content: /*
   * Copyright 1999-2021 Alibaba Group Holding Ltd.
   *
   * Licensed under the Apache License, Version 2.0 (the "License");
   * you may not use this file except in compliance with the License.
   * You may obtain a copy of the License at
   *
   *      http://www.apache.org/licenses/LICENSE-2.0
   *
   * Unless required by applicable law or agreed to in writing, software
   * distributed under the License is distributed on an "AS IS" BASIS,
   * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
   * See the License for the specific language governing permissions and
   * limitations under the License.
   */
  
  package com.alibaba.nacos.auth.parser.http;
  
  import com.alibaba.nacos.api.common.Constants;
  import com.alibaba.nacos.auth.annotation.Secured;
  import com.alibaba.nacos.common.utils.StringUtils;
  import com.alibaba.nacos.plugin.auth.api.Resource;
  import org.junit.jupiter.api.BeforeEach;
  import org.junit.jupiter.api.Test;
  import org.junit.jupiter.api.extension.ExtendWith;
  import org.mockito.Mock;
  import org.mockito.Mockito;
  import org.mockito.junit.jupiter.MockitoExtension;
  import org.mockito.junit.jupiter.MockitoSettings;
  import org.mockito.quality.Strictness;
  
  import jakarta.servlet.http.HttpServletRequest;
  import java.lang.reflect.Method;
  
  import static org.junit.jupiter.api.Assertions.assertEquals;
  import static org.mockito.ArgumentMatchers.eq;
  import static org.mockito.Mockito.when;
  
  @ExtendWith(MockitoExtension.class)
  // todo remove this
  @MockitoSettings(strictness = Strictness.LENIENT)
  class ConfigHttpResourceParserTest {
      
      @Mock
      private HttpServletRequest request;
      
      private ConfigHttpResourceParser resourceParser;
      
      @BeforeEach
      void setUp() throws Exception {
          resourceParser = new ConfigHttpResourceParser();
      }
      
      @Test
      @Secured(signType = Constants.Config.CONFIG_MODULE)
      void testParseWithFullContext() throws NoSuchMethodException {
          Secured secured = getMethodSecure();
          Mockito.when(request.getParameter(eq("tenant"))).thenReturn("testNs");
          Mockito.when(request.getParameter(eq(Constants.GROUP))).thenReturn("testG");
          Mockito.when(request.getParameter(eq(Constants.DATA_ID))).thenReturn("testD");
          Resource actual = resourceParser.parse(request, secured);
          assertEquals("testNs", actual.getNamespaceId());
          assertEquals("testG", actual.getGroup());
          assertEquals("testD", actual.getName());
          assertEquals(Constants.Config.CONFIG_MODULE, actual.getType());
      }
  
      @Test
      @Secured(signType = Constants.Config.CONFIG_MODULE)
      void testParseWithNamespaceId() throws NoSuchMethodException {
          Secured secured = getMethodSecure();
          Mockito.when(request.getParameter(eq("namespaceId"))).thenReturn("testNs");
          Mockito.when(request.getParameter(eq(Constants.GROUP))).thenReturn("testG");
          Mockito.when(request.getParameter(eq(Constants.DATA_ID))).thenReturn("testD");
          Resource actual = resourceParser.parse(request, secured);
          assertEquals("testNs", actual.getNamespaceId());
          assertEquals("testG", actual.getGroup());
          assertEquals("testD", actual.getName());
          assertEquals(Constants.Config.CONFIG_MODULE, actual.getType());
      }
  
      @Test
      @Secured(signType = Constants.Config.CONFIG_MODULE)
      void testParseWithNamespaceIdFirst() throws NoSuchMethodException {
          Secured secured = getMethodSecure();
          Mockito.when(request.getParameter(eq("tenant"))).thenReturn("testNs");
          Mockito.when(request.getParameter(eq("namespaceId"))).thenReturn("testNsFirst");
          Mockito.when(request.getParameter(eq(Constants.GROUP))).thenReturn("testG");
          Mockito.when(request.getParameter(eq(Constants.DATA_ID))).thenReturn("testD");
          Resource actual = resourceParser.parse(request, secured);
          assertEquals("testNsFirst", actual.getNamespaceId());
          assertEquals("testG", actual.getGroup());
          assertEquals("testD", actual.getName());
          assertEquals(Constants.Config.CONFIG_MODULE, actual.getType());
      }
      
      @Test
      @Secured(signType = Constants.Config.CONFIG_MODULE)
      void testParseWithoutNamespace() throws NoSuchMethodException {
          Secured secured = getMethodSecure();
          Mockito.when(request.getParameter(eq(Constants.GROUP))).thenReturn("testG");
          Mockito.when(request.getParameter(eq(Constants.DATA_ID))).thenReturn("testD");
          Resource actual = resourceParser.parse(request, secured);
          assertEquals(Constants.DEFAULT_NAMESPACE_ID, actual.getNamespaceId());
          assertEquals("testG", actual.getGroup());
          assertEquals("testD", actual.getName());
          assertEquals(Constants.Config.CONFIG_MODULE, actual.getType());
      }
      
