# frozen_string_literal: true

require_relative "../../../test_helper"

# See http://oauth.net/core/1.0/#anchor14
#
# 9.1.  Signature Base String
#
# The Signature Base String is a consistent reproducible concatenation of the request elements
# into a single string. The string is used as an input in hashing or signing algorithms. The
# HMAC-SHA1 signature method provides both a standard and an example of using the Signature
# Base String with a signing algorithm to generate signatures. All the request parameters MUST
# be encoded as described in Parameter Encoding prior to constructing the Signature Base String.
#

class SignatureBaseStringTest < OAuthCase
  def test_a51
    parameters = {
      "oauth_consumer_key" => "dpf43f3p2l4k3l03",
      "oauth_token" => "nnch734d00sl2jdk",
      "oauth_signature_method" => "HMAC-SHA1",
      "oauth_timestamp" => "1191242096",
      "oauth_nonce" => "kllo9940pd9333jh",
      "oauth_version" => "1.0",
      "file" => "vacation.jpg",
      "size" => "original"
    }
    sbs = "GET&http%3A%2F%2Fphotos.example.net%2Fphotos&file%3Dvacation.jpg%26oauth_consumer_key%3Ddpf43f3p2l4k3l03%26oauth_nonce%3Dkllo9940pd9333jh%26oauth_signature_method%3DHMAC-SHA1%26oauth_timestamp%3D1191242096%26oauth_token%3Dnnch734d00sl2jdk%26oauth_version%3D1.0%26size%3Doriginal"

    assert_signature_base_string sbs, parameters, "GET", "http://photos.example.net/photos"
  end

  # These are from the wiki http://wiki.oauth.net/TestCases
  # in the section Concatenate Test Elements

  def test_wiki_1_simple_with_ending_slash
    parameters = {
      "n" => "v"
    }
    sbs = "GET&http%3A%2F%2Fexample.com%2F&n%3Dv"

    assert_signature_base_string sbs, parameters, "GET", "http://example.com/"
  end

  def test_wiki_2_simple_without_ending_slash
    parameters = {
      "n" => "v"
    }
    sbs = "GET&http%3A%2F%2Fexample.com%2F&n%3Dv"

    assert_signature_base_string sbs, parameters, "GET", "http://example.com"
  end

  def test_wiki_2_request_token
    parameters = {
      "oauth_version" => "1.0",
      "oauth_consumer_key" => "dpf43f3p2l4k3l03",
      "oauth_timestamp" => "1191242090",
      "oauth_nonce" => "hsu94j3884jdopsl",
      "oauth_signature_method" => "PLAINTEXT",
      "oauth_signature" => "ignored"
    }
    sbs = "POST&https%3A%2F%2Fphotos.example.net%2Frequest_token&oauth_consumer_key%3Ddpf43f3p2l4k3l03%26oauth_nonce%3Dhsu94j3884jdopsl%26oauth_signature_method%3DPLAINTEXT%26oauth_timestamp%3D1191242090%26oauth_version%3D1.0"

    assert_signature_base_string sbs, parameters, "POST", "https://photos.example.net/request_token"
  end

  protected

  def assert_signature_base_string(expected, params = {}, method = "GET", uri = "http://photos.example.net/photos", message = "Signature Base String does not match")
    assert_equal expected, signature_base_string(params, method, uri), message
  end

  def signature_base_string(params = {}, method = "GET", uri = "http://photos.example.net/photos")
    request(params, method, uri).signature_base_string
  end
end
