require 'spec_helper'

if defined?(ActionDispatch::Request)

  describe ApiAuth::RequestDrivers::ActionDispatchRequest do
    let(:timestamp) { Time.now.utc.httpdate }
    let(:content_sha256) { '47DEQpj8HBSa+/TImW+5JCeuQeRkm5NMpJWZG3hSuFU=' }

    let(:request) do
      ActionDispatch::Request.new(
        'AUTHORIZATION' => 'APIAuth 1044:12345',
        'PATH_INFO' => '/resource.xml',
        'QUERY_STRING' => 'foo=bar&bar=foo',
        'REQUEST_METHOD' => 'PUT',
        'HTTP_X_AUTHORIZATION_CONTENT_SHA256' => content_sha256,
        'CONTENT_TYPE' => 'text/plain',
        'CONTENT_LENGTH' => '11',
        'HTTP_DATE' => timestamp,
        'rack.input' => StringIO.new("hello\nworld")
      )
    end

    let(:request2) do
      ActionDispatch::Request.new(
        'AUTHORIZATION' => 'APIAuth 1044:12345',
        'PATH_INFO' => '/resource.xml',
        'QUERY_STRING' => 'foo=bar&bar=foo',
        'REQUEST_METHOD' => 'PUT',
        'X_AUTHORIZATION_CONTENT_SHA256' => content_sha256,
        'CONTENT_TYPE' => 'text/plain',
        'CONTENT_LENGTH' => '11',
        'HTTP_DATE' => timestamp,
        'rack.input' => StringIO.new("hello\nworld")
      )
    end

    let(:request3) do
      ActionDispatch::Request.new(
        'AUTHORIZATION' => 'APIAuth 1044:12345',
        'PATH_INFO' => '/resource.xml',
        'QUERY_STRING' => 'foo=bar&bar=foo',
        'REQUEST_METHOD' => 'PUT',
        'X-AUTHORIZATION-CONTENT-SHA256' => content_sha256,
        'CONTENT_TYPE' => 'text/plain',
        'CONTENT_LENGTH' => '11',
        'HTTP_DATE' => timestamp,
        'rack.input' => StringIO.new("hello\nworld")
      )
    end

    subject(:driven_request) { ApiAuth::RequestDrivers::ActionDispatchRequest.new(request) }

    describe 'getting headers correctly' do
      it 'gets the content_type' do
        expect(driven_request.content_type).to eq('text/plain')
      end

      it 'gets the content_hash' do
        expect(driven_request.content_hash).to eq(content_sha256)
      end

      it 'gets the content_hash for request 2' do
        example_request = ApiAuth::RequestDrivers::ActionDispatchRequest.new(request2)
        expect(example_request.content_hash).to eq(content_sha256)
      end

      it 'gets the content_hash for request 3' do
        example_request = ApiAuth::RequestDrivers::ActionDispatchRequest.new(request3)
        expect(example_request.content_hash).to eq(content_sha256)
      end

      it 'gets the request_uri' do
        expect(driven_request.request_uri).to eq('/resource.xml?foo=bar&bar=foo')
      end

      it 'gets the timestamp' do
        expect(driven_request.timestamp).to eq(timestamp)
      end

      it 'gets the authorization_header' do
        expect(driven_request.authorization_header).to eq('APIAuth 1044:12345')
      end

      describe '#calculated_hash' do
        it 'calculates hash from the body' do
          expect(driven_request.calculated_hash).to eq('JsYKYdAdtYNspw/v1EpqAWYgQTyO9fJZpsVhLU9507g=')
        end

        it 'treats no body as empty string' do
          request.env['rack.input'] = StringIO.new
          request.env['CONTENT_LENGTH'] = 0
          expect(driven_request.calculated_hash).to eq('47DEQpj8HBSa+/TImW+5JCeuQeRkm5NMpJWZG3hSuFU=')
        end
      end

      describe 'http_method' do
        context 'when put request' do
          let(:request) do
            ActionDispatch::Request.new('REQUEST_METHOD' => 'PUT')
          end

          it 'returns upcased put' do
            expect(driven_request.http_method).to eq('PUT')
          end
        end

        context 'when get request' do
          let(:request) do
            ActionDispatch::Request.new('REQUEST_METHOD' => 'GET')
          end

          it 'returns upcased get' do
            expect(driven_request.http_method).to eq('GET')
          end
        end
      end
    end

    describe 'setting headers correctly' do
      let(:request) do
        ActionDispatch::Request.new(
          'PATH_INFO' => '/resource.xml',
          'QUERY_STRING' => 'foo=bar&bar=foo',
          'REQUEST_METHOD' => 'PUT',
          'CONTENT_TYPE' => 'text/plain',
          'CONTENT_LENGTH' => '11',
          'rack.input' => StringIO.new("hello\nworld")
        )
      end

