075434955107584446470508660844962452555542861" +
                                         "72030926355197158923586674949673551608716945271868" +
                                         "18816984671497443384191412119383687600754285611808" +
                                         "23265620694961977962255376280640334543711420731809" +
                                         "16169692928898605559361322123131373948352054888316" +
                                         "99068010065680008419210277574874665723796199239285" +
                                         "78432149273871356528827780412288057677598714485872" +
                                         "23380715275000339748138416696881866569449168516354" +
                                         "08203050733598637"
            expect(rsa_key.p.to_s).to eq "17745924258106322606344019888040076543466707208121" +
                                         "93651272762195900747632457567234817364256394944312" +
                                         "33791510564351470780224344194760390006214095043405" +
                                         "42496712265086317539172843039592265661675784866722" +
                                         "91261262550895476526939878375016658686669778355984" +
                                         "43725100552628219407700007375820870959681331890216" +
                                         "873285999"
            expect(rsa_key.q.to_s).to eq "14718572636476888213359534581670909910031809536407" +
                                         "40164297606657861988206326322941728093846078102409" +
                                         "77115817405984843964689092056948880068086594283588" +
                                         "67786990898525462713620707076259988063113810297786" +
                                         "62342502396556461808879680749106840152602791951788" +
                                         "07295572399572445909627940220804206538364578785262" +
                                         "498615959"
            expect(rsa_key.dmp1.to_s).to eq "11323089471614997519408698592522878386531994069" +
                                            "33541387540978328974191124807026398192741826901" +
                                            "86286081197790519393403018396347119829946883285" +
                                            "08800265628051101161010033119239372833462468119" +
                                            "90625594353955836736745514688525978377008530625" +
                                            "69694172942783772849726563761756732407513441791" +
                                            "680438851248236159711158591"
            expect(rsa_key.dmq1.to_s).to eq "12614892732210916138126631634839174964470249502" +
                                            "72370951196981338360130575847987543477227082933" +
                                            "41184913630399067613236576233063778305668453307" +
                                            "65828324726545238243590265660986543730618177968" +
                                            "24851190055502445616363498122584261892788460430" +
                                            "15963041982287770355559480659540210015737708509" +
                                            "273864533597668007301940253"
            expect(rsa_key.iqmp.to_s).to eq "12662716333617943892704787530332782239196594580" +
                                            "72960727418453194230165281227127897455330083723" +
                                            "88895713617946267318745745224382578970891647971" +
                                            "94015463887039228876036602797561671319853126600" +
                                            "52663805817336717151173320411542486382434841161" +
                                            "62999647203566877832873138065626190040996517274" +
                                            "418161068665712298519808863"
        end
    end

    describe ".parse_secure_note_server" do
        let(:url) { "url" }
        let(:username) { "username" }
        let(:password) { "password" }
        let(:notes) { "Hostname:#{url}\nUsername:#{username}\nPassword:#{password}" }

        it "returns parsed values" do
            result = LastPass::Parser.parse_secure_note_server notes
            expect(result[0]).to eq url
            expect(result[1]).to eq username
            expect(result[2]).to eq password
        end
    end

    describe ".read_chunk" do
        it "returns a chunk" do
            with_chunk_hex "ABCD", "DEADBEEF", padding do |io|
                expect(LastPass::Parser.read_chunk io).to eq LastPass::Chunk.new("ABCD", "DEADBEEF".decode_hex)
                expect(io.pos).to eq 12
            end
        end
    end

    describe ".read_item" do
        it "returns an item" do
            with_item_hex "DEADBEEF", padding do |io|
                expect(LastPass::Parser.read_item io).to eq "DEADBEEF".decode_hex
                expect(io.pos).to eq 8
            end
        end
    end

    describe ".skip_item" do
        it "skips an empty item" do
            with_item_hex "", padding do |io|
                LastPass::Parser.skip_item io
                expect(io.pos).to eq 4
            end
        end

        it "skips a non-empty item" do
            with_item_hex "DEADBEEF", padding do |io|
                LastPass::Parser.skip_item io
                expect(io.pos).to eq 8
            end
        end
    end

