// Copyright 2023 Google LLC
//
// Licensed under the Apache License, Version 2.0 (the "License");
// you may not use this file except in compliance with the License.
// You may obtain a copy of the License at
//
//      http://www.apache.org/licenses/LICENSE-2.0
//
// Unless required by applicable law or agreed to in writing, software
// distributed under the License is distributed on an "AS IS" BASIS,
// WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
// See the License for the specific language governing permissions and
// limitations under the License.

@testable import FirebaseAuth
import FirebaseCoreInternal
import Foundation
import XCTest

/// The utility class to update the real keychain
@available(iOS 13, tvOS 13, macOS 10.15, macCatalyst 13, watchOS 7, *)
final class FakeAuthKeychainStorage: AuthKeychainStorage {
  // Fake Keychain. It's a dictionary, keyed by service name, for each key-value store dictionary
  private let fakeKeychain = UnfairLock<[String: [String: Any]]>([:])

  private let fakeLegacyKeychain = UnfairLock<[String: Any]>([:])

  func get(query: [String: Any], result: inout AnyObject?) -> OSStatus {
    if let service = queryService(query) {
      guard let value = fakeKeychain.value()[service]?[queryKey(query)] else {
        return errSecItemNotFound
      }
      let returnArrayofDictionary = [[kSecValueData as String: value]]
      result = returnArrayofDictionary as AnyObject
      return noErr
    } else {
      guard let value = fakeLegacyKeychain.value()[queryKey(query)] else {
        return errSecItemNotFound
      }
      let returnArrayofDictionary = [[kSecValueData as String: value]]
      result = returnArrayofDictionary as AnyObject
      return noErr
    }
  }

  func add(query: [String: Any]) -> OSStatus {
    if let service = queryService(query) {
      fakeKeychain.withLock { $0[service]?[queryKey(query)] = query[kSecValueData as String] }
    } else {
      fakeLegacyKeychain.withLock { $0[queryKey(query)] = query[kSecValueData as String] }
    }
    return noErr
  }

  func update(query: [String: Any], attributes: [String: Any]) -> OSStatus {
    return add(query: query)
  }

  @discardableResult func delete(query: [String: Any]) -> OSStatus {
    if let service = queryService(query) {
      fakeKeychain.withLock { $0[service]?[queryKey(query)] = nil }
    } else {
      fakeLegacyKeychain.withLock { $0[queryKey(query)] = nil }
    }
    return noErr
  }

  private func queryKey(_ query: [String: Any]) -> String {
    do {
      return try XCTUnwrap(query[kSecAttrAccount as String] as? String)
    } catch {
      XCTFail("\(error)")
      return ""
    }
  }

  private func queryService(_ query: [String: Any]) -> String? {
    guard let service = query[kSecAttrService as String] as? String else {
      return nil
    }
    fakeKeychain.withLock { fakeKeychain in
      if fakeKeychain[service] == nil {
        fakeKeychain[service] = [:]
      }
    }
    return service
  }
}