/*
 *  Licensed to the Apache Software Foundation (ASF) under one
 *  or more contributor license agreements.  See the NOTICE file
 *  distributed with this work for additional information
 *  regarding copyright ownership.  The ASF licenses this file
 *  to you under the Apache License, Version 2.0 (the
 *  "License"); you may not use this file except in compliance
 *  with the License.  You may obtain a copy of the License at
 *
 *    http://www.apache.org/licenses/LICENSE-2.0
 *
 *  Unless required by applicable law or agreed to in writing,
 *  software distributed under the License is distributed on an
 *  "AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY
 *  KIND, either express or implied.  See the License for the
 *  specific language governing permissions and limitations
 *  under the License.
 *
 */

package org.apache.openaz.xacml.admin.util;

import java.util.Arrays;
import java.util.HashMap;
import java.util.HashSet;
import java.util.Map;
import java.util.Set;

import org.apache.openaz.xacml.api.Identifier;
import org.apache.openaz.xacml.api.XACML3;

public class XACMLConstants {

	public static final Set<Identifier> SUBJECT_CATEGORIES = new HashSet<Identifier>();
	public static final Set<Identifier> ACTION_CATEGORIES = new HashSet<Identifier>();
	public static final Set<Identifier> RESOURCE_CATEGORIES = new HashSet<Identifier>();
	public static final Set<Identifier> ENVIRONMENT_CATEGORIES = new HashSet<Identifier>();
	
	public static final Set<Identifier> CATEGORIES = new HashSet<Identifier>();
	static {
		SUBJECT_CATEGORIES.addAll(Arrays.asList(XACML3.ID_SUBJECT_CATEGORY_ACCESS_SUBJECT,
												XACML3.ID_SUBJECT_CATEGORY_CODEBASE,
												XACML3.ID_SUBJECT_CATEGORY_INTERMEDIARY_SUBJECT,
												XACML3.ID_SUBJECT_CATEGORY_RECIPIENT_SUBJECT,
												XACML3.ID_SUBJECT_CATEGORY_REQUESTING_MACHINE)
												);
		
		ACTION_CATEGORIES.addAll(Arrays.asList(
												XACML3.ID_ATTRIBUTE_CATEGORY_ACTION)
												);
		
		RESOURCE_CATEGORIES.addAll(Arrays.asList(
												XACML3.ID_ATTRIBUTE_CATEGORY_RESOURCE)
												);
		
		ENVIRONMENT_CATEGORIES.addAll(Arrays.asList(
												XACML3.ID_ATTRIBUTE_CATEGORY_ENVIRONMENT)
												);
		
		CATEGORIES.addAll(SUBJECT_CATEGORIES);
		CATEGORIES.addAll(ACTION_CATEGORIES);
		CATEGORIES.addAll(RESOURCE_CATEGORIES);
		CATEGORIES.addAll(ENVIRONMENT_CATEGORIES);
		
	}
	public static final Set<Identifier> DATATYPES = new HashSet<Identifier>();
	static {
		DATATYPES.addAll(Arrays.asList(XACML3.ID_DATATYPE_STRING,
										XACML3.ID_DATATYPE_BOOLEAN,
										XACML3.ID_DATATYPE_INTEGER,
										XACML3.ID_DATATYPE_DOUBLE,
										XACML3.ID_DATATYPE_TIME,
										XACML3.ID_DATATYPE_DATE,
										XACML3.ID_DATATYPE_DATETIME,
										XACML3.ID_DATATYPE_DAYTIMEDURATION,
										XACML3.ID_DATATYPE_YEARMONTHDURATION,
										XACML3.ID_DATATYPE_ANYURI,
										XACML3.ID_DATATYPE_HEXBINARY,
										XACML3.ID_DATATYPE_BASE64BINARY,
										XACML3.ID_DATATYPE_RFC822NAME,
										XACML3.ID_DATATYPE_X500NAME,
										XACML3.ID_DATATYPE_IPADDRESS,
										XACML3.ID_DATATYPE_DNSNAME));
	}
	
	public static final Set<Identifier> POLICY_ALGORITHMS = new HashSet<Identifier>();
	static {
		POLICY_ALGORITHMS.addAll(Arrays.asList(
				XACML3.ID_POLICY_DENY_OVERRIDES,
				XACML3.ID_POLICY_DENY_UNLESS_PERMIT,
				XACML3.ID_POLICY_FIRST_APPLICABLE,
				XACML3.ID_POLICY_ON_PERMIT_APPLY_SECOND,
				XACML3.ID_POLICY_ONLY_ONE_APPLICABLE,
				XACML3.ID_POLICY_ORDERED_DENY_OVERRIDES,
				XACML3.ID_POLICY_ORDERED_PERMIT_OVERRIDES,
				XACML3.ID_POLICY_PERMIT_OVERRIDES,
				XACML3.ID_POLICY_PERMIT_UNLESS_DENY
				));
	}
	
