#
# Licensed to the Apache Software Foundation (ASF) under one or more
# contributor license agreements.  See the NOTICE file distributed with
# this work for additional information regarding copyright ownership.
# The ASF licenses this file to You under the Apache License, Version 2.0
# (the "License"); you may not use this file except in compliance with
# the License.  You may obtain a copy of the License at
#
#     http://www.apache.org/licenses/LICENSE-2.0
#
# Unless required by applicable law or agreed to in writing, software
# distributed under the License is distributed on an "AS IS" BASIS,
# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
# See the License for the specific language governing permissions and
# limitations under the License.
#

use t::APISIX 'no_plan';

repeat_each(1);
no_long_string();
no_root_location();
no_shuffle();
log_level("info");

run_tests;

__DATA__

=== TEST 1: create a credential for invalid consumer: consumer not found error
--- config
    location /t {
        content_by_lua_block {
            local t = require("lib.test_admin").test
            local code, body = t('/apisix/admin/consumers/jack/credentials/credential_a',
                ngx.HTTP_PUT,
                [[{
                     "plugins": {
                         "key-auth": {
                             "key": "the-key"
                         }
                     }
                }]]
            )

            ngx.status = code
            ngx.print(body)
        }
    }
--- request
GET /t
--- error_code: 404
--- response_body
{"error_msg":"consumer not found"}



=== TEST 2: add a consumer
--- config
    location /t {
        content_by_lua_block {
            local t = require("lib.test_admin").test
            local code, body = t('/apisix/admin/consumers',
                ngx.HTTP_PUT,
                [[{
                     "username":"jack",
                     "desc": "new consumer",
                     "plugins": {
                         "basic-auth": {
                             "username": "the-user",
                             "password": "the-password"
                         }
                     }
                }]],
                [[{
                    "key": "/apisix/consumers/jack",
                    "value":
                    {
                        "username":"jack",
                        "desc": "new consumer",
                        "plugins": {
                            "basic-auth": {
                                "username": "the-user",
                                "password": "WvF5kpaLvIzjuk4GNIMTJg=="
                            }
                        }
                    }
                }]]
            )

            ngx.status = code
            ngx.say(body)
        }
    }
--- request
GET /t
--- response_body
passed



=== TEST 3: add a credentials with basic-auth for the consumer jack, should success
--- config
    location /t {
        content_by_lua_block {
            local t = require("lib.test_admin").test
            local code, body = t('/apisix/admin/consumers/jack/credentials/credential_a',
                ngx.HTTP_PUT,
                [[{
                     "desc": "basic-auth for jack",
                     "plugins": {
                         "basic-auth": {
                             "username": "the-user",
                             "password": "the-password"
                         }
                     }
                }]],
                [[{
                    "value":{
                        "desc":"basic-auth for jack",
                        "id":"credential_a",
                        "plugins":{"basic-auth":{"username":"the-user","password":"WvF5kpaLvIzjuk4GNIMTJg=="}}
                    },
                    "key":"/apisix/consumers/jack/credentials/credential_a"
                }]]
            )

            ngx.status = code
            ngx.say(body)
        }
    }
--- request
GET /t
--- response_body
passed



=== TEST 4: add a credential with key-auth for the consumer jack, should success
--- config
    location /t {
        content_by_lua_block {
            local t = require("lib.test_admin").test
            local code, body = t('/apisix/admin/consumers/jack/credentials/credential_b',
                ngx.HTTP_PUT,
                [[{
                     "desc": "key-auth for jack",
                     "plugins": {
                         "key-auth": {
                             "key": "the-key"
                         }
                     }
                }]],
                [[{
                    "value":{
                        "desc":"key-auth for jack",
                        "id":"credential_b",
                        "plugins":{"key-auth":{"key":"JCX7x1qN5e9kHt0GuJfWpw=="}}
                    },
                    "key":"/apisix/consumers/jack/credentials/credential_b"
                }]]
            )

            ngx.status = code
            ngx.say(body)
        }
    }
--- request
GET /t
--- response_body
passed



=== TEST 5: add a credential with a plugin which is not a auth plugin, should fail
--- config
    location /t {
        content_by_lua_block {
            local t = require("lib.test_admin").test
            local code, body = t('/apisix/admin/consumers/jack/credentials/credential_b',
                ngx.HTTP_PUT,
                [[{
                     "desc": "limit-conn for jack",
                     "plugins": {
                         "limit-conn": {
                            "conn": 1,
                            "burst": 0,
                            "default_conn_delay": 0.1,
                            "rejected_code": 503,
                            "key_type": "var",
                            "key": "http_a"
                         }
                     }
                }]]
            )

            ngx.status = code
            ngx.print(body)
        }
    }
--- request
GET /t
--- error_code: 400
--- response_body
{"error_msg":"only supports auth type plugins in consumer credential"}



=== TEST 6: list consumers: should not contain credential
--- config
    location /t {
        content_by_lua_block {
            local json = require("toolkit.json")
            local t = require("lib.test_admin").test
            local code, body, res = t('/apisix/admin/consumers', ngx.HTTP_GET)

            ngx.status = code
            res = json.decode(res)
            assert(res.total == 1)
            assert(res.list[1].key == "/apisix/consumers/jack")
        }
    }
--- request
GET /t
--- response_body



=== TEST 7: list credentials: should contain credential_a and credential_b
--- config
    location /t {
        content_by_lua_block {
            local json = require("toolkit.json")
            local t = require("lib.test_admin").test
            local code, body, res = t('/apisix/admin/consumers/jack/credentials', ngx.HTTP_GET)

            ngx.status = code
            res = json.decode(res)
            assert(res.total == 2)
            assert(res.list[1].key == "/apisix/consumers/jack/credentials/credential_a")
            assert(res.list[2].key == "/apisix/consumers/jack/credentials/credential_b")
        }
    }
--- request
GET /t
--- response_body



