// Copyright 2016 Amazon.com, Inc. or its affiliates. All Rights Reserved.
//
// Licensed under the Apache License, Version 2.0 (the "License"). You may not
// use this file except in compliance with the License. A copy of the
// License is located at
//
// http://aws.amazon.com/apache2.0/
//
// or in the "license" file accompanying this file. This file is distributed
// on an "AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND,
// either express or implied. See the License for the specific language governing
// permissions and limitations under the License.

// Package parameterstore contains modules to resolve ssm parameters present in the document.
package parameterstore

import (
	"testing"

	"github.com/aws/amazon-ssm-agent/agent/appconfig"
	"github.com/aws/amazon-ssm-agent/agent/context"
	"github.com/aws/amazon-ssm-agent/agent/contracts"
	mockcontext "github.com/aws/amazon-ssm-agent/agent/mocks/context"
	"github.com/aws/amazon-ssm-agent/agent/mocks/log"
	"github.com/stretchr/testify/assert"
)

type StringTestCase struct {
	Input             string
	Output            string
	Parameters        []Parameter
	InvalidParameters []string
}

var StringTestCases = []StringTestCase{
	{
		Input:             "This is a test string",
		Output:            "This is a test string",
		Parameters:        []Parameter{},
		InvalidParameters: []string{},
	},
	{
		Input:  "This is a {{ssm:test}} string",
		Output: "This is a testvalue string",
		Parameters: []Parameter{
			{
				Name:    "test",
				Type:    "String",
				Value:   "testvalue",
				Version: 5,
			},
		},
		InvalidParameters: []string{},
	},
	StringTestCase{
		Input:  "This is a {{ssm:test.p1}} with dot string",
		Output: "This is a testvalueWithDot with dot string",
		Parameters: []Parameter{
			{
				Name:    "test.p1",
				Type:    "String",
				Value:   "testvalueWithDot",
				Version: 5,
			},
		},
		InvalidParameters: []string{},
	},
	StringTestCase{
		Input:  "This is a {{ssm:test-p1}} with dash string",
		Output: "This is a testValueWithDash with dash string",
		Parameters: []Parameter{
			{
				Name:    "test-p1",
				Type:    "String",
				Value:   "testValueWithDash",
				Version: 5,
			},
		},
		InvalidParameters: []string{},
	},
	StringTestCase{
		Input:  "This is a {{ssm:test/p1}} with slash string",
		Output: "This is a testValueWithSlash with slash string",
		Parameters: []Parameter{
			{
				Name:    "test/p1",
				Type:    "String",
				Value:   "testValueWithSlash",
				Version: 5,
			},
		},
		InvalidParameters: []string{},
	}, StringTestCase{
		Input:  "This is a {{ssm:test:4}} with version",
		Output: "This is a value with version",
		Parameters: []Parameter{
			{
				Name:    "test",
				Type:    "String",
				Value:   "value",
				Version: 4,
			},
		},
		InvalidParameters: []string{},
	}, StringTestCase{
		Input:  "This is a {{ssm:/test/foo:5}} with version",
		Output: "This is a value with version",
		Parameters: []Parameter{
			{
				Name:    "/test/foo",
				Type:    "String",
				Value:   "value",
				Version: 5,
			},
		},
		InvalidParameters: []string{},
	},
}

var InvalidStringTestCases = []StringTestCase{
	StringTestCase{
		Input:             "This is a {{ssm:test/p5}} that does not exist",
		Output:            "This is a {{ssm:test/p5}} that does not exist",
		Parameters:        []Parameter{},
		InvalidParameters: []string{"test/p5"},
	},
}

var logger = log.NewMockLog()

func TestResolve(t *testing.T) {
	for _, testCase := range StringTestCases {
		testResolveMethod(t, testCase)
	}

	for _, testCase := range InvalidStringTestCases {
		testResolveMethodWithInvalidCase(t, testCase)
	}
}

func testResolveMethod(t *testing.T, testCase StringTestCase) {
	callParameterService = func(
		context context.T,
		paramNames []string) (*GetParametersResponse, error) {
		result := GetParametersResponse{}
		result.Parameters = testCase.Parameters
		result.InvalidParameters = testCase.InvalidParameters
		return &result, nil
	}

	result, err := Resolve(mockcontext.NewMockDefault(), testCase.Input)

	assert.Equal(t, testCase.Output, result)
	assert.Nil(t, err)
}

func testResolveMethodWithInvalidCase(t *testing.T, testCase StringTestCase) {
	callParameterService = func(
		context context.T,
		paramNames []string) (*GetParametersResponse, error) {
		result := GetParametersResponse{}
		result.Parameters = testCase.Parameters
		result.InvalidParameters = testCase.InvalidParameters
		return &result, nil
	}

