OBP-API/src/test/scala/code/api/gateWayloginTest.scala

package code.api

import code.api.util.{APIUtil, ErrorMessages}
import code.bankconnectors.vJune2017.InboundAccountJune2017
import code.bankconnectors.vMar2017.InboundStatusMessage
import code.setup.{APIResponse, DefaultUsers, ServerSetup}
import net.liftweb.common.Full
import net.liftweb.json
import net.liftweb.json.Extraction
import net.liftweb.json.JsonAST.{JField, JObject, JString}
import net.liftweb.util.Props
import org.scalatest._
import code.api.util.APIUtil.OAuth._
import code.api.util.ApiRole.CanGetAnyUser
import code.api.util.ErrorMessages._

class gateWayloginTest extends ServerSetup with BeforeAndAfter with DefaultUsers {

  //fake this: Connector.connector.vend.getBankAccounts(username)
  val fakeResultFromAdapter =  Full(InboundAccountJune2017(
    errorCode = "",
    List(InboundStatusMessage("ESB", "Success", "0", "OK")),
    cbsToken ="cbsToken1",
    bankId = "gh.29.uk",
    branchId = "222",
    accountId = "8ca8a7e4-6d02-48e3-a029-0b2bf89de9f0",
    accountNumber = "123",
    accountType = "AC",
    balanceAmount = "50",
    balanceCurrency = "EUR",
    owners = "Susan" :: " Frank" :: Nil,
    viewsToGenerate = "Public" :: "Accountant" :: "Auditor" :: Nil,
    bankRoutingScheme = "iban",
    bankRoutingAddress = "bankRoutingAddress",
    branchRoutingScheme = "branchRoutingScheme",
    branchRoutingAddress = " branchRoutingAddress",
    accountRoutingScheme = "accountRoutingScheme",
    accountRoutingAddress = "accountRoutingAddress",
    accountRules = Nil
  ) :: InboundAccountJune2017(
    errorCode = "",
    List(InboundStatusMessage("ESB", "Success", "0", "OK")),
    cbsToken ="cbsToken2",
    bankId = "gh.29.uk",
    branchId = "222",
    accountId = "8ca8a7e4-6d02-48e3-a029-0b2bf89de9f0",
    accountNumber = "123",
    accountType = "AC",
    balanceAmount = "50",
    balanceCurrency = "EUR",
    owners = "Susan" :: " Frank" :: Nil,
    viewsToGenerate = "Public" :: "Accountant" :: "Auditor" :: Nil,
    bankRoutingScheme = "iban",
    bankRoutingAddress = "bankRoutingAddress",
    branchRoutingScheme = "branchRoutingScheme",
    branchRoutingAddress = " branchRoutingAddress",
    accountRoutingScheme = "accountRoutingScheme",
    accountRoutingAddress = "accountRoutingAddress",
    accountRules = Nil
  ) ::Nil)


  val accessControlOriginHeader = ("Access-Control-Allow-Origin", "*")
  /* Payload data. verified by secret "0844b5b8-4f27-488b-9eb6-6db2327a838b"
    {
      "login_user_name":"simonr",
      "is_first":false,
      "app_id":"593450734587345",
      "app_name":"myapp4",
      "time_stamp":"19-06-2017:22:27:11:100",
      "cbs_token":"",
      "cbs_id":""
    }
    */
  val invalidSecretJwt = "eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJsb2dpbl91c2VyX25hbWUiOiJzaW1vbnIiLCJpc19maXJzdCI6ZmFsc2UsImFwcF9pZCI6IjU5MzQ1MDczNDU4NzM0NSIsImFwcF9uYW1lIjoibXlhcHA0IiwidGltZV9zdGFtcCI6IjE5LTA2LTIwMTc6MjI6Mjc6MTE6MTAwIiwiY2JzX3Rva2VuIjoiIiwiY2JzX2lkIjoiIn0.hUfxAU3FRSLObgRk2CGbJaYfWnLOkVoqGVOo6AUhmZ4"
  /* Payload data. verified by secret "Cannot get the secret"
  {
    "login_user_name":"simonr",
    "is_first":false,
    "app_id":"593450734587345",
    "app_name":"myapp4",
    "time_stamp":"19-06-2017:22:27:11:100",
    "cbs_token":"",
    "cbs_id":""
  }
  */
  val jwt = "eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJsb2dpbl91c2VyX25hbWUiOiJzaW1vbnIiLCJpc19maXJzdCI6ZmFsc2UsImFwcF9pZCI6IjU5MzQ1MDczNDU4NzM0NSIsImFwcF9uYW1lIjoibXlhcHA0IiwidGltZV9zdGFtcCI6IjE5LTA2LTIwMTc6MjI6Mjc6MTE6MTAwIiwiY2JzX3Rva2VuIjoiIiwiY2JzX2lkIjoiIn0.yTg9LfSdzPXamC9EApd1zcXWU0cVPbWBjcn9y4FLq9U"
  val jwtRSA256 = "eyJ0eXAiOiJKV1QiLCJhbGciOiJSUzI1NiJ9.eyJhcHBfbmFtZSI6Im15YXBwNCIsInRpbWVfc3RhbXAiOiIxOS0wNi0yMDE3OjIyOjI3OjExOjEwMCIsImxvZ2luX3VzZXJfbmFtZSI6InNpbW9uciIsImNic190b2tlbiI6IiIsImlzX2ZpcnN0IjpmYWxzZSwiY2JzX2lkIjoiIiwiYXBwX2lkIjoiNTkzNDUwNzM0NTg3MzQ1In0.bpDHeyGMQgxnTnmGVPu_mUngc_wekEKwNkXD9K4UfYflmU01JVqKZchwNQSdwZQ5FnvLeHf112iN2X2yaVmjkNzrjkxi-EVNNdMimMZLyLDy-RxkRZkXnlItJVhdnR-_htXryy2XzV3EhnxY8qtO-fqd3IQPTKNx4-knrPu_F4-5nQAW0hlwJRb5HAGYTDMqePXTuo16_hYdtEheU6GJONDdezpXu6BzYDCA3pmiy1cHRABClqdS76m3PdChHnEEqVKIoczfLjj6Prnwjeww4cb_b29Hh-Yfe4DEwwI9cyZ_SyxOinB5-wZhPneqW1dLn6V7dGKsoh9ELmYl3qWIPQ"

