# -*- indent-tabs-mode: t; tab-width: 4; -*-
#####
##### This file is part of Mail-in-a-Box-LDAP which is released under the
##### terms of the GNU Affero General Public License as published by the
##### Free Software Foundation, either version 3 of the License, or (at
##### your option) any later version. See file LICENSE or go to
##### https://github.com/downtownallday/mailinabox-ldap for full license
##### details.
#####

#
# Test the setup modification script setup/mods.available/remote-nextcloud.sh
# Prerequisites:
#
#    - Nextcloud is already installed and MiaB-LDAP is already
#      configured to use it.
#
#      ie. remote-nextcloud.sh was run on MiaB-LDAP by
#          setup/start.sh because there was a symbolic link from
#          local/remote-nextcloud.sh to the script in
#          mods.available
#
#    - The remote Nextcloud has been configured to use MiaB-LDAP
#      for users and groups.
#
#      ie. connect-nextcloud-to-miab.sh was copied to the remote Nextcloud
#      server and was run successfully there
#

is_configured() {
    . /etc/mailinabox_mods.conf 2>>$TEST_OF
    if [ $? -ne 0 -o -z "$NC_HOST" ]; then
        return 1
    fi
    return 0
}

assert_is_configured() {
    if ! is_configured; then
        test_failure "remote-nextcloud is not configured"
        return 1
    fi
    return 0
}


assert_roundcube_carddav_contact_exists() {
    local user="$1"
    local pass="$2"
    local c_uid="$3"
    local output
    record "[checking that roundcube contact with vcard UID=$c_uid exists]"
	roundcube_carddav_contact_exists "$user" "$pass" "$c_uid" 2>>$TEST_OF
	local rc=$?

    if [ $rc -eq 0 ]; then
		return
	elif [ $rc -eq 1 ]; then
        test_failure "Contact not found in Roundcube"
        record "Not found"
        record "Existing entries:"
		roundcube_dump_contacts >>$TEST_OF 2>&1
	else
		test_failure "Error querying roundcube contacts"
		return
    fi
}


test_mail_from_nextcloud() {
    test_start "mail_from_nextcloud"
    test_end
}

test_nextcloud_contacts() {
    test_start "nextcloud-contacts"

    if ! assert_is_configured; then
		test_end
		return
	fi

    local alice="alice.nc@somedomain.com"
    local alice_pw="$(generate_password 16)"

	# create local user alice
	mgmt_assert_create_user "$alice" "$alice_pw"

	# NC 28: make sure user is initialized in nextcloud by logging
	# them in and opening the contacts app using ui
	# automation. otherwise, any access to contacts will fail with 404
	# "Addressbook with name 'contacts' could not be found". logging
	# in, by say, using a WebDAV PROPFIND does not work.
	record "Initialize $alice in nextcloud"
	assert_browser_test \
		nextcloud/contacts.py \
		"nop" \
		"$alice" \
		"$alice_pw" \
		"" "" ""

    #
    # 1. create contact in Nextcloud - ensure it is available in Roundcube
    #
    # this will validate Nextcloud's ability to authenticate users via
    # LDAP and that Roundcube is able to reach Nextcloud for contacts
    #

	#record "[create address book 'contacts' for $alice]"
	#carddav_make_addressbook "$alice" "$alice_pw" "contacts" 2>>$TEST_OF

    # add new contact to alice's Nextcloud account using CardDAV API
    local c_uid="$(generate_uuid)"
    record "[add contact 'JimIno' to $alice]"
    if ! carddav_add_contact \
        "$alice" \
        "$alice_pw" \
        "JimIno" \
        "555-1212" \
        "jim@ino.com" \
        "$c_uid" \
		2>>$TEST_OF
	then
		test_failure "Could not add contact for $alice in Nextcloud: $REST_ERROR_BRIEF"
		test_end
		return
	fi

    # force a refresh/sync of the contacts in Roundcube
    record "[forcing refresh of roundcube contact for $alice]"
    roundcube_force_carddav_refresh "$alice" "$alice_pw" >>$TEST_OF 2>&1 || \
        test_failure "Could not refresh roundcube contacts for $alice"

    # query the roundcube sqlite database for the new contact
    assert_roundcube_carddav_contact_exists "$alice" "$alice_pw" "$c_uid"

    # delete the contact
    record "[delete contact with vcard uid '$c_uid' from $alice]"
    carddav_delete_contact "$alice" "$alice_pw" "$c_uid" 2>>$TEST_OF || \
        test_failure "Unable to delete contact for $alice in Nextcloud"


    # clean up
    mgmt_assert_delete_user "$alice"

    test_end
}

test_web_config() {
    test_start "web-config"

	if ! assert_is_configured; then
		test_end
		return
	fi

	local code

	# nginx should be configured to redirect .well-known/caldav and
	# .well-known/carddav to the remote nextcloud
	if grep '\.well-known/carddav[\t ]*/cloud/' /etc/nginx/conf.d/local.conf >/dev/null; then
		test_failure "/.well-known/carddav redirects to the local nextcloud, but should redirect to $NC_HOST:$NC_PORT"
		record "[grep for mailinabox in syslog]"
		grep mailinabox /var/log/syslog >>$TEST_OF
	else
		# ensure the url works
		record "[test /.well-known/carddav url]"
		rest_urlencoded GET "/.well-known/carddav" "" "" --location 2>>$TEST_OF
		code=$?
		record "code=$code"
		record "status=$REST_HTTP_CODE"
		record "output=$REST_OUTPUT"
		if [ $code -eq 0 ]; then
			test_failure "carddav url works, but expecting 401/NotAuthenticated from server"
		elif [ $REST_HTTP_CODE -ne 401 ]; then
			test_failure "carddav url doesn't work: $REST_ERROR"
		fi
	fi

	if grep '\.well-known/caldav[\t ]*/cloud/' /etc/nginx/conf.d/local.conf >/dev/null; then
		test_failure "/.well-known/caldav redirects to the local nextcloud, but should redirect to $NC_HOST:$NC_PORT"
	else
		# ensure the url works
		record "[test /.well-known/caldav url]"
		rest_urlencoded GET "/.well-known/caldav" "" "" --location 2>>$TEST_OF
		code=$?
		record "code=$code"
		record "status=$REST_HTTP_CODE"
		record "output=$REST_OUTPUT"
		if [ $code -eq 0 ]; then
			test_failure "caldav url works, but expecting 401/NotAuthenticated from server"
		elif [ $REST_HTTP_CODE -ne 401 ]; then
			test_failure "caldav url doesn't work: $REST_ERROR"
		fi
	fi

	# ios/osx mobileconfig should be configured to redirect carddav to the
	# remote nectcloud
	if grep -A 1 CardDAVPrincipalURL /var/lib/mailinabox/mobileconfig.xml | tail -1 | grep -F "<string>/cloud/remote.php" >/dev/null; then
		test_failure "ios mobileconfig redirects to the local nextcloud, but should redirect to $NC_HOST:$NC_PORT"
	fi

    test_end
}


suite_start "remote-nextcloud" mgmt_start

#test_mail_from_nextcloud
test_web_config
test_nextcloud_contacts

suite_end mgmt_end