// Copyright (c) Microsoft Corporation.
// Licensed under the MIT License.

#include "certificate_client_base_test.hpp"

#include <azure/core/base64.hpp>
#include <azure/identity/client_secret_credential.hpp>

#include <cstddef>
#include <string>
#include <thread>

#include <gtest/gtest.h>

using namespace std::chrono_literals;
using namespace Azure::Security::KeyVault::Certificates;
using namespace Azure::Security::KeyVault::Certificates::Test;

using namespace std::chrono_literals;

TEST_F(KeyVaultCertificateClientTest, CreateCertificate)
{
  auto testName = ::testing::UnitTest::GetInstance()->current_test_info()->name();
  std::string const certificateName(testName);

  auto const& client = GetClientForTest(testName);
  // create certificate method contains all the checks
  KeyVaultCertificateClientTest::CreateCertificate(certificateName, client, m_defaultWait);

  {
    auto response = client.StartDeleteCertificate(certificateName);
    // double polling should not have an impact on the result
    auto result = response.PollUntilDone(m_defaultWait);
    result = response.PollUntilDone(m_defaultWait);
    EXPECT_EQ(result.Value.Name(), certificateName);
    EXPECT_EQ(result.Value.Properties.Enabled.Value(), true);
    EXPECT_NE(result.Value.RecoveryIdUrl.length(), size_t(0));
    EXPECT_TRUE(result.Value.DeletedOn);
    EXPECT_TRUE(result.Value.ScheduledPurgeDate);
    client.PurgeDeletedCertificate(certificateName);
  }
}

TEST_F(KeyVaultCertificateClientTest, CreateCertificateResumeToken)
{
  auto testName = ::testing::UnitTest::GetInstance()->current_test_info()->name();
  std::string const certificateName(testName);

  auto const& client = GetClientForTest(testName);

  CertificateCreateOptions options;
  options.Policy.Subject = "CN=xyz";
  options.Policy.ValidityInMonths = 12;
  options.Policy.Enabled = true;

  options.Properties.Enabled = true;
  options.Properties.Name = certificateName;
  options.Policy.ContentType = CertificateContentType::Pkcs12;
  options.Policy.IssuerName = "Self";

  LifetimeAction action;
  action.LifetimePercentage = 80;
  action.Action = CertificatePolicyAction::AutoRenew;
  options.Policy.LifetimeActions.emplace_back(action);
  {

    auto response = client.StartCreateCertificate(certificateName, options);

    auto fromToken
        = CreateCertificateOperation::CreateFromResumeToken(response.GetResumeToken(), client);
    // double polling should not have an impact on the result
    auto result = fromToken.PollUntilDone(m_defaultWait);
    result = fromToken.PollUntilDone(m_defaultWait);

    auto cert = client.GetCertificate(certificateName);
    EXPECT_EQ(cert.Value.Name(), options.Properties.Name);
    EXPECT_EQ(cert.Value.Properties.Enabled.Value(), true);
  }
}

TEST_F(KeyVaultCertificateClientTest, GetCertificate)
{
  auto testName = ::testing::UnitTest::GetInstance()->current_test_info()->name();
  std::string const certificateName(testName);

  auto const& client = GetClientForTest(testName);

  auto cert = CreateCertificate(certificateName, client, m_defaultWait);
  EXPECT_EQ(cert.Name(), cert.Properties.Name);
  EXPECT_EQ(cert.Properties.Name, certificateName);

  // x5t
  EXPECT_NE(cert.Properties.X509Thumbprint.size(), 0);
  EXPECT_EQ(cert.Properties.Tags.size(), 0);

  // attributes
  EXPECT_TRUE(cert.Properties.Enabled);
  EXPECT_TRUE(cert.Properties.NotBefore);
  EXPECT_TRUE(cert.Properties.ExpiresOn);
  EXPECT_TRUE(cert.Properties.CreatedOn);
  EXPECT_TRUE(cert.Properties.UpdatedOn);
  EXPECT_TRUE(cert.Properties.RecoverableDays);
  EXPECT_TRUE(cert.Properties.RecoveryLevel);

  // kid, sid, cer
  EXPECT_NE(cert.KeyIdUrl, "");
  EXPECT_NE(cert.SecretIdUrl, "");
  EXPECT_NE(cert.Cer.size(), 0);

