TestSeeder.php

<?php namespace Database\Seeders;
/**
 * Copyright 2015 OpenStack Foundation
 * Licensed under the Apache License, Version 2.0 (the "License");
 * you may not use this file except in compliance with the License.
 * You may obtain a copy of the License at
 * http://www.apache.org/licenses/LICENSE-2.0
 * Unless required by applicable law or agreed to in writing, software
 * distributed under the License is distributed on an "AS IS" BASIS,
 * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
 * See the License for the specific language governing permissions and
 * limitations under the License.
 **/

use App\Models\OAuth2\Factories\ApiFactory;
use App\Models\OAuth2\Factories\ApiScopeFactory;
use App\Models\OAuth2\Factories\ResourceServerFactory;
use Illuminate\Support\Facades\Config;
use models\exceptions\EntityNotFoundException;
use Models\OAuth2\Api;
use OAuth2\Models\IClient;
use OAuth2\OAuth2Protocol;
use Auth\User;
use Utils\Services\IAuthService;
use Models\OAuth2\Client;
use Models\OAuth2\ResourceServer;
use Models\OAuth2\ApiScope;
use \jwk\JSONWebKeyPublicKeyUseValues;
use \jwk\JSONWebKeyTypes;
use \jwa\JSONWebSignatureAndEncryptionAlgorithms;
use Illuminate\Database\Seeder;
use Models\OAuth2\ClientPublicKey;
use Models\OAuth2\ServerPrivateKey;
use LaravelDoctrine\ORM\Facades\EntityManager;
use App\libs\Auth\Factories\UserFactory;
use App\libs\Auth\Factories\GroupFactory;
use OAuth2\Models\IOAuth2User;
use OpenId\Models\IOpenIdUser;
use Auth\Group;
use App\Models\OAuth2\Factories\ClientFactory;
use App\Models\OpenId\Factories\OpenIdTrustedSiteFactory;
use App\libs\Auth\Models\IGroupSlugs;
use Illuminate\Support\Facades\DB;
use DateTimeZone;
use TestKeys;
/**
 * Class OAuth2ApplicationSeeder
 * This seeder is only for testing purposes
 */
final class TestSeeder extends Seeder {

static $client_private_key_1 = <<<PPK
-----BEGIN RSA PRIVATE KEY-----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-----END RSA PRIVATE KEY-----
PPK;

static $client_public_key_1 = <<<PPK
-----BEGIN PUBLIC KEY-----
MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAkjiUI6n3Fq140AipaLxN
IPCzEItQFcY8G5Xd17u7InM3H542+34PdBpwR66miQUgJK+rtfaot/v4QPj4/0Bn
Yc78BhI0Mp3tVEH95jjIrhDMZoRFfSQsAhiom5NTP1B5XiiyRjzkO1+7a29JST5t
IQUIS2U345DMWyf3GNlC1cBAfgI+PrRo3gLby/iW5EF/Mqq0ZUIOuggZ7r8kU2aU
hXILFx2w9V/y90DwruJdzZ0TesbsFit2nM3Axie7HX2wIpbl2hyvvhX/AxZ0NPud
Vh58wNogsKOMUN6guU+RzL5L6vF+QjfzBCtOE+CRmUD60E0LdQHzElBcF0tbc2cj
2YelZ0Dp+4NEBDjCNsSv//5hHacUxxXQdwwotLUV85iErEZgcGyMNnTMsw7JIh39
UBgOEmQgfpfOUlH+/5WmRO+kskvPCACz1SR8gzAKz9Nu9r3UyE+gWaZzM2+CpQ1s
zEd94MIapHxJw9vHogL7sNkjmZ34Y9eQmoCVevqDVpYEdTtLsg9H49+pEndQHI6l
GAB7QlsPLN8A17L2l3p68BFcYkSZR4GuXAyQguq3KzWYDZ9PjWAV5lhVg6K3GaV7
fvn2pKCk4P5Y5hZt08fholt3k/5Gc82CP6rfgQFi7HnpBJKRauoIdsvUPvXZYTLl
TaE5jLBAwxm+wF6Ue/nRPJMCAwEAAQ==
-----END PUBLIC KEY-----
PPK;

static $client_private_key_2 = <<<PPK
-----BEGIN RSA PRIVATE KEY-----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-----END RSA PRIVATE KEY-----
PPK;

static $client_public_key_2 = <<<PPK
-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----
PPK;

    private function createTestGroups(){
        $groups_payloads = [
            [
                'name' => IOAuth2User::OAuth2ServerAdminGroup,
                'slug' => IOAuth2User::OAuth2ServerAdminGroup,
            ],
            [
                'name' => IOAuth2User::OAuth2SystemScopeAdminGroup,
                'slug' => IOAuth2User::OAuth2SystemScopeAdminGroup,
            ],
            [
                'name' => IOpenIdUser::OpenIdServerAdminGroup,
                'slug' => IOpenIdUser::OpenIdServerAdminGroup,
            ],
            [
                'name' => IGroupSlugs::SuperAdminGroup,
                'slug' => IGroupSlugs::SuperAdminGroup,
            ],
            [
                'name' => IGroupSlugs::RawUsersGroup,
                'slug' => IGroupSlugs::RawUsersGroup,
            ],
            [
                'name' => IGroupSlugs::SponsorServicesGroup,
                'slug' => IGroupSlugs::SponsorServicesGroup,
            ],
            [
                'name' => IGroupSlugs::SponsorUsersGroup,
                'slug' => IGroupSlugs::SponsorUsersGroup,
            ],
            [
                'name' => IGroupSlugs::SponsorExternalUsersGroup,
                'slug' => IGroupSlugs::SponsorExternalUsersGroup,
            ]
        ];

        foreach ($groups_payloads as $payload){
            $group = GroupFactory::build($payload);
            EntityManager::persist($group);
        }
        EntityManager::flush();
    }

    private function createTestUsers(){
        $group_repository = EntityManager::getRepository(Group::class);

