# frozen_string_literal: true

# Redmine - project management software
# Copyright (C) 2006-  Jean-Philippe Lang
#
# This program is free software; you can redistribute it and/or
# modify it under the terms of the GNU General Public License
# as published by the Free Software Foundation; either version 2
# of the License, or (at your option) any later version.
#
# This program is distributed in the hope that it will be useful,
# but WITHOUT ANY WARRANTY; without even the implied warranty of
# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
# GNU General Public License for more details.
#
# You should have received a copy of the GNU General Public License
# along with this program; if not, write to the Free Software
# Foundation, Inc., 51 Franklin Street, Fifth Floor, Boston, MA  02110-1301, USA.

require_relative '../test_helper'
require 'pp'
require 'webrick'

class WebhookTest < ActiveSupport::TestCase
  include ActiveJob::TestHelper

  setup do
    # Set ActiveJob to use the test adapter
    @original_adapter = ActiveJob::Base.queue_adapter
    ActiveJob::Base.queue_adapter = :test

    @project = Project.find 'ecookbook'
    @dlopper = User.find_by_login 'dlopper'
    @role = Role.find_by_name 'Developer'
    @role.permissions << :use_webhooks; @role.save!
    @issue = @project.issues.first
    WebhookEndpointValidator.class_eval do
      @blocked_hosts = nil
    end
  end

  teardown do
    # Restore the original adapter
    ActiveJob::Base.queue_adapter = @original_adapter
  end

  test "should validate url" do
    Redmine::Configuration.with('webhook_blocklist' => ['*.example.org', '10.0.0.0/8', '192.168.0.0/16']) do
      %w[
        mailto:user@example.com
        https://x.example.org/
        https://example.org/
        https://x.example.org/foo/bar?a=b
        foobar
        example.com
        https://10.1.0.12/
      ].each do |url|
        hook = Webhook.new(url: url)
        assert_not hook.valid?, "URL '#{url}' should be invalid"
        assert hook.errors[:url].any?
      end
    end
  end

  test "should validate secret length" do
    hook = Webhook.new secret: 'abdc' * 100
    assert_not hook.valid?
    assert hook.errors[:secret].any?
  end

  test "should validate events" do
    Webhook.new.setable_event_names.each do |event|
      h = create_hook events: [event]
      assert h.persisted?
    end
    hook = Webhook.new(events: ['issue.created', 'invalid.event'])
    assert_not hook.valid?
    assert hook.errors[:events].any?
    assert_raise(ActiveRecord::SerializationTypeMismatch){ Webhook.new(events: 'issue.created') }
  end

  test "should clean up project list based on permissions on save" do
    h = create_hook
    assert_equal [@project], h.projects
    @role.permissions.delete :use_webhooks
    @role.save!

    h.reload
    h.save
    h.reload
    assert_equal [], h.projects
  end

  test "should clean up project list based on project visibility on save" do
    h = create_hook
    assert_equal [@project], h.projects
    @project.memberships.destroy_all
    @project.update is_public: false

    h.reload
    h.save
    h.reload
    assert_equal [], h.projects
  end

  test "should filter setable projects" do
    assert_equal [@project], Webhook.new(user: @dlopper).setable_projects

    @role.permissions.delete :use_webhooks
    @role.save!
    @dlopper.reload
    assert_equal [], Webhook.new(user: @dlopper).setable_projects
  end

  test "should check ip address at run time" do
    Redmine::Configuration.with('webhook_blocklist' => ['*.example.org', '10.0.0.0/8', '192.168.0.0/16']) do
      %w[
        127.0.0.0
        127.0.0.1
        10.0.0.0
        10.0.1.0
        169.254.1.9
        192.168.2.1
        224.0.0.1
        ::1/128
        fe80::/10
      ].each do |ip|
        h = Webhook.new url: "http://#{ip}"
        assert_not h.valid?, "IP #{ip} should be invalid"
        assert h.errors[:url].any?
      end
    end
  end

  test "should find hooks for issue" do
    hook = create_hook
    assert @issue.visible?(hook.user)
    assert_equal [hook], Webhook.hooks_for('issue.created', @issue)
    assert_equal [], Webhook.hooks_for('issue.deleted', @issue)
    @issue.update_column :project_id, 99
    assert_equal [], Webhook.hooks_for('issue.created', @issue)
  end

