// SPDX-License-Identifier: GPL-2.0+
/*
 * Copyright (C) 2017 Red Hat, Inc.
 */

#include "nm-default.h"

#include "nm-meta-setting-access.h"
#include "nm-vpn-helpers.h"
#include "nm-client-utils.h"

#include "nm-utils/nm-test-utils.h"

/*****************************************************************************/

static void
test_client_meta_check (void)
{
	const NMMetaSettingInfoEditor *const*infos_p;
	NMMetaSettingType m;
	guint p;

	G_STATIC_ASSERT (G_STRUCT_OFFSET (NMMetaAbstractInfo, meta_type) == G_STRUCT_OFFSET (NMMetaSettingInfoEditor, meta_type));
	G_STATIC_ASSERT (G_STRUCT_OFFSET (NMMetaAbstractInfo, meta_type) == G_STRUCT_OFFSET (NMMetaPropertyInfo, meta_type));

	for (m = 0; m < _NM_META_SETTING_TYPE_NUM; m++) {
		const NMMetaSettingInfo *info = &nm_meta_setting_infos[m];
		GType gtype;

		g_assert (info);
		g_assert (info->meta_type == m);
		g_assert (info->setting_name);
		g_assert (info->get_setting_gtype);

		gtype = info->get_setting_gtype ();
		g_assert (gtype != NM_TYPE_SETTING);

		{
			nm_auto_unref_gtypeclass GTypeClass *gclass = g_type_class_ref (gtype);

			g_assert (G_TYPE_CHECK_CLASS_TYPE (gclass, gtype));
		}
		{
			gs_unref_object NMSetting *setting = g_object_new (gtype, NULL);

			g_assert (NM_IS_SETTING (setting));
			g_assert (G_TYPE_CHECK_INSTANCE_TYPE (setting, gtype));
			g_assert_cmpstr (nm_setting_get_name (setting), ==, info->setting_name);
		}
	}

	for (m = 0; m < _NM_META_SETTING_TYPE_NUM; m++) {
		const NMMetaSettingInfoEditor *info = &nm_meta_setting_infos_editor[m];

		g_assert (info);
		g_assert (info->meta_type == &nm_meta_type_setting_info_editor);
		g_assert (info->general);
		g_assert (info->general == &nm_meta_setting_infos[m]);

		g_assert_cmpstr (info->general->setting_name, ==, info->meta_type->get_name ((const NMMetaAbstractInfo *) info, FALSE));
		g_assert_cmpstr ("name", ==, info->meta_type->get_name ((const NMMetaAbstractInfo *) info, TRUE));

		g_assert (info->properties_num == NM_PTRARRAY_LEN (info->properties));

		if (info->properties_num) {
			gs_unref_hashtable GHashTable *property_names = g_hash_table_new (nm_str_hash, g_str_equal);

			g_assert (info->properties);
			for (p = 0; p < info->properties_num; p++) {
				const NMMetaPropertyInfo *pi = info->properties[p];

				g_assert (pi);
				g_assert (pi->meta_type == &nm_meta_type_property_info);
				g_assert (pi->setting_info == info);
				g_assert (pi->property_name);

				g_assert (g_hash_table_add (property_names, (gpointer) pi->property_name));

				g_assert_cmpstr (pi->property_name, ==, pi->meta_type->get_name ((const NMMetaAbstractInfo *) pi, FALSE));
				g_assert_cmpstr (pi->property_name, ==, pi->meta_type->get_name ((const NMMetaAbstractInfo *) pi, TRUE));

				g_assert (pi->property_type);
				g_assert (pi->property_type->get_fcn);
			}
			g_assert (!info->properties[info->properties_num]);
		} else
			g_assert (!info->properties);

		if (info->valid_parts) {
			gsize i, l;
			gs_unref_hashtable GHashTable *dup = g_hash_table_new (nm_direct_hash, NULL);

			l = NM_PTRARRAY_LEN (info->valid_parts);
			g_assert (l >= 2);

			for (i = 0; info->valid_parts[i]; i++) {
				g_assert (info->valid_parts[i]->setting_info);
				g_assert (g_hash_table_add (dup, (gpointer) info->valid_parts[i]->setting_info));

