* Licensed to the Apache Software Foundation (ASF) under one

* or more contributor license agreements.  See the NOTICE file

* distributed with this work for additional information

* regarding copyright ownership.  The ASF licenses this file

* to you under the Apache License, Version 2.0 (the

* "License"); you may not use this file except in compliance

* with the License.  You may obtain a copy of the License at

*

*   http://www.apache.org/licenses/LICENSE-2.0

*

* Unless required by applicable law or agreed to in writing,

* software distributed under the License is distributed on an

* "AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY

* KIND, either express or implied.  See the License for the

* specific language governing permissions and limitations

* under the License.

*/

    private String getStringAttribute(final ConnObjectTO connObjectTO, final String attrName) {

        return connObjectTO.getAttrMap().get(attrName).getValues().get(0);

    }

    private boolean getBooleanAttribute(final ConnObjectTO connObjectTO, final String attrName) {

        return Boolean.parseBoolean(getStringAttribute(connObjectTO, attrName));

    }

    private long getMaxTaskId(final List<PropagationTaskTO> tasks) {

        long newMaxId = Long.MIN_VALUE;

        for (PropagationTaskTO task : tasks) {

            if (task.getId() > newMaxId) {

                newMaxId = task.getId();

            }

        }

        return newMaxId;

    }

    public static UserTO getUniqueSampleTO(final String email) {

        return getSampleTO(getUUIDString() + email);

    }

    public static UserTO getSampleTO(final String email) {

        String uid = email;

        UserTO userTO = new UserTO();

        userTO.setPassword("password123");

        userTO.setUsername(uid);

        userTO.getAttrs().add(attributeTO("fullname", uid));

        userTO.getAttrs().add(attributeTO("firstname", uid));

        userTO.getAttrs().add(attributeTO("surname", "surname"));

        userTO.getAttrs().add(attributeTO("type", "a type"));

        userTO.getAttrs().add(attributeTO("userId", uid));

        userTO.getAttrs().add(attributeTO("email", uid));

        userTO.getAttrs().add(attributeTO("loginDate", new SimpleDateFormat("yyyy-MM-dd").format(new Date())));

        userTO.getDerAttrs().add(attributeTO("cn", null));

        userTO.getVirAttrs().add(attributeTO("virtualdata", "virtualvalue"));

        return userTO;

    }

    @Test

    @SuppressWarnings("unchecked")

    public void createUserWithNoPropagation() {

        // get task list

        PagedResult<PropagationTaskTO> tasks = taskService.list(TaskType.PROPAGATION);

        assertNotNull(tasks);

        assertFalse(tasks.getResult().isEmpty());

        long maxId = getMaxTaskId(tasks.getResult());

        // create a new user

        UserTO userTO = getUniqueSampleTO("xxx@xxx.xxx");

        userTO.setPassword("password123");

        userTO.getResources().add(RESOURCE_NAME_NOPROPAGATION);

        createUser(userTO);

        // get the new task list

        tasks = taskService.list(TaskType.PROPAGATION);

        assertNotNull(tasks);

        assertFalse(tasks.getResult().isEmpty());

        long newMaxId = getMaxTaskId(tasks.getResult());

        assertTrue(newMaxId > maxId);

        // get last task

        PropagationTaskTO taskTO = taskService.read(newMaxId);

        assertNotNull(taskTO);

        assertTrue(taskTO.getExecutions().isEmpty());

    }

    @Test

    public void issue172() {

        List<PasswordPolicyTO> policies = policyService.list(PolicyType.GLOBAL_PASSWORD);

        for (PasswordPolicyTO policyTO : policies) {

            policyService.delete(policyTO.getId());

        }

        try {

            UserTO userTO = getUniqueSampleTO("issue172@syncope.apache.org");

            createUser(userTO);

        } finally {

            for (PasswordPolicyTO policyTO : policies) {

                Response response = policyService.create(policyTO);

                PasswordPolicyTO cPolicyTO = getObject(

                        response.getLocation(), PolicyService.class, PasswordPolicyTO.class);

                assertNotNull(cPolicyTO);

            }

        }

    }

    @Test

    public void issue186() {

        // 1. create an user with strict mandatory attributes only

        UserTO userTO = new UserTO();

