/*

    File:       ClientIdentityController.m

    Contains:   Runs an HTTPS client identity choice view.

    Written by: DTS

    Copyright:  Copyright (c) 2011 Apple Inc. All Rights Reserved.

    Disclaimer: IMPORTANT: This Apple software is supplied to you by Apple Inc.

                ("Apple") in consideration of your agreement to the following

                terms, and your use, installation, modification or

                redistribution of this Apple software constitutes acceptance of

                these terms.  If you do not agree with these terms, please do

                not use, install, modify or redistribute this Apple software.

                In consideration of your agreement to abide by the following

                terms, and subject to these terms, Apple grants you a personal,

                non-exclusive license, under Apple's copyrights in this

                original Apple software (the "Apple Software"), to use,

                reproduce, modify and redistribute the Apple Software, with or

                without modifications, in source and/or binary forms; provided

                that if you redistribute the Apple Software in its entirety and

                without modifications, you must retain this notice and the

                following text and disclaimers in all such redistributions of

                the Apple Software. Neither the name, trademarks, service marks

                or logos of Apple Inc. may be used to endorse or promote

                products derived from the Apple Software without specific prior

                written permission from Apple.  Except as expressly stated in

                this notice, no other rights or licenses, express or implied,

                are granted by Apple herein, including but not limited to any

                patent rights that may be infringed by your derivative works or

                by other works in which the Apple Software may be incorporated.

                The Apple Software is provided by Apple on an "AS IS" basis. 

                APPLE MAKES NO WARRANTIES, EXPRESS OR IMPLIED, INCLUDING

                WITHOUT LIMITATION THE IMPLIED WARRANTIES OF NON-INFRINGEMENT,

                MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE, REGARDING

                THE APPLE SOFTWARE OR ITS USE AND OPERATION ALONE OR IN

                COMBINATION WITH YOUR PRODUCTS.

                IN NO EVENT SHALL APPLE BE LIABLE FOR ANY SPECIAL, INDIRECT,

                INCIDENTAL OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED

                TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE,

                DATA, OR PROFITS; OR BUSINESS INTERRUPTION) ARISING IN ANY WAY

                OUT OF THE USE, REPRODUCTION, MODIFICATION AND/OR DISTRIBUTION

                OF THE APPLE SOFTWARE, HOWEVER CAUSED AND WHETHER UNDER THEORY

                OF CONTRACT, TORT (INCLUDING NEGLIGENCE), STRICT LIABILITY OR

                OTHERWISE, EVEN IF APPLE HAS BEEN ADVISED OF THE POSSIBILITY OF

                SUCH DAMAGE.

*/

#import "ClientIdentityController.h"

@interface ClientIdentityController () <UITableViewDataSource, UITableViewDelegate>

@property (nonatomic, copy,   readonly) NSArray *       identities;

@end

@implementation ClientIdentityController

+ (NSArray *)_identities

    // Returns an array of SecIdentityRef that represents the available client-side 

    // identities in the keychain.

    //

    // We go /back/ to the keychain to get the list of identities rather than 

    // using the Credentials module.  This decouples this class from the program 

    // as a whole, making it easier for folks to reuse it.  OTOH, if the client 

    // wants to use an alternative identity source, it can implement the 

    // -identityViewIdentitiesToDisplay: delegate callback.

{

    OSStatus        err;

    NSArray *       result;

    CFArrayRef      identities;

    identities = NULL;

    err = SecItemCopyMatching(

        (CFDictionaryRef) [NSDictionary dictionaryWithObjectsAndKeys:

            (id) kSecClassIdentity,     kSecClass, 

            kSecMatchLimitAll,          kSecMatchLimit, 

            kCFBooleanTrue,             kSecReturnRef, 

            nil

        ],

        (CFTypeRef *) &identities

    );

    if (err == noErr) {

        result = [NSArray arrayWithArray:(id) identities];

    } else {

        result = [NSArray array];

    }

    if (identities != NULL) {

        CFRelease(identities);

    }

    return result;

}

- (id)initWithChallenge:(NSURLAuthenticationChallenge *)challenge

{

    assert(challenge != nil);

    self = [super initWithNibName:@"ClientIdentityController" bundle:[NSBundle bundleForClass:[self class]]];

    if (self != nil) {

        self->_challenge = [challenge retain];

    }

    return self;

}

- (NSArray *)identities

{

    if (self->_identities == nil) {

        NSArray *   identities;

        identities = nil;

        if ( (self.delegate != nil) && [self.delegate respondsToSelector:@selector(identityViewIdentitiesToDisplay:)] ) {

            identities = [self.delegate identityViewIdentitiesToDisplay:self];

        }

        if (identities == nil) {

            identities = [[self class] _identities];

        }

        assert(identities != nil);  // because, if things fail, +_identities will return an empty array 

        self->_identities = [identities copy];

    }

    return self->_identities;

}

@synthesize delegate       = _delegate;

@synthesize challenge      = _challenge;