=== TEST 8: get a credential
--- config
    location /t {
        content_by_lua_block {
            local t = require("lib.test_admin").test
            local code, body = t('/apisix/admin/consumers/jack/credentials/credential_b',
                 ngx.HTTP_GET,
                 nil,
                [[{
                    "key": "/apisix/consumers/jack/credentials/credential_b",
                    "value": {
                        "desc": "key-auth for jack",
                         "plugins": {"key-auth": {"key": "the-key"}
                     }}
                }]]
                )

            ngx.status = code
            ngx.say(body)
        }
    }
--- request
GET /t
--- response_body
passed



=== TEST 9: update credential: should ok
--- config
    location /t {
        content_by_lua_block {
            local t = require("lib.test_admin").test
            local code, body = t('/apisix/admin/consumers/jack/credentials/credential_b',
                ngx.HTTP_PUT,
                [[{
                     "desc": "new description",
                     "plugins": {
                         "key-auth": {
                             "key": "new-key"
                         }
                     }
                }]],
                [[{
                    "key": "/apisix/consumers/jack/credentials/credential_b",
                     "value": {
                         "desc": "new description",
                         "plugins": {
                             "key-auth": {
                                 "key": "523EisB/dvqlIT9RzfF3ZQ=="
                             }
                         }
                     }
                }]]
            )

            ngx.status = code
            ngx.say(body)

        }
    }
--- request
GET /t
--- response_body
passed



=== TEST 10: delete credential
--- config
    location /t {
        content_by_lua_block {
            local json = require("toolkit.json")
            local t = require("lib.test_admin").test
            local code, body = t('/apisix/admin/consumers/jack/credentials/credential_a', ngx.HTTP_DELETE)

            assert(code == 200)
            ngx.status = code

            code, body, res = t('/apisix/admin/consumers/jack/credentials', ngx.HTTP_GET)
            res = json.decode(res)
            assert(res.total == 1)
            assert(res.list[1].key == "/apisix/consumers/jack/credentials/credential_b")
        }
    }
--- request
GET /t
--- response_body



=== TEST 11: create a credential has more than one plugin: should not ok
--- config
    location /t {
        content_by_lua_block {
            local t = require("lib.test_admin").test
            local code, body = t('/apisix/admin/consumers/jack/credentials/xxx-yyy-zzz',
                ngx.HTTP_PUT,
                [[{
                     "plugins": {
                         "key-auth": {"key": "the-key"},
                         "basic-auth": {"username": "the-user", "password": "the-password"}
                     }
                }]]
            )

            ngx.status = code
            ngx.print(body)
        }
    }
--- request
GET /t
--- error_code: 400
--- response_body
{"error_msg":"invalid configuration: property \"plugins\" validation failed: expect object to have at most 1 properties"}



=== TEST 12: delete consumer
--- config
    location /t {
        content_by_lua_block {
            local t = require("lib.test_admin").test
            local code, body = t('/apisix/admin/consumers/jack',
                 ngx.HTTP_DELETE
            )

            ngx.status = code
            ngx.say(body)
        }
    }
--- request
GET /t
--- response_body
passed



=== TEST 13: list credentials: should get 404 because the consumer is deleted
--- config
    location /t {
        content_by_lua_block {
            local t = require("lib.test_admin").test
            local code, body = t('/apisix/admin/consumers/jack/credentials', ngx.HTTP_GET)

            ngx.status = code
            ngx.print(body)
        }
    }
--- request
GET /t
--- error_code: 404
--- response_body
{"message":"Key not found"}



=== TEST 14: add a consumer
--- config
    location /t {
        content_by_lua_block {
            local t = require("lib.test_admin").test
            local code, body = t('/apisix/admin/consumers',
                ngx.HTTP_PUT,
                [[{
                     "username":"jack"
                }]]
            )

            if ngx.status >= 300 then
                ngx.status = code
            end
            ngx.say(body)
        }
    }
--- request
GET /t
--- response_body
passed



=== TEST 15: add a credential with key-auth for the consumer jack (id in the payload but not in uri), should success
--- config
    location /t {
        content_by_lua_block {
            local t = require("lib.test_admin").test
            local code, body = t('/apisix/admin/consumers/jack/credentials',
                ngx.HTTP_PUT,
                [[{
                     "id": "d79a5aa3",
                     "desc": "key-auth for jack",
                     "plugins": {
                         "key-auth": {
                             "key": "the-key"
                         }
                     }
                }]],
                [[{
                    "value":{
                        "desc":"key-auth for jack",
                        "id":"d79a5aa3",
                        "plugins":{"key-auth":{"key":"JCX7x1qN5e9kHt0GuJfWpw=="}}
                    },
                    "key":"/apisix/consumers/jack/credentials/d79a5aa3"
                }]]
            )

            ngx.status = code
            ngx.say(body)
        }
    }
--- request
GET /t
--- response_body
passed



=== TEST 16: add a credential with key-auth for the consumer jack but missing id in uri and payload, should fail
--- config
    location /t {
        content_by_lua_block {
            local t = require("lib.test_admin").test
            local code, body = t('/apisix/admin/consumers/jack/credentials',
                ngx.HTTP_PUT,
                [[{
                     "desc": "key-auth for jack",
                     "plugins": {
                         "key-auth": {
                             "key": "the-key"
                         }
                     }
                }]]
            )

            ngx.status = code
            ngx.print(body)
        }
    }
--- request
GET /t
--- error_code: 400
--- response_body
{"error_msg":"missing credential id"}