<?php

namespace Kanboard\Auth;

require_once __DIR__.'/../Base.php';

function ldap_connect($hostname, $port)
{
    return LdapTest::$functions->ldap_connect($hostname, $port);
}

function ldap_set_option()
{
}

function ldap_bind($link_identifier, $bind_rdn, $bind_password)
{
    return LdapTest::$functions->ldap_bind($link_identifier, $bind_rdn, $bind_password);
}

function ldap_search($link_identifier, $base_dn, $filter, array $attributes)
{
    return LdapTest::$functions->ldap_search($link_identifier, $base_dn, $filter, $attributes);
}

function ldap_get_entries($link_identifier, $result_identifier)
{
    return LdapTest::$functions->ldap_get_entries($link_identifier, $result_identifier);
}

class LdapTest extends \Base
{
    public static $functions;
    private $ldap;

    public function setUp()
    {
        parent::setup();

        self::$functions = $this
            ->getMockBuilder('stdClass')
            ->setMethods(array(
                'ldap_connect',
                'ldap_set_option',
                'ldap_bind',
                'ldap_search',
                'ldap_get_entries',
            ))
            ->getMock();
    }

    public function tearDown()
    {
        parent::tearDown();
        self::$functions = null;
    }

    public function testGetAttributes()
    {
        $ldap = new Ldap($this->container);
        $this->assertCount(3, $ldap->getProfileAttributes());
        $this->assertContains(LDAP_ACCOUNT_FULLNAME, $ldap->getProfileAttributes());
        $this->assertContains(LDAP_ACCOUNT_EMAIL, $ldap->getProfileAttributes());
        $this->assertContains(LDAP_ACCOUNT_MEMBEROF, $ldap->getProfileAttributes());
    }

    public function testConnectSuccess()
    {
        $ldap = $this
            ->getMockBuilder('\Kanboard\Auth\Ldap')
            ->setConstructorArgs(array($this->container))
            ->setMethods(array('getLdapServer'))
            ->getMock();

        $ldap
            ->expects($this->once())
            ->method('getLdapServer')
            ->will($this->returnValue('my_ldap_server'));

        self::$functions
            ->expects($this->once())
            ->method('ldap_connect')
            ->with(
                $this->equalTo('my_ldap_server'),
                $this->equalTo($ldap->getLdapPort())
            )
            ->will($this->returnValue('my_ldap_resource'));

        $this->assertNotFalse($ldap->connect());
    }

    public function testConnectFailure()
    {
        $ldap = $this
            ->getMockBuilder('\Kanboard\Auth\Ldap')
            ->setConstructorArgs(array($this->container))
            ->setMethods(array('getLdapServer'))
            ->getMock();

        $ldap
            ->expects($this->once())
            ->method('getLdapServer')
            ->will($this->returnValue('my_ldap_server'));

        self::$functions
            ->expects($this->once())
            ->method('ldap_connect')
            ->with(
                $this->equalTo('my_ldap_server'),
                $this->equalTo($ldap->getLdapPort())
            )
            ->will($this->returnValue(false));

        $this->assertFalse($ldap->connect());
    }

    public function testBindAnonymous()
    {
        $ldap = $this
            ->getMockBuilder('\Kanboard\Auth\Ldap')
            ->setConstructorArgs(array($this->container))
            ->setMethods(array('getLdapBindType'))
            ->getMock();

        $ldap
            ->expects($this->any())
            ->method('getLdapBindType')
            ->will($this->returnValue('anonymous'));

        self::$functions
            ->expects($this->once())
            ->method('ldap_bind')
            ->with(
                $this->equalTo('my_ldap_connection'),
                $this->equalTo(null),
                $this->equalTo(null)
            )
            ->will($this->returnValue(true));

        $this->assertTrue($ldap->bind('my_ldap_connection', 'my_user', 'my_password'));
    }

    public function testBindUser()
    {
        $ldap = $this
            ->getMockBuilder('\Kanboard\Auth\Ldap')
            ->setConstructorArgs(array($this->container))
            ->setMethods(array('getLdapUsername', 'getLdapBindType'))
            ->getMock();