  val invalidJwt = ("Authorization", ("GatewayLogin token=%s").format(invalidSecretJwt))
  val validJwt = ("Authorization", ("GatewayLogin token=%s").format(jwt))
  val missingParameterToken = ("Authorization", ("GatewayLogin wrong_parameter_name=%s").format(jwt))

  def gatewayLoginRequest = baseRequest / "obp" / "v3.0.0" / "users"
  def gatewayLoginNonBlockingRequest = baseRequest / "obp" / "v3.0.0" / "users" / "current" / "customers"

  feature("GatewayLogin in a BLOCKING way") {
    APIUtil.getPropsAsBoolValue("allow_gateway_login", false) match  {
      case true =>
        scenario("Missing parameter token in a blocking way") {
          When("We try to login without parameter token in a Header")
          val request = gatewayLoginRequest
          val response = makeGetRequest(request, List(missingParameterToken))
          Then("We should get a 400 - Bad Request")
          response.code should equal(400)
          assertResponse(response, ErrorMessages.GatewayLoginMissingParameters + "token")
        }

        scenario("Invalid JWT value") {
          When("We try to login with an invalid JWT")
          val request = gatewayLoginRequest
          val response = makeGetRequest(request, List(invalidJwt))
          Then("We should get a 400 - Bad Request")
          response.code should equal(400)
          assertResponse(response, ErrorMessages.GatewayLoginJwtTokenIsNotValid)
        }

        scenario("Valid JWT value") {
          When("We try to login with an valid JWT")
          val request = gatewayLoginRequest.GET <@ (userGatewayLogin)
          val response = makeGetRequest(request, List(validJwt))
            println("-----------------------------------------")
            println(response)
            println("-----------------------------------------")
          Then("We should get a 403 - Bad Request because we miss a proper role")
          response.code should equal(403)
          assertResponse(response, UserHasMissingRoles + CanGetAnyUser)
        }
      case false =>
        logger.info("-----------------------------------------------------------------------------------")
        logger.info("------------- GatewayLogin in a BLOCKING way Test is DISABLED ---------------------")
        logger.info("-----------------------------------------------------------------------------------")
    }
  }

  feature("GatewayLogin in a NON BLOCKING way") {
    APIUtil.getPropsAsBoolValue("allow_gateway_login", false) match  {
      case true =>
        scenario("Missing parameter token in a blocking way") {
          When("We try to login without parameter token in a Header")
          val request = gatewayLoginNonBlockingRequest
          val response = makeGetRequest(request, List(missingParameterToken))
          Then("We should get a 400 - Bad Request")
          response.code should equal(400)
          assertResponse(response, ErrorMessages.GatewayLoginMissingParameters + "token")
        }

        scenario("Invalid JWT value") {
          When("We try to login with an invalid JWT")
          val request = gatewayLoginNonBlockingRequest
          val response = makeGetRequest(request, List(invalidJwt))
          Then("We should get a 400 - Bad Request")
          response.code should equal(400)
          assertResponse(response, ErrorMessages.GatewayLoginJwtTokenIsNotValid)
        }

        scenario("Valid JWT value") {
          When("We try to login with an valid JWT")
          val request = gatewayLoginNonBlockingRequest.GET <@ (userGatewayLogin)
          val response = makeGetRequest(request, List(validJwt))
          Then("We should get a 200 ")
          response.code should equal(200)
        }
      case false =>
        logger.info("---------------------------------------------------------------------------------------")
        logger.info("------------- GatewayLogin in a NON BLOCKING way Test is DISABLED ---------------------")
        logger.info("---------------------------------------------------------------------------------------")
    }
  }


  feature("Unit Tests for two getCbsToken and getErrors: ") {
    scenario("test the getErrors") {
      val reply: List[String] =  GatewayLogin.getErrors(json.compactRender(Extraction.decompose(fakeResultFromAdapter.openOrThrowException(attemptedToOpenAnEmptyBox))))
      reply.forall(_.equalsIgnoreCase("")) should equal(true)
    }

    scenario("test the getCbsToken") {
      val reply: List[String] =  GatewayLogin.getCbsTokens(json.compactRender(Extraction.decompose(fakeResultFromAdapter.openOrThrowException(attemptedToOpenAnEmptyBox))))
      reply(0) should equal("cbsToken1")
      reply(1) should equal("cbsToken2")

      reply.exists(_.equalsIgnoreCase("")==false) should equal(true)
    }
  }



  private def assertResponse(response: APIResponse, expectedErrorMessage: String): Unit = {
    response.body match {
      case JObject(List(JField(name, JString(value)))) =>
        name should equal("error")
        value should include(expectedErrorMessage)
      case _ => fail("Expected an error message")
    }
  }
}