  // policy
  {
    auto const& policy = cert.Policy;

    // Key props
    EXPECT_TRUE(policy.Exportable);
    EXPECT_TRUE(policy.KeyType);
    EXPECT_TRUE(policy.ReuseKey);
    // Recording uses RSA with no curve-name. Use RSA key when running LIVE
    EXPECT_FALSE(policy.KeyCurveName);
    EXPECT_TRUE(policy.KeySize);

    // Secret props
    EXPECT_TRUE(policy.ContentType);

    // x509_props
    EXPECT_TRUE(policy.Subject.size() > 0);

    // issuer
    EXPECT_TRUE(policy.IssuerName);

    // attributes
    EXPECT_TRUE(policy.CreatedOn);

    // lifetime_actions
    EXPECT_TRUE(policy.LifetimeActions.size() > 0);
    EXPECT_NE(policy.LifetimeActions[0].Action.ToString(), "");
  }
}

TEST_F(KeyVaultCertificateClientTest, GetCertificateVersion_LIVEONLY_)
{
  auto testName = GetTestName();

  std::string const certificateName(testName);

  auto const& client = GetClientForTest(testName);
  std::string version
      = CreateCertificate(certificateName, client, m_defaultWait).Properties.Version;
  {
    auto response = client.GetCertificateVersion(certificateName, version);
    CheckValidResponse(response);

    auto cert = response.Value;
    EXPECT_EQ(cert.Name(), cert.Properties.Name);
    EXPECT_EQ(cert.Properties.Name, certificateName);
    // There should be a version
    EXPECT_NE(cert.Properties.Version, "");

    // x5t
    EXPECT_NE(cert.Properties.X509Thumbprint.size(), 0);
    EXPECT_EQ(cert.Properties.Tags.size(), 0);

    // attributes
    EXPECT_TRUE(cert.Properties.Enabled);
    EXPECT_TRUE(cert.Properties.NotBefore);
    EXPECT_TRUE(cert.Properties.ExpiresOn);
    EXPECT_TRUE(cert.Properties.CreatedOn);
    EXPECT_TRUE(cert.Properties.UpdatedOn);
    EXPECT_TRUE(cert.Properties.RecoverableDays);
    EXPECT_TRUE(cert.Properties.RecoveryLevel);

    // kid, sid, cer
    EXPECT_NE(cert.KeyIdUrl, "");
    EXPECT_NE(cert.SecretIdUrl, "");
    EXPECT_NE(cert.Cer.size(), 0);
  }
}

TEST_F(KeyVaultCertificateClientTest, GetDeletedCertificate)
{
  auto testName = ::testing::UnitTest::GetInstance()->current_test_info()->name();
  std::string const certificateName(testName);

  auto const& client = GetClientForTest(testName);

  CreateCertificate(certificateName, client, m_defaultWait);

  {
    auto response = client.StartDeleteCertificate(certificateName);
    auto result = response.PollUntilDone(m_defaultWait);
    EXPECT_EQ(result.Value.Name(), certificateName);
  }
  {
    auto response = client.GetDeletedCertificate(certificateName);
    EXPECT_EQ(response.Value.Name(), certificateName);
  }
  {
    auto response = client.StartRecoverDeletedCertificate(certificateName);
    // double polling should not have an impact on the result
    auto result = response.PollUntilDone(m_defaultWait);
    result = response.PollUntilDone(m_defaultWait);
    EXPECT_EQ(result.Value.Name(), certificateName);
  }
  {
    auto response = client.GetCertificate(certificateName);
    EXPECT_EQ(response.Value.Name(), certificateName);
  }
}

