package relay

import (
	"crypto/sha256"
	"testing"
)

// The env-safety assertion this test used to make inline (appconfig.
// ValidVarValue(val)) moved to config_appconfig_test.go, package
// relay_test, once Task 12 gave internal/appconfig a real import of
// internal/relay (configack.go): an INTERNAL test file here (package
// relay, this file) importing appconfig would close relay -> appconfig ->
// relay, which go vet refuses. An external test package can import both
// without cycling, because it isn't part of either package's own build.
func TestBuildConfigMatchesContract(t *testing.T) {
	m := sha256.Sum256([]byte("carlos-relay-test-master"))
	r := &Record{Enabled: true, Incarnation: "0123456789abcdef", Regions: []string{"eu-west-1"}}
	urls := func(region string) []string {
		h := "relay." + region + ".oncarlos.com:3478"
		return []string{"stun:" + h, "turn:" + h + "?transport=udp", "turn:" + h + "?transport=tcp"}
	}
	val, suffixes, err := BuildConfig("abc", "meet", r, []RegionMaster{{Region: "eu-west-1", Kid: "k1", Master: m[:]}}, urls)
	if err != nil {
		t.Fatal(err)
	}
	entries, err := ParseConfig(val)
	if err != nil || len(entries) != 1 {
		t.Fatalf("parse = %+v %v", entries, err)
	}
	e := entries[0]
	if e.Key != "uMhwW4P/9O5dQUIs91t2CCHGhwJbeiM0xQMQ2G0CJLU=" || e.UsernameSuffix != "abc:meet:0123456789abcdef:k1" || suffixes["eu-west-1"] != e.UsernameSuffix {
		t.Fatalf("entry = %+v", e)
	}
	if len(e.URLs) != 3 || e.URLs[0] != "stun:relay.eu-west-1.oncarlos.com:3478" {
		t.Fatalf("urls = %v", e.URLs)
	}
}

func TestBuildConfigRefusesMissingMaster(t *testing.T) {
	r := &Record{Enabled: true, Incarnation: "0123456789abcdef", Regions: []string{"eu-west-1", "us-east-1"}}
	if _, _, err := BuildConfig("abc", "meet", r, []RegionMaster{{Region: "eu-west-1", Kid: "k1", Master: make([]byte, 32)}}, func(string) []string { return nil }); err == nil {
		t.Fatal("missing us-east-1 master accepted")
	}
}