/**
    * Waffle (https://github.com/dblock/waffle)
    *
    * Copyright (c) 2010 - 2015 Application Security, Inc.
    *
    * All rights reserved. This program and the accompanying materials
    * are made available under the terms of the Eclipse Public License v1.0
    * which accompanies this distribution, and is available at
    * http://www.eclipse.org/legal/epl-v10.html
   *
   * Contributors:
   *     Application Security, Inc.
   */
  package waffle.windows.auth.impl;
  
  import waffle.windows.auth.IWindowsCredentialsHandle;
  
  import com.sun.jna.platform.win32.Secur32;
  import com.sun.jna.platform.win32.Sspi;
  import com.sun.jna.platform.win32.Sspi.CredHandle;
  import com.sun.jna.platform.win32.Sspi.TimeStamp;
  import com.sun.jna.platform.win32.Win32Exception;
  import com.sun.jna.platform.win32.WinError;
  
  /**
   * Pre-existing credentials of a security principal. This is a handle to a previously authenticated logon data used by a
   * security principal to establish its own identity, such as a password, or a Kerberos protocol ticket.
   * 
   * @author dblock[at]dblock[dot]org
   */
  public class WindowsCredentialsHandleImpl implements IWindowsCredentialsHandle {
  
      /** The principal name. */
      private final String     principalName;
      
      /** The credentials type. */
      private final int        credentialsType;
      
      /** The security package. */
      private final String     securityPackage;
      
      /** The handle. */
      private CredHandle handle;
      
      /** The client lifetime. */
      private TimeStamp  clientLifetime;
  
      /**
       * A new Windows credentials handle.
       * 
       * @param newPrincipalName
       *            Principal name.
       * @param newCredentialsType
       *            Credentials type.
       * @param newSecurityPackage
       *            Security package.
       */
      public WindowsCredentialsHandleImpl(final String newPrincipalName, final int newCredentialsType,
              final String newSecurityPackage) {
          this.principalName = newPrincipalName;
          this.credentialsType = newCredentialsType;
          this.securityPackage = newSecurityPackage;
      }
  
      /**
       * Returns the current credentials handle.
       * 
       * @param securityPackage
       *            Security package, eg. "Negotiate".
       * @return A windows credentials handle
       */
      public static IWindowsCredentialsHandle getCurrent(final String securityPackage) {
          final IWindowsCredentialsHandle handle = new WindowsCredentialsHandleImpl(null, Sspi.SECPKG_CRED_OUTBOUND,
                  securityPackage);
          handle.initialize();
          return handle;
      }
  
      /**
       * Initialize a new credentials handle.
       */
      @Override
      public void initialize() {
          this.handle = new CredHandle();
          this.clientLifetime = new TimeStamp();
          final int rc = Secur32.INSTANCE.AcquireCredentialsHandle(this.principalName, this.securityPackage,
                  this.credentialsType, null, null, null, null, this.handle, this.clientLifetime);
          if (WinError.SEC_E_OK != rc) {
              throw new Win32Exception(rc);
          }
      }
  
      /**
       * Dispose of the credentials handle.
       */
      @Override
      public void dispose() {
          if (this.handle != null && !this.handle.isNull()) {
              final int rc = Secur32.INSTANCE.FreeCredentialsHandle(this.handle);
             if (WinError.SEC_E_OK != rc) {
                 throw new Win32Exception(rc);
             }
         }
     }
 
     /**
      * Get CredHandle.
      *
      * @return the handle
      */
     @Override
     public CredHandle getHandle() {
         return this.handle;
     }
 }