TEST_F(KeyVaultCertificateClientTest, DeleteWrongCertificate)
{
  auto testName = ::testing::UnitTest::GetInstance()->current_test_info()->name();
  std::string const certificateName(testName);

  auto const& client = GetClientForTest(testName);

  try
  {
    auto response = client.StartDeleteCertificate(certificateName);
    EXPECT_TRUE(false); // we should not reach this line
  }
  catch (Azure::Core::RequestFailedException const& ex)
  {
    EXPECT_EQ(ex.StatusCode, Azure::Core::Http::HttpStatusCode::NotFound);
    EXPECT_EQ(ex.ErrorCode, "CertificateNotFound");
  }

  try
  {
    auto response = client.StartRecoverDeletedCertificate(certificateName);
    EXPECT_TRUE(false); // we should not reach this line
  }
  catch (Azure::Core::RequestFailedException const& ex)
  {
    EXPECT_EQ(ex.StatusCode, Azure::Core::Http::HttpStatusCode::NotFound);
    EXPECT_EQ(ex.ErrorCode, "CertificateNotFound");
  }
}

TEST_F(KeyVaultCertificateClientTest, CreateGetIssuer)
{
  auto const& client
      = GetClientForTest(::testing::UnitTest::GetInstance()->current_test_info()->name());

  CertificateIssuer issuer;
  issuer.Name = "issuer01";
  issuer.Provider = "Test";
  issuer.Properties.Enabled = true;
  issuer.Credentials.AccountId = "keyvaultuser";
  issuer.Credentials.Password = "password";

  AdministratorDetails admin;
  admin.FirstName = "John";
  admin.LastName = "Doe";
  admin.EmailAddress = "admin@microsoft.com";
  admin.PhoneNumber = "4255555555";

  issuer.Organization.AdminDetails.emplace_back(admin);

  {
    auto result = client.CreateIssuer(issuer.Name, issuer);
    CheckIssuers(result.Value, issuer);
  }

  {
    auto result = client.GetIssuer(issuer.Name);
    CheckIssuers(result.Value, issuer);
  }

  {
    auto result = client.DeleteIssuer(issuer.Name);
    CheckIssuers(result.Value, issuer);
  }
}

TEST_F(KeyVaultCertificateClientTest, UpdateIssuer)
{
  auto const& client
      = GetClientForTest(::testing::UnitTest::GetInstance()->current_test_info()->name());

  CertificateIssuer issuer;
  issuer.Name = "issuer01";
  issuer.Provider = "Test";
  issuer.Properties.Enabled = true;
  issuer.Credentials.AccountId = "keyvaultuser";
  issuer.Credentials.Password = "password";

  AdministratorDetails admin;
  admin.FirstName = "John";
  admin.LastName = "Doe";
  admin.EmailAddress = "admin@microsoft.com";
  admin.PhoneNumber = "4255555555";

  issuer.Organization.AdminDetails.emplace_back(admin);

  {
    auto result = client.CreateIssuer(issuer.Name, issuer);
    CheckIssuers(result.Value, issuer);
  }

  {
    issuer.Credentials.Password = "password2";
    auto result = client.UpdateIssuer(issuer.Name, issuer);
    CheckIssuers(result.Value, issuer);
  }

  {
    auto result = client.DeleteIssuer(issuer.Name);
    CheckIssuers(result.Value, issuer);
  }
}

TEST_F(KeyVaultCertificateClientTest, SetContacts)
{
  auto const& client
      = GetClientForTest(::testing::UnitTest::GetInstance()->current_test_info()->name());

  std::vector<CertificateContact> contacts;

  CertificateContact ctt;

  ctt.EmailAddress = "one@two.org";
  ctt.Name = "giqu"; // cspell:disable-line
  ctt.Phone = "1234567890";
  contacts.emplace_back(ctt);

  CertificateContact ctt2;

  ctt2.EmailAddress = "two@three.org";
  ctt2.Name = "giqu2"; // cspell:disable-line
  ctt2.Phone = "1234567891";
  contacts.emplace_back(ctt2);

  auto response = client.SetContacts(contacts);

  CheckContactsCollections(contacts, response.Value.Contacts);

  auto response2 = client.DeleteContacts();

  CheckContactsCollections(contacts, response2.Value.Contacts);
}

TEST_F(KeyVaultCertificateClientTest, GetContacts)
{
  auto const& client
      = GetClientForTest(::testing::UnitTest::GetInstance()->current_test_info()->name());

  std::vector<CertificateContact> contacts;

  CertificateContact ctt;

  ctt.EmailAddress = "one@two.org";
  ctt.Name = "giqu"; // cspell:disable-line
  ctt.Phone = "1234567890";
  contacts.emplace_back(ctt);