        String userId = getUUIDString() + "issue186@syncope.apache.org";

        userTO.setUsername(userId);

        userTO.setPassword("password");

        userTO.getAttrs().add(attributeTO("userId", userId));

        userTO.getAttrs().add(attributeTO("fullname", userId));

        userTO.getAttrs().add(attributeTO("surname", userId));

        userTO = createUser(userTO);

        assertNotNull(userTO);

        assertTrue(userTO.getResources().isEmpty());

        // 2. update assigning a resource forcing mandatory constraints: must fail with RequiredValuesMissing

        UserMod userMod = new UserMod();

        userMod.setId(userTO.getId());

        userMod.setPassword("newPassword");

        userMod.getResourcesToAdd().add(RESOURCE_NAME_WS2);

        try {

            userTO = updateUser(userMod);

            fail();

        } catch (SyncopeClientException e) {

            assertEquals(ClientExceptionType.RequiredValuesMissing, e.getType());

        }

        // 3. update assigning a resource NOT forcing mandatory constraints

        // AND primary: must fail with PropagationException

        userMod = new UserMod();

        userMod.setId(userTO.getId());

        userMod.setPassword("newPassword");

        userMod.getResourcesToAdd().add(RESOURCE_NAME_WS1);

        userTO = updateUser(userMod);

        assertNotNull(userTO.getPropagationStatusTOs().get(0).getFailureReason());

        // 4. update assigning a resource NOT forcing mandatory constraints

        // BUT not primary: must succeed

        userMod = new UserMod();

        userMod.setId(userTO.getId());

        userMod.setPassword("newPassword123456");

        userMod.getResourcesToAdd().add(RESOURCE_NAME_CSV);

        updateUser(userMod);

    }

    @Test

    public void enforceMandatoryCondition() {

        UserTO userTO = getUniqueSampleTO("enforce@apache.org");

        userTO.getResources().add(RESOURCE_NAME_WS2);

        userTO.setPassword("newPassword");

        AttributeTO type = null;

        for (AttributeTO attr : userTO.getAttrs()) {

            if ("type".equals(attr.getSchema())) {

                type = attr;

            }

        }

        assertNotNull(type);

        userTO.getAttrs().remove(type);

        try {

            userTO = createUser(userTO);

            fail();

        } catch (SyncopeClientException e) {

            assertEquals(ClientExceptionType.RequiredValuesMissing, e.getType());

        }

        userTO.getAttrs().add(type);

        userTO = createUser(userTO);

        assertNotNull(userTO);

    }

    @Test

    public void enforceMandatoryConditionOnDerived() {

        ResourceTO resourceTO = resourceService.read(RESOURCE_NAME_CSV);

        assertNotNull(resourceTO);

        resourceTO.setName("resource-csv-enforcing");

        resourceTO.setEnforceMandatoryCondition(true);

        Response response = resourceService.create(resourceTO);

        resourceTO = getObject(response.getLocation(), ResourceService.class, ResourceTO.class);

        assertNotNull(resourceTO);

        UserTO userTO = getUniqueSampleTO("syncope222@apache.org");

        userTO.getResources().add(resourceTO.getName());

        userTO.setPassword("newPassword");

        try {

            userTO = createUser(userTO);

            fail();

        } catch (SyncopeClientException e) {

            assertEquals(ClientExceptionType.RequiredValuesMissing, e.getType());

        }

        userTO.getDerAttrs().add(attributeTO("csvuserid", null));

        userTO = createUser(userTO);

        assertNotNull(userTO);

        assertEquals(Collections.singleton("resource-csv-enforcing"), userTO.getResources());

    }

    @Test

    public void createUserWithDbPropagation() {

        UserTO userTO = getUniqueSampleTO("yyy@yyy.yyy");

        userTO.getResources().add(RESOURCE_NAME_TESTDB);

        userTO = createUser(userTO);

        assertNotNull(userTO);

        assertEquals(1, userTO.getPropagationStatusTOs().size());

        assertTrue(userTO.getPropagationStatusTOs().get(0).getStatus().isSuccessful());

    }

    @Test(expected = SyncopeClientException.class)

    public void createWithInvalidPassword() {

        UserTO userTO = getSampleTO("invalidpasswd@syncope.apache.org");

        userTO.setPassword("pass");

        createUser(userTO);

    }

    @Test(expected = SyncopeClientException.class)

    public void createWithInvalidUsername() {

        UserTO userTO = getSampleTO("invalidusername@syncope.apache.org");

        userTO.setUsername("us");