        $oauth2_admin_group        = $group_repository->findOneBy(['slug' => IOAuth2User::OAuth2ServerAdminGroup]);
        $opendid_admin_group       = $group_repository->findOneBy(['slug' => IOpenIdUser::OpenIdServerAdminGroup,]);
        $system_scopes_admin_group = $group_repository->findOneBy(['slug' => IOAuth2User::OAuth2SystemScopeAdminGroup]);
        $super_admin_group         = $group_repository->findOneBy(['slug' => IGroupSlugs::SuperAdminGroup]);
        $raw_users_group           = $group_repository->findOneBy(['slug' => IGroupSlugs::RawUsersGroup]);

        $user_payloads = [
           [
                'first_name' => 'Sebastian',
                'last_name' => 'Marcet',
                'email' => 'sebastian@tipit.net',
                'password' => '1Qaz2wsx!',
                'password_enc' => \Auth\AuthHelper::AlgSHA1_V2_4,
                'gender' => 'male',
                'address1' => 'Av. Siempre Viva 111',
                'address2' => 'Av. Siempre Viva 111',
                'city' => 'Lanus Este',
                'state' => 'Buenos Aires',
                'post_code' => '1824',
                'country' => 'AR',
                'language' => 'ESP',
                'active' => true,
                'email_verified' => true,
                'groups' => [
                    $super_admin_group
                ],
               'identifier' => 'sebastian.marcet',
            ],
            [
                'first_name' => 'Sebastian',
                'last_name' => 'Marcet IDN',
                'email' => 'hei@やる.ca',
                'password' => '1Qaz2wsx!',
                'password_enc' => \Auth\AuthHelper::AlgSHA1_V2_4,
                'gender' => 'male',
                'address1' => 'Av. Siempre Viva 111',
                'address2' => 'Av. Siempre Viva 111',
                'city' => 'Lanus Este',
                'state' => 'Buenos Aires',
                'post_code' => '1824',
                'country' => 'AR',
                'language' => 'ESP',
                'active' => true,
                'email_verified' => true,
                'groups' => [
                    $super_admin_group
                ],
                'identifier' => 'hei@やる',
            ],
            [
                'first_name' => 'Márton',
                'last_name' => 'Kiss',
                'email' => 'mkiss@tipit.net',
                'password' => '1Qaz2wsx!',
                'password_enc' => \Auth\AuthHelper::AlgSHA1_V2_4,
                'gender' => 'male',
                'address1' => 'Av. Siempre Viva 111',
                'address2' => 'Av. Siempre Viva 111',
                'city' => 'Lanus Este',
                'state' => 'Buenos Aires',
                'post_code' => '1824',
                'country' => 'AR',
                'language' => 'ESP',
                'active' => true,
                'email_verified' => true,
                'groups' => [
                    $super_admin_group
                ],
                'identifier' => '2',
            ],
            [
                'first_name' => '付',
                'last_name' => '金刚',
                'email' => 'fujg573@tipit.net',
                'password' => '1Qaz2wsx!',
                'password_enc' => \Auth\AuthHelper::AlgSHA1_V2_4,
                'gender' => 'male',
                'address1' => 'Av. Siempre Viva 111',
                'address2' => 'Av. Siempre Viva 111',
                'city' => 'Lanus Este',
                'state' => 'Buenos Aires',
                'post_code' => '1824',
                'country' => 'AR',
                'language' => 'ESP',
                'active' => true,
                'email_verified' => true,
                'groups' => [
                    $super_admin_group
                ],
                'identifier' => '3',
            ],
            [
                'first_name' => 'Bharath',
                'last_name' => 'Kumar M R',
                'email' => 'mrbharathee@tipit.net',
                'password' => '1Qaz2wsx!',
                'password_enc' => \Auth\AuthHelper::AlgSHA1_V2_4,
                'gender' => 'male',
                'address1' => 'Av. Siempre Viva 111',
                'address2' => 'Av. Siempre Viva 111',
                'city' => 'Lanus Este',
                'state' => 'Buenos Aires',
                'post_code' => '1824',
                'country' => 'AR',
                'language' => 'ESP',
                'active' => true,
                'email_verified' => true,
                'groups' => [
                    $super_admin_group
                ],
                'identifier' => '4',
            ],
            [
                'first_name' => '大塚',
                'last_name' => '元央',
                'email' => 'yuanying@tipit.net',
                'password' => '1Qaz2wsx!',
                'password_enc' => \Auth\AuthHelper::AlgSHA1_V2_4,
                'gender' => 'male',
                'address1' => 'Av. Siempre Viva 111',
                'address2' => 'Av. Siempre Viva 111',
                'city' => 'Lanus Este',
                'state' => 'Buenos Aires',
                'post_code' => '1824',
                'country' => 'AR',
                'language' => 'ESP',
                'active' => true,
                'email_verified' => true,
                'groups' => [
                    $super_admin_group
                ],
                'identifier' => '5',
            ],
            [
                'first_name' => 'Ian Y.',
                'last_name' => 'Choi',
                'email' => 'ianyrchoi@gmail.com',
                'password' => '1Qaz2wsx!',
                'password_enc' => \Auth\AuthHelper::AlgSHA1_V2_4,
                'gender' => 'male',
                'address1' => 'Av. Siempre Viva 111',
                'address2' => 'Av. Siempre Viva 111',
                'city' => 'Lanus Este',
                'state' => 'Buenos Aires',
                'post_code' => '1824',
                'country' => 'AR',
                'language' => 'ESP',
                'active' => true,
                'email_verified' => true,
                'groups' => [
                    $super_admin_group
                ],
                'identifier' => '6',
            ]
        ];

