/*
 * Copyright (C) 2013 Google Inc. All rights reserved.
 *
 * Redistribution and use in source and binary forms, with or without
 * modification, are permitted provided that the following conditions are
 * met:
 *
 *     * Redistributions of source code must retain the above copyright
 * notice, this list of conditions and the following disclaimer.
 *     * Redistributions in binary form must reproduce the above
 * copyright notice, this list of conditions and the following disclaimer
 * in the documentation and/or other materials provided with the
 * distribution.
 *     * Neither the name of Google Inc. nor the names of its
 * contributors may be used to endorse or promote products derived from
 * this software without specific prior written permission.
 *
 * THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS
 * "AS IS" AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT
 * LIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR
 * A PARTICULAR PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT
 * OWNER OR CONTRIBUTORS BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL,
 * SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT
 * LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE,
 * DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY
 * THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT
 * (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE
 * OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
 */

#include "third_party/blink/renderer/modules/crypto/crypto_result_impl.h"

#include "base/compiler_specific.h"
#include "base/containers/span.h"
#include "third_party/blink/public/platform/platform.h"
#include "third_party/blink/public/platform/web_crypto_algorithm.h"
#include "third_party/blink/renderer/bindings/core/v8/dictionary.h"
#include "third_party/blink/renderer/bindings/core/v8/script_promise_resolver.h"
#include "third_party/blink/renderer/bindings/core/v8/to_v8_traits.h"
#include "third_party/blink/renderer/bindings/core/v8/v8_binding_for_core.h"
#include "third_party/blink/renderer/bindings/core/v8/v8_object_builder.h"
#include "third_party/blink/renderer/bindings/core/v8/v8_throw_dom_exception.h"
#include "third_party/blink/renderer/bindings/modules/v8/v8_crypto_key.h"
#include "third_party/blink/renderer/bindings/modules/v8/v8_crypto_key_pair.h"
#include "third_party/blink/renderer/bindings/modules/v8/v8_encapsulated_bits.h"
#include "third_party/blink/renderer/bindings/modules/v8/v8_encapsulated_key.h"
#include "third_party/blink/renderer/bindings/modules/v8/v8_json_web_key.h"
#include "third_party/blink/renderer/bindings/modules/v8/v8_union_arraybuffer_jsonwebkey.h"
#include "third_party/blink/renderer/bindings/modules/v8/v8_union_cryptokey_cryptokeypair.h"
#include "third_party/blink/renderer/core/dom/dom_exception.h"
#include "third_party/blink/renderer/core/execution_context/execution_context.h"
#include "third_party/blink/renderer/core/execution_context/execution_context_lifecycle_observer.h"
#include "third_party/blink/renderer/core/typed_arrays/dom_array_buffer.h"
#include "third_party/blink/renderer/modules/crypto/crypto_key.h"
#include "third_party/blink/renderer/modules/crypto/normalize_algorithm.h"
#include "third_party/blink/renderer/platform/bindings/script_state.h"
#include "third_party/blink/renderer/platform/bindings/v8_throw_exception.h"
#include "third_party/blink/renderer/platform/heap/garbage_collected.h"

namespace blink {

static void RejectWithTypeError(const String& error_details,
                                ScriptPromiseResolverBase* resolver) {
  // Duplicate some of the checks done by ScriptPromiseResolverBase.
  if (!resolver->GetExecutionContext() ||
      resolver->GetExecutionContext()->IsContextDestroyed())
    return;

  ScriptState::Scope scope(resolver->GetScriptState());
  v8::Isolate* isolate = resolver->GetScriptState()->GetIsolate();
  resolver->Reject(V8ThrowException::CreateTypeError(isolate, error_details));
}

ExceptionCode WebCryptoErrorToExceptionCode(WebCryptoErrorType error_type) {
  switch (error_type) {
    case kWebCryptoErrorTypeNotSupported:
      return ToExceptionCode(DOMExceptionCode::kNotSupportedError);
    case kWebCryptoErrorTypeSyntax:
      return ToExceptionCode(DOMExceptionCode::kSyntaxError);
    case kWebCryptoErrorTypeInvalidAccess:
      return ToExceptionCode(DOMExceptionCode::kInvalidAccessError);
    case kWebCryptoErrorTypeData:
      return ToExceptionCode(DOMExceptionCode::kDataError);
    case kWebCryptoErrorTypeOperation:
      return ToExceptionCode(DOMExceptionCode::kOperationError);
    case kWebCryptoErrorTypeType:
      return ToExceptionCode(ESErrorType::kTypeError);
  }
}

CryptoResultImpl::~CryptoResultImpl() {
  DCHECK(!resolver_);
}

void CryptoResultImpl::Trace(Visitor* visitor) const {
  visitor->Trace(resolver_);
  ExecutionContextLifecycleObserver::Trace(visitor);
  CryptoResult::Trace(visitor);
}

void CryptoResultImpl::ClearResolver() {
  resolver_ = nullptr;
}

void CryptoResultImpl::CompleteWithError(WebCryptoErrorType error_type,
                                         const WebString& error_details) {
  if (!resolver_)
    return;

  ScriptState* resolver_script_state = resolver_->GetScriptState();
  if (!IsInParallelAlgorithmRunnable(resolver_->GetExecutionContext(),
                                     resolver_script_state)) {
    return;
  }
  ScriptState::Scope script_state_scope(resolver_script_state);

  ExceptionCode exception_code = WebCryptoErrorToExceptionCode(error_type);