        MembershipTO membershipTO = new MembershipTO();

        membershipTO.setRoleId(7L);

        userTO.getMemberships().add(membershipTO);

        createUser(userTO);

    }

    @Test(expected = SyncopeClientException.class)

    public void createWithInvalidPasswordByRes() {

        UserTO userTO = getSampleTO("invalidPwdByRes@passwd.com");

        // configured to be minLength=16

        userTO.setPassword("password1");

        userTO.getResources().add(RESOURCE_NAME_NOPROPAGATION);

        createUser(userTO);

    }

    @Test(expected = SyncopeClientException.class)

    public void createWithInvalidPasswordByRole() {

        UserTO userTO = getSampleTO("invalidPwdByRole@passwd.com");

        // configured to be minLength=16

        userTO.setPassword("password1");

        final MembershipTO membership = new MembershipTO();

        membership.setRoleId(8L);

        userTO.getMemberships().add(membership);

        createUser(userTO);

    }

    @Test(expected = SyncopeClientException.class)

    public void createWithException() {

        UserTO newUserTO = new UserTO();

        newUserTO.getAttrs().add(attributeTO("userId", "userId@nowhere.org"));

        createUser(newUserTO);

    }

    @Test

    @SuppressWarnings("unchecked")

    public void create() {

        // get task list

        PagedResult<PropagationTaskTO> tasks = taskService.list(TaskType.PROPAGATION);

        assertNotNull(tasks);

        assertFalse(tasks.getResult().isEmpty());

        long maxId = getMaxTaskId(tasks.getResult());

        PropagationTaskTO taskTO = taskService.read(maxId);

        assertNotNull(taskTO);

        int maxTaskExecutions = taskTO.getExecutions().size();

        UserTO userTO = getUniqueSampleTO("a.b@c.com");

        // add a membership

        MembershipTO membershipTO = new MembershipTO();

        membershipTO.setRoleId(8L);

        userTO.getMemberships().add(membershipTO);

        // add an attribute with no values: must be ignored

        membershipTO.getAttrs().add(attributeTO("subscriptionDate", null));

        // add an attribute with a non-existing schema: must be ignored

        AttributeTO attrWithInvalidSchemaTO = attributeTO("invalid schema", "a value");

        userTO.getAttrs().add(attrWithInvalidSchemaTO);

        // add an attribute with null value: must be ignored

        userTO.getAttrs().add(attributeTO("activationDate", null));

        // 1. create user

        UserTO newUserTO = createUser(userTO);

        assertNotNull(newUserTO);

        // issue SYNCOPE-15

        assertNotNull(newUserTO.getCreationDate());

        assertNotNull(newUserTO.getCreator());

        assertNotNull(newUserTO.getLastChangeDate());

        assertNotNull(newUserTO.getLastModifier());

        assertEquals(newUserTO.getCreationDate(), newUserTO.getLastChangeDate());

        assertFalse(newUserTO.getAttrs().contains(attrWithInvalidSchemaTO));

        // check for changePwdDate

        assertNotNull(newUserTO.getCreationDate());

        // 2. check for virtual attribute value

        newUserTO = userService.read(newUserTO.getId());

        assertNotNull(newUserTO);

        assertNotNull(newUserTO.getVirAttrMap());

        assertNotNull(newUserTO.getVirAttrMap().get("virtualdata").getValues());

        assertFalse(newUserTO.getVirAttrMap().get("virtualdata").getValues().isEmpty());

        assertEquals("virtualvalue", newUserTO.getVirAttrMap().get("virtualdata").getValues().get(0));

        // get the new task list

        tasks = taskService.list(TaskType.PROPAGATION);

        assertNotNull(tasks);

        assertFalse(tasks.getResult().isEmpty());

        long newMaxId = getMaxTaskId(tasks.getResult());

        // default configuration for ws-target-resource2:

        // only failed executions have to be registered

        // --> no more tasks/executions should be added

        assertEquals(newMaxId, maxId);

        // get last task

        taskTO = taskService.read(newMaxId);

        assertNotNull(taskTO);

        assertEquals(maxTaskExecutions, taskTO.getExecutions().size());

        // 3. verify password

        UserSelfService userSelfService1 = clientFactory.create(

                newUserTO.getUsername(), "password123").getService(UserSelfService.class);

        try {

            UserTO user = userSelfService1.read();

            assertNotNull(user);

