# vim: tabstop=4 shiftwidth=4 softtabstop=4

# Copyright 2012 United States Government as represented by the
# Administrator of the National Aeronautics and Space Administration.
# All Rights Reserved.
#
# Copyright 2012 Nebula, Inc.
#
#    Licensed under the Apache License, Version 2.0 (the "License"); you may
#    not use this file except in compliance with the License. You may obtain
#    a copy of the License at
#
#         http://www.apache.org/licenses/LICENSE-2.0
#
#    Unless required by applicable law or agreed to in writing, software
#    distributed under the License is distributed on an "AS IS" BASIS, WITHOUT
#    WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. See the
#    License for the specific language governing permissions and limitations
#    under the License.

from __future__ import absolute_import

from keystoneclient.v2_0 import client as keystone_client

from horizon import api
from horizon import test
from horizon import users


class FakeConnection(object):
    pass


class ClientConnectionTests(test.TestCase):
    def setUp(self):
        super(ClientConnectionTests, self).setUp()
        self.mox.StubOutWithMock(keystone_client, "Client")
        self.test_user = users.User(id=self.user.id,
                                    user=self.user.name,
                                    service_catalog=self.service_catalog)
        self.request.user = self.test_user
        self.public_url = api.base.url_for(self.request,
                                           'identity',
                                           endpoint_type='publicURL')
        self.admin_url = api.base.url_for(self.request,
                                          'identity',
                                          endpoint_type='adminURL')
        self.conn = FakeConnection()

    def test_connect(self):
        keystone_client.Client(auth_url=self.public_url,
                               endpoint=None,
                               password=self.user.password,
                               tenant_id=None,
                               token=None,
                               username=self.user.name).AndReturn(self.conn)
        self.mox.ReplayAll()
        client = api.keystone.keystoneclient(self.request,
                                             username=self.user.name,
                                             password=self.user.password)
        self.assertEqual(client.management_url, self.public_url)

    def test_connect_admin(self):
        self.test_user.roles = [{'name': 'admin'}]
        keystone_client.Client(auth_url=self.admin_url,
                               endpoint=None,
                               password=self.user.password,
                               tenant_id=None,
                               token=None,
                               username=self.user.name).AndReturn(self.conn)
        self.mox.ReplayAll()
        client = api.keystone.keystoneclient(self.request,
                                             username=self.user.name,
                                             password=self.user.password,
                                             admin=True)
        self.assertEqual(client.management_url, self.admin_url)

    def connection_caching(self):
        self.test_user.roles = [{'name': 'admin'}]
        # Regular connection
        keystone_client.Client(auth_url=self.public_url,
                               endpoint=None,
                               password=self.user.password,
                               tenant_id=None,
                               token=None,
                               username=self.user.name).AndReturn(self.conn)
        # Admin connection
        keystone_client.Client(auth_url=self.admin_url,
                               endpoint=None,
                               password=self.user.password,
                               tenant_id=None,
                               token=None,
                               username=self.user.name).AndReturn(self.conn)
        self.mox.ReplayAll()
        # Request both admin and regular connections out of order,
        # If the caching fails we would see UnexpectedMethodCall errors
        # from mox.
        client = api.keystone.keystoneclient(self.request,
                                             username=self.user.name,
                                             password=self.user.password)
        self.assertEqual(client.management_url, self.public_url)
        client = api.keystone.keystoneclient(self.request,
                                             username=self.user.name,
                                             password=self.user.password,
                                             admin=True)
        self.assertEqual(client.management_url, self.admin_url)
        client = api.keystone.keystoneclient(self.request,
                                             username=self.user.name,
                                             password=self.user.password)
        self.assertEqual(client.management_url, self.public_url)
        client = api.keystone.keystoneclient(self.request,
                                             username=self.user.name,
                                             password=self.user.password,
                                             admin=True)
        self.assertEqual(client.management_url, self.admin_url)


class TokenApiTests(test.APITestCase):
    def test_token_create(self):
        token = self.tokens.scoped_token
        keystoneclient = self.stub_keystoneclient()

        keystoneclient.tokens = self.mox.CreateMockAnything()
        keystoneclient.tokens.authenticate(username=self.user.name,
                                           password=self.user.password,
                                           tenant_id=token.tenant['id'])\
                                           .AndReturn(token)

        self.mox.ReplayAll()

        ret_val = api.token_create(self.request, token.tenant['id'],
                                   self.user.name, self.user.password)

        self.assertEqual(token.tenant['id'], ret_val.tenant['id'])


class RoleAPITests(test.APITestCase):
    def setUp(self):
        super(RoleAPITests, self).setUp()
        self.role = self.roles.member
        self.roles = self.roles.list()

    def test_remove_tenant_user(self):
        """
        Tests api.keystone.remove_tenant_user

        Verifies that remove_tenant_user is called with the right arguments
        after iterating the user's roles.

        There are no assertions in this test because the checking is handled
        by mox in the VerifyAll() call in tearDown().
        """
        keystoneclient = self.stub_keystoneclient()
        tenant = self.tenants.first()

        keystoneclient.roles = self.mox.CreateMockAnything()
        keystoneclient.roles.roles_for_user(self.user.id,
                                            tenant.id).AndReturn(self.roles)
        for role in self.roles:
            keystoneclient.roles.remove_user_role(self.user.id,
                                                  role.id,
                                                  tenant.id)
        self.mox.ReplayAll()
        api.keystone.remove_tenant_user(self.request, tenant.id, self.user.id)

    def test_get_default_role(self):
        keystoneclient = self.stub_keystoneclient()
        keystoneclient.roles = self.mox.CreateMockAnything()
        keystoneclient.roles.list().AndReturn(self.roles)
        self.mox.ReplayAll()
        role = api.keystone.get_default_role(self.request)
        self.assertEqual(role, self.role)
        # Verify that a second call doesn't hit the API again,
        # (it would show up in mox as an unexpected method call)
        role = api.keystone.get_default_role(self.request)