        $ldap
            ->expects($this->once())
            ->method('getLdapUsername')
            ->will($this->returnValue('uid=my_user'));

        $ldap
            ->expects($this->any())
            ->method('getLdapBindType')
            ->will($this->returnValue('user'));

        self::$functions
            ->expects($this->once())
            ->method('ldap_bind')
            ->with(
                $this->equalTo('my_ldap_connection'),
                $this->equalTo('uid=my_user'),
                $this->equalTo('my_password')
            )
            ->will($this->returnValue(true));

        $this->assertTrue($ldap->bind('my_ldap_connection', 'my_user', 'my_password'));
    }

    public function testBindProxy()
    {
        $ldap = $this
            ->getMockBuilder('\Kanboard\Auth\Ldap')
            ->setConstructorArgs(array($this->container))
            ->setMethods(array('getLdapUsername', 'getLdapPassword', 'getLdapBindType'))
            ->getMock();

        $ldap
            ->expects($this->once())
            ->method('getLdapUsername')
            ->will($this->returnValue('someone'));

        $ldap
            ->expects($this->once())
            ->method('getLdapPassword')
            ->will($this->returnValue('something'));

        $ldap
            ->expects($this->any())
            ->method('getLdapBindType')
            ->will($this->returnValue('proxy'));

        self::$functions
            ->expects($this->once())
            ->method('ldap_bind')
            ->with(
                $this->equalTo('my_ldap_connection'),
                $this->equalTo('someone'),
                $this->equalTo('something')
            )
            ->will($this->returnValue(true));

        $this->assertTrue($ldap->bind('my_ldap_connection', 'my_user', 'my_password'));
    }

    public function testSearchSuccess()
    {
        $entries = array(
            'count' => 1,
            0 => array(
                'count' => 2,
                'dn' => 'uid=my_user,ou=People,dc=kanboard,dc=local',
                'displayname' => array(
                    'count' => 1,
                    0 => 'My user',
                ),
                'mail' => array(
                    'count' => 2,
                    0 => 'user1@localhost',
                    1 => 'user2@localhost',
                ),
                0 => 'displayname',
                1 => 'mail',
            )
        );

        $expected = array(
            'username' => 'my_user',
            'name' => 'My user',
            'email' => 'user1@localhost',
            'is_admin' => 0,
            'is_project_admin' => 0,
            'is_ldap_user' => 1,
        );

        $ldap = $this
            ->getMockBuilder('\Kanboard\Auth\Ldap')
            ->setConstructorArgs(array($this->container))
            ->setMethods(array('getLdapUserPattern', 'getLdapBaseDn'))
            ->getMock();

        $ldap
            ->expects($this->once())
            ->method('getLdapUserPattern')
            ->will($this->returnValue('uid=my_user'));

        $ldap
            ->expects($this->once())
            ->method('getLdapBaseDn')
            ->will($this->returnValue('ou=People,dc=kanboard,dc=local'));

        self::$functions
            ->expects($this->at(0))
            ->method('ldap_search')
            ->with(
                $this->equalTo('my_ldap_connection'),
                $this->equalTo('ou=People,dc=kanboard,dc=local'),
                $this->equalTo('uid=my_user'),
                $this->equalTo($ldap->getProfileAttributes())
            )
            ->will($this->returnValue('my_result_identifier'));

        self::$functions
            ->expects($this->at(1))
            ->method('ldap_get_entries')
            ->with(
                $this->equalTo('my_ldap_connection'),
                $this->equalTo('my_result_identifier')
            )
            ->will($this->returnValue($entries));

        self::$functions
            ->expects($this->at(2))
            ->method('ldap_bind')
            ->with(
                $this->equalTo('my_ldap_connection'),
                $this->equalTo('uid=my_user,ou=People,dc=kanboard,dc=local'),
                $this->equalTo('my_password')
            )
            ->will($this->returnValue(true));

