/*******************************************************************************
 * Copyright 2014 Federal Chancellery Austria
 * MOA-ID has been developed in a cooperation between BRZ, the Federal
 * Chancellery Austria - ICT staff unit, and Graz University of Technology.
 *
 * Licensed under the EUPL, Version 1.1 or - as soon they will be approved by
 * the European Commission - subsequent versions of the EUPL (the "Licence");
 * You may not use this work except in compliance with the Licence.
 * You may obtain a copy of the Licence at:
 * http://www.osor.eu/eupl/
 *
 * Unless required by applicable law or agreed to in writing, software
 * distributed under the Licence is distributed on an "AS IS" basis,
 * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
 * See the Licence for the specific language governing permissions and
 * limitations under the Licence.
 *
 * This product combines work with different licenses. See the "NOTICE" text
 * file for details on the various modules and licenses.
 * The "NOTICE" text file is part of the distribution. Any derivative works
 * that you distribute must include a readable copy of the "NOTICE" text file.
 *******************************************************************************/
package at.gv.egovernment.moa.id.monitoring;

import java.io.InputStream;
import java.net.URL;
import java.util.List;

import org.w3c.dom.Element;

import at.gv.egovernment.moa.id.auth.builder.VerifyXMLSignatureRequestBuilder;
import at.gv.egovernment.moa.id.auth.exception.ValidateException;
import at.gv.egovernment.moa.id.auth.invoke.SignatureVerificationInvoker;
import at.gv.egovernment.moa.id.auth.parser.IdentityLinkAssertionParser;
import at.gv.egovernment.moa.id.auth.parser.VerifyXMLSignatureResponseParser;
import at.gv.egovernment.moa.id.auth.validator.IdentityLinkValidator;
import at.gv.egovernment.moa.id.auth.validator.VerifyXMLSignatureResponseValidator;
import at.gv.egovernment.moa.id.commons.api.AuthConfiguration;
import at.gv.egovernment.moa.id.commons.api.data.IIdentityLink;
import at.gv.egovernment.moa.id.commons.api.data.IVerifiyXMLSignatureResponse;
import at.gv.egovernment.moa.id.config.auth.AuthConfigurationProviderFactory;
import at.gv.egovernment.moa.id.config.auth.data.DynamicOAAuthParameters;
import at.gv.egovernment.moa.logging.Logger;
import at.gv.egovernment.moa.util.MiscUtil;

public class IdentityLinkTestModule implements TestModuleInterface {

	private static IIdentityLink identityLink = null;
	
	public void initializeTest(long delayParam, String url) throws Exception{
		
		if (MiscUtil.isNotEmpty(url)) {
			
		  	URL keystoreURL = new URL(url);					
			InputStream idlstream = keystoreURL.openStream();
			identityLink = new IdentityLinkAssertionParser(idlstream).parseIdentityLink();
		}
		
	} 
	
	public List<String> performTests()  throws Exception{
		Logger.trace("Start MOA-ID IdentityLink Test");
		
		AuthConfiguration config = AuthConfigurationProviderFactory.getInstance();
		
		IdentityLinkValidator.getInstance().validate(identityLink);
		// builds a <VerifyXMLSignatureRequest> for a call of MOA-SP
		Element domVerifyXMLSignatureRequest = new VerifyXMLSignatureRequestBuilder()
				.build(identityLink, config
						.getMoaSpIdentityLinkTrustProfileID(false));

		// invokes the call
		Element domVerifyXMLSignatureResponse = SignatureVerificationInvoker.getInstance()
				.verifyXMLSignature(domVerifyXMLSignatureRequest);
		// parses the <VerifyXMLSignatureResponse>
		try {
			IVerifiyXMLSignatureResponse verifyXMLSignatureResponse = new VerifyXMLSignatureResponseParser(
					domVerifyXMLSignatureResponse).parseData();
		
			DynamicOAAuthParameters oaParam = new DynamicOAAuthParameters();
			oaParam.setHasBaseIdProcessingRestriction(true);
			oaParam.setHasBaseIdTransfergRestriction(true);
			
			VerifyXMLSignatureResponseValidator.getInstance().validate(
					verifyXMLSignatureResponse,
					config.getIdentityLinkX509SubjectNames(),
					VerifyXMLSignatureResponseValidator.CHECK_IDENTITY_LINK,
					oaParam);
			
		} catch (ValidateException e) {
			//check if default Monitoring IDL is used then error is ignored
			if ("validator.07".equals(e.getMessageId()) 
					&& e.getMessage().contains("Das Zertifikat der Personenbindung ist"))
				return null;
			
			else
				throw e;
			
		}
		
		Logger.trace("Finished MOA-ID IdentityLink Test without errors");
		
		return null;
	}

	public String getName() {
		return "IdentityLinkTest";
	}

}