# We set up anonymous authentication as this is for demos.
auth:
  strategy: anonymous
deployment:
  pod_labels:
    sidecar.istio.io/inject: "false"
  accessible_namespaces:
  - '**'
  ingress_enabled: false
login_token:
  signing_key: CHANGEME00000000
external_services:
  # Kiali will not start up without tracing service. We don't want to require it.
  tracing:

        }
    }

    Sub2Interface getSomeProp() {
        // ignore classes in method bodies
        class IgnoreMe {}

        // ignore anonymous classes
        return new Sub2Interface() { };
    }

    // ignore anonymous classes
    final Runnable ignoreMe = new Runnable() {
        public void run() {
        }
    };

    InnerClass.AnotherInner getInnerClassProp() { return null; }

 * limitations under the License.
 */

package gradlebuild.binarycompatibility

import org.junit.Test


class AnonymousClassesFilteringTest : AbstractBinaryCompatibilityTest() {

    @Test
    fun `anonymous classes are excluded (java)`() {

        checkBinaryCompatibleJava(
            v1 = """
                public class Source {
                    public void some() {}
                }
            """,

admin:
  existingSecret: ""
ldap:
  existingSecret: true
env:
  GF_SECURITY_ADMIN_USER: "admin"
  GF_SECURITY_ADMIN_PASSWORD: "admin"
  GF_AUTH_BASIC_ENABLED: "false"
  GF_AUTH_ANONYMOUS_ENABLED: "true"
  GF_AUTH_ANONYMOUS_ORG_ROLE: Admin

# Expose on port 3000 to match the Istio docs
service:
  port: 3000

securityContext: null

# Set up out dashboards
dashboardProviders:
  dashboardproviders.yaml:

	// Colorize the message and print.
	logger.Info(color.Blue("API: ") + color.Bold(fmt.Sprintf("%s ", apiEndpointStr)))
	if color.IsTerminal() && (!globalServerCtxt.Anonymous && !globalServerCtxt.JSON && globalAPIConfig.permitRootAccess()) {
		logger.Info(color.Blue("   RootUser: ") + color.Bold("%s ", cred.AccessKey))
		logger.Info(color.Blue("   RootPass: ") + color.Bold("%s \n", cred.SecretKey))

        /**
         * This is an inner inner class.
         */
        class AnotherInner {
            InnerClass outer
        }
    }

    GroovyInterface getSomeProp() {
        // ignore anonymous classes
        return new GroovyInterface() {}
    }

    InnerClass.AnotherInner innerClassProp

    /**
     * Indicates support for NTLM authentication.
     */
    public static final int NTLMSSP_NEGOTIATE_NTLM = 0x00000200;

    /**
     * Indicates that this is an anonymous connection
     */
    public static final int NTLMSSP_NEGOTIATE_ANONYMOUS = 0x00000800;

    /**
     * Indicates whether the OEM-formatted domain name in which the
     * client workstation has membership is supplied in the Type-1 message.

 * limitations under the License.
 */

package gradlebuild.binarycompatibility.filters

import japicmp.filter.ClassFilter
import javassist.CtClass

import java.util.regex.Pattern

/**
 * Matches JVM anonymous classes.
 */
class AnonymousClassesFilter implements ClassFilter {

    private static final Pattern PATTERN = Pattern.compile('.*\\$[0-9]+$')

    @Override
    boolean matches(CtClass ctClass) {

    level = DeprecationLevel.ERROR,
  )
  fun peerCertificates(): List<Certificate> = peerCertificates

  /** Returns the remote peer's principle, or null if that peer is anonymous. */
  @get:JvmName("peerPrincipal")
  val peerPrincipal: Principal?
    get() = (peerCertificates.firstOrNull() as? X509Certificate)?.subjectX500Principal

  @JvmName("-deprecated_peerPrincipal")
  @Deprecated(

			WantException:  true,
		},
		{
			Args: []string{"-f", "testdata/configdump.yaml"},
			ExpectedOutput: `ACTION   AuthorizationPolicy         RULES
ALLOW    _anonymous_match_nothing_   1
ALLOW    httpbin.default             1
`,
		},
	}

	authzCmd := checkCmd(cli.NewFakeContext(&cli.NewFakeContextOption{}))
	for i, c := range cases {