/*

 * Copyright (c) 2019, Oracle and/or its affiliates. All rights reserved.

 * DO NOT ALTER OR REMOVE COPYRIGHT NOTICES OR THIS FILE HEADER.

 *

 * This code is free software; you can redistribute it and/or modify it

 * under the terms of the GNU General Public License version 2 only, as

 * published by the Free Software Foundation.

 *

 * This code is distributed in the hope that it will be useful, but WITHOUT

 * ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or

 * FITNESS FOR A PARTICULAR PURPOSE.  See the GNU General Public License

 * version 2 for more details (a copy is included in the LICENSE file that

 * accompanied this code).

 *

 * You should have received a copy of the GNU General Public License version

 * 2 along with this work; if not, write to the Free Software Foundation,

 * Inc., 51 Franklin St, Fifth Floor, Boston, MA 02110-1301 USA.

 *

 * Please contact Oracle, 500 Oracle Parkway, Redwood Shores, CA 94065 USA

 * or visit www.oracle.com if you need additional information or have any

 * questions.

 */

/**

 * @test

 * @bug 8217237

 * @library /test/lib

 * @modules java.net.http

 * @run main/othervm AuthSchemesTest

 * @summary HttpClient does not deal well with multi-valued WWW-Authenticate challenge headers

 */

import java.io.IOException;

import java.io.InputStream;

import java.io.OutputStream;

import java.net.*;

import java.net.Authenticator;

import java.net.http.HttpClient;

import java.net.http.HttpRequest;

import java.net.http.HttpResponse;

import jdk.test.lib.net.URIBuilder;

public class AuthSchemesTest {

    static class BasicServer extends Thread {

        ServerSocket server;

        Socket s;

        InputStream is;

        OutputStream os;

        static final String RESPONSE = "Hello world";

        static final String respLength = Integer.toString(RESPONSE.length());

        static final String realm = "wally world";

        String reply1 = "HTTP/1.1 401 Unauthorized\r\n"+

                "WWW-Authenticate: BarScheme\r\n" +

                "WWW-Authenticate: FooScheme realm=\""+realm+"\"\r\n" +

                "WWW-Authenticate: Basic realm=\""+realm+"\"\r\n" +

                "WWW-Authenticate: WoofScheme\r\n\r\n";

        String reply2 = "HTTP/1.1 200 OK\r\n"+

                "Date: Mon, 15 Jan 2001 12:18:21 GMT\r\n" +

                "Server: Apache/1.3.14 (Unix)\r\n" +

                "Connection: close\r\n" +

                "Content-Type: text/html; charset=iso-8859-1\r\n" +

                "Content-Length: " + respLength + "\r\n\r\n";

        BasicServer(ServerSocket s) {

            server = s;

        }

        String response() {

            return RESPONSE;

        }

        void readAll(Socket s) throws IOException {

            byte[] buf = new byte [128];

            InputStream is = s.getInputStream();

            s.setSoTimeout(1000);

            try {

                while (is.read(buf) > 0) ;

            } catch (SocketTimeoutException x) { }

        }

        public void run() {

            try {

                System.out.println("Server 1: accept");

                s = server.accept();

                System.out.println("accepted");

                os = s.getOutputStream();

                os.write(reply1.getBytes());

                readAll(s);

                s.close();

                System.out.println("Server 2: accept");

                s = server.accept();

                System.out.println("accepted");

                os = s.getOutputStream();

                os.write((reply2+RESPONSE).getBytes());

                readAll(s);

                s.close();

            }

            catch (Exception e) {

                System.out.println(e);

            }

            finished();

        }

        boolean isfinished = false;

        public synchronized void finished() {

            isfinished = true;

            notifyAll();

        }

        public synchronized void waitforfinish() {

            while (!isfinished) {

                try {

                    wait();

                } catch (InterruptedException e) {

                    e.printStackTrace();

                }

            }

        }

    }

    static class Auth extends Authenticator {

        protected PasswordAuthentication getPasswordAuthentication() {

            return new PasswordAuthentication("user", new char[] {'a','b','c'});

        }

    }

    public static void main(String[] args) throws Exception {

        ServerSocket serversocket = null;

        BasicServer server = null;

        Auth authenticator = new Auth();

        serversocket = new ServerSocket(0, 10, InetAddress.getLoopbackAddress());

        int port = serversocket.getLocalPort();

        server = new BasicServer(serversocket);

        HttpClient client = HttpClient.newBuilder()

                .authenticator(authenticator)

                .build();

        server.start();

        URI uri = URIBuilder.newBuilder()

            .scheme("http")

            .loopback()

            .port(port)

            .path("/foo")

            .build();

        System.out.println("URI: " + uri);

        HttpRequest request = HttpRequest.newBuilder(uri)

                .GET()

                .build();

        HttpResponse<String> response = client.send(request, HttpResponse.BodyHandlers.ofString());

        if (response.statusCode() != 200 || !response.body().equals(server.response())) {

            System.out.println("Status code = " + response.statusCode());

            serversocket.close();

            throw new RuntimeException("Test failed");

        }

        serversocket.close();

        server.waitforfinish();

        System.out.println("OK");

    }

}