        $this->assertEquals($expected, $ldap->getProfile('my_ldap_connection', 'my_user', 'my_password'));
    }

    public function testSearchWithBadPassword()
    {
        $entries = array(
            'count' => 1,
            0 => array(
                'count' => 2,
                'dn' => 'uid=my_user,ou=People,dc=kanboard,dc=local',
                'displayname' => array(
                    'count' => 1,
                    0 => 'My user',
                ),
                'mail' => array(
                    'count' => 2,
                    0 => 'user1@localhost',
                    1 => 'user2@localhost',
                ),
                0 => 'displayname',
                1 => 'mail',
            )
        );

        $ldap = $this
            ->getMockBuilder('\Kanboard\Auth\Ldap')
            ->setConstructorArgs(array($this->container))
            ->setMethods(array('getLdapUserPattern', 'getLdapBaseDn'))
            ->getMock();

        $ldap
            ->expects($this->once())
            ->method('getLdapUserPattern')
            ->will($this->returnValue('uid=my_user'));

        $ldap
            ->expects($this->once())
            ->method('getLdapBaseDn')
            ->will($this->returnValue('ou=People,dc=kanboard,dc=local'));

        self::$functions
            ->expects($this->at(0))
            ->method('ldap_search')
            ->with(
                $this->equalTo('my_ldap_connection'),
                $this->equalTo('ou=People,dc=kanboard,dc=local'),
                $this->equalTo('uid=my_user'),
                $this->equalTo($ldap->getProfileAttributes())
            )
            ->will($this->returnValue('my_result_identifier'));

        self::$functions
            ->expects($this->at(1))
            ->method('ldap_get_entries')
            ->with(
                $this->equalTo('my_ldap_connection'),
                $this->equalTo('my_result_identifier')
            )
            ->will($this->returnValue($entries));

        self::$functions
            ->expects($this->at(2))
            ->method('ldap_bind')
            ->with(
                $this->equalTo('my_ldap_connection'),
                $this->equalTo('uid=my_user,ou=People,dc=kanboard,dc=local'),
                $this->equalTo('my_password')
            )
            ->will($this->returnValue(false));

        $this->assertFalse($ldap->getProfile('my_ldap_connection', 'my_user', 'my_password'));
    }

    public function testSearchWithUserNotFound()
    {
        $ldap = $this
            ->getMockBuilder('\Kanboard\Auth\Ldap')
            ->setConstructorArgs(array($this->container))
            ->setMethods(array('getLdapUserPattern', 'getLdapBaseDn'))
            ->getMock();

        $ldap
            ->expects($this->once())
            ->method('getLdapUserPattern')
            ->will($this->returnValue('uid=my_user'));

        $ldap
            ->expects($this->once())
            ->method('getLdapBaseDn')
            ->will($this->returnValue('ou=People,dc=kanboard,dc=local'));

        self::$functions
            ->expects($this->at(0))
            ->method('ldap_search')
            ->with(
                $this->equalTo('my_ldap_connection'),
                $this->equalTo('ou=People,dc=kanboard,dc=local'),
                $this->equalTo('uid=my_user'),
                $this->equalTo($ldap->getProfileAttributes())
            )
            ->will($this->returnValue('my_result_identifier'));

        self::$functions
            ->expects($this->at(1))
            ->method('ldap_get_entries')
            ->with(
                $this->equalTo('my_ldap_connection'),
                $this->equalTo('my_result_identifier')
            )
            ->will($this->returnValue(array()));

        $this->assertFalse($ldap->getProfile('my_ldap_connection', 'my_user', 'my_password'));
    }

    public function testSuccessfulAuthentication()
    {
        $this->container['userSession'] = $this
            ->getMockBuilder('\Kanboard\Model\UserSession')
            ->setConstructorArgs(array($this->container))
            ->setMethods(array('initialize'))
            ->getMock();

        $this->container['user'] = $this
            ->getMockBuilder('\Kanboard\Model\User')
            ->setConstructorArgs(array($this->container))
            ->setMethods(array('getByUsername'))
            ->getMock();

        $ldap = $this
            ->getMockBuilder('\Kanboard\Auth\Ldap')
            ->setConstructorArgs(array($this->container))
            ->setMethods(array('findUser'))
            ->getMock();

