Signal-iOS/SignalServiceKit/tests/Contacts/OWSRecipientIdentityTest.swift

//
// Copyright 2022 Signal Messenger, LLC
// SPDX-License-Identifier: AGPL-3.0-only
//

import Foundation
import GRDB
import LibSignalClient
import Testing
import XCTest

@testable import SignalServiceKit

class OWSRecipientIdentityTest: SSKBaseTest {
    private lazy var localAci = Aci.randomForTesting()
    private lazy var aliceAci = Aci.randomForTesting()
    private lazy var bobAci = Aci.randomForTesting()
    private lazy var charlieAci = Aci.randomForTesting()
    private var recipients: [ServiceId] {
        [aliceAci, bobAci, charlieAci, localAci]
    }
    private var groupThread: TSGroupThread!
    private var identityKeys = [ServiceId: Data]()

    private func identityKey(_ serviceId: ServiceId) -> Data {
        if let value = identityKeys[serviceId] {
            return value
        }
        let data = ECKeyPair.generateKeyPair().publicKey
        identityKeys[serviceId] = data
        return data
    }

    private func createFakeGroup() throws {
        // Create local account.
        SSKEnvironment.shared.databaseStorageRef.write { tx in
            (DependenciesBridge.shared.registrationStateChangeManager as! RegistrationStateChangeManagerImpl).registerForTests(
                localIdentifiers: .init(
                    aci: localAci,
                    pni: Pni.randomForTesting(),
                    e164: E164("+16505550100")!
                ),
                tx: tx
            )
        }
        // Create recipients & identities for them.
        write { tx in
            let recipientFetcher = DependenciesBridge.shared.recipientFetcher
            let recipientManager = DependenciesBridge.shared.recipientManager
            for serviceId in recipients {
                let recipient = recipientFetcher.fetchOrCreate(serviceId: serviceId, tx: tx)
                recipientManager.markAsRegisteredAndSave(recipient, shouldUpdateStorageService: false, tx: tx)
                identityManager.saveIdentityKey(identityKey(serviceId), for: serviceId, tx: tx)
            }

            // Create a group with our recipients plus us.
            self.groupThread = try! GroupManager.createGroupForTests(
                members: recipients.map { SignalServiceAddress($0) },
                name: "Test Group",
                transaction: tx
            )
        }
    }

    private var identityManager: OWSIdentityManager { DependenciesBridge.shared.identityManager }

    override func setUp() {
        super.setUp()
        try! createFakeGroup()
    }

    func testNoneVerified() throws {
        read { tx in
            XCTAssertTrue(identityManager.groupContainsUnverifiedMember(groupThread.uniqueId, tx: tx))
        }
    }

    func testAllVerified() throws {
        for recipient in recipients {
            write { tx in
                _ = identityManager.setVerificationState(
                    .verified,
                    of: identityKey(recipient),
                    for: SignalServiceAddress(recipient),
                    isUserInitiatedChange: true,
                    tx: tx
                )
            }
        }
        read { tx in
            XCTAssertFalse(identityManager.groupContainsUnverifiedMember(groupThread.uniqueId, tx: tx))
        }
    }

    func testSomeVerified() throws {
        let recipient = recipients[0]
        write { tx in
            _ = identityManager.setVerificationState(
                .verified,
                of: identityKey(recipient),
                for: SignalServiceAddress(recipient),
                isUserInitiatedChange: true,
                tx: tx
            )
        }
        read { tx in
            XCTAssertTrue(identityManager.groupContainsUnverifiedMember(groupThread.uniqueId, tx: tx))
        }
    }

    func testSomeNoLongerVerified() throws {
        // Verify everyone
        for recipient in recipients {
            write { tx in
                _ = identityManager.setVerificationState(
                    .verified,
                    of: identityKey(recipient),
                    for: SignalServiceAddress(recipient),
                    isUserInitiatedChange: true,
                    tx: tx
                )
            }
        }
        // Make Alice and Bob no-longer-verified.
        let deverifiedAcis = [aliceAci, bobAci]
        for recipient in deverifiedAcis {
            write { tx in
                _ = identityManager.setVerificationState(
                    .noLongerVerified,
                    of: identityKey(recipient),
                    for: SignalServiceAddress(recipient),
                    isUserInitiatedChange: false,
                    tx: tx
                )
            }
        }
        read { tx in
            XCTAssertTrue(identityManager.groupContainsUnverifiedMember(groupThread.uniqueId, tx: tx))
        }