				if (i == 0) {
					g_assert (info->valid_parts[i]->setting_info == &nm_meta_setting_infos_editor[NM_META_SETTING_TYPE_CONNECTION]);
					g_assert (info->valid_parts[i]->mandatory);
				}
				if (i == 1) {
					g_assert (info->valid_parts[i]->setting_info == &nm_meta_setting_infos_editor[m]);
					g_assert (info->valid_parts[i]->mandatory);
				}
			}
			g_assert (i == l);
		}
	}

	for (m = 0; m < _NM_META_SETTING_TYPE_NUM; m++) {
		const NMMetaSettingInfoEditor *info = &nm_meta_setting_infos_editor[m];

		g_assert (nm_meta_setting_info_editor_find_by_name (info->general->setting_name, FALSE) == info);
		g_assert (nm_meta_setting_info_editor_find_by_gtype (info->general->get_setting_gtype ()) == info);

		for (p = 0; p < info->properties_num; p++) {
			const NMMetaPropertyInfo *pi = info->properties[p];

			g_assert (nm_meta_setting_info_editor_get_property_info (info, pi->property_name) == pi);
			g_assert (nm_meta_property_info_find_by_name (info->general->setting_name, pi->property_name) == pi);
		}
	}

	infos_p = nm_meta_setting_infos_editor_p ();
	g_assert (infos_p);
	for (m = 0; m < _NM_META_SETTING_TYPE_NUM; m++)
		g_assert (infos_p[m] == &nm_meta_setting_infos_editor[m]);
	g_assert (!infos_p[m]);
}

/*****************************************************************************/

static void
test_client_import_wireguard_test0 (void)
{
	gs_unref_object NMConnection *connection;
	NMSettingWireGuard *s_wg;
	NMSettingIPConfig *s_ip4;
	NMSettingIPConfig *s_ip6;
	NMWireGuardPeer *peer;
	gs_free_error GError *error = NULL;

	connection = nm_vpn_wireguard_import (NM_BUILD_SRCDIR"/clients/common/tests/wg-test0.conf",
	                                      &error);

	g_assert_no_error (error);

	g_assert_cmpstr (nm_connection_get_id (connection), ==, "wg-test0");
	g_assert_cmpstr (nm_connection_get_interface_name (connection), ==, "wg-test0");
	g_assert_cmpstr (nm_connection_get_connection_type (connection), ==, NM_SETTING_WIREGUARD_SETTING_NAME);

	s_wg = NM_SETTING_WIREGUARD (nm_connection_get_setting (connection, NM_TYPE_SETTING_WIREGUARD));

	g_assert_cmpint (nm_setting_wireguard_get_listen_port (s_wg), ==, 51820);
	g_assert_cmpstr (nm_setting_wireguard_get_private_key (s_wg), ==, "yAnz5TF+lXXJte14tji3zlMNq+hd2rYUIgJBgB3fBmk=");

	g_assert_cmpint (nm_setting_wireguard_get_peers_len (s_wg), ==, 3);

	peer = nm_setting_wireguard_get_peer (s_wg, 0);
	g_assert_cmpstr (nm_wireguard_peer_get_public_key (peer), ==, "xTIBA5rboUvnH4htodjb6e697QjLERt1NAB4mZqp8Dg=");
	g_assert_cmpstr (nm_wireguard_peer_get_endpoint (peer), ==, "192.95.5.67:1234");
	g_assert_cmpint (nm_wireguard_peer_get_allowed_ips_len (peer), ==, 2);
	g_assert_cmpstr (nm_wireguard_peer_get_allowed_ip (peer, 0, NULL), ==, "10.192.122.3/32");
	g_assert_cmpstr (nm_wireguard_peer_get_allowed_ip (peer, 1, NULL), ==, "10.192.124.1/24");

