/**
 * KQOAuth - An OAuth authentication library for Qt.
 *
 * Author: Johan Paul (johan.paul@gmail.com)
 *         http://www.johanpaul.com
 *
 *  This library is free software; you can redistribute it and/or
 *  modify it under the terms of the GNU Lesser General Public
 *  License as published by the Free Software Foundation; either
 *  version 2.1 of the License, or (at your option) any later version.
 *
 *  KQOAuth is distributed in the hope that it will be useful,
 *  but WITHOUT ANY WARRANTY; without even the implied warranty of
 *  MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
 *  GNU Lesser General Public License for more details.
 *
 *  You should have received a copy of the GNU Lesser General Public License
 *  along with KQOAuth.  If not, see <http://www.gnu.org/licenses/>.
 */
#include <QString>
#include <QCryptographicHash>
#include <QByteArray>

#include <QtDebug>
#include "kqoauthutils.h"

#include <openssl/pem.h>
#include <openssl/err.h>
#include <openssl/ssl.h>
#include <openssl/evp.h>


QString KQOAuthUtils::hmac_sha1(const QString &message, const QString &key)
{
    QByteArray keyBytes = key.toLatin1();
    int keyLength;              // Lenght of key word
    const int blockSize = 64;   // Both MD5 and SHA-1 have a block size of 64.

    keyLength = keyBytes.size();
    // If key is longer than block size, we need to hash the key
    if (keyLength > blockSize) {
        QCryptographicHash hash(QCryptographicHash::Sha1);
        hash.addData(keyBytes);
        keyBytes = hash.result();
    }

    /* http://tools.ietf.org/html/rfc2104  - (1) */
    // Create the opad and ipad for the hash function.
    QByteArray ipad;
    QByteArray opad;

    ipad.fill( 0, blockSize);
    opad.fill( 0, blockSize);

    ipad.replace(0, keyBytes.length(), keyBytes);
    opad.replace(0, keyBytes.length(), keyBytes);

    /* http://tools.ietf.org/html/rfc2104 - (2) & (5) */
    for (int i=0; i<64; i++) {
        ipad[i] = ipad[i] ^ 0x36;
        opad[i] = opad[i] ^ 0x5c;
    }

    QByteArray workArray;
    workArray.clear();

    workArray.append(ipad, 64);
    /* http://tools.ietf.org/html/rfc2104 - (3) */
    workArray.append(message.toLatin1());


    /* http://tools.ietf.org/html/rfc2104 - (4) */
    QByteArray sha1 = QCryptographicHash::hash(workArray, QCryptographicHash::Sha1);

    /* http://tools.ietf.org/html/rfc2104 - (6) */
    workArray.clear();
    workArray.append(opad, 64);
    workArray.append(sha1);

    sha1.clear();

    /* http://tools.ietf.org/html/rfc2104 - (7) */
    sha1 = QCryptographicHash::hash(workArray, QCryptographicHash::Sha1);
    return QString(sha1.toBase64());
}

QString KQOAuthUtils::rsa_sha1(const QString &message, const QString &key)
{
    SSL_load_error_strings();
    OpenSSL_add_all_algorithms();
    OpenSSL_add_all_ciphers();
    OpenSSL_add_all_digests();

    EVP_PKEY *evpKey = 0;
    evpKey = EVP_PKEY_new();

    RSA *rsa = 0;
    rsa = getRsaFromKey(key);

    EVP_PKEY_set1_RSA(evpKey, rsa);

    EVP_MD_CTX* ctx = 0;
    ctx = EVP_MD_CTX_create();
    EVP_SignInit_ex(ctx, EVP_sha1(), 0);
    QByteArray latinMessage = message.toLatin1();
    EVP_SignUpdate(ctx, latinMessage.data(), strlen(latinMessage.data()));

    const int MAX_LEN = 1024;
    unsigned char *sig = new unsigned char[MAX_LEN];
    unsigned int sigLen;

    EVP_SignFinal(ctx, sig, &sigLen, evpKey);
    sig[sigLen] = '\0';

    EVP_MD_CTX_destroy(ctx);
    RSA_free(rsa);
    EVP_PKEY_free(evpKey);
    ERR_free_strings();

    QByteArray ret((char *)sig, sigLen);

    return QString(ret.toBase64());
}

RSA* KQOAuthUtils::getRsaFromKey(const QString &key)
{
    BIO *bufio;
    QByteArray data = key.toLocal8Bit();
    char *pem_key_buffer = data.data();
    int pem_key_buffer_len = strlen(pem_key_buffer);

    bufio = BIO_new_mem_buf((void*)pem_key_buffer, pem_key_buffer_len);
    RSA *rsa = 0;
    rsa = RSA_new();
    rsa = PEM_read_bio_RSAPrivateKey(bufio, 0, 0, NULL);
    if (rsa == 0) {
        printf("Can not parse RSA data. Errors:\n");
        ERR_print_errors_fp(stderr);
        exit(1);
    }
    return rsa;
}