  test "should check permission when looking for hooks" do
    hook = create_hook
    assert @issue.visible?(hook.user)
    assert_equal [hook], Webhook.hooks_for('issue.created', @issue)
    @role.permissions.delete :use_webhooks
    @role.save!
    assert_equal [], Webhook.hooks_for('issue.created', @issue)
  end

  test "should not find inactive hook" do
    hook = create_hook active: false
    assert @issue.visible?(hook.user)
    assert_equal [], Webhook.hooks_for('issue.created', @issue)
  end

  test "should not find hook of inactive user" do
    admin = User.find_by_login 'admin'
    hook = create_hook user: admin
    assert_equal [hook], Webhook.hooks_for('issue.created', @issue)
    admin.update_column :status, 3
    assert_equal [], Webhook.hooks_for('issue.created', @issue)
  end

  test "should find hook for deleted issue" do
    hook = create_hook events: ['issue.deleted']
    @issue.destroy
    assert_equal [hook], Webhook.hooks_for('issue.deleted', @issue)
  end

  test "schedule should enqueue jobs for hooks" do
    with_settings webhooks_enabled: '1' do
      hook = create_hook
      assert_enqueued_jobs 1 do
        assert_enqueued_with(job: WebhookJob) do
          Webhook.trigger('issue.created', @issue)
        end
      end
    end
  end

  test "should not enqueue job for inactive hook" do
    with_settings webhooks_enabled: '1' do
      hook = create_hook active: false
      assert_no_enqueued_jobs do
        Webhook.trigger('issue.created', @issue)
      end
    end
  end

  test "enabled? should follow setting flag" do
    # Disabled by default
    assert_not Webhook.enabled?

    with_settings webhooks_enabled: '0' do
      assert_not Webhook.enabled?
    end

    with_settings webhooks_enabled: '1' do
      assert Webhook.enabled?
    end
  end

  test "trigger should not enqueue jobs when disabled" do
    create_hook

    with_settings webhooks_enabled: '0' do
      assert_no_enqueued_jobs do
        Webhook.trigger('issue.created', @issue)
      end
    end
  end

  test "should compute payload" do
    hook = create_hook
    payload = hook.payload('issue.created', @issue)
    assert_equal 'issue.created', payload[:type]
    assert_equal @issue.id, payload.dig(:data, :issue, :id)
  end

  test "should trigger issue updated webhook when attachment removal creates a journal without saving issue" do
    issue = Issue.find(3)
    attachment = Attachment.find(1)
    issue.init_journal(@dlopper)

    Webhook.expects(:trigger).with('issue.updated', issue).once
    issue.attachments.delete(attachment)

    journal = issue.journals.order(:id).last
    assert_equal attachment.id.to_s, journal.details.last.prop_key
    assert_equal 'attachment', journal.details.last.property
    assert_equal attachment.filename, journal.details.last.old_value
  end

  test "should compute correct signature" do
    # we're implementing the same signature mechanism as GitHub, so might as well re-use their
    # example. https://docs.github.com/en/webhooks/using-webhooks/validating-webhook-deliveries
    e = Webhook::Executor.new('https://example.com', 'Hello, World!', "It's a Secret to Everybody")
    assert_equal "sha256=757107ea0eb2509fc211221cce984b8a37570b6d7586c22c46f4379c8b043e17", e.compute_signature
  end

  test "executor posts the payload and returns the response on success" do
    with_webhook_server do |port, received|
      executor = Webhook::Executor.new("http://127.0.0.1:#{port}/hook", '{"a":1}', nil)
      executor.stubs(:valid_ips).returns(['127.0.0.1'])

      response = executor.call

      assert_kind_of Net::HTTPResponse, response
      assert_equal '200', response.code
      assert_equal 'POST', received[:method]
      assert_equal '/hook', received[:path]
      assert_equal '{"a":1}', received[:body]
      assert_equal ['application/json'], received[:headers]['content-type']
      assert_equal ['Redmine'], received[:headers]['user-agent']
      assert_empty received[:headers]['x-redmine-signature-256']
    end
  end