  // Handle TypeError separately, as it cannot be created using
  // DOMException.
  if (exception_code == ToExceptionCode(ESErrorType::kTypeError)) {
    RejectWithTypeError(error_details, resolver_);
  } else if (IsDOMExceptionCode(exception_code)) {
    resolver_->Reject(V8ThrowDOMException::CreateOrDie(
        resolver_script_state->GetIsolate(),
        static_cast<DOMExceptionCode>(exception_code), error_details));
  } else {
    NOTREACHED();
  }
  ClearResolver();
}

void CryptoResultImpl::CompleteWithBuffer(base::span<const uint8_t> bytes) {
  if (!resolver_)
    return;

  auto* buffer = DOMArrayBuffer::Create(bytes);
  if (detailed_type_ == DetailedResolverType::kArrayBuffer) {
    resolver_->DowncastTo<DOMArrayBuffer>()->Resolve(buffer);
  } else if (detailed_type_ ==
             DetailedResolverType::kUnionArrayBufferJsonWebKey) {
    resolver_->DowncastTo<V8UnionArrayBufferOrJsonWebKey>()->Resolve(buffer);
  } else {
    NOTREACHED();
  }
  ClearResolver();
}

void CryptoResultImpl::CompleteWithJson(std::string_view utf8_data) {
  if (!resolver_)
    return;

  ScriptState* script_state = resolver_->GetScriptState();
  ScriptState::Scope scope(script_state);

  if (utf8_data.size() > v8::String::kMaxLength) {
    // TODO(crbug.com/1316976): this should probably raise an exception instead.
    LOG(FATAL) << "Result string is longer than v8::String::kMaxLength";
  }

  v8::TryCatch try_catch(script_state->GetIsolate());
  v8::Local<v8::Value> json_dictionary =
      FromJSONString(script_state, String::FromUtf8(utf8_data));

  CHECK_EQ(detailed_type_, DetailedResolverType::kUnionArrayBufferJsonWebKey);

  if (try_catch.HasCaught()) {
    resolver_->Reject(try_catch.Exception());
    ClearResolver();
    return;
  }

  ExceptionState exception_state(script_state->GetIsolate());
  JsonWebKey* json_web_key = NativeValueTraits<JsonWebKey>::NativeValue(
      script_state->GetIsolate(), json_dictionary, exception_state);

  if (try_catch.HasCaught()) {
    resolver_->Reject(try_catch.Exception());
  } else {
    resolver_->DowncastTo<V8UnionArrayBufferOrJsonWebKey>()->Resolve(
        json_web_key);
  }
  ClearResolver();
}

void CryptoResultImpl::CompleteWithBoolean(bool b) {
  if (!resolver_)
    return;

  resolver_->DowncastTo<IDLBoolean>()->Resolve(b);
  ClearResolver();
}

void CryptoResultImpl::CompleteWithKey(const WebCryptoKey& key) {
  if (!resolver_)
    return;

  auto* result = MakeGarbageCollected<CryptoKey>(key);
  resolver_->DowncastTo<CryptoKey>()->Resolve(result);
  ClearResolver();
}

void CryptoResultImpl::CompleteWithKeyForGenerateKey(const WebCryptoKey& key) {
  if (!resolver_) {
    return;
  }

  auto* result = MakeGarbageCollected<CryptoKey>(key);
  resolver_->DowncastTo<V8UnionCryptoKeyOrCryptoKeyPair>()->Resolve(result);
  ClearResolver();
}

void CryptoResultImpl::CompleteWithKeyPairForGenerateKey(
    const WebCryptoKey& public_key,
    const WebCryptoKey& private_key) {
  if (!resolver_) {
    return;
  }

  auto* result = CryptoKeyPair::Create();
  result->setPublicKey(MakeGarbageCollected<CryptoKey>(public_key));
  result->setPrivateKey(MakeGarbageCollected<CryptoKey>(private_key));

  resolver_->DowncastTo<V8UnionCryptoKeyOrCryptoKeyPair>()->Resolve(result);
  ClearResolver();
}

void CryptoResultImpl::CompleteWithEncapsulatedKey(
    const WebCryptoKey& shared_key,
    base::span<const uint8_t> ciphertext) {
  if (!resolver_) {
    return;
  }

  ScriptState* script_state = resolver_->GetScriptState();
  ScriptState::Scope scope(script_state);

  auto* result = EncapsulatedKey::Create();
  result->setSharedKey(MakeGarbageCollected<CryptoKey>(shared_key));
  result->setCiphertext(DOMArrayBuffer::Create(ciphertext));

    resolver_->DowncastTo<EncapsulatedKey>()->Resolve(result);
  ClearResolver();
}

void CryptoResultImpl::CompleteWithEncapsulatedBits(
    base::span<const uint8_t> shared_key,
    base::span<const uint8_t> ciphertext) {
  if (!resolver_) {
    return;
  }

  ScriptState* script_state = resolver_->GetScriptState();
  ScriptState::Scope scope(script_state);

  auto* result = EncapsulatedBits::Create();
  result->setSharedKey(DOMArrayBuffer::Create(shared_key));
  result->setCiphertext(DOMArrayBuffer::Create(ciphertext));

    resolver_->DowncastTo<EncapsulatedBits>()->Resolve(result);
  ClearResolver();
}

void CryptoResultImpl::Cancel() {
  cancel_->Cancel();
  ClearResolver();
}

}  // namespace blink