  CertificateContact ctt2;

  ctt2.EmailAddress = "two@three.org";
  ctt2.Name = "giqu2"; // cspell:disable-line
  ctt2.Phone = "1234567891";
  contacts.emplace_back(ctt2);

  client.SetContacts(contacts);
  auto response = client.GetContacts();

  CheckContactsCollections(contacts, response.Value.Contacts);

  auto response2 = client.DeleteContacts();

  CheckContactsCollections(contacts, response2.Value.Contacts);
}

TEST_F(KeyVaultCertificateClientTest, GetContactsPartial)
{
  auto const& client
      = GetClientForTest(::testing::UnitTest::GetInstance()->current_test_info()->name());

  std::vector<CertificateContact> contacts;

  CertificateContact ctt;

  ctt.EmailAddress = "one1@two.org";
  contacts.emplace_back(ctt);

  CertificateContact ctt2, ctt3;

  ctt2.EmailAddress = "two2@three.org";
  ctt2.Name = "giqu2"; // cspell:disable-line
  contacts.emplace_back(ctt2);

  ctt3.EmailAddress = "two3@three.org";
  ctt3.Phone = "1234567891";

  contacts.emplace_back(ctt3);

  client.SetContacts(contacts);
  auto response = client.GetContacts();

  CheckContactsCollections(contacts, response.Value.Contacts);

  auto response2 = client.DeleteContacts();

  CheckContactsCollections(contacts, response2.Value.Contacts);
}

TEST_F(KeyVaultCertificateClientTest, GetContactsDuplicateEmail)
{
  auto const& client
      = GetClientForTest(::testing::UnitTest::GetInstance()->current_test_info()->name());

  std::vector<CertificateContact> contacts;

  CertificateContact ctt;

  ctt.EmailAddress = "one1@two.org";
  contacts.emplace_back(ctt);

  CertificateContact ctt2, ctt3;

  ctt2.EmailAddress = "two@three.org";
  ctt2.Name = "giqu2"; // cspell:disable-line
  contacts.emplace_back(ctt2);

  ctt3.EmailAddress = "two@three.org";
  ctt3.Phone = "1234567891";

  contacts.emplace_back(ctt3);

  client.SetContacts(contacts);
  auto response = client.GetContacts();

  CheckContactsCollections(contacts, response.Value.Contacts);

  auto response2 = client.DeleteContacts();

  CheckContactsCollections(contacts, response2.Value.Contacts);
}

TEST_F(KeyVaultCertificateClientTest, GetCertificatePolicy)
{
  auto testName = ::testing::UnitTest::GetInstance()->current_test_info()->name();
  std::string const certificateName(testName);

  auto const& client = GetClientForTest(testName);

  CreateCertificate(certificateName, client, m_defaultWait);

  {
    auto response = client.GetCertificatePolicy(certificateName);
    auto const& policy = response.Value;

    // Key props
    EXPECT_TRUE(policy.Exportable);
    EXPECT_TRUE(policy.KeyType);
    EXPECT_TRUE(policy.ReuseKey);
    // Recording uses RSA with no curve-name. Use RSA key when running LIVE
    EXPECT_FALSE(policy.KeyCurveName);
    EXPECT_TRUE(policy.KeySize);
    // enabled
    EXPECT_TRUE(policy.Enabled);
    EXPECT_TRUE(policy.Enabled.Value());
    // validity
    EXPECT_TRUE(policy.ValidityInMonths);
    EXPECT_EQ(policy.ValidityInMonths.Value(), 12);
    // Secret props
    EXPECT_TRUE(policy.ContentType);
    EXPECT_EQ(policy.ContentType.Value(), CertificateContentType::Pkcs12);
    // x509_props
    EXPECT_TRUE(policy.Subject.size() > 0);
    EXPECT_EQ(policy.Subject, "CN=xyz");
    // issuer
    EXPECT_TRUE(policy.IssuerName);
    // attributes
    EXPECT_TRUE(policy.CreatedOn);
    // lifetime_actions
    EXPECT_TRUE(policy.LifetimeActions.size() > 0);
    EXPECT_NE(policy.LifetimeActions[0].Action.ToString(), "");
  }
}