        $ldap
            ->expects($this->once())
            ->method('findUser')
            ->with(
                $this->equalTo('user'),
                $this->equalTo('password')
            )
            ->will($this->returnValue(array('username' => 'user', 'name' => 'My user', 'email' => 'user@here')));

        $this->container['user']
            ->expects($this->once())
            ->method('getByUsername')
            ->with(
                $this->equalTo('user')
            )
            ->will($this->returnValue(array('id' => 2, 'username' => 'user', 'is_ldap_user' => 1)));

        $this->container['userSession']
            ->expects($this->once())
            ->method('initialize');

        $this->assertTrue($ldap->authenticate('user', 'password'));
    }

    public function testAuthenticationWithExistingLocalUser()
    {
        $this->container['userSession'] = $this
            ->getMockBuilder('\Kanboard\Model\UserSession')
            ->setConstructorArgs(array($this->container))
            ->setMethods(array('initialize'))
            ->getMock();

        $this->container['user'] = $this
            ->getMockBuilder('\Kanboard\Model\User')
            ->setConstructorArgs(array($this->container))
            ->setMethods(array('getByUsername'))
            ->getMock();

        $ldap = $this
            ->getMockBuilder('\Kanboard\Auth\Ldap')
            ->setConstructorArgs(array($this->container))
            ->setMethods(array('findUser'))
            ->getMock();

        $ldap
            ->expects($this->once())
            ->method('findUser')
            ->with(
                $this->equalTo('user'),
                $this->equalTo('password')
            )
            ->will($this->returnValue(array('username' => 'user', 'name' => 'My user', 'email' => 'user@here')));

        $this->container['user']
            ->expects($this->once())
            ->method('getByUsername')
            ->with(
                $this->equalTo('user')
            )
            ->will($this->returnValue(array('id' => 2, 'username' => 'user', 'is_ldap_user' => 0)));

        $this->container['userSession']
            ->expects($this->never())
            ->method('initialize');

        $this->assertFalse($ldap->authenticate('user', 'password'));
    }

    public function testAuthenticationWithAutomaticAccountCreation()
    {
        $ldap_profile = array('username' => 'user', 'name' => 'My user', 'email' => 'user@here');

        $this->container['userSession'] = $this
            ->getMockBuilder('\Kanboard\Model\UserSession')
            ->setConstructorArgs(array($this->container))
            ->setMethods(array('initialize'))
            ->getMock();

        $this->container['user'] = $this
            ->getMockBuilder('\Kanboard\Model\User')
            ->setConstructorArgs(array($this->container))
            ->setMethods(array('getByUsername', 'create'))
            ->getMock();

        $ldap = $this
            ->getMockBuilder('\Kanboard\Auth\Ldap')
            ->setConstructorArgs(array($this->container))
            ->setMethods(array('findUser'))
            ->getMock();

        $ldap
            ->expects($this->at(0))
            ->method('findUser')
            ->with(
                $this->equalTo('user'),
                $this->equalTo('password')
            )
            ->will($this->returnValue($ldap_profile));

        $this->container['user']
            ->expects($this->at(0))
            ->method('getByUsername')
            ->with(
                $this->equalTo('user')
            )
            ->will($this->returnValue(null));

        $this->container['user']
            ->expects($this->at(1))
            ->method('create')
            ->with(
                $this->equalTo($ldap_profile)
            )
            ->will($this->returnValue(true));

        $this->container['user']
            ->expects($this->at(2))
            ->method('getByUsername')
            ->with(
                $this->equalTo('user')
            )
            ->will($this->returnValue(array('id' => 2, 'username' => 'user', 'is_ldap_user' => 1)));

        $this->container['userSession']
            ->expects($this->once())
            ->method('initialize');

        $this->assertTrue($ldap->authenticate('user', 'password'));
    }

    public function testAuthenticationWithAutomaticAccountCreationFailed()
    {
        $ldap_profile = array('username' => 'user', 'name' => 'My user', 'email' => 'user@here');