	_, err := Resolve(mockcontext.NewMockDefault(), testCase.Input)

	assert.NotNil(t, err)
}

func testGetValidSSMParamRegexCompiler(t *testing.T) {
	validSSMParam, _ := getValidSSMParamRegexCompiler(logger, "test.p1")
	assert.True(t, validSSMParam.MatchString("test.p1"), "test.p1 should not match test.p1")
	assert.False(t, validSSMParam.MatchString("test-p1"), "test.p1 should not match test-p1")
	assert.False(t, validSSMParam.MatchString("testap1"), "test.p1 should not match test-p1")
	validSSMParam2, _ := getValidSSMParamRegexCompiler(logger, "test.p1.p2.p3")
	assert.True(t, validSSMParam2.MatchString("test.p1.p2.p3"), "test.p1.p2.p3 should not match test.p1.p2.p3")
	assert.False(t, validSSMParam2.MatchString("test.p1-p2-p3"), "test.p1.p2.p3 should not match test.p1-p2-p3")
	assert.False(t, validSSMParam2.MatchString("test.p1.p2-p3"), "test.p1.p2.p3 should not match test.p1.p2-p3")
	validSSMParam3, _ := getValidSSMParamRegexCompiler(logger, "test:3")
	assert.True(t, validSSMParam3.MatchString("test:3"), "test:3 should not match test:3")
	assert.False(t, validSSMParam3.MatchString("test.p1-p2-p3"), "test:3 should not match test.p1-p2-p3")
	assert.False(t, validSSMParam3.MatchString("test.p1.p2-p3"), "test:3 should not match test.p1.p2-p3")
}

func TestValidateSSMParameters(t *testing.T) {

	// Test case 1 with no SSM parameters
	documentParameters := map[string]*contracts.Parameter{
		"commands": {
			AllowedPattern: "^[a-zA-Z0-9]+$",
		},
		"workingDirectory": {
			AllowedPattern: "",
		},
		"testDocument": {
			AllowedPattern: "",
		},
	}

	parameters := map[string]interface{}{
		"commands":         "test",
		"workingDirectory": "testdot.p1",
		"testDocument":     "testdash-p1",
	}

	err := ValidateSSMParameters(mockcontext.NewMockDefault(), documentParameters, parameters, "")
	assert.Nil(t, err)

	// Test case 2 with SSM parameters and secure string SSM parameter type
	documentParameters = map[string]*contracts.Parameter{
		"commands": {
			AllowedPattern: "^[a-zA-Z0-9]+$",
			ParamType:      ParamTypeString,
		},
		"workingDirectory": {
			AllowedPattern: "",
		},
	}

	parameters = map[string]interface{}{
		"commands":         "{{ssm:test}}",
		"workingDirectory": "{{ssm:test2}}",
	}

	ssmParameters := []Parameter{
		{
			Name:  "test",
			Type:  ParamTypeSecureString,
			Value: "test",
		},
		{
			Name:  "test2",
			Type:  ParamTypeSecureString,
			Value: "test2",
		},
	}

	invalidSSMParameters := []string{}

	callParameterService = func(
		context context.T,
		paramNames []string) (*GetParametersResponse, error) {
		result := GetParametersResponse{}
		result.Parameters = ssmParameters
		result.InvalidParameters = invalidSSMParameters
		return &result, nil
	}

	err = ValidateSSMParameters(mockcontext.NewMockDefault(), documentParameters, parameters, "")
	assert.Equal(t, "Parameters [test test2] of type SecureString are not supported", err.Error())

	// Test case 3 with SSM parameters and SSM parameter value doesn't match allowed pattern
	documentParameters = map[string]*contracts.Parameter{
		"commands": {
			AllowedPattern: "^[a-zA-Z]+$",
			ParamType:      ParamTypeString,
		},
		"workingDirectory": {
			AllowedPattern: "",
		},
	}

	parameters = map[string]interface{}{
		"commands":         "{{ssm:test}}",
		"workingDirectory": "{{ssm:test.p1}}",
	}

	ssmParameters = []Parameter{
		{
			Name:  "test",
			Type:  ParamTypeString,
			Value: "1234",
		},
		{
			Name:  "test.p1",
			Type:  ParamTypeString,
			Value: "1234",
		},
	}

	callParameterService = func(
		context context.T,
		paramNames []string) (*GetParametersResponse, error) {
		result := GetParametersResponse{}
		result.Parameters = ssmParameters
		result.InvalidParameters = invalidSSMParameters
		return &result, nil
	}

	err = ValidateSSMParameters(mockcontext.NewMockDefault(), documentParameters, parameters, "")
	assert.Contains(t, err.Error(), "does not match the allowed pattern /^[a-zA-Z]+$/")