        foreach ($user_payloads as $payload){
            $user = UserFactory::build($payload);
            if (isset($payload['groups'])) {
                foreach ($payload['groups'] as $group) {
                    $user->addToGroup($group);
                }
            }
            EntityManager::persist($user);
            $raw_password = $payload['password'];
            if(!$user->checkPassword($raw_password))
                throw new \Exception("password verification failed !!!");
        }
        EntityManager::flush();
    }

    public function run()
    {

        DB::table('banned_ips')->delete();
        DB::table('user_exceptions_trail')->delete();
        DB::table('server_configuration')->delete();
        DB::table('server_extensions')->delete();

        DB::table('oauth2_client_api_scope')->delete();
        DB::table('oauth2_client_authorized_uri')->delete();
        DB::table('oauth2_access_token')->delete();
        DB::table('oauth2_refresh_token')->delete();
        DB::table('oauth2_asymmetric_keys')->delete();
        DB::table('oauth2_client')->delete();

        DB::table('openid_trusted_sites')->delete();
        DB::table('openid_associations')->delete();
        DB::table('user_actions')->delete();
        DB::table('user_groups')->delete();
        DB::table('user_password_reset_request')->delete();
        DB::table('oauth2_otp')->delete();
        DB::table('users')->delete();
        DB::table('groups')->delete();

        DB::table('oauth2_api_endpoint_api_scope')->delete();
        DB::table('oauth2_api_endpoint')->delete();
        DB::table('oauth2_api_scope')->delete();
        DB::table('oauth2_api')->delete();
        DB::table('oauth2_resource_server')->delete();

        $this->createTestGroups();

        $this->createTestUsers();

        $this->call(OpenIdExtensionsSeeder::class);
        $this->call(ServerConfigurationSeeder::class);
        $this->call(ResourceServerSeeder::class);
        $this->call(ApiSeeder::class);
        $this->call(ApiScopeSeeder::class);
        $this->call(ApiEndpointSeeder::class);

        $this->seedTestResourceServers();
        $this->seedApis();
        $this->seedResourceServerScopes();
        $this->seedApiScopes();
        $this->seedApiEndpointScopes();
        $this->seedApiScopeScopes();
        $this->seedGroupScopes();
        $this->seedTestApiEndpoints();
        // clients
        $this->seedTestUsersAndClients();
    }

    private function seedResourceServerScopes(){

        $api_repository = EntityManager::getRepository(Api::class);
        $resource_server = $api_repository->findOneBy(['name' => 'resource-server']);

        $current_realm = Config::get('app.url');

        $api_scope_payloads = [
            array(
                'name'               => sprintf('%s/resource-server/read',$current_realm),
                'short_description'  => 'Resource Server Read Access',
                'description'        => 'Resource Server Read Access',
                'api'                => $resource_server,
                'system'             => true,
                'active'             => true,
            ),
            array(
                'name'               => sprintf('%s/resource-server/read.page',$current_realm),
                'short_description'  => 'Resource Server Page Read Access',
                'description'        => 'Resource Server Page Read Access',
                'api'                => $resource_server,
                'system'             => true,
                'active'             => true,
            ),
            array(
                'name'               => sprintf('%s/resource-server/write',$current_realm),
                'short_description'  => 'Resource Server Write Access',
                'description'        => 'Resource Server Write Access',
                'api'                => $resource_server,
                'system'             => true,
                'active'             => true,
            ),
            array(
                'name'               => sprintf('%s/resource-server/delete',$current_realm),
                'short_description'  => 'Resource Server Delete Access',
                'description'        => 'Resource Server Delete Access',
                'api'                => $resource_server,
                'system'             => true,
                'active'             => true,
            ),
            array(
                'name'               => sprintf('%s/resource-server/update',$current_realm),
                'short_description'  => 'Resource Server Update Access',
                'description'        => 'Resource Server Update Access',
                'api'                => $resource_server,
                'system'             => true,
                'active'             => true,
            ),
            array(
                'name'               => sprintf('%s/resource-server/update.status',$current_realm),
                'short_description'  => 'Resource Server Update Status',
                'description'        => 'Resource Server Update Status',
                'api'                => $resource_server,
                'system'             => true,
                'active'             => true,
            ),
            array(
                'name'               => sprintf('%s/resource-server/regenerate.secret',$current_realm),
                'short_description'  => 'Resource Server Regenerate Client Secret',
                'description'        => 'Resource Server Regenerate Client Secret',
                'api'                => $resource_server,
                'system'             => true,
                'active'             => true,
            )
        ];

        foreach($api_scope_payloads as $payload) {
            EntityManager::persist(ApiScopeFactory::build($payload));
        }
        EntityManager::flush();
    }


