content: /*
   * Copyright 1999-2018 Alibaba Group Holding Ltd.
   *
   * Licensed under the Apache License, Version 2.0 (the "License");
   * you may not use this file except in compliance with the License.
   * You may obtain a copy of the License at
   *
   *      http://www.apache.org/licenses/LICENSE-2.0
   *
   * Unless required by applicable law or agreed to in writing, software
   * distributed under the License is distributed on an "AS IS" BASIS,
   * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
   * See the License for the specific language governing permissions and
   * limitations under the License.
   */
  
  package com.alibaba.nacos.test.core.auth;
  
  import com.alibaba.nacos.Nacos;
  import com.alibaba.nacos.common.utils.JacksonUtils;
  import com.alibaba.nacos.api.model.Page;
  import com.alibaba.nacos.plugin.auth.impl.persistence.RoleInfo;
  import com.alibaba.nacos.test.base.HttpClient4Test;
  import com.alibaba.nacos.test.base.Params;
  import com.fasterxml.jackson.core.type.TypeReference;
  import com.fasterxml.jackson.databind.JsonNode;
  import org.junit.jupiter.api.AfterEach;
  import org.junit.jupiter.api.BeforeEach;
  import org.junit.jupiter.api.Disabled;
  import org.junit.jupiter.api.Test;
  import org.springframework.boot.test.context.SpringBootTest;
  import org.springframework.boot.test.web.server.LocalServerPort;
  import org.springframework.http.HttpMethod;
  import org.springframework.http.ResponseEntity;
  
  import java.net.URL;
  import java.util.concurrent.TimeUnit;
  
  import static org.junit.jupiter.api.Assertions.assertFalse;
  import static org.junit.jupiter.api.Assertions.assertNotNull;
  import static org.junit.jupiter.api.Assertions.assertTrue;
  
  /**
   * Integration tests for Nacos role management, including role creation, deletion, and querying.
   *
   * @author nkorange
   * @since 1.2.0
   */
  @SuppressWarnings("checkstyle:AbbreviationAsWordInName")
  @SpringBootTest(classes = Nacos.class, properties = {
          "server.servlet.context-path=/nacos"}, webEnvironment = SpringBootTest.WebEnvironment.DEFINED_PORT)
  @Disabled("todo fix this test case")
  class RoleCoreITCase extends HttpClient4Test {
      
      @LocalServerPort
      private int port;
      
      private String accessToken;
      
      @BeforeEach
      void init() throws Exception {
          TimeUnit.SECONDS.sleep(5L);
          String url = String.format("http://localhost:%d/", port);
          this.base = new URL(url);
      }
      
      @AfterEach
      void destroy() {
          
          // Delete role:
          ResponseEntity<String> response = request("/nacos/v1/auth/roles",
                  Params.newParams().appendParam("role", "role1").appendParam("username", "username2")
                          .appendParam("accessToken", accessToken).done(), String.class, HttpMethod.DELETE);
          
          assertTrue(response.getStatusCode().is2xxSuccessful());
          
          // Delete role:
          response = request("/nacos/v1/auth/roles",
                  Params.newParams().appendParam("role", "role2").appendParam("username", "username2")
                          .appendParam("accessToken", accessToken).done(), String.class, HttpMethod.DELETE);
          
          assertTrue(response.getStatusCode().is2xxSuccessful());
          
          // Delete a user:
          response = request("/nacos/v1/auth/users",
                  Params.newParams().appendParam("username", "username2").appendParam("accessToken", accessToken).done(),
                  String.class, HttpMethod.DELETE);
          
          assertTrue(response.getStatusCode().is2xxSuccessful());
      }
      
      @Test
      void login() {
          
          ResponseEntity<String> response = request("/nacos/v1/auth/users/login",
                  Params.newParams().appendParam("username", "nacos").appendParam("password", "nacos").done(),
                  String.class, HttpMethod.POST);
          
          assertTrue(response.getStatusCode().is2xxSuccessful());
          JsonNode json = JacksonUtils.toObj(response.getBody());
          assertTrue(json.has("accessToken"));
          accessToken = json.get("accessToken").textValue();
      }
      
      @Test
      void createDeleteQueryRole() {
          
          login();
          
          // Create a user:
          ResponseEntity<String> response = request("/nacos/v1/auth/users",
                  Params.newParams().appendParam("username", "username2").appendParam("password", "password1")
                          .appendParam("accessToken", accessToken).done(), String.class, HttpMethod.POST);
          
          assertTrue(response.getStatusCode().is2xxSuccessful());
          
          // Create a role:
          response = request("/nacos/v1/auth/roles",
                  Params.newParams().appendParam("role", "role1").appendParam("username", "username2")
                          .appendParam("accessToken", accessToken).done(), String.class, HttpMethod.POST);
          
          assertTrue(response.getStatusCode().is2xxSuccessful());
          
