content: /*
   * Licensed to the Apache Software Foundation (ASF) under one or more
   * contributor license agreements. See the NOTICE file distributed with
   * this work for additional information regarding copyright ownership.
   * The ASF licenses this file to You under the Apache License, Version 2.0
   * (the "License"); you may not use this file except in compliance with
   * the License. You may obtain a copy of the License at
   *
   *    http://www.apache.org/licenses/LICENSE-2.0
   *
   * Unless required by applicable law or agreed to in writing, software
   * distributed under the License is distributed on an "AS IS" BASIS,
   * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
   * See the License for the specific language governing permissions and
   * limitations under the License.
   */
  
  package org.apache.kafka.common.requests;
  
  import org.apache.kafka.common.acl.AccessControlEntry;
  import org.apache.kafka.common.acl.AclBinding;
  import org.apache.kafka.common.acl.AclOperation;
  import org.apache.kafka.common.acl.AclPermissionType;
  import org.apache.kafka.common.message.DescribeAclsResponseData;
  import org.apache.kafka.common.message.DescribeAclsResponseData.AclDescription;
  import org.apache.kafka.common.message.DescribeAclsResponseData.DescribeAclsResource;
  import org.apache.kafka.common.protocol.Errors;
  import org.apache.kafka.common.protocol.Readable;
  import org.apache.kafka.common.resource.PatternType;
  import org.apache.kafka.common.resource.ResourcePattern;
  import org.apache.kafka.common.resource.ResourceType;
  
  import org.junit.jupiter.api.Test;
  
  import java.util.Arrays;
  import java.util.Collections;
  import java.util.HashSet;
  import java.util.List;
  import java.util.Set;
  
  import static org.junit.jupiter.api.Assertions.assertEquals;
  import static org.junit.jupiter.api.Assertions.assertThrows;
  
  public class DescribeAclsResponseTest {
      private static final short V1 = 1;
  
      private static final AclDescription ALLOW_CREATE_ACL = buildAclDescription(
              "127.0.0.1",
              "User:ANONYMOUS",
              AclOperation.CREATE,
              AclPermissionType.ALLOW);
  
      private static final AclDescription DENY_READ_ACL = buildAclDescription(
              "127.0.0.1",
              "User:ANONYMOUS",
              AclOperation.READ,
              AclPermissionType.DENY);
  
      private static final DescribeAclsResource UNKNOWN_ACL = buildResource(
              "foo",
              ResourceType.UNKNOWN,
              PatternType.LITERAL,
              Collections.singletonList(DENY_READ_ACL));
  
      private static final DescribeAclsResource PREFIXED_ACL1 = buildResource(
              "prefix",
              ResourceType.GROUP,
              PatternType.PREFIXED,
              Collections.singletonList(ALLOW_CREATE_ACL));
  
      private static final DescribeAclsResource LITERAL_ACL1 = buildResource(
              "foo",
              ResourceType.TOPIC,
              PatternType.LITERAL,
              Collections.singletonList(ALLOW_CREATE_ACL));
  
      @Test
      public void shouldThrowIfUnknown() {
          assertThrows(IllegalArgumentException.class,
              () -> buildResponse(10, Errors.NONE, Collections.singletonList(UNKNOWN_ACL)).serialize(V1));
      }
  
      @Test
      public void shouldRoundTripV1() {
          List<DescribeAclsResource> resources = Arrays.asList(LITERAL_ACL1, PREFIXED_ACL1);
          final DescribeAclsResponse original = buildResponse(100, Errors.NONE, resources);
          final Readable readable = original.serialize(V1);
  
          final DescribeAclsResponse result = DescribeAclsResponse.parse(readable, V1);
          assertResponseEquals(original, result);
  
          final DescribeAclsResponse result2 = buildResponse(100, Errors.NONE, DescribeAclsResponse.aclsResources(
              DescribeAclsResponse.aclBindings(resources)));
          assertResponseEquals(original, result2);
      }
  
      @Test
      public void testAclBindings() {
          final AclBinding original = new AclBinding(new ResourcePattern(ResourceType.TOPIC, "foo", PatternType.LITERAL),
                  new AccessControlEntry("User:ANONYMOUS", "127.0.0.1", AclOperation.CREATE, AclPermissionType.ALLOW));
  
          final List<AclBinding> result = DescribeAclsResponse.aclBindings(Collections.singletonList(LITERAL_ACL1));
          assertEquals(1, result.size());
          assertEquals(original, result.get(0));
      }
  
      private static void assertResponseEquals(final DescribeAclsResponse original, final DescribeAclsResponse actual) {
          final Set<DescribeAclsResource> originalBindings = new HashSet<>(original.acls());
          final Set<DescribeAclsResource> actualBindings = new HashSet<>(actual.acls());
  
          assertEquals(originalBindings, actualBindings);
      }
  
      private static DescribeAclsResponse buildResponse(int throttleTimeMs, Errors error, List<DescribeAclsResource> resources) {
          return new DescribeAclsResponse(new DescribeAclsResponseData()
              .setThrottleTimeMs(throttleTimeMs)
              .setErrorCode(error.code())
              .setErrorMessage(error.message())
              .setResources(resources));
      }
  
      private static DescribeAclsResource buildResource(String name, ResourceType type, PatternType patternType, List<AclDescription> acls) {
          return new DescribeAclsResource()
              .setResourceName(name)
              .setResourceType(type.code())
              .setPatternType(patternType.code())
              .setAcls(acls);
      }
  
      private static AclDescription buildAclDescription(String host, String principal, AclOperation operation, AclPermissionType permission) {
          return new AclDescription()
              .setHost(host)
              .setPrincipal(principal)
              .setOperation(operation.code())
              .setPermissionType(permission.code());
      }
  }
  