        } catch (AccessControlException e) {

            fail("Credentials should be valid and not cause AccessControlException");

        }

        UserSelfService userSelfService2 = clientFactory.create(

                newUserTO.getUsername(), "passwordXX").getService(UserSelfService.class);

        try {

            userSelfService2.read();

            fail("Credentials are invalid, thus request should raise AccessControlException");

        } catch (AccessControlException e) {

            assertNotNull(e);

        }

        // 4. try (and fail) to create another user with same (unique) values

        userTO = getSampleTO(userTO.getUsername());

        AttributeTO userIdAttr = userTO.getAttrMap().get("userId");

        userIdAttr.getValues().clear();

        userIdAttr.getValues().add("a.b@c.com");

        try {

            createUser(userTO);

            fail();

        } catch (SyncopeClientException e) {

            assertEquals(ClientExceptionType.DataIntegrityViolation, e.getType());

        }

    }

    @Test

    public void createWithRequiredValueMissing() {

        UserTO userTO = getSampleTO("a.b@c.it");

        AttributeTO type = userTO.getAttrMap().get("type");

        userTO.getAttrs().remove(type);

        MembershipTO membershipTO = new MembershipTO();

        membershipTO.setRoleId(8L);

        userTO.getMemberships().add(membershipTO);

        // 1. create user without type (mandatory by UserSchema)

        try {

            createUser(userTO);

            fail();

        } catch (SyncopeClientException e) {

            assertEquals(ClientExceptionType.RequiredValuesMissing, e.getType());

        }

        userTO.getAttrs().add(attributeTO("type", "F"));

        AttributeTO surname = userTO.getAttrMap().get("surname");

        userTO.getAttrs().remove(surname);

        // 2. create user without surname (mandatory when type == 'F')

        try {

            createUser(userTO);

            fail();

        } catch (SyncopeClientException e) {

            assertEquals(ClientExceptionType.RequiredValuesMissing, e.getType());

        }

    }

    @Test

    public void delete() {

        try {

            userService.delete(0L);

        } catch (SyncopeClientException e) {

            assertEquals(Response.Status.NOT_FOUND, e.getType().getResponseStatus());

        }

        UserTO userTO = getSampleTO("qqgf.z@nn.com");

        // specify a propagation

        userTO.getResources().add(RESOURCE_NAME_TESTDB);

        userTO = createUser(userTO);

        long id = userTO.getId();

        userTO = deleteUser(id);

        assertNotNull(userTO);

        assertEquals(id, userTO.getId());

        assertTrue(userTO.getAttrs().isEmpty());

        // check for propagation result

        assertFalse(userTO.getPropagationStatusTOs().isEmpty());

        assertTrue(userTO.getPropagationStatusTOs().get(0).getStatus().isSuccessful());

        try {

            userService.delete(userTO.getId());

        } catch (SyncopeClientException e) {

            assertEquals(Response.Status.NOT_FOUND, e.getType().getResponseStatus());

        }

    }

    @Test

    public void deleteByUsername() {

        UserTO userTO = getSampleTO("delete.by.username@apache.org");

        // specify a propagation

        userTO.getResources().add(RESOURCE_NAME_TESTDB);

        userTO = createUser(userTO);

        long id = userTO.getId();

        userTO = userService.read(id);

        userTO = deleteUser(userTO.getId());

        assertNotNull(userTO);

        assertEquals(id, userTO.getId());

        assertTrue(userTO.getAttrs().isEmpty());

        // check for propagation result

        assertFalse(userTO.getPropagationStatusTOs().isEmpty());

        assertTrue(userTO.getPropagationStatusTOs().get(0).getStatus().isSuccessful());

        try {

            userService.read(userTO.getId());

        } catch (SyncopeClientException e) {

            assertEquals(Response.Status.NOT_FOUND, e.getType().getResponseStatus());

        }

    }

    @Test

    public void list() {

        PagedResult<UserTO> users = userService.list();

        assertNotNull(users);

        assertFalse(users.getResult().isEmpty());

        for (UserTO user : users.getResult()) {

            assertNotNull(user);

        }

    }

    @Test

    public void paginatedList() {

        PagedResult<UserTO> users = userService.list(1, 2);

        assertNotNull(users);

        assertFalse(users.getResult().isEmpty());

        assertEquals(2, users.getResult().size());

        for (UserTO user : users.getResult()) {

            assertNotNull(user);

