<?php

namespace ActivityPhpTest\Server;

use ActivityPhp\Server;
use ActivityPhp\Server\Http\HttpSignature;
use ActivityPhp\Type;
use Exception;
use PHPUnit\Framework\TestCase;
use Symfony\Component\HttpFoundation\Request;
use phpseclib3\Crypt\RSA;

class HttpSignatureTest extends TestCase
{
	/**
	 * Check that a given request is correctly signed
	 */
	public function testValidSignature()
	{
		$server = new Server([
		    'logger'    => [
		       'driver' => '\Psr\Log\NullLogger'
		    ],
		    'cache' => [
		        'enabled' => false,
		    ]
		]);

		$payload = json_encode([]);

		/* ------------------------------------------------------------------
		 | Prepare signature
		 | ------------------------------------------------------------------ */
		$date = gmdate('D, d M Y H:i:s T', time());
		$host = 'localhost';
		$path = '/my-path?q=ok';

		$rsa = RSA::createKey()->loadPrivateKey(
		    file_get_contents(
		        dirname(__DIR__, 2) . '/WebServer/distant/keys/private.pem'
		    )
		)->withHash('sha256'); // private key

		$plaintext = "(request-target) post $path\nhost: $host\ndate: $date";

		$signature = $rsa->sign($plaintext);

		/* ------------------------------------------------------------------
		 | Prepare request
		 | ------------------------------------------------------------------ */
		$request = Request::create(
		    'http://localhost:8000' . $path,
		    'POST',
		    [], // parameters
		    [], // cookies
		    [], // files
		    $_SERVER,
		    $payload
		);

		$request->headers->set('accept', 'application/activity+json');

		// Signature: keyId="<URL>",headers="(request-target) host date",signature="<SIG>"
		$request->headers->set('Signature', 'keyId="http://localhost:8001/accounts/bob#main-key",headers="(request-target) host date",signature="' . base64_encode($signature) . '"');
		$request->headers->set('host', $host);
		$request->headers->set('date', $date);

		$httpSignature = new HttpSignature($server);

		// Assert verify method returns true
		$this->assertEquals(
		    true,
		    $httpSignature->verify($request)
		);
	}


	/**
	 * Check that the pattern used splitting signature
	 * is working as intended
	 */
	public function testSplittingSignature()
	{
		$server = new Server([
		    'logger'    => [
		       'driver' => '\Psr\Log\NullLogger'
		    ],
		    'cache' => [
		        'enabled' => false,
		    ]
		]);

		$verifier = new HttpSignature($server);

		// Split a signature with headers but no algorithm
		$signature = 'keyId="http://localhost:8001/accounts/bob#main-key",headers="(request-target) host date",signature="FbVtmZhMWrfbqQpXf1v86+ie/fL8Ng4O67PePKvxChnUtV7J8N6lndQcNfXcDuKDJ4Nda6gKUQabAF2JK2qeYPNZNJ1AdAa5Lak3hQd+rAbdMJdvQpzGhAaSWK6atqOTH9v2CWdjAQbzvY0nOfGiw3ymtDSvTL0pVlIvq116uMtci0WOHeIbuBSyzM23liJmBomlm4EeB3/V1BVWY2MwaQ1cHVzxR7epP6XYts3C1KbZrdMKxhlWJFLdbLy0YGu5HRkYZepAh2q2NriSikNg8YTJ67owgQv/LqhFKnObgZU6np54fBMSpg7eAdWSIbhhg1a/WHtzFicc9cgoWMRhEg=="';

		$split = $verifier->splitSignature($signature);