    private function seedApiEndpointScopes(){

        $api_repository = EntityManager::getRepository(Api::class);
        $api_endpoint = $api_repository->findOneBy(['name' => 'api-endpoint']);
        $current_realm = Config::get('app.url');
        $api_scope_payloads = [
            array(
                'name'               => sprintf('%s/api-endpoint/read',$current_realm),
                'short_description'  => 'Get Api Endpoint',
                'description'        => 'Get Api Endpoint',
                'api'                => $api_endpoint,
                'system'             => true,
                'active'             => true,
            ),
            array(
                'name'               => sprintf('%s/api-endpoint/delete',$current_realm),
                'short_description'  => 'Deletes Api Endpoint',
                'description'        => 'Deletes Api Endpoint',
                'api'                => $api_endpoint,
                'system'             => true,
                'active'             => true,
            ),
            array(
                'name'               => sprintf('%s/api-endpoint/write',$current_realm),
                'short_description'  => 'Create Api Endpoint',
                'description'        => 'Create Api Endpoint',
                'api'                => $api_endpoint,
                'system'             => true,
                'active'             => true,
            ),
            array(
                'name'               => sprintf('%s/api-endpoint/update',$current_realm),
                'short_description'  => 'Update Api Endpoint',
                'description'        => 'Update Api Endpoint',
                'api'                => $api_endpoint,
                'system'             => true,
                'active'             => true,
            ),
            array(
                'name'               => sprintf('%s/api-endpoint/update.status',$current_realm),
                'short_description'  => 'Update Api Endpoint Status',
                'description'        => 'Update Api Endpoint Status',
                'api'                => $api_endpoint,
                'system'             => true,
                'active'             => true,
            ),
            array(
                'name'               => sprintf('%s/api-endpoint/read.page',$current_realm),
                'short_description'  => 'Get Api Endpoints By Page',
                'description'        => 'Get Api Endpoints By Page',
                'api'                => $api_endpoint,
                'system'             => true,
                'active'             => true,
            ),
            array(
                'name'               => sprintf('%s/api-endpoint/add.scope',$current_realm),
                'short_description'  => 'Add required scope to endpoint',
                'description'        => 'Add required scope to endpoint',
                'api'                => $api_endpoint,
                'system'             => true,
                'active'             => true,
            ),
            array(
                'name'               => sprintf('%s/api-endpoint/remove.scope',$current_realm),
                'short_description'  => 'Remove required scope to endpoint',
                'description'        => 'Remove required scope to endpoint',
                'api'                => $api_endpoint,
                'system'             => true,
                'active'             => true,
            )
        ];

        foreach($api_scope_payloads as $payload) {
            EntityManager::persist(ApiScopeFactory::build($payload));
        }
        EntityManager::flush();

    }



    private function seedApiScopeScopes(){

        $api_repository = EntityManager::getRepository(Api::class);
        $api_scope      = $api_repository->findOneBy(['name' => 'api-scope']);
        $current_realm  = Config::get('app.url');

        $api_scope_payloads = [
            array(
                'name'               => sprintf('%s/api-scope/read',$current_realm),
                'short_description'  => 'Get Api Scope',
                'description'        => 'Get Api Scope',
                'api'                => $api_scope,
                'system'             => true,
                'active'             => true,
            ),
            array(
                'name'               => sprintf('%s/api-scope/delete',$current_realm),
                'short_description'  => 'Deletes Api Scope',
                'description'        => 'Deletes Api Scope',
                'api'                => $api_scope,
                'system'             => true,
                'active'             => true,
            ),
            array(
                'name'               => sprintf('%s/api-scope/write',$current_realm),
                'short_description'  => 'Create Api Scope',
                'description'        => 'Create Api Scope',
                'api'                => $api_scope,
                'system'             => true,
                'active'             => true,
            ),
            array(
                'name'               => sprintf('%s/api-scope/update',$current_realm),
                'short_description'  => 'Update Api Scope',
                'description'        => 'Update Api Scope',
                'api'                => $api_scope,
                'system'             => true,
            ),
            array(
                'name'               => sprintf('%s/api-scope/update.status',$current_realm),
                'short_description'  => 'Update Api Scope Status',
                'description'        => 'Update Api Scope Status',
                'api'                => $api_scope,
                'system'             => true,
                'active'             => true,
            ),
            array(
                'name'               => sprintf('%s/api-scope/read.page',$current_realm),
                'short_description'  => 'Get Api Scopes By Page',
                'description'        => 'Get Api Scopes By Page',
                'api'                => $api_scope,
                'system'             => true,
                'active'             => true,
            )
        ];


        foreach($api_scope_payloads as $payload) {
            EntityManager::persist(ApiScopeFactory::build($payload));
        }
        EntityManager::flush();

    }



    private function seedTestResourceServers(){
        $current_realm          = Config::get('app.url');
        $components             = parse_url($current_realm);

        $resource_server_payloads = [
            array(
                'friendly_name'    => 'test resource server',
                'host'             => $components['host'],
                'ips'              => '127.0.0.1,10.0.0.0,2001:4800:7821:101:be76:4eff:fe06:858b,174.143.201.173',
                'active'           => true
            ),
            array(
                'friendly_name'    => 'test resource server 2',
                'host'             => $components['host'],
                'ips'              => '10.0.0.0,2001:4800:7821:101:be76:4eff:fe06:858b,174.143.201.173',
                'active'           => true,
            )
        ];
        foreach($resource_server_payloads as $payload) {
            EntityManager::persist(ResourceServerFactory::build($payload));
        }
        EntityManager::flush();
    }


    private function seedApis(){
        $resource_server_repository = EntityManager::getRepository(ResourceServer::class);

        $resource_server = $resource_server_repository->findOneBy([
            'friendly_name' => 'test resource server'
        ]);

