/*
 *  OpenVPN -- An application to securely tunnel IP networks
 *             over a single TCP/UDP port, with support for SSL/TLS-based
 *             session authentication and key exchange,
 *             packet encryption, packet authentication, and
 *             packet compression.
 *
 *  Copyright (C) 2002-2026 OpenVPN Inc <sales@openvpn.net>
 *
 *  This program is free software; you can redistribute it and/or modify
 *  it under the terms of the GNU General Public License version 2
 *  as published by the Free Software Foundation.
 *
 *  This program is distributed in the hope that it will be useful,
 *  but WITHOUT ANY WARRANTY; without even the implied warranty of
 *  MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
 *  GNU General Public License for more details.
 *
 *  You should have received a copy of the GNU General Public License along
 *  with this program; if not, see <https://www.gnu.org/licenses/>.
 */

#ifndef PUSH_H
#define PUSH_H

#include "forward.h"

#define PUSH_MSG_ERROR            0
#define PUSH_MSG_REQUEST          1
#define PUSH_MSG_REPLY            2
#define PUSH_MSG_REQUEST_DEFERRED 3
#define PUSH_MSG_AUTH_FAILURE     4
#define PUSH_MSG_CONTINUATION     5
#define PUSH_MSG_ALREADY_REPLIED  6
#define PUSH_MSG_UPDATE           7

#define push_reply_cmd  "PUSH_REPLY"
#define push_update_cmd "PUSH_UPDATE"

/* Push-update options flags */
#define PUSH_OPT_TO_REMOVE (1 << 0)
#define PUSH_OPT_OPTIONAL  (1 << 1)

#ifdef ENABLE_MANAGEMENT
/* Push-update message sender modes */
typedef enum
{
    UPT_BROADCAST = 0,
    UPT_BY_CID = 1
} push_update_type;
#endif

int process_incoming_push_request(struct context *c);

/**
 * @brief Handles the receiving of a push-update message and applies updates to the specified
 * options.
 *
 * This function processes a push-update message, validating its content and applying updates
 * to the options specified in the message. It also handles split messages if the complete
 * message has not yet been received.
 *
 * @param c The context for the operation.
 * @param o The options structure to be updated with the received push options.
 * @param permission_mask The permission mask specifying which options are allowed to be pulled.
 * @param option_types_found A pointer to a variable that will be filled with the types of options
 *                           found in the message.
 * @param buf A buffer containing the received message.
 * @param msg_sender A boolean indicating if the message is being processed on the client (false)
 *                   or on the server (true).
 *
 * @return
 * - `PUSH_MSG_UPDATE`: The message was processed successfully, and the updates were applied.
 * - `PUSH_MSG_CONTINUATION`: The message is a fragment of a larger message, and the program is
 *                            waiting for the final part.
 * - `PUSH_MSG_ERROR`: An error occurred during message processing, or the message is invalid.
 */

int process_push_update(struct context *c, struct options *o, uint64_t permission_mask,
                        uint64_t *option_types_found, struct buffer *buf, bool msg_sender);

int process_incoming_push_msg(struct context *c, const struct buffer *buffer,
                              bool honor_received_options, uint64_t permission_mask,
                              uint64_t *option_types_found);

bool send_push_request(struct context *c);

void receive_auth_failed(struct context *c, const struct buffer *buffer);

void server_pushed_signal(struct context *c, const struct buffer *buffer, const bool restart,
                          const int adv);

void receive_exit_message(struct context *c);

void server_pushed_info(const struct buffer *buffer, const int adv);

void receive_cr_response(struct context *c, const struct buffer *buffer);

void incoming_push_message(struct context *c, const struct buffer *buffer);

void clone_push_list(struct options *o);

void push_option(struct options *o, const char *opt, msglvl_t msglevel);

void push_options(struct options *o, char **p, msglvl_t msglevel, struct gc_arena *gc);

void push_reset(struct options *o);

void push_remove_option(struct options *o, const char *p);

void remove_iroutes_from_push_route_list(struct options *o);

void send_auth_failed(struct context *c, const char *client_reason);

/**
 * Sends the auth pending control messages to a client. See
 * doc/management-notes.txt under client-pending-auth for
 * more details on message format
 */
bool send_auth_pending_messages(struct tls_multi *tls_multi, struct tls_session *session,
                                const char *extra, unsigned int timeout);

void send_restart(struct context *c, const char *kill_msg);

/**
 * Sends a push reply message only containin the auth-token to update
 * the auth-token on the client. Always pushes to the active session
 *
 * @param multi    - The \c tls_multi structure belonging to the instance
 *                   to push to
 */
void send_push_reply_auth_token(struct tls_multi *multi);

/**
 * Parses an AUTH_PENDING message and if in pull mode extends the timeout
 *
 * @param c             The context struct
 * @param buffer        Buffer containing the control message with AUTH_PENDING
 */
void receive_auth_pending(struct context *c, const struct buffer *buffer);

#ifdef ENABLE_MANAGEMENT
bool management_callback_send_push_update_broadcast(void *arg, const char *options);

bool management_callback_send_push_update_by_cid(void *arg, unsigned long cid, const char *options);

#endif /* ifdef ENABLE_MANAGEMENT*/

#endif /* ifndef PUSH_H */