	public static final Set<Identifier> RULE_ALGORITHMS = new HashSet<Identifier>();
	static {
		RULE_ALGORITHMS.addAll(Arrays.asList(
				XACML3.ID_RULE_DENY_OVERRIDES,
				XACML3.ID_RULE_DENY_UNLESS_PERMIT,
				XACML3.ID_RULE_FIRST_APPLICABLE,
				XACML3.ID_RULE_ONLY_ONE_APPLICABLE,
				XACML3.ID_RULE_ORDERED_DENY_OVERRIDES,
				XACML3.ID_RULE_ORDERED_PERMIT_OVERRIDES,
				XACML3.ID_RULE_PERMIT_OVERRIDES,
				XACML3.ID_RULE_PERMIT_UNLESS_DENY
				));
	}

	public static final Set<Identifier> STANDARD_ATTRIBUTES = new HashSet<Identifier>();
	static {
		STANDARD_ATTRIBUTES.addAll(Arrays.asList(
				XACML3.ID_SUBJECT_SUBJECT_ID,
				XACML3.ID_SUBJECT_SUBJECT_ID_QUALIFIER,
				XACML3.ID_SUBJECT_KEY_INFO,
				XACML3.ID_SUBJECT_AUTHENTICATION_TIME,
				XACML3.ID_SUBJECT_AUTHENTICATION_METHOD,
				XACML3.ID_SUBJECT_REQUEST_TIME,
				XACML3.ID_SUBJECT_SESSION_START_TIME,
				XACML3.ID_SUBJECT_AUTHN_LOCALITY_IP_ADDRESS,
				XACML3.ID_SUBJECT_AUTHN_LOCALITY_DNS_NAME,
				XACML3.ID_SUBJECT_ROLE,
				XACML3.ID_ACTION_ACTION_ID,
				XACML3.ID_ACTION_IMPLIED_ACTION,
				XACML3.ID_RESOURCE_RESOURCE_ID,
				XACML3.ID_RESOURCE_RESOURCE_LOCATION,
				XACML3.ID_RESOURCE_SIMPLE_FILE_NAME,
				XACML3.ID_ENVIRONMENT_CURRENT_DATE,
				XACML3.ID_ENVIRONMENT_CURRENT_TIME,
				XACML3.ID_ENVIRONMENT_CURRENT_DATETIME
				));
	}
	