        $api_payloads = [
            array(
                'name'               => 'resource-server',
                'active'             =>  true,
                'description'        => 'Resource Server CRUD operations',
                'resource_server'    => $resource_server,
                'logo'               => asset('/assets/img/apis/server.png')
            ),
            array(
                'name'            => 'api',
                'active'          =>  true,
                'description'     => 'Api CRUD operations',
                'resource_server' => $resource_server,
                'logo'               => asset('/assets/img/apis/server.png')
            ),
            array(
                'name'            => 'api-endpoint',
                'active'          =>  true,
                'description'     => 'Api Endpoints CRUD operations',
                'resource_server' => $resource_server,
                'logo'               => asset('/assets/img/apis/server.png')
            ),
            array(
                'name'            => 'api-scope',
                'active'          =>  true,
                'description'     => 'Api Scopes CRUD operations',
                'resource_server' => $resource_server,
                'logo'               => asset('/assets/img/apis/server.png')
            ),
            array(
                'name'            => 'groups',
                'active'          =>  true,
                'description'     => 'Groups Info API',
                'resource_server' => $resource_server,
                'logo'               => asset('/assets/img/apis/server.png')
            ),
                  ];

        foreach($api_payloads as $payload) {
            EntityManager::persist(ApiFactory::build($payload));
        }
        EntityManager::flush();
    }

    private function seedTestUsersAndClients(){

        $resource_server_repository = EntityManager::getRepository(ResourceServer::class);

        $resource_server = $resource_server_repository->findOneBy([
            'friendly_name' => 'test resource server'
        ]);

        $resource_server2 = $resource_server_repository->findOneBy([
            'friendly_name' => 'test resource server 2'
        ]);

        $user_repository = EntityManager::getRepository(User::class);

        $user = $user_repository->findOneBy(['email' => 'sebastian@tipit.net']);

        $trusted_site = OpenIdTrustedSiteFactory::build([
            'realm'  => 'https://www.test.com/',
            'policy' => IAuthService::AuthorizationResponse_AllowForever
        ]);

        $user->addTrustedSite($trusted_site);
        EntityManager::persist($user);
        //EntityManager::flush();

        $now = new \DateTime('now', new \DateTimeZone('UTC'));

