/*
 * Copyright (c) 2021 Huawei Device Co., Ltd.
 * Licensed under the Apache License, Version 2.0 (the "License");
 * you may not use this file except in compliance with the License.
 * You may obtain a copy of the License at
 *
 *     http://www.apache.org/licenses/LICENSE-2.0
 *
 * Unless required by applicable law or agreed to in writing, software
 * distributed under the License is distributed on an "AS IS" BASIS,
 * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
 * See the License for the specific language governing permissions and
 * limitations under the License.
 */

#include "bundle_verify_mgr.h"

#include <map>

#include "app_log_wrapper.h"
#include "bundle_constants.h"
#include "interfaces/hap_verify.h"
#include "ipc_skeleton.h"

using namespace OHOS::Security::Verify;

namespace OHOS {
namespace AppExecFwk {
namespace {
const std::map<int32_t, ErrCode> HAP_VERIFY_ERR_MAP = {
    {HapVerifyResultCode::VERIFY_SUCCESS, ERR_OK},
    {HapVerifyResultCode::FILE_PATH_INVALID, ERR_APPEXECFWK_INSTALL_FAILED_INVALID_SIGNATURE_FILE_PATH},
    {HapVerifyResultCode::OPEN_FILE_ERROR, ERR_APPEXECFWK_INSTALL_FAILED_BAD_BUNDLE_SIGNATURE_FILE},
    {HapVerifyResultCode::SIGNATURE_NOT_FOUND, ERR_APPEXECFWK_INSTALL_FAILED_NO_BUNDLE_SIGNATURE},
    {HapVerifyResultCode::VERIFY_APP_PKCS7_FAIL, ERR_APPEXECFWK_INSTALL_FAILED_VERIFY_APP_PKCS7_FAIL},
    {HapVerifyResultCode::PROFILE_PARSE_FAIL, ERR_APPEXECFWK_INSTALL_FAILED_PROFILE_PARSE_FAIL},
    {HapVerifyResultCode::APP_SOURCE_NOT_TRUSTED, ERR_APPEXECFWK_INSTALL_FAILED_APP_SOURCE_NOT_TRUESTED},
    {HapVerifyResultCode::GET_DIGEST_FAIL, ERR_APPEXECFWK_INSTALL_FAILED_BAD_DIGEST},
    {HapVerifyResultCode::VERIFY_INTEGRITY_FAIL, ERR_APPEXECFWK_INSTALL_FAILED_BUNDLE_INTEGRITY_VERIFICATION_FAILURE},
    {HapVerifyResultCode::FILE_SIZE_TOO_LARGE, ERR_APPEXECFWK_INSTALL_FAILED_FILE_SIZE_TOO_LARGE},
    {HapVerifyResultCode::GET_PUBLICKEY_FAIL, ERR_APPEXECFWK_INSTALL_FAILED_BAD_PUBLICKEY},
    {HapVerifyResultCode::GET_SIGNATURE_FAIL, ERR_APPEXECFWK_INSTALL_FAILED_BAD_BUNDLE_SIGNATURE},
    {HapVerifyResultCode::NO_PROFILE_BLOCK_FAIL, ERR_APPEXECFWK_INSTALL_FAILED_NO_PROFILE_BLOCK_FAIL},
    {HapVerifyResultCode::VERIFY_SIGNATURE_FAIL, ERR_APPEXECFWK_INSTALL_FAILED_BUNDLE_SIGNATURE_VERIFICATION_FAILURE},
    {HapVerifyResultCode::VERIFY_SOURCE_INIT_FAIL, ERR_APPEXECFWK_INSTALL_FAILED_VERIFY_SOURCE_INIT_FAIL}
};
} // namespace

ErrCode BundleVerifyMgr::HapVerify(const std::string &filePath, HapVerifyResult &hapVerifyResult)
{
    auto ret = Security::Verify::HapVerify(filePath, hapVerifyResult);
    APP_LOGI("HapVerify result %{public}d", ret);
    if (HAP_VERIFY_ERR_MAP.find(ret) == HAP_VERIFY_ERR_MAP.end()) {
        return ERR_APPEXECFWK_INSTALL_INTERNAL_ERROR;
    }
    return HAP_VERIFY_ERR_MAP.at(ret);
}

bool BundleVerifyMgr::isDebug_ = false;

void BundleVerifyMgr::EnableDebug()
{
    if (isDebug_) {
        APP_LOGD("verify mode is already debug mode");
        return;
    }
    if (!Security::Verify::EnableDebugMode()) {
        APP_LOGE("start debug mode failed");
        return;
    }
    isDebug_ = true;
}

void BundleVerifyMgr::DisableDebug()
{
    if (!isDebug_) {
        APP_LOGD("verify mode is already signature mode");
        return;
    }
    Security::Verify::DisableDebugMode();
    isDebug_ = false;
}

ErrCode BundleVerifyMgr::ParseHapProfile(const std::string &filePath, HapVerifyResult &hapVerifyResult)
{
    auto ret = Security::Verify::ParseHapProfile(filePath, hapVerifyResult);
    APP_LOGI("ParseHapProfile result %{public}d", ret);
    if (HAP_VERIFY_ERR_MAP.find(ret) == HAP_VERIFY_ERR_MAP.end()) {
        return ERR_APPEXECFWK_INSTALL_INTERNAL_ERROR;
    }
    return HAP_VERIFY_ERR_MAP.at(ret);
}
}  // namespace AppExecFwk
}  // namespace OHOS