lib

const (
	// BucketCannedACLPrivate is a BucketCannedACL enum value
	BucketCannedACLPrivate = "private"

	// BucketCannedACLPublicRead is a BucketCannedACL enum value
	BucketCannedACLPublicRead = "public-read"

	// BucketCannedACLPublicReadWrite is a BucketCannedACL enum value
	BucketCannedACLPublicReadWrite = "public-read-write"

	// BucketCannedACLAuthenticatedRead is a BucketCannedACL enum value
	BucketCannedACLAuthenticatedRead = "authenticated-read"

	// ObjectCannedACLPrivate is a ObjectCannedACL enum value
	ObjectCannedACLPrivate = "private"

	// ObjectCannedACLPublicRead is a ObjectCannedACL enum value
	ObjectCannedACLPublicRead = "public-read"

	// ObjectCannedACLPublicReadWrite is a ObjectCannedACL enum value
	ObjectCannedACLPublicReadWrite = "public-read-write"

	// ObjectCannedACLAuthenticatedRead is a ObjectCannedACL enum value
	ObjectCannedACLAuthenticatedRead = "authenticated-read"

	// ObjectCannedACLAwsExecRead is a ObjectCannedACL enum value
	ObjectCannedACLAwsExecRead = "aws-exec-read"

	// ObjectCannedACLBucketOwnerRead is a ObjectCannedACL enum value
	ObjectCannedACLBucketOwnerRead = "bucket-owner-read"

	// ObjectCannedACLBucketOwnerFullControl is a ObjectCannedACL enum value
	ObjectCannedACLBucketOwnerFullControl = "bucket-owner-full-control"
)

const (
	Endpoint         = "s3.test.com:8080"
	EndpointInternal = "s3-internal.test.com:8080"
	AccessKey        = "hehehehe"
	SecretKey        = "hehehehe"
	Region           = "RegionHeHe"

	TEST_BUCKET         = "mybucket"
	TEST_KEY            = "testput"
	TEST_KEY_SPECIAL    = "testputspecial:!@$%^&*()_+=-;?><| "
	TEST_VALUE          = "valueput"
	TEST_ILLEGALREFERER = "http://www.thief.com/"
	TEST_LEGALREFERER   = "http://www.genltemen.com/"
	TEST_COMMONREFERER  = "http://www.common.com/"
)

const (
	GetObjectPolicy_1 = `{
			"Version": "2012-10-17",
			"Statement": [{
			"Effect": "Allow",
			"Principal": {"AWS":["*"]},
			"Action": ["s3:GetObject"],
			"Resource": [
				"arn:aws:s3:::` + TEST_BUCKET + `/*"
			]
			}]
		}`

	GetObjectPolicy_2 = `{
			"Version": "2012-10-17",
			"Statement": [{
			"Effect": "Allow",
			"Principal": {"AWS":["*"]},
			"Action": ["s3:GetObject"],
			"Resource": [
				"arn:aws:s3:::` + TEST_BUCKET + `/test/*"
			]
			}]
		}`

	SetBucketPolicyAllowStringLike = `{
			"Version": "2012-10-17",
			"Id": "http referer policy example",
			"Statement": [
				{
					"Sid": "Allow get requests referred by url test1",
					"Effect":"Allow",
					"Principal": {
						"AWS":"*"
					},
					"Action":["s3:GetObject"],
					"Resource":[
							"arn:aws:s3:::` + TEST_BUCKET + `",
							"arn:aws:s3:::` + TEST_BUCKET + `/*"
					],
					"Condition":
							{"StringLike":{"aws:Referer":["http://www.genltemen.com/*","http://genltemen.com/*"]}}
				}
			]
		}`