		$this->assertEquals($split, [
		    'keyId' => 'http://localhost:8001/accounts/bob#main-key',
		    'algorithm' => '',
		    'headers' =>  ' host date',
		    'signature' => 'FbVtmZhMWrfbqQpXf1v86+ie/fL8Ng4O67PePKvxChnUtV7J8N6lndQcNfXcDuKDJ4Nda6gKUQabAF2JK2qeYPNZNJ1AdAa5Lak3hQd+rAbdMJdvQpzGhAaSWK6atqOTH9v2CWdjAQbzvY0nOfGiw3ymtDSvTL0pVlIvq116uMtci0WOHeIbuBSyzM23liJmBomlm4EeB3/V1BVWY2MwaQ1cHVzxR7epP6XYts3C1KbZrdMKxhlWJFLdbLy0YGu5HRkYZepAh2q2NriSikNg8YTJ67owgQv/LqhFKnObgZU6np54fBMSpg7eAdWSIbhhg1a/WHtzFicc9cgoWMRhEg==',
		]);

		// Split a signature with headers and algorithm
		$signature = 'keyId="http://localhost:8001/accounts/bob#main-key",algorithm="rsa-sha256",headers="(request-target) host date",signature="FbVtmZhMWrfbqQpXf1v86+ie/fL8Ng4O67PePKvxChnUtV7J8N6lndQcNfXcDuKDJ4Nda6gKUQabAF2JK2qeYPNZNJ1AdAa5Lak3hQd+rAbdMJdvQpzGhAaSWK6atqOTH9v2CWdjAQbzvY0nOfGiw3ymtDSvTL0pVlIvq116uMtci0WOHeIbuBSyzM23liJmBomlm4EeB3/V1BVWY2MwaQ1cHVzxR7epP6XYts3C1KbZrdMKxhlWJFLdbLy0YGu5HRkYZepAh2q2NriSikNg8YTJ67owgQv/LqhFKnObgZU6np54fBMSpg7eAdWSIbhhg1a/WHtzFicc9cgoWMRhEg=="';

		$split = $verifier->splitSignature($signature);

		$this->assertEquals($split, [
		    'keyId' => 'http://localhost:8001/accounts/bob#main-key',
		    'algorithm' => 'rsa-sha256',
		    'headers' =>  ' host date',
		    'signature' => 'FbVtmZhMWrfbqQpXf1v86+ie/fL8Ng4O67PePKvxChnUtV7J8N6lndQcNfXcDuKDJ4Nda6gKUQabAF2JK2qeYPNZNJ1AdAa5Lak3hQd+rAbdMJdvQpzGhAaSWK6atqOTH9v2CWdjAQbzvY0nOfGiw3ymtDSvTL0pVlIvq116uMtci0WOHeIbuBSyzM23liJmBomlm4EeB3/V1BVWY2MwaQ1cHVzxR7epP6XYts3C1KbZrdMKxhlWJFLdbLy0YGu5HRkYZepAh2q2NriSikNg8YTJ67owgQv/LqhFKnObgZU6np54fBMSpg7eAdWSIbhhg1a/WHtzFicc9cgoWMRhEg==',
		]);

		// Split a signature with headers (headers contains hyphens), algorithm.
		// For informtion, the following signature is false, no problem here as
		// we're only testing split HTTP signature component. Verification is
		// made after
		$signature = 'keyId="http://localhost:8001/accounts/bob#main-key",algorithm="rsa-sha256",headers="(request-target) host content-type digest date",signature="FbVtmZhMWrfbqQpXf1v86+ie/fL8Ng4O67PePKvxChnUtV7J8N6lndQcNfXcDuKDJ4Nda6gKUQabAF2JK2qeYPNZNJ1AdAa5Lak3hQd+rAbdMJdvQpzGhAaSWK6atqOTH9v2CWdjAQbzvY0nOfGiw3ymtDSvTL0pVlIvq116uMtci0WOHeIbuBSyzM23liJmBomlm4EeB3/V1BVWY2MwaQ1cHVzxR7epP6XYts3C1KbZrdMKxhlWJFLdbLy0YGu5HRkYZepAh2q2NriSikNg8YTJ67owgQv/LqhFKnObgZU6np54fBMSpg7eAdWSIbhhg1a/WHtzFicc9cgoWMRhEg=="';

		$split = $verifier->splitSignature($signature);

