"use strict";

const {test} = require("node:test");
const assert = require("node:assert");
const Zga = require("../lib/zganode.js");
const {makeP12} = require("../testutil/fixtures.js");

const PWD = "test-pw";

/**
 * Build a minimal one-page PDF with pdf-lib.
 * @return {Promise<Uint8Array>}
 */
async function minimalPdf(){
	const doc = await Zga.PDFLib.PDFDocument.create();
	doc.addPage([300, 300]);
	return doc.save();
}

// End-to-end safety net for the crypto-agility refactor: signing a real PDF
// must keep producing a valid detached PKCS#7 signature dictionary.
test("PdfSigner.sign produces a detached PKCS#7 signature over a real PDF", async () => {
	const pdfBytes = await minimalPdf();
	const signer = new Zga.PdfSigner({p12cert: makeP12(3072, PWD), pwd: PWD});

	const signed = await signer.sign(pdfBytes);
	const dump = Buffer.from(signed).toString("latin1");

	assert.ok(signed instanceof Uint8Array, "returns a Uint8Array");
	assert.ok(signed.length > pdfBytes.length, "signed output is larger than the input");
	assert.match(dump, /adbe\.pkcs7\.detached/, "uses the detached PKCS#7 SubFilter");
	assert.match(dump, /ByteRange/, "embeds a ByteRange");
	assert.match(dump, /\/Type\s*\/Sig/, "embeds a signature dictionary");
});

// The combined sign + encrypt path: PdfSigner.sign delegates to PdfCryptor, so
// the CCN-STIC-221 mode guard must hold here too, not only on direct use.
test("PdfSigner.sign encrypts the output when an AES-256 EncryptOption is given", async () => {
	const pdfBytes = await minimalPdf();
	const signer = new Zga.PdfSigner({p12cert: makeP12(3072, PWD), pwd: PWD});

	const signed = await signer.sign(pdfBytes, {
		mode: Zga.Crypto.Mode.AES_256,
		permissions: ["copy", "print-high"],
		userpwd: "user-pw",
	});
	const dump = Buffer.from(signed).toString("latin1");

	assert.match(dump, /\/Encrypt/, "installs an encryption dictionary");
	assert.match(dump, /adbe\.pkcs7\.detached/, "still carries the detached signature");
});

test("PdfSigner.sign refuses a legacy encryption mode", async () => {
	const pdfBytes = await minimalPdf();
	const signer = new Zga.PdfSigner({p12cert: makeP12(3072, PWD), pwd: PWD});

	await assert.rejects(
		() => signer.sign(pdfBytes, {mode: Zga.Crypto.Mode.RC4_128, userpwd: "user-pw"}),
		/not authorized by CCN-STIC-221/,
	);
});