	peer = nm_setting_wireguard_get_peer (s_wg, 1);
	g_assert_cmpstr (nm_wireguard_peer_get_public_key (peer), ==, "TrMvSoP4jYQlY6RIzBgbssQqY3vxI2Pi+y71lOWWXX0=");
	g_assert_cmpstr (nm_wireguard_peer_get_endpoint (peer), ==, "[2607:5300:60:6b0::c05f:543]:2468");
	g_assert_cmpint (nm_wireguard_peer_get_allowed_ips_len (peer), ==, 2);
	g_assert_cmpstr (nm_wireguard_peer_get_allowed_ip (peer, 0, NULL), ==, "10.192.122.4/32");
	g_assert_cmpstr (nm_wireguard_peer_get_allowed_ip (peer, 1, NULL), ==, "192.168.0.0/16");

	peer = nm_setting_wireguard_get_peer (s_wg, 2);
	g_assert_cmpstr (nm_wireguard_peer_get_public_key (peer), ==, "gN65BkIKy1eCE9pP1wdc8ROUtkHLF2PfAqYdyYBz6EA=");
	g_assert_cmpstr (nm_wireguard_peer_get_endpoint (peer), ==, "test.wireguard.com:18981");
	g_assert_cmpint (nm_wireguard_peer_get_allowed_ips_len (peer), ==, 1);
	g_assert_cmpstr (nm_wireguard_peer_get_allowed_ip (peer, 0, NULL), ==, "10.10.10.230/32");

	s_ip4 = nm_connection_get_setting_ip4_config (connection);
	s_ip6 = nm_connection_get_setting_ip6_config (connection);

	g_assert_cmpint (nm_setting_ip_config_get_num_addresses (s_ip4), ==, 1);
	g_assert_cmpint (nm_setting_ip_config_get_num_addresses (s_ip6), ==, 0);

	g_assert_cmpint (nm_setting_ip_config_get_num_dns_searches (s_ip4), ==, 1);
	g_assert_cmpint (nm_setting_ip_config_get_num_dns_searches (s_ip6), ==, 0);

	g_assert_cmpstr (nm_setting_ip_config_get_dns_search (s_ip4, 0), ==, "~");
}

static void
test_client_import_wireguard_test1 (void)
{
	gs_free_error GError *error = NULL;

	nm_vpn_wireguard_import (NM_BUILD_SRCDIR"/clients/common/tests/wg-test1.conf", &error);
	g_assert_error (error, NM_UTILS_ERROR, NM_UTILS_ERROR_INVALID_ARGUMENT);
	g_assert (g_str_has_prefix (error->message, "invalid secret 'PrivateKey'"));
	g_assert (g_str_has_suffix (error->message, "wg-test1.conf:2"));
}

static void
test_client_import_wireguard_test2 (void)
{
	gs_free_error GError *error = NULL;

	nm_vpn_wireguard_import (NM_BUILD_SRCDIR"/clients/common/tests/wg-test2.conf", &error);

	g_assert_error (error, NM_UTILS_ERROR, NM_UTILS_ERROR_INVALID_ARGUMENT);
	g_assert (g_str_has_prefix (error->message, "unrecognized line at"));
	g_assert (g_str_has_suffix (error->message, "wg-test2.conf:5"));
}

static void
test_client_import_wireguard_test3 (void)
{
	gs_free_error GError *error = NULL;

	nm_vpn_wireguard_import (NM_BUILD_SRCDIR"/clients/common/tests/wg-test3.conf", &error);
	g_assert_error (error, NM_UTILS_ERROR, NM_UTILS_ERROR_INVALID_ARGUMENT);
	g_assert (g_str_has_prefix (error->message, "invalid value for 'ListenPort'"));
	g_assert (g_str_has_suffix (error->message, "wg-test3.conf:3"));
}

static void
test_client_import_wireguard_missing (void)
{
	gs_free_error GError *error = NULL;

	nm_vpn_wireguard_import (NM_BUILD_SRCDIR"/clients/common/tests/wg-missing.conf", &error);
	g_assert_error (error, G_FILE_ERROR, G_FILE_ERROR_NOENT);
}