        }

        users = userService.list(2, 2);

        assertNotNull(users);

        assertFalse(users.getResult().isEmpty());

        assertEquals(2, users.getResult().size());

        users = userService.list(100, 2);

        assertNotNull(users);

        assertTrue(users.getResult().isEmpty());

    }

    @Test

    public void read() {

        UserTO userTO = userService.read(1L);

        assertNotNull(userTO);

        assertNotNull(userTO.getAttrs());

        assertFalse(userTO.getAttrs().isEmpty());

    }

    @Test

    public void readWithMailAddressAsUserName() {

        UserTO userTO = createUser(getUniqueSampleTO("mail@domain.org"));

        userTO = userService.read(userTO.getId());

        assertNotNull(userTO);

    }

    @Test

    public void updateWithouPassword() {

        UserTO userTO = getUniqueSampleTO("updatewithout@password.com");

        userTO = createUser(userTO);

        assertNotNull(userTO);

        UserMod userMod = new UserMod();

        userMod.setId(userTO.getId());

        userMod.getDerAttrsToRemove().add("cn");

        userTO = updateUser(userMod);

        assertNotNull(userTO);

        assertNotNull(userTO.getDerAttrMap());

        assertFalse(userTO.getDerAttrMap().containsKey("cn"));

    }

    @Test(expected = SyncopeClientException.class)

    public void updateInvalidPassword() {

        UserTO userTO = getSampleTO("updateinvalid@password.com");

        userTO = createUser(userTO);

        assertNotNull(userTO);

        UserMod userMod = new UserMod();

        userMod.setId(userTO.getId());

        userMod.setPassword("pass");

        userService.update(userMod.getId(), userMod);

    }

    @Test(expected = SyncopeClientException.class)

    public void updateSamePassword() {

        UserTO userTO = getSampleTO("updatesame@password.com");

        userTO = createUser(userTO);

        assertNotNull(userTO);

        UserMod userMod = new UserMod();

        userMod.setId(userTO.getId());

        userMod.setPassword("password123");

        userService.update(userMod.getId(), userMod);

    }

    @Test

    public void update() {

        UserTO userTO = getUniqueSampleTO("g.h@t.com");

        MembershipTO membershipTO = new MembershipTO();

        membershipTO.setRoleId(8L);

        membershipTO.getAttrs().add(attributeTO("subscriptionDate", "2009-08-18T16:33:12.203+0200"));

        userTO.getMemberships().add(membershipTO);

        userTO = createUser(userTO);

        assertFalse(userTO.getDerAttrs().isEmpty());

        assertEquals(1, userTO.getMemberships().size());

        MembershipMod membershipMod = new MembershipMod();

        membershipMod.setRole(8L);

        membershipMod.getAttrsToUpdate().add(attributeMod("subscriptionDate", "2010-08-18T16:33:12.203+0200"));

        UserMod userMod = new UserMod();

        userMod.setId(userTO.getId());

        userMod.setPassword("new2Password");

        userMod.getAttrsToRemove().add("userId");

        String newUserId = getUUIDString() + "t.w@spre.net";

        userMod.getAttrsToUpdate().add(attributeMod("userId", newUserId));

        userMod.getAttrsToRemove().add("fullname");

        String newFullName = getUUIDString() + "g.h@t.com";

        userMod.getAttrsToUpdate().add(attributeMod("fullname", newFullName));

        userMod.getDerAttrsToAdd().add("cn");

        userMod.getMembershipsToAdd().add(membershipMod);

        userMod.getMembershipsToRemove().add(userTO.getMemberships().iterator().next().getId());

        userTO = updateUser(userMod);

        assertNotNull(userTO);

        // issue SYNCOPE-15

        assertNotNull(userTO.getCreationDate());

        assertNotNull(userTO.getCreator());

        assertNotNull(userTO.getLastChangeDate());

        assertNotNull(userTO.getLastModifier());

        assertTrue(userTO.getCreationDate().before(userTO.getLastChangeDate()));

        SyncopeUser passwordTestUser = new SyncopeUser();

        passwordTestUser.setPassword("new2Password", CipherAlgorithm.SHA, 0);

        assertEquals(passwordTestUser.getPassword(), userTO.getPassword());