package main

import (
	"bytes"
	"encoding/json"
	"net/http"
	"net/http/httptest"
	"strings"
	"testing"
	"time"
)

// signedInConsole plants a credential for an httptest console that serves
// GET /api/cli/apps, and returns that console's URL.
func signedInConsole(t *testing.T, handler http.HandlerFunc) string {
	t.Helper()
	ts := httptest.NewServer(handler)
	t.Cleanup(ts.Close)
	f, err := loadCredentials()
	if err != nil {
		t.Fatal(err)
	}
	f.put(credential{Console: ts.URL, Address: "tom@keymail.dev", Token: "tok",
		CreatedAt: time.Now(), ExpiresAt: time.Now().Add(time.Hour)})
	if err := f.save(); err != nil {
		t.Fatal(err)
	}
	return ts.URL
}

// accounts list, signed-in: no registry on this machine, a credential and a
// console that answers — the no-infra path #157 was filed for.
func TestAccountsListSignedIn(t *testing.T) {
	useIsolatedConfig(t)
	signedInConsole(t, func(w http.ResponseWriter, r *http.Request) {
		if r.URL.Path != "/api/cli/apps" || r.Header.Get("Authorization") != "Bearer tok" {
			http.NotFound(w, r)
			return
		}
		json.NewEncoder(w).Encode(map[string]any{"accounts": []map[string]any{
			{"sqid": "bdk", "name": "tom@keymail.dev", "role": "owner", "apps": []string{}},
			{"sqid": "bce", "name": "acme", "role": "member", "apps": []string{"shop"}},
		}})
	})

	var out bytes.Buffer
	if err := accountsListAPI(&out, ""); err != nil {
		t.Fatalf("accountsListAPI: %v", err)
	}
	for _, want := range []string{"NAME", "SQID", "ROLE",
		"tom@keymail.dev", "bdk", "owner", "acme", "bce", "member"} {
		if !strings.Contains(out.String(), want) {
			t.Fatalf("table missing %q:\n%s", want, out.String())
		}
	}
}

// A console from before the listing endpoint gets a plain named refusal,
// not the membership-404 riddle.
func TestAccountsListOldConsole(t *testing.T) {
	useIsolatedConfig(t)
	url := signedInConsole(t, func(w http.ResponseWriter, r *http.Request) {
		http.NotFound(w, r)
	})

	var out bytes.Buffer
	err := accountsListAPI(&out, "")
	if err == nil || !strings.Contains(err.Error(), url) || !strings.Contains(err.Error(), "predates") {
		t.Fatalf("old console = %v, want a refusal naming the console", err)
	}
}

// Not logged in and no registry: the error names the fix, exactly pick()'s.
func TestAccountsListNeitherMode(t *testing.T) {
	useTempCredentials(t)
	var out bytes.Buffer
	if err := accountsListAPI(&out, ""); err == nil ||
		!strings.Contains(err.Error(), "carlos auth login") {
		t.Fatalf("no credential = %v, want the login hint", err)
	}
}