/* -*- Mode:C++; c-file-style:"gnu"; indent-tabs-mode:nil; -*- */
/**
 * Copyright (c) 2014-2017, Regents of the University of California
 *
 * This file is part of NDN DeLorean, An Authentication System for Data Archives in
 * Named Data Networking.  See AUTHORS.md for complete list of NDN DeLorean authors
 * and contributors.
 *
 * NDN DeLorean is free software: you can redistribute it and/or modify it under
 * the terms of the GNU General Public License as published by the Free Software
 * Foundation, either version 3 of the License, or (at your option) any later
 * version.
 *
 * NDN DeLorean is distributed in the hope that it will be useful, but WITHOUT ANY
 * WARRANTY; without even the implied warranty of MERCHANTABILITY or FITNESS FOR A
 * PARTICULAR PURPOSE.  See the GNU General Public License for more details.
 *
 * You should have received a copy of the GNU General Public License along with NDN
 * DeLorean, e.g., in COPYING.md file.  If not, see <http://www.gnu.org/licenses/>.
 */

#ifndef NDN_DELOREAN_CORE_POLICY_CHECKER_HPP
#define NDN_DELOREAN_CORE_POLICY_CHECKER_HPP

#include "common.hpp"
#include "db.hpp"
#include "util/non-negative-integer.hpp"
#include "conf/config.hpp"
#include "conf/rule.hpp"
#include <ndn-cxx/security/identity-certificate.hpp>


namespace nsl {

class PolicyChecker
{
public:
  class Error : public std::runtime_error
  {
  public:
    explicit
    Error(const std::string& what)
      : std::runtime_error(what)
    {
    }
  };

public:
  PolicyChecker();

  void
  reset();

  void
  loadPolicy(const conf::ConfigSection& policy);

  bool
  check(const Timestamp& dataTimestamp, const Data& data,
        const Timestamp& keyTimestamp, const ndn::IdentityCertificate& cert);
private:

  void
  onConfigRule(const conf::ConfigSection& section);

  bool
  checkRule(const Data& data);

private:
  typedef std::vector<shared_ptr<conf::Rule>> DataRuleList;

  DataRuleList m_dataRules;
};

} // namespace nsl

#endif // NDN_DELOREAN_CORE_POLICY_CHECKER_HPP