// Copyright © 2023 Ory Corp
// SPDX-License-Identifier: Apache-2.0

package hook_test

import (
	"context"
	"encoding/json"
	"net/http/httptest"
	"testing"

	"github.com/gofrs/uuid"
	"github.com/stretchr/testify/assert"
	"github.com/stretchr/testify/require"

	"github.com/ory/kratos/driver/config"
	"github.com/ory/kratos/pkg"
	"github.com/ory/kratos/selfservice/flow"
	"github.com/ory/kratos/selfservice/flow/login"
	"github.com/ory/kratos/selfservice/flow/registration"
	"github.com/ory/kratos/selfservice/flow/verification"
	"github.com/ory/kratos/selfservice/hook"
)

func TestExecutePostRegistrationPostPersistHook(t *testing.T) {
	t.Run("flow=registration", func(t *testing.T) {
		t.Run("case=no continue with items returns 200 OK", func(t *testing.T) {
			_, reg := pkg.NewVeryFastRegistryWithoutDB(t)
			h := hook.NewShowVerificationUIHook(reg)
			browserRequest := httptest.NewRequest("GET", "/", nil)
			f := &registration.Flow{}
			rec := httptest.NewRecorder()
			require.NoError(t, h.ExecutePostRegistrationPostPersistHook(rec, browserRequest, f, nil))
			require.Equal(t, 200, rec.Code)
		})

		t.Run("case=not a browser request returns 200 OK", func(t *testing.T) {
			_, reg := pkg.NewVeryFastRegistryWithoutDB(t)
			h := hook.NewShowVerificationUIHook(reg)
			browserRequest := httptest.NewRequest("GET", "/", nil)
			browserRequest.Header.Add("Accept", "application/json")
			f := &registration.Flow{}
			rec := httptest.NewRecorder()
			require.NoError(t, h.ExecutePostRegistrationPostPersistHook(rec, browserRequest, f, nil))
			require.Equal(t, 200, rec.Code)
		})

		t.Run("case=verification ui in continue with item returns redirect", func(t *testing.T) {
			conf, reg := pkg.NewVeryFastRegistryWithoutDB(t)
			conf.MustSet(context.Background(), config.ViperKeySelfServiceVerificationUI, "/verification")
			h := hook.NewShowVerificationUIHook(reg)
			browserRequest := httptest.NewRequest("GET", "/", nil)
			vf := &verification.Flow{
				ID: uuid.Must(uuid.NewV4()),
			}
			rf := &registration.Flow{}
			rf.ContinueWithItems = []flow.ContinueWith{
				flow.NewContinueWithVerificationUI(vf.ID, "some@ory.sh", ""),
			}
			rec := httptest.NewRecorder()
			require.NoError(t, h.ExecutePostRegistrationPostPersistHook(rec, browserRequest, rf, nil))
			assert.Equal(t, 200, rec.Code)
			assert.Equal(t, "/verification?flow="+vf.ID.String(), rf.ReturnToVerification)
		})

		t.Run("case=no verification ui in continue with item returns 200 OK", func(t *testing.T) {
			conf, reg := pkg.NewVeryFastRegistryWithoutDB(t)
			conf.MustSet(context.Background(), config.ViperKeySelfServiceVerificationUI, "/verification")
			h := hook.NewShowVerificationUIHook(reg)
			browserRequest := httptest.NewRequest("GET", "/", nil)
			rf := &registration.Flow{}
			rf.ContinueWithItems = []flow.ContinueWith{
				flow.NewContinueWithSetToken("token"),
			}
			rec := httptest.NewRecorder()
			require.NoError(t, h.ExecutePostRegistrationPostPersistHook(rec, browserRequest, rf, nil))
			assert.Equal(t, 200, rec.Code)
		})
	})

	t.Run("flow=login", func(t *testing.T) {
		t.Run("case=no continue with items returns 200 OK", func(t *testing.T) {
			_, reg := pkg.NewVeryFastRegistryWithoutDB(t)
			h := hook.NewShowVerificationUIHook(reg)
			browserRequest := httptest.NewRequest("GET", "/", nil)
			f := &login.Flow{}
			rec := httptest.NewRecorder()
			require.NoError(t, h.ExecuteLoginPostHook(rec, browserRequest, "", f, nil))
			require.Equal(t, 200, rec.Code)
		})

		t.Run("case=not a browser request returns 200 OK", func(t *testing.T) {
			_, reg := pkg.NewVeryFastRegistryWithoutDB(t)
			h := hook.NewShowVerificationUIHook(reg)
			browserRequest := httptest.NewRequest("GET", "/", nil)
			browserRequest.Header.Add("Accept", "application/json")
			f := &login.Flow{}
			rec := httptest.NewRecorder()
			require.NoError(t, h.ExecuteLoginPostHook(rec, browserRequest, "", f, nil))
			require.Equal(t, 200, rec.Code)
		})

