package app

import (
	"context"
	"net/http"
	"testing"

	"github.com/cortezaproject/corteza/server/auth/external"
	authSettings "github.com/cortezaproject/corteza/server/auth/settings"
	"github.com/cortezaproject/corteza/server/system/types"
	"github.com/go-chi/chi/v5"
	"github.com/stretchr/testify/require"
)

type (
	authSettingsUpdaterMockedAuthService struct {
		settings *authSettings.Settings
	}
)

func (*authSettingsUpdaterMockedAuthService) MountHttpRoutes(string, chi.Router) {}
func (*authSettingsUpdaterMockedAuthService) WellKnownOpenIDConfiguration() http.HandlerFunc {
	return func(w http.ResponseWriter, r *http.Request) {}
}
func (*authSettingsUpdaterMockedAuthService) Watch(context.Context) {}
func (m *authSettingsUpdaterMockedAuthService) UpdateSettings(settings *authSettings.Settings) {
	m.settings = settings
}

func Test_updateAuthSettings(t *testing.T) {
	cc := []struct {
		name string
		in   types.AppSettings
		out  authSettings.Settings
	}{
		{
			"enabled internal auth",
			func() (s types.AppSettings) {
				s.Auth.Internal.Enabled = true
				return
			}(),
			func() (s authSettings.Settings) {
				s.LocalEnabled = true
				return
			}(),
		},
		{
			"add external providers",
			func() (s types.AppSettings) {
				s.Auth.External.Providers = []*types.ExternalAuthProvider{
					{ // skip
						Enabled: false,
						Handle:  "disabled",
						Key:     "key",
						Secret:  "sec",
					},
					{ // skip
						Enabled: true,
						Handle:  "malformed",
						Key:     "",
						Secret:  "",
					},
					{ // skip
						Enabled: true,
						Handle:  external.OIDC_PROVIDER_PREFIX + "without-issuer",
						Key:     "key",
						Secret:  "sec",
					},
					{ // add
						Enabled:   true,
						Handle:    external.OIDC_PROVIDER_PREFIX + "with-issuer",
						IssuerUrl: "issuer",
						Key:       "key",
						Secret:    "sec",
					},
					{ // add (w/o issuer)
						Enabled: true,
						Handle:  "google",
						Key:     "key",
						Secret:  "sec",
					},
					{ // add
						Enabled: true,
						Handle:  "github",
						Key:     "key",
						Secret:  "sec",
					},
					{ // skip
						Enabled: false,
						Handle:  "linkedin",
						Key:     "key",
						Secret:  "sec",
					},
					{ // add (used only for API integration, not for identity)
						Enabled: true,
						Handle:  "nylas",
						Key:     "key",
						Secret:  "sec",
						Usage:   []string{types.ExternalProviderUsageAPI},
					},
				}
				return
			}(),
			func() (s authSettings.Settings) {
				s.Providers = []authSettings.Provider{
					{
						Handle:    external.OIDC_PROVIDER_PREFIX + "with-issuer",
						IssuerUrl: "issuer",
						Key:       "key",
						Secret:    "sec",
						Usage:     []string{types.ExternalProviderUsageIdentity},
					},
					{
						Handle: "google",
						Key:    "key",
						Secret: "sec",
						Usage:  []string{types.ExternalProviderUsageIdentity},
					},
					{
						Handle: "github",
						Key:    "key",
						Secret: "sec",
						Usage:  []string{types.ExternalProviderUsageIdentity},
					},
					{
						Handle: "nylas",
						Key:    "key",
						Secret: "sec",
						Usage:  []string{types.ExternalProviderUsageAPI},
					},
				}
				return
			}(),
		},
	}

	for _, c := range cc {
		t.Run(c.name, func(t *testing.T) {
			var (
				req = require.New(t)
				m   = &authSettingsUpdaterMockedAuthService{}
			)

			updateAuthSettings(m, &c.in)
			req.Equal(*m.settings, c.out)
		})
	}
}