// Java I/O
import java.io.*;

// The WSDL generated types for messages and components of messages.
import edu.isi.www.fedd_types.*;
import edu.isi.www.fedd_wsdl.*;

// Topdl classes
import edu.isi.www.topdl.*;

// The fault thrown by failed commands
import org.apache.axis.AxisFault;

// The ABAC commands throw this
import java.security.GeneralSecurityException;

// ABAC classes.  http://abac.deterlab.net
import net.deterlab.abac.*;

class Create extends FeddCommand {

    /**
     * Read a file into a byte array; used to load the topology file.
     * @param f the File to read
     * @throws IOException if there is an error reading the file.
     */
    static public byte[] readNsFile(File f) throws IOException {
	// This is tedious but straightforward
	final int bsize = 4096;
	byte[] buf = new byte[bsize];
	byte[] rv = new byte[0];
	int r = 0;
	FileInputStream fs = new FileInputStream(f);

	while ((r = fs.read(buf)) != -1 ) {
	    byte[] newRv = new byte[rv.length + r];
	    System.arraycopy(rv, 0, newRv, 0, rv.length);
	    System.arraycopy(buf, 0, newRv, rv.length, r);
	    rv = newRv;
	}
	fs.close();
	return rv;
    }

    /**
     * Reads a topology file as topdl.  If this fails, just return null as
     * later code will read the file as tcl.
     * @param f The file to read
     * @return the TopologyType encoded, or null of unparsable/unreadable
     * @throws IOException if the file cannot be read
     */
    static public TopologyType readTopdl(File f) throws IOException {
	try {
	    ParseTopdl p = new ParseTopdl(new FileInputStream(f), "experiment");
	    return p.getTopology();
	}
	catch (IOException e) { throw e; }
	catch (Exception e) { return null; }
    }

    /**
     * Create an ABAC credential indicating the the given destination acts for
     * the given Identity, and attach a certificate to it.
     * For some reason, the parse doesn't fail silently - something in the
     * bowels of the XML parser prints an error.  Sigh.
     * @param id the Identity delegating authority
     * @param dest the destination
     * @throws IOException an I/O problem, very unlikely
     * @throws GeneralSecurityException crypto or identity misconfiguration.
     */
    static public Credential delegate(Identity id, String dest) 
	    throws IOException,GeneralSecurityException {
	Credential c = new Credential(new Role(id.getKeyID()+".acting_for"),
		new Role(dest));
	c.make_cert(id);
	return c;
    }

    /**
     * Create an experiment with the given mnemonic name, from the given tcl
     * topology file using the given identity certificate, on the given fedd.
     * Reads the identity and topology into memory and constructs a New request
     * for an empty experiment and a Create request to actually start it.  The
     * start is asynchronous, so this returns when the creation begins, not
     * when it completes.  
     */
    public static void main(String args[]) throws 
	    javax.xml.rpc.ServiceException, java.net.MalformedURLException,
	    java.rmi.RemoteException {

	// Parse out the args
	String exptName = "test";
	String topoFileName = "./deter-only.tcl";
	String certFile = "./emulab.pem";
	String urlString = "https://users.isi.deterlab.net:23235";

	if (args.length > 0) exptName = args[0];
	if (args.length > 1) topoFileName = args[1];
	if (args.length > 2) certFile = args[2];
	if (args.length > 3) urlString = args[3];
	
	/* 
	 * Get the Web Service for users and read the identity and topology
	 */
	FeddPortType port = getPort(urlString);
	File topoFile = new File(topoFileName);
	Identity AbacID = null;
	byte[] nsContents = null;
	TopologyType topo = null;

	try {

	    if ( (topo = readTopdl(topoFile)) == null) 
		nsContents = readNsFile(topoFile);

	}
	catch (IOException e) {
	    System.err.println("Cannot load topology file " + e);
	    System.exit(20);
	}

	try {
	    AbacID = new Identity(new File(certFile));
	}
	catch (GeneralSecurityException e) { 
	    System.err.println("Error reading ABAC identity " + e);
	    System.err.println("Make sure your certificate (in "+ certFile 
		    + ") is self-signed");
	    System.exit(20);
	}
	catch (IOException e) {
	    System.err.println("Cannot load ABAC id from " + 
		    certFile + ": " + e);
	    System.exit(20);
	}

	/*
	 * Build and send a NewRequestType Message
	 */

	NewRequestType newReq = new NewRequestType(null, 
		new IDType(null, null, null, exptName, null), 
		null);
	NewResponseType newResp = null;
	try {
	    newResp = port._new(newReq);
	}
	catch (AxisFault f) {
	    System.err.println("Error in New: " + f);
	    System.exit(20);
	}

	// Parse out the name of the new empty experiment, and start building
	// the CreateRequestType message.
	ExperimentLabels newLabels = 
	    new ExperimentLabels(newResp.getExperimentID());

	CreateRequestType createReq = new CreateRequestType(null, 
		new ExperimentDescriptionType(nsContents, topo),
		null,
		new IDType(null, null, null, newLabels.getLocalname(), null),
		null);
	CreateResponseType createResp = null;

	// Reloading the port clears cached SSL connections.
	port = getPort("https://users.isi.deterlab.net:23235");

	// This block creates an ABAC credential telling the fedd that the
	// experiment we brought to life with the New call above can act with
	// our authority.  We could keep the certificate around for other
	// commands to use, but once we tell fedd about it, fedd remembers it.
	//
	// NB: We have to send both the identity used to sign the credential
	// and the credential itself, so that fedd can validate it.
	try {
	    Credential c = null;
	    byte[][] ca = new byte[2][];

	    ca[0] = AbacID.getCertificate().getEncoded(); // Identity
	    c = delegate(AbacID, newLabels.getFedid());
	    ca[1] = c.cert().getEncoded(); // Credential
	    createReq.setCredential(ca);
	}
	catch (GeneralSecurityException e) {
	    System.err.println("Failed to delegate authority: " + e); 
	    System.exit(20);
	}
	catch (IOException e) { 
	    System.err.println("Failed to delegate authority: ?!!" +e);
	    System.exit(20);
	}

	// The create call
	try {
	    createResp = port.create(createReq);
	}
	catch (AxisFault f) {
	    System.err.println("Error in Create: " + f);
	    System.exit(20);
	}

	// Tell the user we're underway
	ExperimentLabels createLabels = 
	    new ExperimentLabels(createResp.getExperimentID());
	System.out.println("Success: " + createLabels.getLocalname()
		+ " (" + createLabels.getFedid() + ") "
		+ createResp.getExperimentStatus().getValue());
    }
}