@synthesize chosenIdentity = _chosenIdentity;

#pragma mark * Action code

- (IBAction)cancelAction:(id)sender

{

    #pragma unused(sender)

    if (self.delegate != nil) {

        [self.delegate identityView:self didChooseIdentity:NULL];

    }

}

#pragma mark * Table view callbacks

- (NSInteger)tableView:(UITableView *)tv numberOfRowsInSection:(NSInteger)section

{

    #pragma unused(tv)

    #pragma unused(section)

    NSInteger   result;

    assert(tv == self.identityTable);

    assert(section == 0);

    result = self.identities.count;

    if (result == 0) {

        result = 1;

    }

    return result;

}

- (UITableViewCell *)tableView:(UITableView *)tv cellForRowAtIndexPath:(NSIndexPath *)indexPath

{

    #pragma unused(tv)

    #pragma unused(indexPath)

    OSStatus            err;

    UITableViewCell *   cell;

    CFStringRef         certName;

    assert(tv == self.identityTable);

    assert(indexPath != nil);

    assert(indexPath.section == 0);

    certName = NULL;

    if (self.identities.count != 0) {

        SecIdentityRef      identity;

        SecCertificateRef   cert;

        assert(indexPath.row < self.identities.count);

        identity = (SecIdentityRef) [self.identities objectAtIndex:indexPath.row];

        assert( (identity != NULL) && (CFGetTypeID(identity) == SecIdentityGetTypeID()) );

        cert = NULL;

        err = SecIdentityCopyCertificate(identity, &cert);

        assert(err == noErr);

        assert(cert != NULL);

        certName = SecCertificateCopySubjectSummary(cert);

        assert(certName != NULL);

        CFRelease(cert);

    }

    cell = [self.identityTable dequeueReusableCellWithIdentifier:@"cell"];

    if (cell == nil) {

        cell = [[[UITableViewCell alloc] initWithStyle:UITableViewCellStyleDefault reuseIdentifier:@"cell"] autorelease];

        assert(cell != nil);

    }

    if (certName == NULL) {

        cell.textLabel.font = [UIFont italicSystemFontOfSize:[UIFont labelFontSize]];

        cell.selectionStyle = UITableViewCellSelectionStyleNone;

        cell.textLabel.text = @"none";

    } else {

        cell.textLabel.font = [UIFont boldSystemFontOfSize:[UIFont labelFontSize]];

        cell.selectionStyle = UITableViewCellSelectionStyleBlue;

        cell.textLabel.text = (id) certName;

    }

    if (certName != NULL) {

        CFRelease(certName);

    }

    return cell;

}

- (NSIndexPath *)tableView:(UITableView *)tv willSelectRowAtIndexPath:(NSIndexPath *)indexPath

{

    #pragma unused(tv)

    NSIndexPath *   result;

    assert(tv == self.identityTable);

    assert(indexPath != nil);

    assert(indexPath.section == 0);

    if (self.identities.count == 0) {

        result = nil;

    } else {

        assert(indexPath.row < self.identities.count);

        result = indexPath;

    }

    return result;

}

- (void)tableView:(UITableView *)tv didSelectRowAtIndexPath:(NSIndexPath *)indexPath

{

    #pragma unused(tv)

    #pragma unused(indexPath)

    SecIdentityRef      identity;

    assert(tv == self.identityTable);

    assert(indexPath != nil);

    assert(indexPath.section == 0);

    assert(indexPath.row < self.identities.count);

    identity = (SecIdentityRef) [self.identities objectAtIndex:indexPath.row];

    assert( (identity != NULL) && (CFGetTypeID(identity) == SecIdentityGetTypeID()) );

    self->_chosenIdentity = identity;

    if (self.delegate != nil) {

        [self.delegate identityView:self didChooseIdentity:identity];

    }

    [self.identityTable deselectRowAtIndexPath:indexPath animated:YES];

}

#pragma mark * View controller boilerplate

@synthesize identityTable = _identityTable;

- (void)viewDidLoad

{

    [super viewDidLoad];

    assert(self.identityTable != nil);

    assert(self.identityTable.delegate == self);

    assert(self.identityTable.dataSource == self);

}

- (void)viewWillAppear:(BOOL)animated

{

    [super viewWillAppear:animated];

    assert(self.delegate != nil);           // c'mon folks

}

- (void)viewDidAppear:(BOOL)animated

{

    [super viewDidAppear:animated];

    [self.identityTable flashScrollIndicators];

}

- (void)viewDidDisappear:(BOOL)animated

{

    [super viewDidDisappear:animated];

    if ( (self.delegate != nil) && [self.delegate respondsToSelector:@selector(identityViewDidDisappear:)] ) {

        [self.delegate identityViewDidDisappear:self];

    }

}

- (void)viewDidUnload

{

    [super viewDidUnload];

    self.identityTable = nil;

}

- (void)dealloc

{

    [self->_challenge release];

    [self->_identities release];

    [self->_identityTable release];

    [super dealloc];

}

@end