<?php
/*
 * Copyright 2019 Google LLC
 *
 * Licensed under the Apache License, Version 2.0 (the "License");
 * you may not use this file except in compliance with the License.
 * You may obtain a copy of the License at
 *
 *     http://www.apache.org/licenses/LICENSE-2.0
 *
 * Unless required by applicable law or agreed to in writing, software
 * distributed under the License is distributed on an "AS IS" BASIS,
 * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
 * See the License for the specific language governing permissions and
 * limitations under the License.
 */

namespace Google\Auth\tests;

use Google\Auth\Iam;
use GuzzleHttp\Psr7;
use PHPUnit\Framework\TestCase;

/**
 * @group iam
 */
class IamTest extends TestCase
{
    /**
     * @dataProvider delegates
     */
    public function testSignBlob(array $delegates = [])
    {
        $expectedEmail = 'test@test.com';
        $expectedAccessToken = 'token';
        $expectedString = 'toSign';

        $expectedServiceAccount = sprintf(Iam::SERVICE_ACCOUNT_NAME, $expectedEmail);
        $expectedUri = Iam::IAM_API_ROOT . '/' . sprintf(
            Iam::SIGN_BLOB_PATH,
            $expectedServiceAccount
        );

        $expectedResponse = 'signedString';

        if ($delegates) {
            $expectedDelegates = $delegates;
            foreach ($expectedDelegates as &$delegate) {
                $delegate = sprintf(Iam::SERVICE_ACCOUNT_NAME, $delegate);
            }
        } else {
            $expectedDelegates[] = $expectedServiceAccount;
        }

        $httpHandler = function (Psr7\Request $request) use (
            $expectedEmail,
            $expectedAccessToken,
            $expectedString,
            $expectedServiceAccount,
            $expectedUri,
            $expectedResponse,
            $expectedDelegates
        ) {
            $this->assertEquals($expectedUri, (string) $request->getUri());
            $this->assertEquals('Bearer ' . $expectedAccessToken, $request->getHeaderLine('Authorization'));
            $this->assertEquals([
                'delegates' => $expectedDelegates,
                'payload' => base64_encode($expectedString)
            ], json_decode((string) $request->getBody(), true));

            return new Psr7\Response(200, [], Psr7\stream_for(json_encode([
                'signedBlob' => $expectedResponse
            ])));
        };

        $iam = new Iam($httpHandler);
        $res = $iam->signBlob(
            $expectedEmail,
            $expectedAccessToken,
            $expectedString,
            $delegates
        );

        $this->assertEquals($expectedResponse, $res);
    }

    public function delegates()
    {
        return [
            [],
            [['foo@bar.com']],
            [
                [
                    'foo@bar.com',
                    'bar@bar.com'
                ]
            ],
        ];
    }
}