	public static final Map<Identifier, Set<Identifier>> MAP_STANDARD_CATEGORIES = new HashMap<Identifier, Set<Identifier>>();
	static {
		MAP_STANDARD_CATEGORIES.put(XACML3.ID_SUBJECT_CATEGORY_ACCESS_SUBJECT, new HashSet<Identifier>(Arrays.asList(
				XACML3.ID_SUBJECT_SUBJECT_ID,
				XACML3.ID_SUBJECT_SUBJECT_ID_QUALIFIER,
				XACML3.ID_SUBJECT_KEY_INFO,
				XACML3.ID_SUBJECT_AUTHENTICATION_TIME,
				XACML3.ID_SUBJECT_AUTHENTICATION_METHOD,
				XACML3.ID_SUBJECT_REQUEST_TIME,
				XACML3.ID_SUBJECT_SESSION_START_TIME,
				XACML3.ID_SUBJECT_AUTHN_LOCALITY_IP_ADDRESS,
				XACML3.ID_SUBJECT_AUTHN_LOCALITY_DNS_NAME,
				XACML3.ID_SUBJECT_ROLE
				)));
		MAP_STANDARD_CATEGORIES.put(XACML3.ID_SUBJECT_CATEGORY_CODEBASE, new HashSet<Identifier>(Arrays.asList(
				XACML3.ID_SUBJECT_SUBJECT_ID,
				XACML3.ID_SUBJECT_SUBJECT_ID_QUALIFIER,
				XACML3.ID_SUBJECT_KEY_INFO,
				XACML3.ID_SUBJECT_AUTHENTICATION_TIME,
				XACML3.ID_SUBJECT_AUTHENTICATION_METHOD,
				XACML3.ID_SUBJECT_REQUEST_TIME,
				XACML3.ID_SUBJECT_SESSION_START_TIME,
				XACML3.ID_SUBJECT_AUTHN_LOCALITY_IP_ADDRESS,
				XACML3.ID_SUBJECT_AUTHN_LOCALITY_DNS_NAME,
				XACML3.ID_SUBJECT_ROLE
				)));
		MAP_STANDARD_CATEGORIES.put(XACML3.ID_SUBJECT_CATEGORY_INTERMEDIARY_SUBJECT, new HashSet<Identifier>(Arrays.asList(
				XACML3.ID_SUBJECT_SUBJECT_ID,
				XACML3.ID_SUBJECT_SUBJECT_ID_QUALIFIER,
				XACML3.ID_SUBJECT_KEY_INFO,
				XACML3.ID_SUBJECT_AUTHENTICATION_TIME,
				XACML3.ID_SUBJECT_AUTHENTICATION_METHOD,
				XACML3.ID_SUBJECT_REQUEST_TIME,
				XACML3.ID_SUBJECT_SESSION_START_TIME,
				XACML3.ID_SUBJECT_AUTHN_LOCALITY_IP_ADDRESS,
				XACML3.ID_SUBJECT_AUTHN_LOCALITY_DNS_NAME,
				XACML3.ID_SUBJECT_ROLE
				)));
		MAP_STANDARD_CATEGORIES.put(XACML3.ID_SUBJECT_CATEGORY_RECIPIENT_SUBJECT, new HashSet<Identifier>(Arrays.asList(
				XACML3.ID_SUBJECT_SUBJECT_ID,
				XACML3.ID_SUBJECT_SUBJECT_ID_QUALIFIER,
				XACML3.ID_SUBJECT_KEY_INFO,
				XACML3.ID_SUBJECT_AUTHENTICATION_TIME,
				XACML3.ID_SUBJECT_AUTHENTICATION_METHOD,
				XACML3.ID_SUBJECT_REQUEST_TIME,
				XACML3.ID_SUBJECT_SESSION_START_TIME,
				XACML3.ID_SUBJECT_AUTHN_LOCALITY_IP_ADDRESS,
				XACML3.ID_SUBJECT_AUTHN_LOCALITY_DNS_NAME,
				XACML3.ID_SUBJECT_ROLE
				)));
		MAP_STANDARD_CATEGORIES.put(XACML3.ID_SUBJECT_CATEGORY_REQUESTING_MACHINE, new HashSet<Identifier>(Arrays.asList(
				XACML3.ID_SUBJECT_SUBJECT_ID,
				XACML3.ID_SUBJECT_SUBJECT_ID_QUALIFIER,
				XACML3.ID_SUBJECT_KEY_INFO,
				XACML3.ID_SUBJECT_AUTHENTICATION_TIME,
				XACML3.ID_SUBJECT_AUTHENTICATION_METHOD,
				XACML3.ID_SUBJECT_REQUEST_TIME,
				XACML3.ID_SUBJECT_SESSION_START_TIME,
				XACML3.ID_SUBJECT_AUTHN_LOCALITY_IP_ADDRESS,
				XACML3.ID_SUBJECT_AUTHN_LOCALITY_DNS_NAME,
				XACML3.ID_SUBJECT_ROLE
				)));
		MAP_STANDARD_CATEGORIES.put(XACML3.ID_ATTRIBUTE_CATEGORY_ACTION, new HashSet<Identifier>(Arrays.asList(
				XACML3.ID_ACTION_ACTION_ID,
				XACML3.ID_ACTION_IMPLIED_ACTION
				)));
		MAP_STANDARD_CATEGORIES.put(XACML3.ID_ATTRIBUTE_CATEGORY_RESOURCE, new HashSet<Identifier>(Arrays.asList(
				XACML3.ID_RESOURCE_RESOURCE_ID,
				XACML3.ID_RESOURCE_RESOURCE_LOCATION,
				XACML3.ID_RESOURCE_SIMPLE_FILE_NAME
				)));
		MAP_STANDARD_CATEGORIES.put(XACML3.ID_ATTRIBUTE_CATEGORY_ENVIRONMENT, new HashSet<Identifier>(Arrays.asList(
				XACML3.ID_ENVIRONMENT_CURRENT_DATE,
				XACML3.ID_ENVIRONMENT_CURRENT_TIME,
				XACML3.ID_ENVIRONMENT_CURRENT_DATETIME
				)));
	}
	
	public static String extractShortName(String xacmlID) {
		if (xacmlID == null) {
			return null;
		}
		if (xacmlID.startsWith("http:")) {
			String [] parts = xacmlID.split("[#]");
			if (parts != null && parts.length > 0) {
				return parts[parts.length - 1];
			}
			return null;
		}
		if (xacmlID.startsWith("urn") || xacmlID.contains(":")) {
			String[] parts = xacmlID.split("[:]");
			
			if (parts != null && parts.length > 0) {
				return parts[parts.length - 1];
			}
		}	
		return null;
	}
}