/*
 * Copyright (c) 2026 Contributors to the Eclipse Foundation.
 * Copyright (c) 2017, 2020 Oracle and/or its affiliates. All rights reserved.
 *
 * This program and the accompanying materials are made available under the
 * terms of the Eclipse Public License v. 2.0, which is available at
 * http://www.eclipse.org/legal/epl-2.0.
 *
 * This Source Code may also be made available under the following Secondary
 * Licenses when the conditions for such availability set forth in the
 * Eclipse Public License v. 2.0 are satisfied: GNU General Public License,
 * version 2 with the GNU Classpath Exception, which is available at
 * https://www.gnu.org/software/classpath/license.html.
 *
 * SPDX-License-Identifier: EPL-2.0 OR GPL-2.0 WITH Classpath-exception-2.0
 */

package ee.jakarta.tck.security.test;

import java.io.IOException;
import java.io.PrintWriter;
import java.lang.annotation.Annotation;
import java.util.Set;

import jakarta.annotation.security.DeclareRoles;
import jakarta.enterprise.context.ApplicationScoped;
import jakarta.enterprise.inject.Any;
import jakarta.enterprise.inject.spi.Bean;
import jakarta.enterprise.inject.spi.BeanManager;
import jakarta.enterprise.inject.spi.CDI;
import jakarta.enterprise.util.AnnotationLiteral;
import jakarta.security.enterprise.authentication.mechanism.http.HttpAuthenticationMechanism;
import jakarta.servlet.ServletException;
import jakarta.servlet.annotation.HttpConstraint;
import jakarta.servlet.annotation.ServletSecurity;
import jakarta.servlet.annotation.WebServlet;
import jakarta.servlet.http.HttpServlet;
import jakarta.servlet.http.HttpServletRequest;
import jakarta.servlet.http.HttpServletResponse;

@WebServlet("/servlet2")
@DeclareRoles({ "foo", "bar", "kaz" })
@ServletSecurity(@HttpConstraint(rolesAllowed = "foo"))
public class BasicServlet2 extends HttpServlet {

    private static final long serialVersionUID = 1L;

    @Override
    public void doGet(HttpServletRequest request, HttpServletResponse response) throws ServletException, IOException {

        PrintWriter writer = response.getWriter();

        writer.write("This is a servlet \n");

        try {
            BeanManager bm = CDI.current().getBeanManager();

            Set<Bean<?>> beans = bm.getBeans(HttpAuthenticationMechanism.class, new AnnotationLiteral<Any>() {
                private static final long serialVersionUID = 1L;
            });
            for (Bean<?> bean : beans) {
                writer.println("Class: " + bean.getBeanClass().getName());
                writer.println("Qualifier: " + split(bean.getQualifiers()));
                writer.println("Scope: " + bean.getScope().getSimpleName());
                writer.println("Have qualifier @BasicAuthenticationMechanism: "
                        + hasBasicAuthQualifier(bean.getQualifiers()));
                writer.println("Have scope @ApplicationScoped: " + (bean.getScope() == ApplicationScoped.class));
            }
        } catch (Exception e) {
            throw new ServletException(e);
        }
    }

    private String split(Set<Annotation> set) {
        StringBuilder sb = new StringBuilder();
        for (Annotation a : set) {
            sb.append(a.annotationType().getSimpleName()).append(",");
        }
        return sb.length() == 0 ? "" : sb.substring(0, sb.length() - 1);
    }

    private boolean hasBasicAuthQualifier(Set<Annotation> set) {
        for (Annotation a : set) {
            if (a.annotationType().toString().contains("BasicAuthenticationMechanism")) {
                return true;
            }
        }
        return false;
    }

}