	SetBucketPolicyAllowStringNotLike = `{
			"Version": "2012-10-17",
			"Id": "http referer policy example",
			"Statement": [
				{
					"Sid": "Allow get requests referred by url test2",
					"Effect":"Allow",
					"Principal": {
						"AWS":"*"
					},
					"Action":["s3:GetObject"],
					"Resource":[
							"arn:aws:s3:::` + TEST_BUCKET + `",
							"arn:aws:s3:::` + TEST_BUCKET + `/*"
					],
					"Condition":
							{"StringNotLike":{"aws:Referer":["http://www.thief.com/*","http://thief.com/*"]}}
				}
			]
		}`

	SetBucketPolicyDenyStringLike = `{
			"Version": "2012-10-17",
			"Id": "http referer policy example",
			"Statement": [
				{
					"Sid": "Deny get requests referred by url test3",
					"Effect":"Deny",
					"Principal": {
						"AWS":"*"
					},
					"Action":["s3:GetObject"],
					"Resource":[
							"arn:aws:s3:::` + TEST_BUCKET + `",
							"arn:aws:s3:::` + TEST_BUCKET + `/*"
					],
					"Condition":
							{"StringLike":{"aws:Referer":["http://www.thief.com/*","http://thief.com/*"]}}
				}
			]
		}`

	SetBucketPolicyDenyStringNotLike = `{
			"Version": "2012-10-17",
			"Id": "http referer policy example",
			"Statement": [
				{
					"Sid": "Deny get requests referred by url test3",
					"Effect":"Deny",
					"Principal": {
						"AWS":"*"
					},
					"Action":["s3:GetObject"],
					"Resource":[
							"arn:aws:s3:::` + TEST_BUCKET + `",
							"arn:aws:s3:::` + TEST_BUCKET + `/*"
					],
					"Condition":
							{"StringNotLike":{"aws:Referer":["http://www.genltemen.com/*","http://genltemen.com/*"]}}
				}
			]
		}`

	SetBucketPolicyAllowIPAddress = `{
  			"Id":"PolicyId2",
  			"Version":"2012-10-17",
  			"Statement":[
    			{
      				"Sid":"AllowIPmix",
      				"Effect":"Allow",
      				"Principal":"*",
      				"Action":"s3:GetObject",
      				"Resource":"arn:aws:s3:::` + TEST_BUCKET + `/*",
     				"Condition": {
        				"IpAddress": {
          					"aws:SourceIp": "10.0.12.0/24"
						}
     				}
   				}
  			]
	}`

	SetBucketPolicyAllowNotIPAddress = `{
  			"Id":"PolicyId2",
  			"Version":"2012-10-17",
  			"Statement":[
    			{
      				"Sid":"AllowIPmix",
      				"Effect":"Allow",
      				"Principal":"*",
      				"Action":"s3:GetObject",
      				"Resource":"arn:aws:s3:::` + TEST_BUCKET + `/*",
     				"Condition": {
        				"NotIpAddress": {
          					"aws:SourceIp": "10.0.11.0/24"
						}
     				}
   				}
  			]
	}`

	SetBucketPolicyDenyIPAddress = `{
  			"Id":"PolicyId2",
  			"Version":"2012-10-17",
  			"Statement":[
    			{
      				"Sid":"DenyIPmix",
      				"Effect":"Deny",
      				"Principal":"*",
      				"Action":"s3:GetObject",
      				"Resource":"arn:aws:s3:::` + TEST_BUCKET + `/*",
     				"Condition": {
        				"IpAddress": {
          					"aws:SourceIp": "10.0.11.0/24"
						}
     				}
   				}
  			]
	}`

	SetBucketPolicyDenyNotIPAddress = `{
  			"Id":"PolicyId2",
  			"Version":"2012-10-17",
  			"Statement":[
    			{
      				"Sid":"DenyIPmix",
      				"Effect":"Deny",
      				"Principal":"*",
      				"Action":"s3:GetObject",
      				"Resource":"arn:aws:s3:::` + TEST_BUCKET + `/*",
     				"Condition": {
        				"NotIpAddress": {
          					"aws:SourceIp": "10.0.12.0/24"
						}
     				}
   				}
  			]
	}`
)