TEST_F(KeyVaultCertificateClientTest, UpdateCertificatePolicy)
{
  auto testName = ::testing::UnitTest::GetInstance()->current_test_info()->name();
  std::string const certificateName(testName);
  auto const& client = GetClientForTest(testName);

  CreateCertificate(certificateName, client, m_defaultWait);

  {
    auto response = client.GetCertificatePolicy(certificateName);
    auto policy = response.Value;

    // Key props
    EXPECT_TRUE(policy.Exportable);
    EXPECT_TRUE(policy.KeyType);
    EXPECT_TRUE(policy.ReuseKey);
    // Recording uses RSA with no curve-name. Use RSA key when running LIVE
    EXPECT_FALSE(policy.KeyCurveName);
    EXPECT_TRUE(policy.KeySize);
    // enabled
    EXPECT_TRUE(policy.Enabled);
    EXPECT_TRUE(policy.Enabled.Value());
    // validity
    EXPECT_TRUE(policy.ValidityInMonths);
    EXPECT_EQ(policy.ValidityInMonths.Value(), 12);
    // Secret props
    EXPECT_TRUE(policy.ContentType);
    EXPECT_EQ(policy.ContentType.Value(), CertificateContentType::Pkcs12);
    // x509_props
    EXPECT_TRUE(policy.Subject.size() > 0);
    EXPECT_EQ(policy.Subject, "CN=xyz");
    // issuer
    EXPECT_TRUE(policy.IssuerName);
    // attributes
    EXPECT_TRUE(policy.CreatedOn);
    // lifetime_actions
    EXPECT_TRUE(policy.LifetimeActions.size() > 0);
    EXPECT_NE(policy.LifetimeActions[0].Action.ToString(), "");

    policy.ValidityInMonths = 8;
    policy.Subject = "CN=twa";

    auto updateResponse = client.UpdateCertificatePolicy(certificateName, policy);
    auto const& updatedPolicy = updateResponse.Value;

    // Key props
    EXPECT_TRUE(updatedPolicy.Exportable);
    EXPECT_TRUE(updatedPolicy.KeyType);
    EXPECT_TRUE(updatedPolicy.ReuseKey);
    // Recording uses RSA with no curve-name. Use RSA key when running LIVE
    EXPECT_FALSE(updatedPolicy.KeyCurveName);
    EXPECT_TRUE(updatedPolicy.KeySize);
    // enabled
    EXPECT_TRUE(updatedPolicy.Enabled);
    EXPECT_TRUE(updatedPolicy.Enabled.Value());
    // validity
    EXPECT_TRUE(updatedPolicy.ValidityInMonths);
    EXPECT_EQ(updatedPolicy.ValidityInMonths.Value(), 8);
    // Secret props
    EXPECT_TRUE(updatedPolicy.ContentType);
    EXPECT_EQ(updatedPolicy.ContentType.Value(), CertificateContentType::Pkcs12);
    // x509_props
    EXPECT_TRUE(updatedPolicy.Subject.size() > 0);
    EXPECT_EQ(updatedPolicy.Subject, "CN=twa");
    // issuer
    EXPECT_TRUE(updatedPolicy.IssuerName);
    // attributes
    EXPECT_TRUE(updatedPolicy.CreatedOn);
    // lifetime_actions
    EXPECT_TRUE(updatedPolicy.LifetimeActions.size() > 0);
    EXPECT_NE(updatedPolicy.LifetimeActions[0].Action.ToString(), "");
  }
}

TEST_F(KeyVaultCertificateClientTest, BackupRestoreCertificate)
{
  auto testName = ::testing::UnitTest::GetInstance()->current_test_info()->name();
  std::string const certificateName(testName);
  auto const& client = GetClientForTest(testName);