    describe ".read_id" do
        it "returns an id" do
            with_bytes "ABCD" + padding do |io|
                expect(LastPass::Parser.read_id io).to eq "ABCD"
                expect(io.pos).to eq 4
            end
        end
    end

    describe ".read_size" do
        it "returns a size" do
            with_hex "DEADBEEF" + padding do |io|
                expect(LastPass::Parser.read_size io).to eq 0xDEADBEEF
                expect(io.pos).to eq 4
            end
        end
    end

    describe ".read_payload" do
        it "returns a payload" do
            with_hex "FEEDDEADBEEF" + padding do |io|
                expect(LastPass::Parser.read_payload io, 6).to eq "FEEDDEADBEEF".decode_hex
                expect(io.pos).to eq 6
            end
        end
    end

    describe ".read_uint32" do
        it "returns a number" do
            with_hex "DEADBEEF" + padding do |io|
                expect(LastPass::Parser.read_size io).to eq 0xDEADBEEF
                expect(io.pos).to eq 4
            end
        end
    end

    describe ".decode_hex" do
        it "decodes hex" do
            def hex s
                s.force_encoding "ASCII-8BIT"
            end

            expect(LastPass::Parser.decode_hex "")
                .to eq ""

            expect(LastPass::Parser.decode_hex "00ff")
                .to eq hex "\x00\xFF"

            expect(LastPass::Parser.decode_hex "00010203040506070809")
                .to eq hex "\x00\x01\x02\x03\x04\x05\x06\x07\x08\x09"

            expect(LastPass::Parser.decode_hex "000102030405060708090a0b0c0d0e0f")
                .to eq hex "\x00\x01\x02\x03\x04\x05\x06\x07\x08\x09\x0A\x0B\x0C\x0D\x0E\x0F"

            expect(LastPass::Parser.decode_hex "8af633933e96a3c3550c2734bd814195")
                .to eq hex "\x8A\xF6\x33\x93\x3E\x96\xA3\xC3\x55\x0C\x27\x34\xBD\x81\x41\x95"
        end

        it "raises exception on odd length" do
            expect { LastPass::Parser.decode_hex "0" }
                .to raise_error ArgumentError, "Input length must be multple of 2"
        end

        it "raises exception on invalid characters" do
            expect { LastPass::Parser.decode_hex "xz" }
                .to raise_error ArgumentError, "Input contains invalid characters"
        end
    end

    describe ".decode_base64" do
        it "decodes base64" do
            def check base64, plain
                expect(LastPass::Parser.decode_base64 base64).to eq plain
            end

            check "", ""
            check "YQ==", "a"
            check "YWI=", "ab"
            check "YWJj", "abc"
            check "YWJjZA==", "abcd"
        end
    end

    describe ".decode_aes256_plain_auto" do
        def check encoded, decoded
            expect(LastPass::Parser.decode_aes256_plain_auto encoded, encryption_key)
                .to eq decoded
        end

        it "decodes a blank string" do
            check "", ""
        end

        it "decodes ECB/plain string" do
            check "BNhd3Q3ZVODxk9c0C788NUPTIfYnZuxXfkghtMJ8jVM=".decode64,
                   "All your base are belong to us"
        end

        it "decodes CBC/plain string" do
            check "IcokDWmjOkKtLpZehWKL6666Uj6fNXPpX6lLWlou+1Lrwb+D3ymP6BAwd6C0TB3hSA==".decode64,
                   "All your base are belong to us"
        end
    end

    describe ".decode_aes256_base64_auto" do
        def check encoded, decoded
            expect(LastPass::Parser.decode_aes256_base64_auto encoded, encryption_key)
                .to eq decoded
        end

        it "decodes a blank string" do
            check "", ""
        end

        it "decodes ECB/base64 string" do
            check "BNhd3Q3ZVODxk9c0C788NUPTIfYnZuxXfkghtMJ8jVM=",
                   "All your base are belong to us"
        end

