/**
 * @kind path-problem
 * @id foo
 */

import java
import semmle.code.java.Maps
import semmle.code.java.dataflow.DataFlow
import semmle.code.java.dataflow.DataFlow2
import DataFlow::PathGraph

predicate hasForceAuthentication(Expr e) {
  exists(ForceAuthenticationKeyConfig conf | conf.hasFlow(_, DataFlow2::exprNode(e)))
}

class ForceAuthenticationKeyConfig extends DataFlow2::Configuration {
  ForceAuthenticationKeyConfig() { this = "ForceAuthenticationKeyConfig" }

  override predicate isSource(DataFlow2::Node src) {
    src.asExpr().(CompileTimeConstantExpr).getStringValue() = "forceAuthentication"
  }

  override predicate isSink(DataFlow2::Node srce) { any() }
}

class MapWitForceAuthentication extends Expr {
  MapWitForceAuthentication() {
    exists(MapPutCall put | hasForceAuthentication(put.getKey()) |
      put.getQualifier() = this and
      put.getMethod().(MapMethod).getReceiverKeyType().getName() = "String" and
      put.getMethod().(MapMethod).getReceiverValueType().getName() = "Object"
    )
  }
}

class UncheckedMapToSensitiveFunctionConfig extends DataFlow::Configuration {
  UncheckedMapToSensitiveFunctionConfig() { this = "UncheckedMapToSensitiveFunctionConfig" }

  override predicate isSource(DataFlow::Node src) { src.asExpr().getType() instanceof MapType }

  override predicate isSink(DataFlow::Node sink) {
    exists(SettingsFactoryMethodAccess ma | ma.getAnArgument() = sink.asExpr())
  }

  override predicate isBarrier(DataFlow::Node barrier) {
    exists(MapWitForceAuthentication map | map = barrier.asExpr())
  }
}

class SettingsFactoryMethodAccess extends MethodAccess {
  SettingsFactoryMethodAccess() {
    getCallee().getDeclaringType().getName() = "SettingsFactory" and
    getCallee().getDeclaringType().getPackage().getName() = "my.little.library" and
    getMethod().getName() = "newSettings"
  }
}

from UncheckedMapToSensitiveFunctionConfig conf, DataFlow::PathNode src, DataFlow::PathNode sink
where conf.hasFlowPath(src, sink)
select sink, src, sink, "Oh no"