package org.jboss.resteasy.security.smime;

import java.lang.annotation.Annotation;
import java.lang.reflect.Type;
import java.security.PublicKey;
import java.security.cert.X509Certificate;

import jakarta.mail.MessagingException;
import jakarta.mail.internet.MimeBodyPart;
import jakarta.mail.internet.MimeMultipart;
import jakarta.ws.rs.core.GenericType;
import jakarta.ws.rs.ext.Providers;

import org.bouncycastle.cms.SignerInformation;
import org.bouncycastle.cms.SignerInformationStore;
import org.bouncycastle.cms.jcajce.JcaSimpleSignerInfoVerifierBuilder;
import org.bouncycastle.mail.smime.SMIMESigned;
import org.jboss.resteasy.security.doseta.i18n.Messages;

/**
 * @author <a href="mailto:bill@burkecentral.com">Bill Burke</a>
 * @version $Revision: 1 $
 */
public class MultipartSignedInputImpl implements SignedInput {
    private PublicKey publicKey;
    private X509Certificate certificate;
    private Class type;
    private Type genericType;
    private MimeMultipart body;
    private Annotation[] annotations;
    private Providers providers;
    private Object entity;

    public PublicKey getPublicKey() {
        return publicKey;
    }

    public void setPublicKey(PublicKey publicKey) {
        this.publicKey = publicKey;
    }

    public X509Certificate getCertificate() {
        return certificate;
    }

    public void setCertificate(X509Certificate certificate) {
        this.certificate = certificate;
    }

    public Class getType() {
        return type;
    }

    public void setType(Class type) {
        this.type = type;
    }

    public void setType(GenericType type) {
        this.type = type.getRawType();
        this.genericType = type.getType();
    }

    public Type getGenericType() {
        return genericType;
    }

    public void setGenericType(Type genericType) {
        this.genericType = genericType;
    }

    public MimeMultipart getBody() {
        return body;
    }

    public void setBody(MimeMultipart body) {
        this.body = body;
    }

    public Annotation[] getAnnotations() {
        return annotations;
    }

    public void setAnnotations(Annotation[] annotations) {
        this.annotations = annotations;
    }

    public Providers getProviders() {
        return providers;
    }

    public void setProviders(Providers providers) {
        this.providers = providers;
    }

    public Object getEntity() {
        return getEntity(type, genericType, annotations);
    }

    public Object getEntity(Class type) {
        return getEntity(type, null, annotations);
    }

    public Object getEntity(GenericType gt) {
        return getEntity(gt.getRawType(), gt.getType(), annotations);
    }

    public Object getEntity(GenericType gt, Annotation[] ann) {
        return getEntity(gt.getRawType(), gt.getType(), ann);
    }

    public Object getEntity(Class t, Type gt, Annotation[] ann) {
        if (entity != null)
            return entity;

        MimeBodyPart mbp = null;
        try {
            mbp = (MimeBodyPart) body.getBodyPart(0);
        } catch (MessagingException e) {
            throw new RuntimeException(e);
        }
        entity = EnvelopedInputImpl.extractEntity(t, gt, ann, mbp, providers);
        return entity;
    }

    public boolean verify() throws Exception {
        if (certificate != null)
            return verify(certificate);
        else if (publicKey != null)
            return verify(publicKey);
        else
            throw new NullPointerException(Messages.MESSAGES.certificateNorPublicKeySet());
    }

    public boolean verify(X509Certificate certificate) throws Exception {
        return verify(certificate.getPublicKey());
    }

    public boolean verify(PublicKey publicKey) throws Exception {
        SMIMESigned signed = new SMIMESigned(body);

        SignerInformationStore signers = signed.getSignerInfos();
        SignerInformation signer = (SignerInformation) signers.getSigners().iterator().next();
        return (signer.verify(new JcaSimpleSignerInfoVerifierBuilder().setProvider("BC").build(publicKey)));

    }

}