        $client_payloads = [
            array(
                'app_name'             => 'oauth2_test_app',
                'app_description'      => 'oauth2_test_app',
                'app_logo'             => null,
                'client_id'            => '.-_~87D8/Vcvr6fvQbH4HyNgwTlfSyQ3x.openstack.client',
                'client_secret'        => 'ITc/6Y5N7kOtGKhgITc/6Y5N7kOtGKhgITc/6Y5N7kOtGKhgITc/6Y5N7kOtGKhg',
                'client_type'          => IClient::ClientType_Confidential,
                'application_type'     => IClient::ApplicationType_Web_App,
                'token_endpoint_auth_method' => OAuth2Protocol::TokenEndpoint_AuthMethod_ClientSecretBasic,
                'owner'                  => $user,
                'rotate_refresh_token' => true,
                'use_refresh_token'    => true,
                'redirect_uris' => 'https://www.test.com/oauth2,https://op.certification.openid.net:60393/authz_cb',
                'id_token_signed_response_alg'    => JSONWebSignatureAndEncryptionAlgorithms::HS512,
                'id_token_encrypted_response_alg' => JSONWebSignatureAndEncryptionAlgorithms::RSA_OAEP_256,
                'id_token_encrypted_response_enc' => JSONWebSignatureAndEncryptionAlgorithms::A256CBC_HS512,
                'client_secret_expires_at' => $now->add(new \DateInterval('P6M')),
            ),
            array
            (
                'app_name'             => 'oauth2_test_app2',
                'app_description'      => 'oauth2_test_app2',
                'app_logo'             => null,
                'client_id'            => 'Jiz87D8/Vcvr6fvQbH4HyNgwTlfSyQ3x2.openstack.client',
                'client_secret'        => 'ITc/6Y5N7kOtGKhgITc/6Y5N7kOtGKhgITc/6Y5N7kOtGKhgITc/6Y5N7kOtGKhg',
                'client_type'          => IClient::ClientType_Confidential,
                'application_type'     => IClient::ApplicationType_Web_App,
                'token_endpoint_auth_method' => OAuth2Protocol::TokenEndpoint_AuthMethod_ClientSecretJwt,
                'token_endpoint_auth_signing_alg' => JSONWebSignatureAndEncryptionAlgorithms::HS512,
                'subject_type' => IClient::SubjectType_Pairwise,
                'owner'              => $user,
                'rotate_refresh_token' => true,
                'use_refresh_token'    => true,
                'redirect_uris' => 'https://www.test.com/oauth2',
                'id_token_signed_response_alg'    => JSONWebSignatureAndEncryptionAlgorithms::HS512,
                'id_token_encrypted_response_alg' => JSONWebSignatureAndEncryptionAlgorithms::RSA_OAEP_256,
                'id_token_encrypted_response_enc' => JSONWebSignatureAndEncryptionAlgorithms::A256CBC_HS512,
                'client_secret_expires_at'        => $now->add(new \DateInterval('P6M')),
            ),
            array(
                'app_name'             => 'oauth2_test_app3',
                'app_description'      => 'oauth2_test_app3',
                'app_logo'             => null,
                'client_id'            => 'Jiz87D8/Vcvr6fvQbH4HyNgwTlfSyQ33.openstack.client',
                'client_secret'        => 'ITc/6Y5N7kOtGKhgITc/6Y5N7kOtGKhgITc/6Y5N7kOtGKhgITc/6Y5N585OtGKhg55',
                'client_type'          => IClient::ClientType_Confidential,
                'application_type'     => IClient::ApplicationType_Web_App,
                'token_endpoint_auth_method' => OAuth2Protocol::TokenEndpoint_AuthMethod_ClientSecretBasic,
                'owner'              => $user,
                'rotate_refresh_token' => true,
                'use_refresh_token'    => true,
                'redirect_uris' => 'https://www.test.com/oauth2',
                'id_token_signed_response_alg'    => JSONWebSignatureAndEncryptionAlgorithms::HS512,
                'userinfo_signed_response_alg'    => JSONWebSignatureAndEncryptionAlgorithms::RS512,
                'client_secret_expires_at' => $now->add(new \DateInterval('P6M')),
            ),
            array(
                'app_name'             => 'oauth2.service',
                'app_description'      => 'oauth2.service',
                'app_logo'             => null,
                'client_id'            => '11z87D8/Vcvr6fvQbH4HyNgwTlfSyQ3x.openstack.client',
                'client_secret'        => '11c/6Y5N7kOtGKhg11c/6Y5N7kOtGKhg11c/6Y5N7kOtGKhg11c/6Y5N7kOtGKhg',
                'client_type'          => IClient::ClientType_Confidential,
                'application_type'     => IClient::ApplicationType_Service,
                'token_endpoint_auth_method' => OAuth2Protocol::TokenEndpoint_AuthMethod_ClientSecretBasic,
                'owner'              => $user,
                'rotate_refresh_token' => true,
                'use_refresh_token'    => true,
                'redirect_uris' => 'https://www.test.com/oauth2',
                'client_secret_expires_at' => $now->add(new \DateInterval('P6M')),
            ),
            array(
                'app_name'             => 'oauth2_test_app_public',
                'app_description'      => 'oauth2_test_app_public',
                'app_logo'             => null,
                'client_id'            => '1234/Vcvr6fvQbH4HyNgwKlfSyQ3x.openstack.client',
                'client_secret'        => null,
                'application_type'     => IClient::ApplicationType_JS_Client,
                'token_endpoint_auth_method' => OAuth2Protocol::TokenEndpoint_AuthMethod_PrivateKeyJwt,
                'token_endpoint_auth_signing_alg' => JSONWebSignatureAndEncryptionAlgorithms::RS512,
                'owner'              => $user,
                'rotate_refresh_token' => false,
                'use_refresh_token'    => false,
                'redirect_uris' => 'https://www.test.com/oauth2',
            ),
            array(
                'app_name'             => 'oauth2_test_app_public_pkce',
                'app_description'      => 'oauth2_test_app_public_pkce',
                'app_logo'             => null,
                'client_id'            => '1234/Vcvr6fvQbH4HyNgwKlfSpkce.openstack.client',
                'client_secret'        => null,
                'application_type'     => IClient::ApplicationType_JS_Client,
                'token_endpoint_auth_method' => OAuth2Protocol::TokenEndpoint_AuthMethod_None,
                'owner'              => $user,
                'rotate_refresh_token' => true,
                'use_refresh_token'    => true,
                'redirect_uris' => 'https://www.test.com/oauth2',
                'pkce_enabled' => true,
            ),
            array(
                'app_name'             => 'oauth2_native_app',
                'app_description'      => 'oauth2_native_app',
                'app_logo'             => null,
                'client_id'            => 'Jiz87D8/Vcvr6fvQbH4HyNgwKlfSyQ3x.android.openstack.client',
                'client_secret'        => '11c/6Y5N7kOtGKhg11c/6Y5N7kOtGKhg11c/6Y5N7kOtGKhg11c/6Y5N7kOtGKhgfdfdfdf',
                'client_type'          => IClient::ClientType_Confidential,
                'application_type'     => IClient::ApplicationType_Native,
                'token_endpoint_auth_method' => OAuth2Protocol::TokenEndpoint_AuthMethod_ClientSecretBasic,
                'owner'              => $user,
                'rotate_refresh_token' => true,
                'use_refresh_token'    => true,
                'redirect_uris'        => 'androipapp://oidc_endpoint_callback',
            ),
            array(
                'app_name'             => 'oauth2_native_app2',
                'app_description'      => 'oauth2_native_app2',
                'app_logo'             => null,
                'client_id'            => 'Jiz87D8/Vcvr6fvQbH4HyNgwKlfSyQ3x.android2.openstack.client',
                'client_secret'        => '11c/6Y5N7kOtGKhg11c/6Y5N7kOtGKhg11c/6Y5N7kOtGKhg11c/6Y5N7kOtGKhgfdfdfdf',
                'client_type'          => IClient::ClientType_Confidential,
                'application_type'     => IClient::ApplicationType_Native,
                'token_endpoint_auth_method' => OAuth2Protocol::TokenEndpoint_AuthMethod_PrivateKeyJwt,
                'token_endpoint_auth_signing_alg' => JSONWebSignatureAndEncryptionAlgorithms::RS512,
                'owner'              => $user,
                'rotate_refresh_token' => true,
                'use_refresh_token'    => true,
                'redirect_uris'        => 'androipapp://oidc_endpoint_callback2',
            ),
            array(
                'app_name'             => 'oauth2_test_app_public_2',
                'app_description'      => 'oauth2_test_app_public_2',
                'app_logo'             => null,
                'client_id'            => 'Jiz87D8/Vcvr6fvQbH4HyNgwKlfSyQ2x.openstack.client',
                'client_secret'        => null,
                'client_type'          => IClient::ClientType_Public,
                'application_type'     => IClient::ApplicationType_JS_Client,
                'owner'                => $user,
                'rotate_refresh_token' => false,
                'use_refresh_token'    => false,
                'redirect_uris' => 'https://www.test.com/oauth2'
            ),
            array(
                'app_name'             => 'resource_server_client',
                'app_description'      => 'resource_server_client',
                'app_logo'             => null,
                'client_id'            => 'resource.server.1.openstack.client',
                'client_secret'        => '123456789123456789123456789123456789123456789',
                'client_type'          =>  IClient::ClientType_Confidential,
                'application_type'     => IClient::ApplicationType_Service,
                'token_endpoint_auth_method' => OAuth2Protocol::TokenEndpoint_AuthMethod_ClientSecretBasic,
                'resource_server'   => $resource_server,
                'rotate_refresh_token' => false,
                'use_refresh_token'    => false,
                'client_secret_expires_at' => $now->add(new \DateInterval('P6M')),
            ),
            array(
                'app_name'             => 'resource_server_client2',
                'app_description'      => 'resource_server_client2',
                'app_logo'             => null,
                'client_id'            => 'resource.server.2.openstack.client',
                'client_secret'        => '123456789123456789123456789123456789123456789',
                'client_type'          =>  IClient::ClientType_Confidential,
                'application_type'     => IClient::ApplicationType_Service,
                'token_endpoint_auth_method' => OAuth2Protocol::TokenEndpoint_AuthMethod_ClientSecretBasic,
                'resource_server'       => $resource_server2,
                'rotate_refresh_token' => false,
                'use_refresh_token'    => false,
                'client_secret_expires_at' => $now->add(new \DateInterval('P6M')),
            )
        ];