	// Test case 4 with SSM parameter versions
	documentParameters = map[string]*contracts.Parameter{
		"commands": {
			AllowedPattern: "^[a-zA-Z]+$",
			ParamType:      ParamTypeString,
		},
		"workingDirectory": {
			AllowedPattern: "",
		},
		"testDirectory": {
			AllowedPattern: "",
		},
		"someDirectory": {
			AllowedPattern: "",
		},
	}

	parameters = map[string]interface{}{
		"commands":         "{{ssm:test:3}}",
		"workingDirectory": "{{ssm:test:5}}",
		"testDirectory":    "{{ssm:test}}",
		"someDirectory":    "{{ssm:foo:7}}",
	}

	ssmParameters = []Parameter{
		{
			Name:    "test",
			Type:    ParamTypeString,
			Value:   "ls",
			Version: 3,
		},
		{
			Name:    "test",
			Type:    ParamTypeString,
			Value:   "date",
			Version: 5,
		},
		{
			Name:    "test",
			Type:    ParamTypeString,
			Value:   "date",
			Version: 5,
		},
		{
			Name:    "foo",
			Type:    ParamTypeString,
			Value:   "1234",
			Version: 7,
		},
	}

	callParameterService = func(
		context context.T,
		paramNames []string) (*GetParametersResponse, error) {
		result := GetParametersResponse{}
		result.Parameters = ssmParameters
		result.InvalidParameters = invalidSSMParameters
		return &result, nil
	}

	err = ValidateSSMParameters(mockcontext.NewMockDefault(), documentParameters, parameters, "")
	assert.Nil(t, err)

	// Test case 4 with invalid SSM parameter versions
	documentParameters = map[string]*contracts.Parameter{
		"commands": {
			AllowedPattern: "^[a-zA-Z]+$",
			ParamType:      ParamTypeString,
		},
		"workingDirectory": {
			AllowedPattern: "",
		},
		"testDirectory": {
			AllowedPattern: "",
		},
		"someDirectory": {
			AllowedPattern: "",
		},
	}

	parameters = map[string]interface{}{
		"commands":         "{{ssm:test:3}}",
		"workingDirectory": "{{ssm:test:5}}",
		"testDirectory":    "{{ssm:test}}",
		"someDirectory":    "{{ssm:foo:7}}",
	}

	ssmParameters = []Parameter{
		{
			Name:    "test",
			Type:    ParamTypeString,
			Value:   "ls",
			Version: 3,
		},
		{
			Name:    "test",
			Type:    ParamTypeString,
			Value:   "date",
			Version: 5,
		},
		{
			Name:    "test",
			Type:    ParamTypeString,
			Value:   "date",
			Version: 5,
		},
	}

	invalidSSMParameters = []string{"foo:7"}

	callParameterService = func(
		context context.T,
		paramNames []string) (*GetParametersResponse, error) {
		result := GetParametersResponse{}
		result.Parameters = ssmParameters
		result.InvalidParameters = invalidSSMParameters
		return &result, nil
	}

	err = ValidateSSMParameters(mockcontext.NewMockDefault(), documentParameters, parameters, "")
	assert.Equal(t, "Input contains invalid parameters [foo:7]", err.Error())
}

func TestValidateParameter_SkipValidation_SSMParameterWithExtraString(t *testing.T) {
	documentParameters := map[string]*contracts.Parameter{
		"commands": {
			MinChars: "20", // Invalid limit
		},
	}
	parameters := map[string]interface{}{
		"commands": "test {{ssm:test}}",
	}
	resolve = func(context context.T, input interface{}) (interface{}, error) {
		return map[string]interface{}{"commands": "test sample"}, nil
	}
	err := ValidateSSMParameters(mockcontext.NewMockDefault(), documentParameters, parameters, appconfig.PluginRunDocument)
	assert.Nil(t, err)
}

func TestValidateParameter_SkipValidation_SSMParameter(t *testing.T) {
	documentParameters := map[string]*contracts.Parameter{
		"commands": {
			MinChars: "20", // Invalid limit
		},
	}
	parameters := map[string]interface{}{
		"commands": "{{ssm:test}}",
	}
	resolve = func(context context.T, input interface{}) (interface{}, error) {
		return map[string]interface{}{"commands": "sample"}, nil
	}
	err := ValidateSSMParameters(mockcontext.NewMockDefault(), documentParameters, parameters, appconfig.PluginRunDocument)
	assert.Nil(t, err)
}

func TestValidateParameter_Success_ValidMinChar(t *testing.T) {
	documentParameters := map[string]*contracts.Parameter{
		"commands": {
			MinChars: "2", // Valid limit
		},
	}
	parameters := map[string]interface{}{
		"commands": "12",
	}
	resolve = func(context context.T, input interface{}) (interface{}, error) {
		return map[string]interface{}{"commands": "12"}, nil
	}
	err := ValidateSSMParameters(mockcontext.NewMockDefault(), documentParameters, parameters, appconfig.PluginRunDocument)
	assert.Nil(t, err)
}

func TestValidateParameter_Failed_InValidMinChar(t *testing.T) {
	documentParameters := map[string]*contracts.Parameter{
		"commands": {
			MinChars: "9", // Invalid limit
		},
	}
	parameters := map[string]interface{}{
		"commands": "12345",
	}
	resolve = func(context context.T, input interface{}) (interface{}, error) {
		return map[string]interface{}{"commands": "12345"}, nil
	}
	err := ValidateSSMParameters(mockcontext.NewMockDefault(), documentParameters, parameters, appconfig.PluginRunDocument)
	assert.Contains(t, err.Error(), "is less than the min char limit")
}