      @Test
      @Secured(signType = Constants.Config.CONFIG_MODULE)
      void testParseWithoutGroup() throws NoSuchMethodException {
          Secured secured = getMethodSecure();
          Mockito.when(request.getParameter(eq("tenant"))).thenReturn("testNs");
          Mockito.when(request.getParameter(eq(Constants.DATA_ID))).thenReturn("testD");
          Resource actual = resourceParser.parse(request, secured);
          assertEquals("testNs", actual.getNamespaceId());
          assertEquals(StringUtils.EMPTY, actual.getGroup());
          assertEquals("testD", actual.getName());
          assertEquals(Constants.Config.CONFIG_MODULE, actual.getType());
      }
      
      @Test
      @Secured(signType = Constants.Config.CONFIG_MODULE)
      void testParseWithoutDataId() throws NoSuchMethodException {
          Secured secured = getMethodSecure();
          Mockito.when(request.getParameter(eq("tenant"))).thenReturn("testNs");
          Mockito.when(request.getParameter(eq(Constants.GROUP))).thenReturn("testG");
          Resource actual = resourceParser.parse(request, secured);
          assertEquals("testNs", actual.getNamespaceId());
          assertEquals("testG", actual.getGroup());
          assertEquals(StringUtils.EMPTY, actual.getName());
          assertEquals(Constants.Config.CONFIG_MODULE, actual.getType());
      }
      
      private Secured getMethodSecure() throws NoSuchMethodException {
          StackTraceElement[] traces = new Exception().getStackTrace();
          StackTraceElement callerElement = traces[1];
          String methodName = callerElement.getMethodName();
          Method method = this.getClass().getDeclaredMethod(methodName);
          return method.getAnnotation(Secured.class);
      }
      
      @Test
      @Secured(tags = {"namespaceId:customNsParam"})
      void testParseWithSecuredTags() throws NoSuchMethodException {
          Secured secured = getMethodSecure();
          when(request.getParameter("customNsParam")).thenReturn("tagNs");
          
          String actualNamespaceId = resourceParser.getNamespaceId(request, secured);
          assertEquals("tagNs", actualNamespaceId);
      }
      
      @Test
      @Secured(tags = {"namespaceId:emptyParam"})
      void testParseWithSecuredTagsButEmptyParam() throws NoSuchMethodException {
          Secured secured = getMethodSecure();
          when(request.getParameter("emptyParam")).thenReturn(StringUtils.EMPTY);
          when(request.getParameter(Constants.NAMESPACE_ID)).thenReturn("defaultNs");
          
          String actualNamespaceId = resourceParser.getNamespaceId(request, secured);
          assertEquals("defaultNs", actualNamespaceId);
      }
      
      @Test
      @Secured(tags = {"invalidTag:param", "namespaceId:multiTag"})
      void testParseWithMultipleTags() throws NoSuchMethodException {
          Secured secured = getMethodSecure();
          when(request.getParameter("multiTag")).thenReturn("multiNs");
          
          String actualNamespaceId = resourceParser.getNamespaceId(request, secured);
          assertEquals("multiNs", actualNamespaceId);
      }
      
      @Test
      @Secured(tags = {"namespaceId:splitTag:extra"})
      void testParseWithInvalidSplitTag() throws NoSuchMethodException {
          Secured secured = getMethodSecure();
          when(request.getParameter("splitTag")).thenReturn("splitNs");
          
          String actualNamespaceId = resourceParser.getNamespaceId(request, secured);
          assertEquals("splitNs", actualNamespaceId);
      }
      
      @Test
      @Secured(tags = {"normalTag"})
      void testParseWithNoNamespaceTag() throws NoSuchMethodException {
          Secured secured = getMethodSecure();
          when(request.getParameter(Constants.NAMESPACE_ID)).thenReturn("defaultNs");
          
          String actualNamespaceId = resourceParser.getNamespaceId(request, secured);
          assertEquals("defaultNs", actualNamespaceId);
      }
      
      @Test
      @Secured(tags = {"namespaceId"})
      void testParseWithInvalidSplitTag1() throws NoSuchMethodException {
          Secured secured = getMethodSecure();
          when(request.getParameter(Constants.NAMESPACE_ID)).thenReturn("defaultNs");
          
          String actualNamespaceId = resourceParser.getNamespaceId(request, secured);
          assertEquals("defaultNs", actualNamespaceId);
      }
  }
  