        foreach ($client_payloads as $payload){
            EntityManager::persist(ClientFactory::build($payload));
        }

        EntityManager::flush();

        $client_repository = EntityManager::getRepository(Client::class);

        $client_confidential   = $client_repository->findOneBy(['app_name' => 'oauth2_test_app']);
        $client_confidential2  = $client_repository->findOneBy(['app_name' => 'oauth2_test_app2']);
        $client_confidential3  = $client_repository->findOneBy(['app_name' => 'oauth2_test_app3']);
        $client_public         = $client_repository->findOneBy(['app_name' => 'oauth2_test_app_public']);
        $client_public2         = $client_repository->findOneBy(['app_name' => 'oauth2_test_app_public_pkce']);
        $client_service        = $client_repository->findOneBy(['app_name' => 'oauth2.service']);
        $client_native         = $client_repository->findOneBy(['app_name' => 'oauth2_native_app']);
        $client_native2        = $client_repository->findOneBy(['app_name' => 'oauth2_native_app2']);

        //attach all scopes
        $scopes_repository = EntityManager::getRepository(ApiScope::class);
        $scopes = $scopes_repository->findAll();

        foreach($scopes as $scope)
        {
            $client_confidential->addScope($scope);
            $client_confidential2->addScope($scope);
            $client_confidential3->addScope($scope);
            $client_public->addScope($scope);
            $client_public2->addScope($scope);
            $client_service->addScope($scope);
            $client_native->addScope($scope);
            $client_native2->addScope($scope);
        }

        $now =  new \DateTime('now', new DateTimeZone('UTC'));
        $to   = new \DateTime('now', new DateTimeZone('UTC'));
        $to->add(new \DateInterval('P31D'));

        $public_key_1 = ClientPublicKey::buildFromPEM(
            'public_key_1',
            JSONWebKeyTypes::RSA,
            JSONWebKeyPublicKeyUseValues::Encryption,
            self::$client_public_key_1,
            JSONWebSignatureAndEncryptionAlgorithms::RSA_OAEP_256,
            true,
            $now,
            $to
        );

        $client_confidential->addPublicKey($public_key_1);

        $public_key_2 = ClientPublicKey::buildFromPEM(
            'public_key_2',
            JSONWebKeyTypes::RSA,
            JSONWebKeyPublicKeyUseValues::Signature,
            self::$client_public_key_2,
            JSONWebSignatureAndEncryptionAlgorithms::RS512,
            true,
            $now,
            $to
        );

        $client_confidential->addPublicKey($public_key_2);

        // confidential client 2
        $public_key_11 = ClientPublicKey::buildFromPEM(
            'public_key_1',
            JSONWebKeyTypes::RSA,
            JSONWebKeyPublicKeyUseValues::Encryption,
            self::$client_public_key_1,
            JSONWebSignatureAndEncryptionAlgorithms::RSA_OAEP_256,
            true,
            $now,
            $to
        );

        $client_confidential2->addPublicKey($public_key_11);

        $public_key_22 = ClientPublicKey::buildFromPEM(
            'public_key_2',
            JSONWebKeyTypes::RSA,
            JSONWebKeyPublicKeyUseValues::Signature,
            self::$client_public_key_2,
            JSONWebSignatureAndEncryptionAlgorithms::RS512,
            true,
            $now,
            $to
        );

        $client_confidential2->addPublicKey($public_key_22);

        // public native client
        $public_key_33 = ClientPublicKey::buildFromPEM(
            'public_key_33',
            JSONWebKeyTypes::RSA,
            JSONWebKeyPublicKeyUseValues::Encryption,
            self::$client_public_key_1,
            JSONWebSignatureAndEncryptionAlgorithms::RSA_OAEP_256,
            true,
            $now,
            $to
        );

        $client_native2->addPublicKey($public_key_33);