  CreateCertificate(certificateName, client, m_defaultWait);

  auto certBackup = client.BackupCertificate(certificateName);
  {
    EXPECT_TRUE(certBackup.Value.Certificate.size() > size_t(0));
    std::string text(certBackup.Value.Certificate.begin(), certBackup.Value.Certificate.end());
    EXPECT_EQ(text.find("AzureKeyVaultKeyBackupV1.microsoft.com"), 1);
  }
  {
    auto response = client.StartDeleteCertificate(certificateName);
    auto result = response.PollUntilDone(m_defaultWait);
    EXPECT_EQ(result.Value.Name(), certificateName);
    client.PurgeDeletedCertificate(certificateName);
    TestSleep(m_defaultWait);
  }
  {
    int retries = 15;
    // before we restore we need to ensure the certificate is purged.
    // since we have no visibility into the purge status we will just wait and check for a few
    // seconds
    while (retries > 0)
    {
      try
      {
        client.GetDeletedCertificate(certificateName);
      }
      catch (Azure::Core::RequestFailedException const&)
      {
        std::cout << std::endl << "- Certificate is gone";
        break;
      }
      TestSleep(m_defaultWait);
      retries--;
    }

    if (retries == 0)
    {
      std::cout << std::endl << "retries reached 0";
      EXPECT_TRUE(false);
    }
  }
  {
    auto responseRestore = client.RestoreCertificateBackup(certBackup.Value.Certificate);
    auto certificate = responseRestore.Value;

    EXPECT_EQ(certificate.Policy.ValidityInMonths.Value(), 12);
  }
}

TEST_F(KeyVaultCertificateClientTest, GetPropertiesOfCertificates)
{
  auto testName = ::testing::UnitTest::GetInstance()->current_test_info()->name();
  std::string const certificateName(testName);
  std::string const certificateName2(certificateName + "2");

  auto const& client = GetClientForTest(testName);

  auto cert1 = CreateCertificate(certificateName, client, m_defaultWait);
  auto cert2 = CreateCertificate(certificateName2, client, m_defaultWait);

  {
    auto result = client.GetPropertiesOfCertificates(GetPropertiesOfCertificatesOptions());
    EXPECT_TRUE(result.Items.size() >= size_t(2));
  }
}

TEST_F(KeyVaultCertificateClientTest, GetPropertiesOfCertificateVersions)
{
  auto testName = ::testing::UnitTest::GetInstance()->current_test_info()->name();
  std::string const certificateName(testName);

  auto const& client = GetClientForTest(testName);

  CreateCertificate(certificateName, client, m_defaultWait);
  CreateCertificate(certificateName, client, m_defaultWait);

  {
    auto result = client.GetPropertiesOfCertificateVersions(
        certificateName, GetPropertiesOfCertificateVersionsOptions());
    EXPECT_TRUE(result.Items.size() >= size_t(2));
    for (CertificateProperties prop : result.Items)
    {
      EXPECT_TRUE(prop.Enabled.Value());
    }
  }
}

TEST_F(KeyVaultCertificateClientTest, GetPropertiesOfCertificatesVersionsNoCert)
{
  auto testName = ::testing::UnitTest::GetInstance()->current_test_info()->name();
  std::string const certificateName(testName);

  auto const& client = GetClientForTest(testName);
  try
  {

    auto result = client.GetPropertiesOfCertificateVersions(
        certificateName, GetPropertiesOfCertificateVersionsOptions());
  }
  catch (Azure::Core::RequestFailedException const& ex)
  {
    EXPECT_EQ(ex.StatusCode, Azure::Core::Http::HttpStatusCode::NotFound);
    EXPECT_EQ(ex.ErrorCode, "CertificateNotFound");
  }
}

TEST_F(KeyVaultCertificateClientTest, GetPropertiesOfIssuers)
{
  auto const& client
      = GetClientForTest(::testing::UnitTest::GetInstance()->current_test_info()->name());

  CertificateIssuer issuer;
  issuer.Name = "issuer01";
  issuer.Provider = "Test";
  issuer.Properties.Enabled = true;
  issuer.Credentials.AccountId = "keyvaultuser";
  issuer.Credentials.Password = "password";

  AdministratorDetails admin;
  admin.FirstName = "John";
  admin.LastName = "Doe";
  admin.EmailAddress = "admin@microsoft.com";
  admin.PhoneNumber = "4255555555";

  issuer.Organization.AdminDetails.emplace_back(admin);

  CertificateIssuer issuer2;
  issuer2.Name = "issuer02";
  issuer2.Provider = "Test";
  issuer2.Properties.Enabled = true;
  issuer2.Credentials.AccountId = "keyvaultuser";
  issuer2.Credentials.Password = "password";
  issuer2.Organization.AdminDetails.emplace_back(admin);

