# pylint: disable=W0613

# Copyright (C) 2018 The Android Open Source Project
#
# Licensed under the Apache License, Version 2.0 (the "License");
# you may not use this file except in compliance with the License.
# You may obtain a copy of the License at
#
# http://www.apache.org/licenses/LICENSE-2.0
#
# Unless required by applicable law or agreed to in writing, software
# distributed under the License is distributed on an "AS IS" BASIS,
# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
# See the License for the specific language governing permissions and
# limitations under the License.

import os.path
import random
import string
import time

from OpenSSL import crypto
from passlib.apache import HtpasswdFile

import pytest


@pytest.fixture(scope="module")
def container_run_factory(
    docker_client, apache_git_http_backend_image, apache_credentials_dir
):
    def run_container(env=None):
        return docker_client.containers.run(
            image=apache_git_http_backend_image.id,
            ports={"80": "8080", "443": "8443"},
            volumes={
                str(apache_credentials_dir): {
                    "bind": "/var/apache/credentials",
                    "mode": "ro",
                }
            },
            environment=env,
            detach=True,
            auto_remove=True,
        )

    return run_container


@pytest.fixture(scope="module")
def container_run(request, container_run_factory):
    container_run = container_run_factory()
    time.sleep(3)

    def stop_container():
        container_run.stop(timeout=1)

    request.addfinalizer(stop_container)
    return container_run


@pytest.fixture(scope="module")
def basic_auth_creds():
    return {"user": "git", "password": "secret"}


@pytest.fixture(scope="module")
def credentials_dir(tmp_path_factory):
    return tmp_path_factory.mktemp("apache_creds")


@pytest.fixture(scope="module")
def mock_certificates(credentials_dir):
    key = crypto.PKey()
    key.generate_key(crypto.TYPE_RSA, 1024)

    cert = crypto.X509()
    cert.get_subject().C = "DE"
    cert.get_subject().O = "Gerrit"
    cert.get_subject().CN = "localhost"
    cert.add_extensions(
        [crypto.X509Extension(b"subjectAltName", False, b"DNS:localhost")]
    )
    cert.gmtime_adj_notBefore(0)
    cert.gmtime_adj_notAfter(10 * 365 * 24 * 60 * 60)
    cert.set_issuer(cert.get_subject())
    cert.set_pubkey(key)
    cert.sign(key, "sha1")

    open(os.path.join(credentials_dir, "server.crt"), "wb").write(
        crypto.dump_certificate(crypto.FILETYPE_PEM, cert)
    )
    open(os.path.join(credentials_dir, "server.key"), "wb").write(
        crypto.dump_privatekey(crypto.FILETYPE_PEM, key)
    )


@pytest.fixture(scope="module")
def mock_htpasswd(credentials_dir, basic_auth_creds):
    htpasswd_file = HtpasswdFile(os.path.join(credentials_dir, ".htpasswd"), new=True)
    htpasswd_file.set_password(basic_auth_creds["user"], basic_auth_creds["password"])
    htpasswd_file.save()


@pytest.fixture(scope="module")
def apache_credentials_dir(credentials_dir, mock_certificates, mock_htpasswd):
    return credentials_dir


@pytest.fixture(scope="module", params=["http", "https"])
def container_connection_data(request):
    port = 8080 if request.param == "http" else 8443
    return {"protocol": request.param, "port": port}


@pytest.fixture(scope="module")
def base_url(container_connection_data):
    return "{protocol}://localhost:{port}".format(
        protocol=container_connection_data["protocol"],
        port=container_connection_data["port"],
    )


@pytest.fixture(scope="function")
def random_repo_name():
    return "".join(
        [random.choice(string.ascii_letters + string.digits) for n in range(8)]
    )


@pytest.fixture(scope="function")
def repo_creation_url(base_url, random_repo_name):
    return "%s/new/%s" % (base_url, random_repo_name)