        $public_key_44 = ClientPublicKey::buildFromPEM(
            'public_key_44',
            JSONWebKeyTypes::RSA,
            JSONWebKeyPublicKeyUseValues::Signature,
            self::$client_public_key_2,
            JSONWebSignatureAndEncryptionAlgorithms::RS512,
            true,
            $now,
            $to
        );

        $client_native2->addPublicKey($public_key_44);

        // server private keys

        $pkey_1 = ServerPrivateKey::build
        (
            'server_key_enc',
            $now,
            $to,
            JSONWebKeyTypes::RSA,
            JSONWebKeyPublicKeyUseValues::Encryption,
            JSONWebSignatureAndEncryptionAlgorithms::RSA1_5,
            true,
            TestKeys::$private_key_pem
        );

        EntityManager::persist($pkey_1);

        $pkey_2 = ServerPrivateKey::build
        (
            'server_key_sig',
            $now,
            $to,
            JSONWebKeyTypes::RSA,
            JSONWebKeyPublicKeyUseValues::Signature,
            JSONWebSignatureAndEncryptionAlgorithms::RS512,
            true,
            TestKeys::$private_key_pem
        );

        EntityManager::persist($pkey_2);

        EntityManager::flush();
    }

    private function seedApiScopes(){

        $api_repository = EntityManager::getRepository(Api::class);
        $api = $api_repository->findOneBy(['name' => 'api']);

        $current_realm = Config::get('app.url');

        $api_scope_payloads = [
            array(
                'name'               => sprintf('%s/api/read',$current_realm),
                'short_description'  => 'Get Api',
                'description'        => 'Get Api',
                'api'                => $api,
                'system'             => true,
                'active'             => true,
            ),
            array(
                'name'               => sprintf('%s/api/delete',$current_realm),
                'short_description'  => 'Deletes Api',
                'description'        => 'Deletes Api',
                'api'                => $api,
                'system'             => true,
                'active'             => true,
            ),
            array(
                'name'               => sprintf('%s/api/write',$current_realm),
                'short_description'  => 'Create Api',
                'description'        => 'Create Api',
                'api'                => $api,
                'system'             => true,
                'active'             => true,
            ),
            array(
                'name'               => sprintf('%s/api/update',$current_realm),
                'short_description'  => 'Update Api',
                'description'        => 'Update Api',
                'api'                => $api,
                'system'             => true,
                'active'             => true,
            ),
            array(
                'name'               => sprintf('%s/api/update.status',$current_realm),
                'short_description'  => 'Update Api Status',
                'description'        => 'Update Api Status',
                'api'                => $api,
                'system'             => true,
                'active'             => true,
            ),
            array(
                'name'               => sprintf('%s/api/read.page',$current_realm),
                'short_description'  => 'Get Api By Page',
                'description'        => 'Get Api By Page',
                'api'                => $api,
                'system'             => true,
                'active'             => true,
            )
        ];

        foreach($api_scope_payloads as $payload) {
            EntityManager::persist(ApiScopeFactory::build($payload));
        }
        EntityManager::flush();
    }

    private function seedGroupScopes(){
        $api_repository = EntityManager::getRepository(Api::class);
        $api = $api_repository->findOneBy(['name' => 'groups']);
        if(is_null($api)) return;

        $scope_payloads = [
            array(
                'name'               => \App\libs\OAuth2\IGroupScopes::ReadAll,
                'short_description'  => 'Allows access to Groups info.',
                'description'        => 'Allows access to Groups info.',
                'api'                => $api,
                'system'             => false,
                'active'             => true,
            ),
            array(
                'name'               => \App\libs\OAuth2\IGroupScopes::Write,
                'short_description'  => 'Allows access to write Groups info.',
                'description'        => 'Allows access to write Groups info.',
                'api'                => $api,
                'system'             => false,
                'active'             => true,
            ),
        ];

        foreach($scope_payloads as $payload) {
            EntityManager::persist(ApiScopeFactory::build($payload));
        }
        EntityManager::flush();
    }

        private function seedTestApiEndpoints(){

        $current_realm  = Config::get('app.url');

        SeedUtils::seedApiEndpoints('api', [
            array(
                'name'            => 'get-api',
                'route'           => '/api/v1/api/{id}',
                'http_method'     => 'GET',
                'scopes' => [
                    sprintf('%s/api/read', $current_realm)
                ]
            ),
            array(
                'name'            => 'delete-api',
                'route'           => '/api/v1/api/{id}',
                'http_method'     => 'DELETE',
                'scopes' => [
                    sprintf('%s/api/delete',$current_realm)
                ]
            ),
            array(
                'name'            => 'create-api',
                'route'           => '/api/v1/api',
                'http_method'     => 'POST',
                'scopes' => [
                    sprintf('%s/api/write',$current_realm)
                ]
            ),
            array(
                'name'            => 'update-api',
                'route'           => '/api/v1/api',
                'http_method'     => 'PUT',
                'scopes' => [
                    sprintf('%s/api/update',$current_realm)
                ]
            ),
            array(
                'name'            => 'update-api-status',
                'route'           => '/api/v1/api/status/{id}/{active}',
                'http_method'     => 'GET',
                'scopes' => [
                    sprintf('%s/api/update.status',$current_realm)
                ]
            ),
            array(
                'name'            => 'api-get-page',
                'route'           => '/api/v1/api/{page_nbr}/{page_size}',
                'http_method'     => 'GET',
                'scopes' => [
                    sprintf('%s/api/read', $current_realm),
                    sprintf('%s/api/read.page',$current_realm)
                ]
            )
        ]);

    }

}