  {
    auto result = client.CreateIssuer(issuer.Name, issuer);
    CheckIssuers(result.Value, issuer);
  }
  {
    auto result = client.CreateIssuer(issuer2.Name, issuer2);
    CheckIssuers(result.Value, issuer2);
  }
  {
    auto result = client.GetPropertiesOfIssuers(GetPropertiesOfIssuersOptions());
    EXPECT_EQ(result.Items.size(), size_t(2));

    for (auto oneIssuer : result.Items)
    {
      EXPECT_EQ(oneIssuer.Provider, issuer.Provider.Value());
      EXPECT_TRUE(
          oneIssuer.Name == issuer.Name || oneIssuer.Name == issuer2.Name
          || oneIssuer.Name == "Sanitized");
    }
  }
  {
    client.DeleteIssuer(issuer.Name);
    client.DeleteIssuer(issuer2.Name);
  }
}

TEST_F(KeyVaultCertificateClientTest, GetDeletedCertificates)
{
  auto testName = ::testing::UnitTest::GetInstance()->current_test_info()->name();
  std::string const certificateName(testName);
  std::string const certificateName2(certificateName + "2");

  auto const& client = GetClientForTest(testName);

  CreateCertificate(certificateName, client, m_defaultWait);
  CreateCertificate(certificateName2, client, m_defaultWait);

  {
    auto response = client.StartDeleteCertificate(certificateName);
    auto result = response.PollUntilDone(m_defaultWait);
    EXPECT_EQ(result.Value.Name(), certificateName);
  }
  {
    auto response = client.StartDeleteCertificate(certificateName2);
    auto result = response.PollUntilDone(m_defaultWait);
    EXPECT_EQ(result.Value.Name(), certificateName2);
  }
  {
    auto result = client.GetDeletedCertificates(GetDeletedCertificatesOptions());
    EXPECT_EQ(result.Items.size(), size_t(2));
  }
  {
    client.PurgeDeletedCertificate(certificateName);
    client.PurgeDeletedCertificate(certificateName2);
  }
}

TEST_F(KeyVaultCertificateClientTest, DownloadImportPkcs)
{
  auto testName = GetTestName();
  std::string const pkcs(testName);
  std::string const importName(pkcs + "2");

  auto const& client = GetClientForTest(testName);
  auto originalCertificate
      = CreateCertificate(pkcs, client, m_defaultWait, "CN=xyz", CertificateContentType::Pkcs12);

  {
    auto result = DownloadCertificate(pkcs, client);
    ImportCertificateOptions options;
    options.Certificate = result.Value.Certificate;

    options.Policy.Enabled = true;
    options.Policy.KeyType = CertificateKeyType::Rsa;
    options.Policy.KeySize = 2048;
    options.Policy.ContentType = CertificateContentType::Pkcs12;
    options.Policy.Exportable = true;
    options.Properties.Name = importName;
    auto imported = client.ImportCertificate(importName, options).Value;

    EXPECT_EQ(imported.Properties.Name, importName);
    EXPECT_EQ(imported.Policy.ContentType.Value(), originalCertificate.Policy.ContentType.Value());
    EXPECT_EQ(imported.Policy.Enabled.Value(), originalCertificate.Policy.Enabled.Value());
    EXPECT_EQ(imported.Policy.KeySize.Value(), originalCertificate.Policy.KeySize.Value());
    EXPECT_EQ(imported.Policy.Subject, originalCertificate.Policy.Subject);
    EXPECT_EQ(imported.Cer, originalCertificate.Cer);
  }
}

TEST_F(KeyVaultCertificateClientTest, DownloadImportPem)
{
  auto testName = GetTestName();
  std::string const pem(testName);
  std::string const importName(pem + "2");

  auto const& client = GetClientForTest(testName);
  auto originalCertificate
      = CreateCertificate(pem, client, m_defaultWait, "CN=xyz", CertificateContentType::Pem);

  {
    auto result = DownloadCertificate(pem, client);
    ImportCertificateOptions options;
    options.Certificate = result.Value.Certificate;

    options.Policy.Enabled = true;
    options.Policy.KeyType = CertificateKeyType::Rsa;
    options.Policy.KeySize = 2048;
    options.Policy.ContentType = CertificateContentType::Pem;
    options.Policy.Exportable = true;
    options.Properties.Name = importName;
    auto imported = client.ImportCertificate(importName, options).Value;