      describe '#populate_content_hash' do
        context 'when getting' do
          it "doesn't populate content hash" do
            request.env['REQUEST_METHOD'] = 'GET'
            driven_request.populate_content_hash
            expect(request.env['X-AUTHORIZATION-CONTENT-SHA256']).to be_nil
          end
        end

        context 'when posting' do
          it 'populates content hash' do
            request.env['REQUEST_METHOD'] = 'POST'
            driven_request.populate_content_hash
            expect(request.env['X-AUTHORIZATION-CONTENT-SHA256']).to eq('JsYKYdAdtYNspw/v1EpqAWYgQTyO9fJZpsVhLU9507g=')
          end

          it 'refreshes the cached headers' do
            driven_request.populate_content_hash
            expect(driven_request.content_hash).to eq('JsYKYdAdtYNspw/v1EpqAWYgQTyO9fJZpsVhLU9507g=')
          end
        end

        context 'when putting' do
          it 'populates content hash' do
            request.env['REQUEST_METHOD'] = 'PUT'
            driven_request.populate_content_hash
            expect(request.env['X-AUTHORIZATION-CONTENT-SHA256']).to eq('JsYKYdAdtYNspw/v1EpqAWYgQTyO9fJZpsVhLU9507g=')
          end

          it 'refreshes the cached headers' do
            driven_request.populate_content_hash
            expect(driven_request.content_hash).to eq('JsYKYdAdtYNspw/v1EpqAWYgQTyO9fJZpsVhLU9507g=')
          end
        end

        context 'when deleting' do
          it "doesn't populate content hash" do
            request.env['REQUEST_METHOD'] = 'DELETE'
            driven_request.populate_content_hash
            expect(request.env['X-AUTHORIZATION-CONTENT-SHA256']).to be_nil
          end
        end
      end

      describe '#set_date' do
        before do
          allow(Time).to receive_message_chain(:now, :utc, :httpdate).and_return(timestamp)
        end

        it 'sets the date header of the request' do
          driven_request.set_date
          expect(request.env['HTTP_DATE']).to eq(timestamp)
        end

        it 'refreshes the cached headers' do
          driven_request.set_date
          expect(driven_request.timestamp).to eq(timestamp)
        end
      end

      describe '#set_auth_header' do
        it 'sets the auth header' do
          driven_request.set_auth_header('APIAuth 1044:54321')
          expect(request.env['Authorization']).to eq('APIAuth 1044:54321')
        end
      end
    end

    describe 'content_hash_mismatch?' do
      context 'when getting' do
        before do
          request.env['REQUEST_METHOD'] = 'GET'
        end

        it 'is false' do
          expect(driven_request.content_hash_mismatch?).to be false
        end
      end

      context 'when posting' do
        before do
          request.env['REQUEST_METHOD'] = 'POST'
        end

        context 'when calculated matches sent' do
          before do
            request.env['X-AUTHORIZATION-CONTENT-SHA256'] = 'JsYKYdAdtYNspw/v1EpqAWYgQTyO9fJZpsVhLU9507g='
          end

          it 'is false' do
            expect(driven_request.content_hash_mismatch?).to be false
          end
        end

        context "when calculated doesn't match sent" do
          before do
            request.env['X-AUTHORIZATION-CONTENT-SHA256'] = '3'
          end

          it 'is true' do
            expect(driven_request.content_hash_mismatch?).to be true
          end
        end
      end

      context 'when putting' do
        before do
          request.env['REQUEST_METHOD'] = 'PUT'
        end

        context 'when calculated matches sent' do
          before do
            request.env['X-AUTHORIZATION-CONTENT-SHA256'] = 'JsYKYdAdtYNspw/v1EpqAWYgQTyO9fJZpsVhLU9507g='
          end

          it 'is false' do
            expect(driven_request.content_hash_mismatch?).to be false
          end
        end

        context "when calculated doesn't match sent" do
          before do
            request.env['X-AUTHORIZATION-CONTENT-SHA256'] = '3'
          end

          it 'is true' do
            expect(driven_request.content_hash_mismatch?).to be true
          end
        end
      end

      context 'when deleting' do
        before do
          request.env['REQUEST_METHOD'] = 'DELETE'
        end

        it 'is false' do
          expect(driven_request.content_hash_mismatch?).to be false
        end
      end
    end

    describe 'fetch_headers' do
      it 'returns request headers' do
        expect(driven_request.fetch_headers).to include('CONTENT_TYPE' => 'text/plain')
      end
    end
  end
end