/*

 * Copyright (c) 2000, 2018, Oracle and/or its affiliates. All rights reserved.

 * DO NOT ALTER OR REMOVE COPYRIGHT NOTICES OR THIS FILE HEADER.

 *

 * This code is free software; you can redistribute it and/or modify it

 * under the terms of the GNU General Public License version 2 only, as

 * published by the Free Software Foundation.

 *

 * This code is distributed in the hope that it will be useful, but WITHOUT

 * ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or

 * FITNESS FOR A PARTICULAR PURPOSE.  See the GNU General Public License

 * version 2 for more details (a copy is included in the LICENSE file that

 * accompanied this code).

 *

 * You should have received a copy of the GNU General Public License version

 * 2 along with this work; if not, write to the Free Software Foundation,

 * Inc., 51 Franklin St, Fifth Floor, Boston, MA 02110-1301 USA.

 *

 * Please contact Oracle, 500 Oracle Parkway, Redwood Shores, CA 94065 USA

 * or visit www.oracle.com if you need additional information or have any

 * questions.

 */

import javax.naming.Context;

import javax.naming.NameNotFoundException;

import javax.naming.NamingException;

import javax.naming.directory.Attributes;

import javax.naming.directory.InitialDirContext;

import java.util.Hashtable;

/*

 * @test

 * @bug 8200151

 * @summary Tests that we can get the attributes of DNS entries for

 *          authoritative data. And nonauthoritative data by default or

 *          java.naming.authoritative is set to false, but cannot when

 *          java.naming.authoritative is set to true.

 * @library ../lib/

 * @modules java.base/sun.security.util

 * @run main AuthTest -Dtestname=AuthDefault

 * @run main AuthTest -Dtestname=AuthFalse

 * @run main AuthTest -Dtestname=AuthTrue

 */

public class AuthTest extends AuthRecursiveBase {

    public static void main(String[] args) throws Exception {

        new AuthTest().run(args);

    }

    /*

     * Tests that we can get the attributes of DNS entries for

     * authoritative data. And nonauthoritative data by default or

     * java.naming.authoritative is set to false, but cannot when

     * java.naming.authoritative is set to true.

     */

    @Override

    public void runTest() throws Exception {

        String flag = parseFlagFromTestName();

        if (flag.equalsIgnoreCase("default")) {

            setContext(new InitialDirContext());

        } else {

            Hashtable<Object, Object> env = new Hashtable<>();

            DNSTestUtils.debug("set java.naming.authoritative to " + flag);

            // java.naming.authoritative is set to true or false

            env.put(Context.AUTHORITATIVE, flag);

            setContext(new InitialDirContext(env));

        }

        retrieveAndVerifyAuthData();

        retrieveNonAuthData(Boolean.parseBoolean(flag));

    }

    private void retrieveAndVerifyAuthData() throws NamingException {

        // Ensure that auth data retrieval is OK

        retrieveAndVerifyData(getFqdnUrl(), new String[] { "*" });

    }

    /*

     * If isAuth == true, ensure that nonauth data retrieval cannot be retrieved.

     * If isAuth == false, ensure that nonauth data retrieval is OK, skip

     * checking attributes for foreign; just successful operation is sufficient.

     */

    private void retrieveNonAuthData(boolean isAuth) throws NamingException {

        try {

            Attributes retAttrs = context()

                    .getAttributes(getForeignFqdnUrl(), new String[] { "*" });

            DNSTestUtils.debug(retAttrs);

            if (isAuth) {

                throw new RuntimeException(

                        "Failed: Expecting nonauth entry not found "

                                + getForeignFqdnUrl());

            }

        } catch (NameNotFoundException e) {

            if (isAuth) {

                System.out.println("Got expected exception: " + e);

            } else {

                throw e;

            }

        }

    }

}