		$this->assertEquals($split, [
		    'keyId' => 'http://localhost:8001/accounts/bob#main-key',
		    'algorithm' => 'rsa-sha256',
		    'headers' =>  ' host content-type digest date',
		    'signature' => 'FbVtmZhMWrfbqQpXf1v86+ie/fL8Ng4O67PePKvxChnUtV7J8N6lndQcNfXcDuKDJ4Nda6gKUQabAF2JK2qeYPNZNJ1AdAa5Lak3hQd+rAbdMJdvQpzGhAaSWK6atqOTH9v2CWdjAQbzvY0nOfGiw3ymtDSvTL0pVlIvq116uMtci0WOHeIbuBSyzM23liJmBomlm4EeB3/V1BVWY2MwaQ1cHVzxR7epP6XYts3C1KbZrdMKxhlWJFLdbLy0YGu5HRkYZepAh2q2NriSikNg8YTJ67owgQv/LqhFKnObgZU6np54fBMSpg7eAdWSIbhhg1a/WHtzFicc9cgoWMRhEg==',
		]);
	}


	/**
	 * Check that a given request is correctly signed
	 * With a optionnal headers not specified (fallback on date)
	 */
	public function testValidSignatureWithFallbackHeaders()
	{
		$server = new Server([
		    'logger'    => [
		       'driver' => '\Psr\Log\NullLogger'
		    ],
		    'cache' => [
		        'enabled' => false,
		    ]
		]);

		$payload = json_encode([]);

		/* ------------------------------------------------------------------
		 | Prepare signature
		 | ------------------------------------------------------------------ */
		$date = gmdate('D, d M Y H:i:s T', time());
		$host = 'localhost';
		$path = '/my-path?q=ok';

		$rsa = RSA::createKey()
		            ->loadPrivateKey(
		                file_get_contents(
		                    dirname(__DIR__, 2) . '/WebServer/distant/keys/private.pem'
		                )
		            )->withHash("sha256"); // private key

		$plaintext = "(request-target) post $path\ndate: $date";
		$signature = $rsa->sign($plaintext);

		/* ------------------------------------------------------------------
		 | Prepare request
		 | ------------------------------------------------------------------ */
		$request = Request::create(
		    'http://localhost:8000' . $path,
		    'POST',
		    [], // parameters
		    [], // cookies
		    [], // files
		    $_SERVER,
		    $payload
		);

		$request->headers->set('accept', 'application/activity+json');

		// Signature: keyId="<URL>",headers="(request-target) host date",signature="<SIG>"
		$request->headers->set('Signature', 'keyId="http://localhost:8001/accounts/bob#main-key",signature="' . base64_encode($signature) . '"');
		$request->headers->set('host', $host);
		$request->headers->set('date', $date);

		$httpSignature = new HttpSignature($server);

		// Assert verify method returns true
		$this->assertEquals(
		    true,
		    $httpSignature->verify($request)
		);
	}


	/**
	 * Check that it returns false when signature header is not
	 * specified
	 */
	public function testWrongSignatureMissingSignatureHeader()
	{
		$server = new Server([
		    'logger'    => [
		       'driver' => '\Psr\Log\NullLogger'
		    ],
		    'cache' => [
		        'enabled' => false,
		    ]
		]);

		$payload = json_encode([]);

		/* ------------------------------------------------------------------
		 | Prepare signature
		 | ------------------------------------------------------------------ */
		$date = gmdate('D, d M Y H:i:s T', time());
		$host = 'localhost';
		$path = '/my-path?q=ok';

		$rsa = RSA::createKey()
		    ->loadPrivateKey(
		        file_get_contents(
		            dirname(__DIR__, 2) . '/WebServer/distant/keys/private.pem'
		        )
		    )->withHash("sha256"); // private key

		$plaintext = "(request-target) post $path\nhost: $host\ndate: $date";
		$signature = $rsa->sign($plaintext);

		/* ------------------------------------------------------------------
		 | Prepare request
		 | ------------------------------------------------------------------ */
		$request = Request::create(
		    'http://localhost:8000' . $path,
		    'POST',
		    [], // parameters
		    [], // cookies
		    [], // files
		    $_SERVER,
		    $payload
		);