		t.Run("case=verification ui in continue with item returns redirect", func(t *testing.T) {
			conf, reg := pkg.NewVeryFastRegistryWithoutDB(t)
			conf.MustSet(context.Background(), config.ViperKeySelfServiceVerificationUI, "/verification")
			h := hook.NewShowVerificationUIHook(reg)
			browserRequest := httptest.NewRequest("GET", "/", nil)
			vf := &verification.Flow{
				ID: uuid.Must(uuid.NewV4()),
			}
			rf := &login.Flow{}
			rf.ContinueWithItems = []flow.ContinueWith{
				flow.NewContinueWithVerificationUI(vf.ID, "some@ory.sh", ""),
			}
			rec := httptest.NewRecorder()
			require.NoError(t, h.ExecuteLoginPostHook(rec, browserRequest, "", rf, nil))
			assert.Equal(t, 200, rec.Code)
			assert.Equal(t, "/verification?flow="+vf.ID.String(), rf.ReturnToVerification)
		})

		t.Run("case=no verification ui in continue with item returns 200 OK", func(t *testing.T) {
			conf, reg := pkg.NewVeryFastRegistryWithoutDB(t)
			conf.MustSet(context.Background(), config.ViperKeySelfServiceVerificationUI, "/verification")
			h := hook.NewShowVerificationUIHook(reg)
			browserRequest := httptest.NewRequest("GET", "/", nil)
			rf := &login.Flow{}
			rf.ContinueWithItems = []flow.ContinueWith{
				flow.NewContinueWithSetToken("token"),
			}
			rec := httptest.NewRecorder()
			require.NoError(t, h.ExecuteLoginPostHook(rec, browserRequest, "", rf, nil))
			assert.Equal(t, 200, rec.Code)
		})
	})

	t.Run("internal_context=registration", func(t *testing.T) {
		t.Run("case=verification flow from internal context returns redirect", func(t *testing.T) {
			conf, reg := pkg.NewVeryFastRegistryWithoutDB(t)
			conf.MustSet(context.Background(), config.ViperKeySelfServiceVerificationUI, "/verification")
			h := hook.NewShowVerificationUIHook(reg)
			browserRequest := httptest.NewRequest("GET", "/", nil)
			vfID := uuid.Must(uuid.NewV4())

			cw := flow.ContinueWithVerificationUIFlow{
				ID:                vfID,
				VerifiableAddress: "test@ory.sh",
			}

			internalContext, err := json.Marshal(map[string]interface{}{
				hook.InternalContextRegistrationVerificationFlow: cw,
			})
			require.NoError(t, err)

			rf := &registration.Flow{}
			rf.InternalContext = internalContext

			rec := httptest.NewRecorder()
			require.NoError(t, h.ExecutePostRegistrationPostPersistHook(rec, browserRequest, rf, nil))
			assert.Equal(t, 200, rec.Code)
			assert.Equal(t, "/verification?flow="+vfID.String(), rf.ReturnToVerification)
		})

		t.Run("case=invalid json in internal context returns error", func(t *testing.T) {
			_, reg := pkg.NewVeryFastRegistryWithoutDB(t)
			h := hook.NewShowVerificationUIHook(reg)
			browserRequest := httptest.NewRequest("GET", "/", nil)

			internalContext, err := json.Marshal(map[string]interface{}{
				hook.InternalContextRegistrationVerificationFlow: "invalid json",
			})
			require.NoError(t, err)

			rf := &registration.Flow{}
			rf.InternalContext = internalContext

			rec := httptest.NewRecorder()
			err = h.ExecutePostRegistrationPostPersistHook(rec, browserRequest, rf, nil)
			require.Error(t, err)
		})
	})

	t.Run("internal_context=login", func(t *testing.T) {
		t.Run("case=verification flow from internal context returns redirect", func(t *testing.T) {
			conf, reg := pkg.NewVeryFastRegistryWithoutDB(t)
			conf.MustSet(context.Background(), config.ViperKeySelfServiceVerificationUI, "/verification")
			h := hook.NewShowVerificationUIHook(reg)
			browserRequest := httptest.NewRequest("GET", "/", nil)
			vfID := uuid.Must(uuid.NewV4())

			cw := flow.ContinueWithVerificationUIFlow{
				ID:                vfID,
				VerifiableAddress: "test@ory.sh",
			}

			internalContext, err := json.Marshal(map[string]interface{}{
				hook.InternalContextRegistrationVerificationFlow: cw,
			})
			require.NoError(t, err)

			lf := &login.Flow{}
			lf.InternalContext = internalContext

			rec := httptest.NewRecorder()
			require.NoError(t, h.ExecuteLoginPostHook(rec, browserRequest, "", lf, nil))
			assert.Equal(t, 200, rec.Code)
			assert.Equal(t, "/verification?flow="+vfID.String(), lf.ReturnToVerification)
		})

		t.Run("case=invalid json in internal context returns error", func(t *testing.T) {
			_, reg := pkg.NewVeryFastRegistryWithoutDB(t)
			h := hook.NewShowVerificationUIHook(reg)
			browserRequest := httptest.NewRequest("GET", "/", nil)

			internalContext, err := json.Marshal(map[string]interface{}{
				hook.InternalContextRegistrationVerificationFlow: "invalid json",
			})
			require.NoError(t, err)

			lf := &login.Flow{}
			lf.InternalContext = internalContext

			rec := httptest.NewRecorder()
			err = h.ExecuteLoginPostHook(rec, browserRequest, "", lf, nil)
			require.Error(t, err)
		})
	})
}