package org.apache.maven.shared.release.util;
   
   /*
    * Licensed to the Apache Software Foundation (ASF) under one
    * or more contributor license agreements.  See the NOTICE file
    * distributed with this work for additional information
    * regarding copyright ownership.  The ASF licenses this file
    * to you under the Apache License, Version 2.0 (the
    * "License"); you may not use this file except in compliance
   * with the License.  You may obtain a copy of the License at
   *
   *   http://www.apache.org/licenses/LICENSE-2.0
   *
   * Unless required by applicable law or agreed to in writing,
   * software distributed under the License is distributed on an
   * "AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY
   * KIND, either express or implied.  See the License for the
   * specific language governing permissions and limitations
   * under the License.
   */
  
  import javax.inject.Inject;
  import javax.inject.Named;
  import javax.inject.Singleton;
  
  import java.util.Properties;
  
  import org.sonatype.plexus.components.cipher.DefaultPlexusCipher;
  import org.sonatype.plexus.components.cipher.PlexusCipher;
  import org.sonatype.plexus.components.cipher.PlexusCipherException;
  import org.sonatype.plexus.components.sec.dispatcher.DefaultSecDispatcher;
  import org.sonatype.plexus.components.sec.dispatcher.SecDispatcherException;
  import org.sonatype.plexus.components.sec.dispatcher.SecUtil;
  import org.sonatype.plexus.components.sec.dispatcher.model.SettingsSecurity;
  
  
  /**
   * A shared utility to access {@link DefaultSecDispatcher} service.
   *
   * @since TBD
   */
  @Singleton
  @Named
  public class MavenCrypto
  {
      /**
       * Exception thrown when "something" of crypto operation did not succeed. All the code all over the place
       * was catching sec dispatcher and plexus cipher exceptions just to neglect it (maybe log in DEBUG), so
       * this is one single exception here.
       */
      public static class MavenCryptoException extends Exception
      {
          private MavenCryptoException( String message )
          {
              super( message );
          }
  
          private MavenCryptoException( String message, Throwable cause )
          {
              super( message, cause );
          }
      }
  
      private final DefaultSecDispatcher secDispatcher;
  
      private final PlexusCipher plexusCipher;
  
      @Inject
      public MavenCrypto( DefaultSecDispatcher secDispatcher, PlexusCipher plexusCipher )
      {
          this.secDispatcher = secDispatcher;
          this.plexusCipher = plexusCipher;
      }
  
      public String decrypt( String value ) throws MavenCryptoException
      {
          try
          {
              return secDispatcher.decrypt( value );
          }
          catch ( SecDispatcherException e )
          {
              throw new MavenCryptoException( "decrypt failed", e );
          }
      }
  
      public void decryptProperties( Properties properties ) throws MavenCryptoException
      {
          String[] keys = new String[] {"scm.password", "scm.passphrase"};
  
          for ( String key : keys )
          {
              String value = properties.getProperty( key );
              if ( value != null )
              {
                  properties.put( key, decryptDecorated( value ) );
              }
          }
      }
 
     public String encryptAndDecorate( String passwd ) throws MavenCryptoException
     {
         try
         {
             final String master = getMaster();
 
             DefaultPlexusCipher cipher = new DefaultPlexusCipher();
             String masterPasswd = cipher.decryptDecorated( master, DefaultSecDispatcher.SYSTEM_PROPERTY_SEC_LOCATION );
             return cipher.encryptAndDecorate( passwd, masterPasswd );
         }
         catch ( PlexusCipherException e )
         {
             throw new MavenCryptoException( "encrypt failed", e );
         }
     }
 
     public boolean isEncryptedString( String str )
     {
         return plexusCipher.isEncryptedString( str );
     }
 
     private String decryptDecorated( String value ) throws MavenCryptoException
     {
         try
         {
             final String master = getMaster();
 
             DefaultPlexusCipher cipher = new DefaultPlexusCipher();
             String masterPasswd = cipher.decryptDecorated( master, DefaultSecDispatcher.SYSTEM_PROPERTY_SEC_LOCATION );
             return cipher.decryptDecorated( value, masterPasswd );
         }
         catch ( PlexusCipherException e )
         {
             throw new MavenCryptoException( "decrypt failed", e );
         }
     }
 
     private String getMaster() throws MavenCryptoException
     {
         String configurationFile = secDispatcher.getConfigurationFile();
 
         if ( configurationFile.startsWith( "~" ) )
         {
             configurationFile = System.getProperty( "user.home" ) + configurationFile.substring( 1 );
         }
 
         String file = System.getProperty( DefaultSecDispatcher.SYSTEM_PROPERTY_SEC_LOCATION, configurationFile );
 
         String master = null;
 
         try
         {
             SettingsSecurity sec = SecUtil.read( file, true );
             if ( sec != null )
             {
                 master = sec.getMaster();
             }
         }
         catch ( SecDispatcherException e )
         {
             throw new MavenCryptoException( "config file read failed", e );
         }
 
         if ( master == null )
         {
             throw new MavenCryptoException( "Master password is not set in the setting security file: " + file );
         }
 
         return master;
     }
 }