#
# Author:: Bryan McLellan (<btm@loftninjas.org>)
# Copyright:: Copyright (c) Chef Software Inc.
# License:: Apache License, Version 2.0
#
# Licensed under the Apache License, Version 2.0 (the "License");
# you may not use this file except in compliance with the License.
# You may obtain a copy of the License at
#
#     http://www.apache.org/licenses/LICENSE-2.0
#
# Unless required by applicable law or agreed to in writing, software
# distributed under the License is distributed on an "AS IS" BASIS,
# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
# See the License for the specific language governing permissions and
# limitations under the License.
#

require "spec_helper"

describe Chef::TrainTransport do
  let(:transport) { Chef::TrainTransport.new(Chef::Log) }

  describe "load_credentials" do
    let(:good_credentials) { { "switch.cisco.com" => { "user" => "cisco", "password" => "cisco", "enable_password" => "secret" } } }

    before do
      allow(transport).to receive(:parse_credentials_file).and_return(good_credentials)
    end

    it "matches credentials when they exist" do
      expect(transport.load_credentials("switch.cisco.com")[:user]).to eq("cisco")
      expect(transport.load_credentials("switch.cisco.com")[:password]).to eq("cisco")
      expect(transport.load_credentials("switch.cisco.com")[:enable_password]).to eq("secret")
    end

    it "returns nil if there is no match" do
      expect(transport.load_credentials("router.unicorns.com")).to be_nil
    end

    # [foo.example.org]   => {"foo"=>{"example"=>{"org"=>{}}}}
    # ['foo.example.org'] => {"foo.example.org"=>{}}
    it "warns if the host has been split by toml" do
      allow(transport).to receive(:credentials_file_path).and_return("/Users/scotthourglass/.chef/credentials")
      allow(transport).to receive(:parse_credentials_file).and_return({ "foo" => { "example" => { "org" => {} } } })
      expect(Chef::Log).to receive(:warn).with(/as a Hash/)
      expect(Chef::Log).to receive(:warn).with(/Hostnames must be surrounded by single quotes/)
      expect(transport.load_credentials("foo.example.org")).to be_nil
    end
  end

  describe "credentials_file_path" do
    let(:config_cred_file_path) { "/somewhere/credentials" }
    let(:host_cred_file_path) { Chef::Platform.windows? ? "C:\\chef\\foo.example.org\\credentials" : "/etc/chef/foo.example.org/credentials" }

    context "when CHEF_CREDENTIALS_FILE environment variable is set" do
      before(:all) do
        @original_env = ENV.to_hash
      end

      after(:all) do
        ENV.clear
        ENV.update(@original_env)
      end

      before do
        ENV["CHEF_CREDENTIALS_FILE"] = "/etc/myconfig/targetmode_credentials"
        allow(::File).to receive(:exist?).and_return(true)
      end

      it "returns the path if it exists" do
        expect(transport.credentials_file_path).to eq("/etc/myconfig/targetmode_credentials")
      end
    end

    context "when a file path is specified by a config" do
      before do
        tm_config = double("Config Context", host: "foo.example.org", credentials_file: config_cred_file_path)
        allow(Chef::Config).to receive(:target_mode).and_return(tm_config)
      end

      it "returns the path if it exists" do
        allow(File).to receive(:exist?).with(config_cred_file_path).and_return(true)
        expect(transport.credentials_file_path).to eq(config_cred_file_path)
      end

      it "raises an error if it does not exist" do
        allow(File).to receive(:exist?).and_return(false)
        expect { transport.credentials_file_path }.to raise_error(ArgumentError, /does not exist/)
      end
    end

    it "raises an error if the default creds files do not exist" do
      allow(File).to receive(:exist?).and_return(false)
      expect { transport.credentials_file_path }.to raise_error(ArgumentError, /does not exist/)
    end

    it "returns the path to the default config file if it exists" do
      tm_config = double("Config Context", host: "foo.example.org", credentials_file: nil)
      allow(Chef::Config).to receive(:target_mode).and_return(tm_config)
      allow(File).to receive(:exist?).with(host_cred_file_path).and_return(true)
      expect(transport.credentials_file_path).to eq(host_cred_file_path)
    end

    it "expects target mode credentials in a file called 'target_credentials'" do
      allow(File).to receive(:exist?).and_return(false)
      expect { transport.credentials_file_path }.to raise_error(ArgumentError, /Credentials file .* does not exist: .*target_credentials/)
    end
  end
end