/*****************************************************************************/

#define _do_test_parse_passwd_file(contents, success, exp_error_line, ...) \
	G_STMT_START { \
		static const NMUtilsNamedValue _values[] = { \
			__VA_ARGS__ \
		}; \
		gs_free char *_contents = g_strndup (contents, NM_STRLEN (contents)); \
		gs_unref_hashtable GHashTable *_secrets = NULL; \
		gs_free_error GError *_local = NULL; \
		gssize _error_line; \
		GError **_p_local = nmtst_get_rand_bool () ? &_local : NULL; \
		gssize *_p_error_line = nmtst_get_rand_bool () ? &_error_line : NULL; \
		gboolean _success = !!(success); \
		gssize _exp_error_line = (exp_error_line); \
		int _i; \
		\
		g_assert (_success || (G_N_ELEMENTS (_values) == 0)); \
		\
		_secrets = nmc_utils_parse_passwd_file (_contents, _p_error_line, _p_local); \
		\
		g_assert (_success == (!!_secrets)); \
		if (!_success) { \
			if (_p_error_line) \
				g_assert_cmpint (_exp_error_line, ==, *_p_error_line); \
			if (_p_local) \
				g_assert (_local); \
		} else { \
			if (_p_error_line) \
				g_assert_cmpint (-1, ==, *_p_error_line); \
			g_assert (!_local); \
			\
			for (_i = 0; _i < G_N_ELEMENTS (_values); _i++) { \
				const NMUtilsNamedValue *_n = &_values[_i]; \
				const char *_v; \
				\
				_v = g_hash_table_lookup (_secrets, _n->name); \
				if (!_v) \
					g_error ("cannot find key \"%s\"", _n->name); \
				g_assert_cmpstr (_v, ==, _n->value_str); \
			} \
			\
			g_assert_cmpint (g_hash_table_size (_secrets), ==, G_N_ELEMENTS (_values)); \
		} \
	} G_STMT_END

#define _do_test_parse_passwd_file_bad( contents, exp_error_line) _do_test_parse_passwd_file (contents, FALSE, exp_error_line)
#define _do_test_parse_passwd_file_good(contents, ...)            _do_test_parse_passwd_file (contents, TRUE,  -1, __VA_ARGS__)

static void
test_nmc_utils_parse_passwd_file (void)
{
	_do_test_parse_passwd_file_good ("");
	_do_test_parse_passwd_file_bad ("x", 1);
	_do_test_parse_passwd_file_bad ("\r\rx", 3);
	_do_test_parse_passwd_file_good ("wifi.psk=abc",
	                                 NM_UTILS_NAMED_VALUE_INIT ("802-11-wireless-security.psk", "abc") );
	_do_test_parse_passwd_file_good ("wifi.psk:ABC\r"
	                                 "wifi-sec.psk = abc ",
	                                 NM_UTILS_NAMED_VALUE_INIT ("802-11-wireless-security.psk", "abc") );
	_do_test_parse_passwd_file_good ("wifi.psk:  abc\r"
	                                 "wifi-sec.psk2 = d\\145f\r\n"
	                                 "  wifi.psk3 = e\\  \n"
	                                 "  #wifi-sec.psk2 = \r\n"
	                                 "  wifi-sec.psk4:",
	                                 NM_UTILS_NAMED_VALUE_INIT ("802-11-wireless-security.psk",  "abc"),
	                                 NM_UTILS_NAMED_VALUE_INIT ("802-11-wireless-security.psk2", "def"),
	                                 NM_UTILS_NAMED_VALUE_INIT ("802-11-wireless-security.psk3", "e "),
	                                 NM_UTILS_NAMED_VALUE_INIT ("802-11-wireless-security.psk4", "") );
}

/*****************************************************************************/

NMTST_DEFINE ();

int
main (int argc, char **argv)
{
	nmtst_init (&argc, &argv, TRUE);

	g_test_add_func ("/client/meta/check", test_client_meta_check);
	g_test_add_func ("/client/import/wireguard/test0", test_client_import_wireguard_test0);
	g_test_add_func ("/client/import/wireguard/test1", test_client_import_wireguard_test1);
	g_test_add_func ("/client/import/wireguard/test2", test_client_import_wireguard_test2);
	g_test_add_func ("/client/import/wireguard/test3", test_client_import_wireguard_test3);
	g_test_add_func ("/client/import/wireguard/missing", test_client_import_wireguard_missing);
	g_test_add_func ("/client/test_nmc_utils_parse_passwd_file", test_nmc_utils_parse_passwd_file);

	return g_test_run ();
}