		$request->headers->set('accept', 'application/activity+json');

		// Signature: keyId="<URL>",headers="(request-target) host date",signature="<SIG>"
		$request->headers->set('host', $host);
		$request->headers->set('date', $date);

		$httpSignature = new HttpSignature($server);

		// Assert verify method returns false
		$this->assertEquals(
		    false,
		    $httpSignature->verify($request)
		);
	}


	/**
	 * Check that it returns false when keyId is not specified
	 */
	public function testWrongSignatureMissingKeyId()
	{
		$server = new Server([
		    'logger'    => [
		       'driver' => '\Psr\Log\NullLogger'
		    ],
		    'cache' => [
		        'enabled' => false,
		    ]
		]);

		$payload = json_encode([]);

		/* ------------------------------------------------------------------
		 | Prepare signature
		 | ------------------------------------------------------------------ */
		$date = gmdate('D, d M Y H:i:s T', time());
		$host = 'localhost';
		$path = '/my-path?q=ok';

		$rsa = RSA::createKey()
		    ->loadPrivateKey(
		        file_get_contents(
		            dirname(__DIR__, 2) . '/WebServer/distant/keys/private.pem'
		        )
		    )->withHash("sha256"); // private key

		$plaintext = "(request-target) post $path\nhost: $host\ndate: $date";
		$signature = $rsa->sign($plaintext);

		/* ------------------------------------------------------------------
		 | Prepare request
		 | ------------------------------------------------------------------ */
		$request = Request::create(
		    'http://localhost:8000' . $path,
		    'POST',
		    [], // parameters
		    [], // cookies
		    [], // files
		    $_SERVER,
		    $payload
		);

		$request->headers->set('accept', 'application/activity+json');

		// Signature: keyId="<URL>",headers="(request-target) host date",signature="<SIG>"
		$request->headers->set('Signature', 'headers="(request-target) host date",signature="' . base64_encode($signature) . '"');
		$request->headers->set('host', $host);
		$request->headers->set('date', $date);

		$httpSignature = new HttpSignature($server);

		// Assert verify method returns false
		$this->assertEquals(
		    false,
		    $httpSignature->verify($request)
		);
	}


	/**
	 * Check that it returns false when signature is not specified
	 */
	public function testWrongSignatureMissingSignature()
	{
		$server = new Server([
		    'logger'    => [
		       'driver' => '\Psr\Log\NullLogger'
		    ],
		    'cache' => [
		        'enabled' => false,
		    ]
		]);

		$payload = json_encode([]);

		/* ------------------------------------------------------------------
		 | Prepare signature
		 | ------------------------------------------------------------------ */
		$date = gmdate('D, d M Y H:i:s T', time());
		$host = 'localhost';
		$path = '/my-path?q=ok';

		$rsa = RSA::createKey()
		    ->loadPrivateKey(
		        file_get_contents(
		            dirname(__DIR__, 2) . '/WebServer/distant/keys/private.pem'
		        )
		    )->withHash("sha256"); // private key

		$plaintext = "(request-target) post $path\nhost: $host\ndate: $date";
		$signature = $rsa->sign($plaintext);

		/* ------------------------------------------------------------------
		 | Prepare request
		 | ------------------------------------------------------------------ */
		$request = Request::create(
		    'http://localhost:8000' . $path,
		    'POST',
		    [], // parameters
		    [], // cookies
		    [], // files
		    $_SERVER,
		    $payload
		);

		$request->headers->set('accept', 'application/activity+json');

		// Signature: keyId="<URL>",headers="(request-target) host date",signature="<SIG>"
		$request->headers->set('Signature', 'keyId="http://localhost:8001/accounts/bob#main-key",headers="(request-target) host date"');
		$request->headers->set('host', $host);
		$request->headers->set('date', $date);

		$httpSignature = new HttpSignature($server);

