class PushPackage

# File lib/push_package.rb, line 18
def initialize(website_params, iconset_path, certificate, password = nil, intermediate_cert = nil)
  raise InvalidParameterError unless valid_website_params?(website_params)
  raise InvalidIconsetError unless valid_iconset?(iconset_path)
  raise ArgumentError unless certificate

  @website_params = website_params
  @iconset_path = iconset_path.to_s
  @extra_certs = nil

  if certificate.respond_to?(:read)
    cert_data = certificate.read
    certificate.rewind if certificate.respond_to?(:rewind)
  else
    cert_data = File.binread(certificate)
  end

  if defined?(JRUBY_VERSION)
    #ensure binary data for jruby.
    cert_data.force_encoding(Encoding::ASCII_8BIT)
  end
  if pem?(cert_data)
    @certificate = OpenSSL::X509::Certificate.new(cert_data)
    @pkey = OpenSSL::PKey::RSA.new(cert_data)
  else
    p12 = OpenSSL::PKCS12.new(cert_data, password)
    @certificate = p12.certificate
    @pkey = p12.key
  end

  if intermediate_cert
    intermediate_cert_data = File.binread(intermediate_cert)
    @extra_certs = [OpenSSL::X509::Certificate.new(intermediate_cert_data)]
  end
end

# File lib/push_package.rb, line 53
def save(output_path = nil)

  @working_dir = Dir.mktmpdir('pushPackage')

  if output_path
    output_path = File.expand_path(output_path)
  else
    output_path = Dir.tmpdir + '/pushPackage.zip'
  end

  ## overwrite existing push packages
  File.delete(output_path) if File.exist?(output_path)

  zip = Zip::File.open(output_path, Zip::File::CREATE)

  File.open(@working_dir + '/website.json', 'w+') do |json|
    json.write(JSON.dump(@website_params))
  end

  Dir.mkdir(File.join(@working_dir,'icon.iconset'))
  Dir.glob(@iconset_path + '/*.png').each do |icon|
    FileUtils.cp(icon, @working_dir + '/icon.iconset/')
  end

  File.open(@working_dir + '/manifest.json', 'w+') do |manifest|
    manifest.write(manifest_data)
  end

  File.open(@working_dir + '/signature', 'wb+') do |file|
    file.write(signature.to_der)
  end

  Dir.glob(@working_dir + '/**/*').each do |file|
    next if File.directory?(file)
    zip.add(file.gsub("#{@working_dir}/", ''), file)
  end

  zip.close

  #clean up the temporary directory
  FileUtils.remove_entry_secure(@working_dir)

  #re-open the file for reading
  File.open(output_path, 'r')
end

# File lib/push_package.rb, line 114
def manifest_data
  manifest_keys = REQUIRED_ICONSET_FILES.map{|f| 'icon.iconset/' + f }
  manifest_keys << 'website.json'
  manifest_values = manifest_keys.map {|file| Digest::SHA1.file(File.join(@working_dir, file)).hexdigest }
  Hash[manifest_keys.zip(manifest_values)].to_json
end

# File lib/push_package.rb, line 106
def pem?(cert_data)
  begin
    cert_data =~ /BEGIN CERTIFICATE/ && cert_data =~ /PRIVATE KEY/
  rescue
    false
  end
end

# File lib/push_package.rb, line 101
def signature
  #use the certificate to create a pkcs7 detached signature
  OpenSSL::PKCS7::sign(@certificate, @pkey, manifest_data, @extra_certs, OpenSSL::PKCS7::BINARY | OpenSSL::PKCS7::DETACHED)
end

# File lib/push_package.rb, line 127
def valid_iconset?(iconset_path)
  REQUIRED_ICONSET_FILES.all? do |file|
    File.exist?(File.join(iconset_path, file))
  end
end

# File lib/push_package.rb, line 121
def valid_website_params?(params)
  REQUIRED_WEBSITE_PARAMS.all? do |required_param|
    params.keys.map(&:to_s).include?(required_param)
  end
end