          // Query role of user:
          response = request("/nacos/v1/auth/roles",
                  Params.newParams().appendParam("username", "username2").appendParam("pageNo", "1")
                          .appendParam("pageSize", "10").appendParam("accessToken", accessToken).done(), String.class,
                  HttpMethod.GET);
          
          assertTrue(response.getStatusCode().is2xxSuccessful());
          
          Page<RoleInfo> roleInfoPage = JacksonUtils.toObj(response.getBody(), new TypeReference<Page<RoleInfo>>() {
          });
          
          assertNotNull(roleInfoPage);
          assertNotNull(roleInfoPage.getPageItems());
          boolean found = false;
          for (RoleInfo roleInfo : roleInfoPage.getPageItems()) {
              if (roleInfo.getRole().equals("role1")) {
                  found = true;
                  break;
              }
          }
          assertTrue(found);
          
          // Add second role to user:
          response = request("/nacos/v1/auth/roles",
                  Params.newParams().appendParam("role", "role2").appendParam("username", "username2")
                          .appendParam("accessToken", accessToken).done(), String.class, HttpMethod.POST);
          
          assertTrue(response.getStatusCode().is2xxSuccessful());
          
          // Query roles of user:
          response = request("/nacos/v1/auth/roles",
                  Params.newParams().appendParam("username", "username2").appendParam("pageNo", "1")
                          .appendParam("pageSize", "10").appendParam("accessToken", accessToken).done(), String.class,
                  HttpMethod.GET);
          
          assertTrue(response.getStatusCode().is2xxSuccessful());
          
          roleInfoPage = JacksonUtils.toObj(response.getBody(), new TypeReference<Page<RoleInfo>>() {
          });
          
          assertNotNull(roleInfoPage);
          assertNotNull(roleInfoPage.getPageItems());
          found = false;
          boolean found2 = false;
          for (RoleInfo roleInfo : roleInfoPage.getPageItems()) {
              if (roleInfo.getRole().equals("role1")) {
                  found = true;
              }
              if (roleInfo.getRole().equals("role2")) {
                  found2 = true;
              }
              if (found && found2) {
                  break;
              }
          }
          assertTrue(found);
          assertTrue(found2);
          
          // Delete role:
          response = request("/nacos/v1/auth/roles",
                  Params.newParams().appendParam("role", "role2").appendParam("username", "username2")
                          .appendParam("accessToken", accessToken).done(), String.class, HttpMethod.DELETE);
          
          assertTrue(response.getStatusCode().is2xxSuccessful());
          
          // Query roles of user:
          response = request("/nacos/v1/auth/roles",
                  Params.newParams().appendParam("username", "username2").appendParam("pageNo", "1")
                          .appendParam("pageSize", "10").appendParam("accessToken", accessToken).done(), String.class,
                  HttpMethod.GET);
          
          assertTrue(response.getStatusCode().is2xxSuccessful());
          
          roleInfoPage = JacksonUtils.toObj(response.getBody(), new TypeReference<Page<RoleInfo>>() {
          });
          
          assertNotNull(roleInfoPage);
          assertNotNull(roleInfoPage.getPageItems());
          found = false;
          found2 = false;
          for (RoleInfo roleInfo : roleInfoPage.getPageItems()) {
              if (roleInfo.getRole().equals("role1")) {
                  found = true;
              }
              if (roleInfo.getRole().equals("role2")) {
                  found2 = true;
              }
          }
          assertFalse(found2);
          assertTrue(found);
          
          // Delete role:
          response = request("/nacos/v1/auth/roles",
                  Params.newParams().appendParam("role", "role1").appendParam("username", "username2")
                          .appendParam("accessToken", accessToken).done(), String.class, HttpMethod.DELETE);
          
          assertTrue(response.getStatusCode().is2xxSuccessful());
          
          // Query roles of user:
          response = request("/nacos/v1/auth/roles",
                  Params.newParams().appendParam("username", "username2").appendParam("pageNo", "1")
                          .appendParam("pageSize", "10").appendParam("accessToken", accessToken).done(), String.class,
                  HttpMethod.GET);
          
          assertTrue(response.getStatusCode().is2xxSuccessful());
          
          roleInfoPage = JacksonUtils.toObj(response.getBody(), new TypeReference<Page<RoleInfo>>() {
          });
          
          assertNotNull(roleInfoPage);
          assertNotNull(roleInfoPage.getPageItems());
          found = false;
          found2 = false;
          for (RoleInfo roleInfo : roleInfoPage.getPageItems()) {
              if (roleInfo.getRole().equals("role1")) {
                  found = true;
              }
              if (roleInfo.getRole().equals("role2")) {
                  found2 = true;
              }
          }
          assertFalse(found2);
          assertFalse(found);
      }
  }
  