    EXPECT_EQ(imported.Properties.Name, importName);
    EXPECT_EQ(imported.Policy.ContentType.Value(), originalCertificate.Policy.ContentType.Value());
    EXPECT_EQ(imported.Policy.Enabled.Value(), originalCertificate.Policy.Enabled.Value());
    EXPECT_EQ(imported.Policy.KeySize.Value(), originalCertificate.Policy.KeySize.Value());
    EXPECT_EQ(imported.Policy.Subject, originalCertificate.Policy.Subject);
    EXPECT_EQ(imported.Cer, originalCertificate.Cer);
  }
  {
    auto response = client.StartDeleteCertificate(pem);
    auto result = response.PollUntilDone(m_defaultWait);
    EXPECT_EQ(result.Value.Name(), pem);
    client.PurgeDeletedCertificate(pem);
  }
}

TEST_F(KeyVaultCertificateClientTest, UpdateCertificate_LIVEONLY_) // version is sanitized away
{
  auto testName = GetTestName();
  std::string const certificateName(testName);

  auto const& client = GetClientForTest(testName);
  auto certificate = CreateCertificate(certificateName, client, m_defaultWait);

  {
    certificate.Properties.Enabled = false;
    auto updatedCert
        = client
              .UpdateCertificateProperties(
                  certificateName, certificate.Properties.Version, certificate.Properties)
              .Value;
    EXPECT_FALSE(updatedCert.Properties.Enabled.Value());
  }
}

// the api implementation is correct according to swagger and other languages.
// the issue revolves around the fact that to merge a certificate it needs to not be issued by self
// which causes some issues on the automation side as the issuer needs to approve and i need to find
// an issuer that would autoapprove requests, that is not self.
TEST_F(KeyVaultCertificateClientTest, DISABLED_MergeCertificate)
{
  auto const& client
      = GetClientForTest(::testing::UnitTest::GetInstance()->current_test_info()->name());

  // cspell: disable-next-line
  std::string pkcsToMerge = "aaaaa";
  // cspell: disable-next-line
  std::string mergeTarget = "baaab";
  // cspell: disable-next-line
  std::string mergeTarget2 = "ccaac";
  auto mergeOptions = MergeCertificateOptions();

  {
    auto certificate = CreateCertificate(pkcsToMerge, client, 1s, "CN=bbb");
    auto result = DownloadCertificate(pkcsToMerge, client);
    // mergeoptions.Certificates.emplace_back(Azure::Core::Convert::Base64Encode(certificate.Cer));
  }
  {
    auto response = client.StartDeleteCertificate(pkcsToMerge);
    auto result = response.PollUntilDone(m_defaultWait);
    client.PurgeDeletedCertificate(pkcsToMerge);
  }
  {
    // CreateCertificate(mergeTarget, client, 1s, "CN=bbb");
    CertificateCreateOptions options;
    options.Policy.Subject = "CN=bbb";
    options.Policy.ValidityInMonths = 12;
    options.Policy.Enabled = true;

    options.Properties.Enabled = true;
    options.Properties.Name = mergeTarget;
    options.Policy.ContentType = CertificateContentType::Pkcs12;
    options.Policy.IssuerName = "sss";

    auto response = client.StartCreateCertificate(mergeTarget, options);
    auto result = response.PollUntilDone(100ms);

    bool cont = true;
    while (cont)
    {
      try
      {
        auto merged = client.MergeCertificate(mergeTarget, mergeOptions);
        cont = false;
      }
      catch (...)
      {
      }
    }
  }
}

TEST_F(KeyVaultCertificateClientTest, ServiceVersion)
{
  auto credential
      = std::make_shared<Azure::Identity::ClientSecretCredential>("tenantID", "AppId", "SecretId");
  // 7.5
  EXPECT_NO_THROW(auto options = CertificateClientOptions(); CertificateClient certificateClient(
                      "http://account.vault.azure.net", credential, options);
                  EXPECT_EQ(options.ApiVersion, "7.5"););
}