        it "decodes CBC/base64 string" do
            check "!YFuiAVZgOD2K+s6y8yaMOw==|TZ1+if9ofqRKTatyUaOnfudletslMJ/RZyUwJuR/+aI=",
                   "All your base are belong to us"
        end
    end

    describe ".decode_aes256_ecb_plain" do
        def check encoded, decoded
            expect(LastPass::Parser.decode_aes256_ecb_plain encoded.decode64, encryption_key)
                .to eq decoded
        end

        it "decodes a blank string" do
            check "", ""
        end

        it "decodes a short string" do
            check "8mHxIA8rul6eq72a/Gq2iw==", "0123456789"
        end

        it "decodes a long string" do
            check "BNhd3Q3ZVODxk9c0C788NUPTIfYnZuxXfkghtMJ8jVM=", "All your base are belong to us"
        end
    end

    describe ".decode_aes256_ecb_base64" do
        def check encoded, decoded
            expect(LastPass::Parser.decode_aes256_ecb_base64 encoded, encryption_key)
                .to eq decoded
        end

        it "decodes a blank string" do
            check "", ""
        end

        it "decodes a short string" do
            check "8mHxIA8rul6eq72a/Gq2iw==", "0123456789"
        end

        it "decodes a long string" do
            check "BNhd3Q3ZVODxk9c0C788NUPTIfYnZuxXfkghtMJ8jVM=", "All your base are belong to us"
        end
    end

    describe ".decode_aes256_cbc_plain" do
        def check encoded, decoded
            expect(LastPass::Parser.decode_aes256_cbc_plain encoded.decode64, encryption_key)
                .to eq decoded
        end

        it "decodes a blank string" do
            check "", ""
        end

        it "decodes a short string" do
            check "IQ+hiIy0vGG4srsHmXChe3ehWc/rYPnfiyqOG8h78DdX", "0123456789"
        end

        it "decodes a long string" do
            check "IcokDWmjOkKtLpZehWKL6666Uj6fNXPpX6lLWlou+1Lrwb+D3ymP6BAwd6C0TB3hSA==",
                  "All your base are belong to us"
        end
    end

    describe ".decode_aes256_cbc_base64" do
        def check encoded, decoded
            expect(LastPass::Parser.decode_aes256_cbc_base64 encoded, encryption_key)
                .to eq decoded
        end

        it "decodes a blank string" do
            check "", ""
        end

        it "decodes a short string" do
            check "!6TZb9bbrqpocMaNgFjrhjw==|f7RcJ7UowesqGk+um+P5ug==", "0123456789"
        end

        it "decodes a long string" do
            check "!YFuiAVZgOD2K+s6y8yaMOw==|TZ1+if9ofqRKTatyUaOnfudletslMJ/RZyUwJuR/+aI=",
                  "All your base are belong to us"
        end
    end

    #
    # Helpers
    #

    private

    def with_blob &block
        with_bytes TEST_BLOB, &block
    end

    def with_hex hex, &block
        with_bytes hex.decode_hex, &block
    end

    def with_bytes bytes, &block
        StringIO.open bytes do |io|
            yield io
        end
    end

    #
    # Chunks
    #

    def with_chunk id, payload, padding = "", &block
        with_bytes make_chunk(id, payload, padding), &block
    end

    def with_chunk_hex id, payload, padding = "", &block
        with_bytes make_chunk_hex(id, payload, padding), &block
    end

    def make_chunk id, payload, padding = ""
        [id, payload.size, payload, padding].pack "a4Na*a*"
    end

    def make_chunk_hex id, payload, padding = ""
        make_chunk id, payload.decode_hex, padding
    end

    #
    # Items
    #

    def with_item payload, padding = "", &block
        with_bytes make_item(payload, padding), &block
    end

    def with_item_hex payload, padding = "", &block
        with_bytes make_item_hex(payload, padding), &block
    end

    def make_item payload, padding = ""
        [payload.size, payload, padding].pack "Na*a*"
    end

    def make_item_hex payload, padding = ""
        make_item payload.decode_hex, padding
    end
end