/*
 * Copyright 2016-2017 original author or authors.
 *
 * Licensed under the Apache License, Version 2.0 (the "License");
 * you may not use this file except in compliance with the License.
 * You may obtain a copy of the License at
 *
 *      http://www.apache.org/licenses/LICENSE-2.0
 *
 * Unless required by applicable law or agreed to in writing, software
 * distributed under the License is distributed on an "AS IS" BASIS,
 * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
 * See the License for the specific language governing permissions and
 * limitations under the License.
 */
package org.springframework.data.rest.webmvc;

import static org.assertj.core.api.Assertions.assertThat;
import static org.hamcrest.MatcherAssert.assertThat;
import static org.hamcrest.Matchers.*;
import static org.mockito.Mockito.*;

import java.util.Optional;

import org.junit.Before;
import org.junit.Test;
import org.junit.runner.RunWith;
import org.mockito.Mock;
import org.mockito.junit.MockitoJUnitRunner;
import org.springframework.data.repository.support.Repositories;
import org.springframework.data.rest.core.mapping.ResourceMappings;
import org.springframework.data.rest.webmvc.RepositoryRestHandlerMapping.NoOpStringValueResolver;
import org.springframework.data.rest.webmvc.RepositoryRestHandlerMapping.RepositoryCorsConfigurationAccessor;
import org.springframework.web.bind.annotation.CrossOrigin;
import org.springframework.web.bind.annotation.RequestMethod;
import org.springframework.web.cors.CorsConfiguration;

/**
 * Unit tests for {@link RepositoryCorsConfigurationAccessor}.
 * 
 * @author Mark Paluch
 * @author Oliver Gierke
 * @soundtrack Aso Mamiko - Drive Me Crazy (Club Mix)
 * @since 2.6
 */
@RunWith(MockitoJUnitRunner.class)
public class RepositoryCorsConfigurationAccessorUnitTests {

	RepositoryCorsConfigurationAccessor accessor;

	@Mock ResourceMappings mappings;
	@Mock Repositories repositories;

	@Before
	public void before() throws Exception {
		accessor = new RepositoryCorsConfigurationAccessor(mappings, NoOpStringValueResolver.INSTANCE,
				Optional.of(repositories));
	}

	@Test // DATAREST-573
	public void createConfigurationShouldConstructCorsConfiguration() {

		CorsConfiguration configuration = accessor.createConfiguration(AnnotatedRepository.class);

		assertThat(configuration).isNotNull();
		assertThat(configuration.getAllowCredentials()).isTrue();
		assertThat(configuration.getAllowedHeaders()).contains("*");
		assertThat(configuration.getAllowedOrigins()).contains("*");
		assertThat(configuration.getAllowedMethods(),
				hasItems("OPTIONS", "HEAD", "GET", "PATCH", "POST", "PUT", "DELETE", "TRACE"));
		assertThat(configuration.getMaxAge()).isEqualTo(1800L);
	}

	@Test // DATAREST-573
	public void createConfigurationShouldConstructFullCorsConfiguration() {

		CorsConfiguration configuration = accessor.createConfiguration(FullyConfiguredCorsRepository.class);

		assertThat(configuration).isNotNull();
		assertThat(configuration.getAllowCredentials()).isTrue();
		assertThat(configuration.getAllowedHeaders()).contains("Content-type");
		assertThat(configuration.getExposedHeaders()).contains("Accept");
		assertThat(configuration.getAllowedOrigins()).contains("http://far.far.away");
		assertThat(configuration.getAllowedMethods()).contains("PATCH");
		assertThat(configuration.getAllowedMethods()).doesNotContain("DELETE");
		assertThat(configuration.getAllowCredentials()).isTrue();
		assertThat(configuration.getMaxAge()).isEqualTo(1234L);
	}

	@Test // DATAREST-994
	public void returnsNoCorsConfigurationWithNoRepositories() {

		accessor = new RepositoryCorsConfigurationAccessor(mappings, NoOpStringValueResolver.INSTANCE, Optional.empty());

		when(mappings.exportsTopLevelResourceFor("/people")).thenReturn(true);

		assertThat(accessor.findCorsConfiguration("/people")).isEmpty();
	}

	interface PlainRepository {}

	@CrossOrigin
	interface AnnotatedRepository {}

	@CrossOrigin(origins = "http://far.far.away", //
			allowedHeaders = "Content-type", //
			maxAge = 1234, exposedHeaders = "Accept", //
			methods = RequestMethod.PATCH, //
			allowCredentials = "true")
	interface FullyConfiguredCorsRepository {}
}