  test "executor sends the signature header when a secret is present" do
    with_webhook_server do |port, received|
      executor = Webhook::Executor.new("http://127.0.0.1:#{port}/hook", 'payload', 'topsecret')
      executor.stubs(:valid_ips).returns(['127.0.0.1'])

      executor.call

      assert_equal [executor.compute_signature], received[:headers]['x-redmine-signature-256']
    end
  end

  test "executor passes URL credentials as Basic Auth" do
    with_webhook_server do |port, received|
      executor = Webhook::Executor.new("http://user:pass@127.0.0.1:#{port}/hook", 'payload', 'topsecret')
      executor.stubs(:valid_ips).returns(['127.0.0.1'])

      executor.call

      assert_equal ["Basic #{["user:pass"].pack("m0")}"], received[:headers]['authorization']
    end
  end

  test "executor tries the next IP when a connection fails" do
    with_webhook_server do |port, received|
      executor = Webhook::Executor.new("http://127.0.0.1:#{port}/hook", 'payload', nil)
      # nothing listens on 127.0.0.2:<port>, so the first connection is refused
      executor.stubs(:valid_ips).returns(['127.0.0.2', '127.0.0.1'])

      response = executor.call

      assert_equal '200', response.code
      assert_equal 'POST', received[:method]
    end
  end

  test "executor raises a SocketError when no IP can be connected to" do
    with_webhook_server do |port, received|
      executor = Webhook::Executor.new("http://127.0.0.1:#{port}/hook", 'payload', nil)
      executor.stubs(:valid_ips).returns(['127.0.0.2'])

      error = assert_raises(SocketError) { executor.call }
      assert_equal 'Could not connect to any IP', error.message
      assert_nil received[:method], "server should not have received a request"
    end
  end

  test "executor raises a SocketError when there are no valid IPs" do
    executor = Webhook::Executor.new('http://127.0.0.1/hook', 'payload', nil)
    executor.stubs(:valid_ips).returns([])

    error = assert_raises(SocketError) { executor.call }
    assert_equal 'Could not connect to any IP', error.message
  end

  test "executor raises on a non-success response without trying other IPs" do
    with_webhook_server(status: 500) do |port, received|
      executor = Webhook::Executor.new("http://127.0.0.1:#{port}/hook", 'payload', nil)
      executor.stubs(:valid_ips).returns(['127.0.0.1', '127.0.0.2'])

      assert_raises(Net::HTTPFatalError) { executor.call }
      assert_equal 'POST', received[:method]
    end
  end

  test "call returns true on a successful delivery" do
    with_webhook_server do |port, received|
      hook = Webhook.new url: "http://127.0.0.1:#{port}/hook"
      Webhook::Executor.any_instance.stubs(:valid_ips).returns(['127.0.0.1'])

      assert_equal true, hook.call('{"x":1}')
      assert_equal '{"x":1}', received[:body]
    end
  end

  test "call returns false on a failed delivery" do
    hook = Webhook.new url: 'http://127.0.0.1/hook'
    Webhook::Executor.any_instance.stubs(:valid_ips).returns([])

    assert_equal false, hook.call('{"x":1}')
  end

  private

  def create_hook(url: 'https://example.com/some/hook', user: User.find_by_login('dlopper'), projects: [Project.find('ecookbook')], events: ['issue.created'], active: true)
    Webhook.create!(url: url, user: user, projects: projects, events: events, active: active)
  end

  # Starts a real HTTP server on 127.0.0.1 on an ephemeral port, recording the
  # request it receives into the yielded +received+ hash and answering with the
  # given +status+. The server is shut down when the block returns.
  def with_webhook_server(status: 200, body: 'OK')
    received = {}
    server = WEBrick::HTTPServer.new(
      BindAddress: '127.0.0.1',
      Port: 0,
      Logger: WEBrick::Log.new(File::NULL),
      AccessLog: []
    )
    server.mount_proc '/' do |req, res|
      received[:method] = req.request_method
      received[:path] = req.path
      received[:body] = req.body
      received[:headers] = req.header
      res.status = status
      res.body = body
    end
    port = server.listeners.first.addr[1]
    thread = Thread.new { server.start }
    yield port, received
  ensure
    server&.shutdown
    thread&.join
  end
end