/* Copyright (C) CJ Affiliate
 *
 * You may use, distribute and modify this code under  the
 * terms of the  GNU General Public License  version 2  or
 * later.
 *
 * You should have received a copy of the license with this
 * file. If not, you will find a copy in the "LICENSE" file
 * at https://github.com/cjdev/dual-control.
 */

#include <syslog.h>
#include <security/pam_modules.h>

#include <iostream>

#include "sys_syslog.h"
#include "logger.h"
#include "test_util.h"

class mock_syslog : public sys_syslog_ifc
{
public:
    int facility;
    std::string message;
    int priority;
    bool closed;
    std::string ident;
    mock_syslog() : closed (false), facility (-1000), priority (-1000) {}
    void openlog (const char *ident, int logopt, int facility)
    {
        this->facility = facility;
        this->ident = ident;
    }
    void vsyslog (int priority, const char *message, va_list args)
    {
        this->priority = priority;
        this->message = message;
    }
    void closelog()
    {
        this->closed = true;
    }

};

int logs_success()
{
    //given
    mock_syslog *capture = new mock_syslog;
    sys_syslog::delegate test_delegate (capture);
    sys_syslog test_syslog (test_delegate);
    logger logger = logger::create (test_syslog);
    std::string requester_user ("requester_user");
    std::string authorizer_user ("authorizer_user");
    std::string token ("token");
    std::string reason ("reason");

    //when
    logger.log (PAM_SUCCESS, requester_user, authorizer_user, token, reason);

    //then
    check (capture->facility == LOG_AUTHPRIV, "facility does not match");
    check (capture->message == requester_user + " " + authorizer_user + " " +
           reason + " " +
           "success",
           "message does not match");
    check (capture->priority == LOG_NOTICE, "priority does not match");
    check (capture->closed, "syslog not closed");
    check (capture->ident == "dual-control", "dual-control");
    succeed();
}

int logs_failure()
{
    //given
    mock_syslog *capture = new mock_syslog;
    sys_syslog::delegate test_delegate (capture);
    sys_syslog test_syslog (test_delegate);
    logger logger = logger::create (test_syslog);
    std::string requester ("requestuser");
    std::string authorizer ("authuser");
    std::string token ("token");
    std::string reason ("reason");

    //when
    logger.log (PAM_AUTH_ERR, requester, authorizer, token, reason);

    //then
    check (capture->facility == LOG_AUTHPRIV, "facility does not match");
    check (capture->message == requester + " " + authorizer + " " + reason + " "
           + "fail",
           "message does not match");
    check (capture->priority == LOG_NOTICE, "priority does not match");
    check (capture->closed, "syslog not closed");
    check (capture->ident == "dual-control", "dual-control");
    succeed();
}

int logs_pam_service_error()
{
    //given
    mock_syslog *capture = new mock_syslog;
    sys_syslog::delegate test_delegate (capture);
    sys_syslog test_syslog (test_delegate);
    logger logger = logger::create (test_syslog);
    std::string requester ("user");
    std::string authorizer ("user");
    std::string token ("token");
    std::string reason ("reason");

    //when
    logger.log (PAM_SERVICE_ERR, requester, authorizer, token, reason);

    //then
    check (capture->facility == LOG_AUTH, "facility does not match");
    check (capture->message == requester + " " + authorizer + " " + reason +
           " pam returned error",
           "message does not match");
    check (capture->priority == LOG_ERR, "priority does not match");
    check (capture->closed, "syslog not closed");
    check (capture->ident == "dual-control", "dual-control");
    succeed();
}

int run_tests()
{
    test (logs_success);
    test (logs_failure);
    test (logs_pam_service_error);
    succeed();
}

int main (int numargs, char **args)
{
    return !run_tests();
}