		// Assert verify method returns false
		$this->assertEquals(
		    false,
		    $httpSignature->verify($request)
		);
	}


	/**
	 * Check that it throws an Exception when actor does not exist
	 */
	public function testWrongSignatureActorDoesNotExist()
	{
		$this->expectException(Exception::class);

		$server = new Server([
		    'logger'    => [
		       'driver' => '\Psr\Log\NullLogger'
		    ],
		    'cache' => [
		        'enabled' => false,
		    ]
		]);

		$payload = json_encode([]);

		/* ------------------------------------------------------------------
		 | Prepare signature
		 | ------------------------------------------------------------------ */
		$date = gmdate('D, d M Y H:i:s T', time());
		$host = 'localhost';
		$path = '/my-path?q=ok';

		$rsa = RSA::createKey()
		    ->loadPrivateKey(
		        file_get_contents(
		            dirname(__DIR__, 2) . '/WebServer/distant/keys/private.pem'
		        )
		    )->withHash("sha256"); // private key

		$plaintext = "(request-target) post $path\nhost: $host\ndate: $date";
		$signature = $rsa->sign($plaintext);

		/* ------------------------------------------------------------------
		 | Prepare request
		 | ------------------------------------------------------------------ */
		$request = Request::create(
		    'http://localhost:8000' . $path,
		    'POST',
		    [], // parameters
		    [], // cookies
		    [], // files
		    $_SERVER,
		    $payload
		);

		$request->headers->set('accept', 'application/activity+json');

		// Signature: keyId="<URL>",headers="(request-target) host date",signature="<SIG>"
		$request->headers->set('Signature', 'keyId="http://localhost:8001/accounts/bobb#main-key",headers="(request-target) host date",signature="' . base64_encode($signature) . '"');
		$request->headers->set('host', $host);
		$request->headers->set('date', $date);

		$httpSignature = new HttpSignature($server);
		$httpSignature->verify($request);
	}


	/**
	 * Check that it returns false when signature is not verified
	 */
	public function testWrongSignatureNotVerifiedSignature()
	{
		$server = new Server([
		    'logger'    => [
		       'driver' => '\Psr\Log\NullLogger'
		    ],
		    'cache' => [
		        'enabled' => false,
		    ]
		]);

		$payload = json_encode([]);

		/* ------------------------------------------------------------------
		 | Prepare signature
		 | ------------------------------------------------------------------ */
		$date = gmdate('D, d M Y H:i:s T', time());
		$host = 'localhost';
		$path = '/my-path?q=ok';

		$rsa = RSA::createKey()
		    ->loadPrivateKey(
		        file_get_contents(
		            dirname(__DIR__, 2) . '/WebServer/distant/keys/private.pem'
		        )
		    )->withHash("sha256"); // private key

		$plaintext = "(request-target) post $path\nhost: $host\ndate: $date";
		$signature = $rsa->sign($plaintext);

		/* ------------------------------------------------------------------
		 | Prepare request
		 | ------------------------------------------------------------------ */
		$request = Request::create(
		    'http://localhost:8000' . $path,
		    'POST',
		    [], // parameters
		    [], // cookies
		    [], // files
		    $_SERVER,
		    $payload
		);

		$request->headers->set('accept', 'application/activity+json');

		// Signature: keyId="<URL>",headers="(request-target) host date",signature="<SIG>"
		$request->headers->set('Signature', 'keyId="http://localhost:8001/accounts/bob#main-key",headers="(request-target) host date",signature="' . base64_encode($signature) . '"');
		$request->headers->set('host', $host);
		$request->headers->set('date', date('Y-m-d'));

		$httpSignature = new HttpSignature($server);

		// Assert verify method returns false
		$this->assertEquals(
		    false,
		    $httpSignature->verify($request)
		);
	}
}
__halt_compiler();----SIGNATURE:----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----ATTACHMENT:----NjA2NzYyNjk3NzM1MTM1MiA3Njk1MDQyMjA0NDM3MjY2IDg3NDc4MDY5ODE0OTM3NzU=