        $this->container['userSession'] = $this
            ->getMockBuilder('\Kanboard\Model\UserSession')
            ->setConstructorArgs(array($this->container))
            ->setMethods(array('initialize'))
            ->getMock();

        $this->container['user'] = $this
            ->getMockBuilder('\Kanboard\Model\User')
            ->setConstructorArgs(array($this->container))
            ->setMethods(array('getByUsername', 'create'))
            ->getMock();

        $ldap = $this
            ->getMockBuilder('\Kanboard\Auth\Ldap')
            ->setConstructorArgs(array($this->container))
            ->setMethods(array('findUser'))
            ->getMock();

        $ldap
            ->expects($this->at(0))
            ->method('findUser')
            ->with(
                $this->equalTo('user'),
                $this->equalTo('password')
            )
            ->will($this->returnValue($ldap_profile));

        $this->container['user']
            ->expects($this->at(0))
            ->method('getByUsername')
            ->with(
                $this->equalTo('user')
            )
            ->will($this->returnValue(null));

        $this->container['user']
            ->expects($this->at(1))
            ->method('create')
            ->with(
                $this->equalTo($ldap_profile)
            )
            ->will($this->returnValue(false));

        $this->container['userSession']
            ->expects($this->never())
            ->method('initialize');

        $this->assertFalse($ldap->authenticate('user', 'password'));
    }

    public function testLookup()
    {
        $entries = array(
            'count' => 1,
            0 => array(
                'count' => 2,
                'dn' => 'uid=my_user,ou=People,dc=kanboard,dc=local',
                'displayname' => array(
                    'count' => 1,
                    0 => 'My LDAP user',
                ),
                'mail' => array(
                    'count' => 2,
                    0 => 'user1@localhost',
                    1 => 'user2@localhost',
                ),
                'samaccountname' => array(
                    'count' => 1,
                    0 => 'my_ldap_user',
                ),
                0 => 'displayname',
                1 => 'mail',
                2 => 'samaccountname',
            )
        );

        $expected = array(
            'username' => 'my_ldap_user',
            'name' => 'My LDAP user',
            'email' => 'user1@localhost',
            'is_admin' => 0,
            'is_project_admin' => 0,
            'is_ldap_user' => 1,
        );

        $ldap = $this
            ->getMockBuilder('\Kanboard\Auth\Ldap')
            ->setConstructorArgs(array($this->container))
            ->setMethods(array('connect', 'getLdapUserPattern', 'getLdapBaseDn', 'getLdapAccountId'))
            ->getMock();

        $ldap
            ->expects($this->once())
            ->method('connect')
            ->will($this->returnValue('my_ldap_connection'));

        $ldap
            ->expects($this->once())
            ->method('getLdapUserPattern')
            ->will($this->returnValue('sAMAccountName=my_user'));

        $ldap
            ->expects($this->any())
            ->method('getLdapAccountId')
            ->will($this->returnValue('samaccountname'));

        $ldap
            ->expects($this->once())
            ->method('getLdapBaseDn')
            ->will($this->returnValue('ou=People,dc=kanboard,dc=local'));

        self::$functions
            ->expects($this->at(0))
            ->method('ldap_bind')
            ->with(
                $this->equalTo('my_ldap_connection'),
                $this->equalTo(null),
                $this->equalTo(null)
            )
            ->will($this->returnValue(true));

        self::$functions
            ->expects($this->at(1))
            ->method('ldap_search')
            ->with(
                $this->equalTo('my_ldap_connection'),
                $this->equalTo('ou=People,dc=kanboard,dc=local'),
                $this->equalTo('(&(sAMAccountName=my_user)(mail=user@localhost))'),
                $this->equalTo($ldap->getProfileAttributes())
            )
            ->will($this->returnValue('my_result_identifier'));

        self::$functions
            ->expects($this->at(2))
            ->method('ldap_get_entries')
            ->with(
                $this->equalTo('my_ldap_connection'),
                $this->equalTo('my_result_identifier')
            )
            ->will($this->returnValue($entries));

        $this->assertEquals($expected, $ldap->lookup('my_user', 'user@localhost'));
    }
}