        // Check that the list of no-longer-verified addresses is just Alice and Bob.
        read { transaction in
            let noLongerVerifiedIdentityKeys = OWSRecipientIdentity.noLongerVerifiedIdentityKeys(
                in: self.groupThread.uniqueId,
                tx: transaction
            )
            XCTAssertEqual(Set(noLongerVerifiedIdentityKeys.keys), Set(deverifiedAcis.map { SignalServiceAddress($0) }))
        }
    }

    func testLocalAddressIgnoredForVerifiedCheck() {
        // Verify everyone except me.
        for recipient in recipients {
            if recipient == localAci {
                continue
            }
            write { tx in
                _ = identityManager.setVerificationState(
                    .verified,
                    of: identityKey(recipient),
                    for: SignalServiceAddress(recipient),
                    isUserInitiatedChange: true,
                    tx: tx
                )
            }
        }
        read { tx in
            XCTAssertFalse(identityManager.groupContainsUnverifiedMember(groupThread.uniqueId, tx: tx))
        }
    }
}

struct RecipientIdentityTest2 {
    @Test
    func testEncoder() throws {
        let recipientIdentity = OWSRecipientIdentity(
            uniqueId: "00000000-0000-4000-8000-000000000000",
            identityKey: IdentityKeyPair.generate().publicKey.keyBytes,
            isFirstKnownKey: true,
            createdAt: Date(timeIntervalSince1970: 1234567890),
            verificationState: .verified
        )
        let db = InMemoryDB()
        db.write { tx in try! recipientIdentity.insert(tx.database) }
        let row = try #require(db.read { tx in
            return try Row.fetchOne(tx.database, sql: "SELECT * FROM model_OWSRecipientIdentity")
        })
        #expect(row["uniqueId"] == recipientIdentity.uniqueId)
        #expect(row["accountId"] == recipientIdentity.uniqueId)
        #expect(row["identityKey"] == recipientIdentity.identityKey)
        #expect(row["isFirstKnownKey"] == recipientIdentity.isFirstKnownKey)
        #expect(row["createdAt"] == recipientIdentity.createdAt.timeIntervalSince1970)
        #expect(row["verificationState"] == recipientIdentity.verificationState.rawValue)
    }

    @Test
    func testDecoder() throws {
        let uniqueId = "00000000-0000-4000-8000-00000000000A"
        let identityKey = IdentityKeyPair.generate().publicKey.keyBytes
        let isFirstKnownKey = false
        let createdAt = 1324567890
        let verificationState = OWSVerificationState.defaultAcknowledged.rawValue

        let db = InMemoryDB()
        db.write { tx in
            try! tx.database.execute(
                sql: """
                INSERT INTO model_OWSRecipientIdentity (
                    recordType, uniqueId, accountId, identityKey, isFirstKnownKey, createdAt, verificationState
                ) VALUES (38, ?, ?, ?, ?, ?, ?)
                """,
                arguments: [uniqueId, uniqueId, identityKey, isFirstKnownKey, createdAt, verificationState]
            )
        }
        let recipientIdentity = try #require(db.read { tx in
            return try OWSRecipientIdentity.fetchOne(tx.database)
        })
        #expect(recipientIdentity.uniqueId == uniqueId)
        #expect(recipientIdentity.identityKey == identityKey)
        #expect(recipientIdentity.isFirstKnownKey == isFirstKnownKey)
        #expect(recipientIdentity.createdAt.timeIntervalSince1970 == TimeInterval(createdAt))
        #expect(recipientIdentity.verificationState == OWSVerificationState(rawValue: verificationState))
    }
}