// Licensed to the .NET Foundation under one or more agreements.
// The .NET Foundation licenses this file to you under the MIT license.
 
using System.Text;
using Microsoft.AspNetCore.DataProtection;
using Microsoft.Extensions.DependencyInjection;
 
namespace Microsoft.AspNetCore.Authentication.DataHandler;
 
public class SecureDataFormatTests
{
    public SecureDataFormatTests()
    {
        var serviceCollection = new ServiceCollection();
        serviceCollection.AddDataProtection();
        ServiceProvider = serviceCollection.BuildServiceProvider();
    }
 
    public IServiceProvider ServiceProvider { get; }
 
    [Fact]
    public void ProtectDataRoundTrips()
    {
        var provider = ServiceProvider.GetRequiredService<IDataProtectionProvider>();
        var prototector = provider.CreateProtector("test");
        var secureDataFormat = new SecureDataFormat<string>(new StringSerializer(), prototector);
 
        string input = "abcdefghijklmnopqrstuvwxyz0123456789";
        var protectedData = secureDataFormat.Protect(input);
        var result = secureDataFormat.Unprotect(protectedData);
        Assert.Equal(input, result);
    }
 
    [Fact]
    public void ProtectWithPurposeRoundTrips()
    {
        var provider = ServiceProvider.GetRequiredService<IDataProtectionProvider>();
        var prototector = provider.CreateProtector("test");
        var secureDataFormat = new SecureDataFormat<string>(new StringSerializer(), prototector);
 
        string input = "abcdefghijklmnopqrstuvwxyz0123456789";
        string purpose = "purpose1";
        var protectedData = secureDataFormat.Protect(input, purpose);
        var result = secureDataFormat.Unprotect(protectedData, purpose);
        Assert.Equal(input, result);
    }
 
    [Fact]
    public void UnprotectWithDifferentPurposeFails()
    {
        var provider = ServiceProvider.GetRequiredService<IDataProtectionProvider>();
        var prototector = provider.CreateProtector("test");
        var secureDataFormat = new SecureDataFormat<string>(new StringSerializer(), prototector);
 
        string input = "abcdefghijklmnopqrstuvwxyz0123456789";
        string purpose = "purpose1";
        var protectedData = secureDataFormat.Protect(input, purpose);
        var result = secureDataFormat.Unprotect(protectedData); // Null other purpose
        Assert.Null(result);
 
        result = secureDataFormat.Unprotect(protectedData, "purpose2");
        Assert.Null(result);
    }
 
    private class StringSerializer : IDataSerializer<string>
    {
        public byte[] Serialize(string model)
        {
            return Encoding.UTF8.GetBytes(model);
        }
 
        public string Deserialize(byte[] data)
        {
            return Encoding.UTF8.GetString(data);
        }
    }
}