// Licensed to the .NET Foundation under one or more agreements.
// The .NET Foundation licenses this file to you under the MIT license.
 
using System.Security.Claims;
using BenchmarkDotNet.Attributes;
using Microsoft.AspNetCore.Http;
using Microsoft.Extensions.DependencyInjection;
 
namespace Microsoft.AspNetCore.Antiforgery.Microbenchmarks.Benchmarks;
 
[AspNetCoreBenchmark]
public class AntiforgeryTokenGeneratorBenchmarks
{
    private IAntiforgeryTokenGenerator _tokenGenerator = null!;
 
    // Anonymous user scenario
    private HttpContext _anonymousHttpContext = null!;
    private AntiforgeryToken _anonymousCookieToken = null!;
    private AntiforgeryToken _anonymousRequestToken = null!;
 
    // Authenticated user with username scenario
    private HttpContext _authenticatedHttpContext = null!;
    private AntiforgeryToken _authenticatedCookieToken = null!;
    private AntiforgeryToken _authenticatedRequestToken = null!;
 
    // Claims-based user scenario
    private HttpContext _claimsHttpContext = null!;
    private AntiforgeryToken _claimsCookieToken = null!;
    private AntiforgeryToken _claimsRequestToken = null!;
 
    [GlobalSetup]
    public void Setup()
    {
        var serviceCollection = new ServiceCollection();
        serviceCollection.AddAntiforgery();
        var serviceProvider = serviceCollection.BuildServiceProvider();
 
        _tokenGenerator = serviceProvider.GetRequiredService<IAntiforgeryTokenGenerator>();
 
        // Setup anonymous user scenario
        _anonymousHttpContext = new DefaultHttpContext();
        _anonymousHttpContext.User = new ClaimsPrincipal(new ClaimsIdentity());
 
        _anonymousCookieToken = new AntiforgeryToken { IsCookieToken = true };
        _anonymousRequestToken = new AntiforgeryToken
        {
            IsCookieToken = false,
            SecurityToken = _anonymousCookieToken.SecurityToken,
            Username = string.Empty
        };
 
        // Setup authenticated user with username scenario
        _authenticatedHttpContext = new DefaultHttpContext();
        var authenticatedIdentity = new ClaimsIdentity(
            [new Claim(ClaimsIdentity.DefaultNameClaimType, "testuser@example.com")],
            "TestAuthentication");
        _authenticatedHttpContext.User = new ClaimsPrincipal(authenticatedIdentity);
 
        _authenticatedCookieToken = new AntiforgeryToken { IsCookieToken = true };
        _authenticatedRequestToken = new AntiforgeryToken
        {
            IsCookieToken = false,
            SecurityToken = _authenticatedCookieToken.SecurityToken,
            Username = "testuser@example.com"
        };
 
        // Setup claims-based user scenario
        _claimsHttpContext = new DefaultHttpContext();
        var claimsIdentity = new ClaimsIdentity(
            [
                new Claim(ClaimsIdentity.DefaultNameClaimType, "claimsuser@example.com"),
                new Claim("sub", "user-id-12345"),
                new Claim(ClaimTypes.NameIdentifier, "unique-id")
            ],
            "ClaimsAuthentication");
        _claimsHttpContext.User = new ClaimsPrincipal(claimsIdentity);
 
        _claimsCookieToken = new AntiforgeryToken { IsCookieToken = true };
 
        // For claims-based users, we need to extract the ClaimUid
        var claimUid = new byte[32];
        _ = new DefaultClaimUidExtractor().TryExtractClaimUidBytes(_claimsHttpContext.User, claimUid);
        _claimsRequestToken = new AntiforgeryToken
        {
            IsCookieToken = false,
            SecurityToken = _claimsCookieToken.SecurityToken,
            ClaimUid = claimUid is not null ? new BinaryBlob(256, claimUid) : null
        };
    }
 
    [Benchmark]
    public object GenerateRequestToken_Anonymous()
    {
        return _tokenGenerator.GenerateRequestToken(_anonymousHttpContext, _anonymousCookieToken);
    }
 
    [Benchmark]
    public object GenerateRequestToken_Authenticated()
    {
        return _tokenGenerator.GenerateRequestToken(_authenticatedHttpContext, _authenticatedCookieToken);
    }
 
    [Benchmark]
    public bool TryValidateTokenSet_Anonymous()
    {
        return _tokenGenerator.TryValidateTokenSet(
            _anonymousHttpContext,
            _anonymousCookieToken,
            _anonymousRequestToken,
            out _);
    }
 
    [Benchmark]
    public bool TryValidateTokenSet_Authenticated()
    {
        return _tokenGenerator.TryValidateTokenSet(
            _authenticatedHttpContext,
            _authenticatedCookieToken,
            _authenticatedRequestToken,
            out _);
    }
 
    [Benchmark]
    public bool TryValidateTokenSet_ClaimsBased()
    {
        return _tokenGenerator.TryValidateTokenSet(
            _claimsHttpContext,
            _claimsCookieToken,
            _claimsRequestToken,
            out _);
    }
}