package cardquery

import (
	"net/http"
	"strings"
	"testing"

	"github.com/gogf/gf/v2/frame/g"
	"github.com/gogf/gf/v2/net/ghttp"
	"github.com/gogf/gf/v2/os/gcfg"
)

func TestDiagnosisProxyRejectsUntrustedAndInvalidRequests(t *testing.T) {
	adapter, err := gcfg.NewAdapterContent(`{"appDiagnosis":{"internalToken":"test-token"}}`)
	if err != nil {
		t.Fatal(err)
	}
	previous := g.Cfg().GetAdapter()
	g.Cfg().SetAdapter(adapter)
	t.Cleanup(func() { g.Cfg().SetAdapter(previous) })
	server := ghttp.GetServer("diagnosis-proxy-auth-test")
	server.SetAddr("127.0.0.1:0")
	server.Group("/", func(group *ghttp.RouterGroup) {
		group.POST("/internal/app-diagnosis/sim/*any", AppDiagnosisQuery)
	})
	if err := server.Start(); err != nil {
		t.Fatal(err)
	}
	t.Cleanup(func() { _ = server.Shutdown() })
	url := "http://" + server.GetListenedAddress() + "/internal/app-diagnosis"
	for _, tc := range []struct {
		path   string
		token  string
		body   string
		status int
	}{
		{"/sim/query/sim-basic-info", "", `{"simKeys":[{"iccid":"123","chanKey":"test"}]}`, http.StatusForbidden},
		{"/sim/restart", "test-token", `{"simKeys":[{"iccid":"123","chanKey":"test"}]}`, http.StatusNotFound},
		{"/sim/query/sim-basic-info", "test-token", `{"simKeys":[{"iccid":"123"}]}`, http.StatusBadRequest},
	} {
		request, err := http.NewRequest(http.MethodPost, url+tc.path, strings.NewReader(tc.body))
		if err != nil {
			t.Fatal(err)
		}
		request.Header.Set("X-App-Diagnosis-Token", tc.token)
		response, err := http.DefaultClient.Do(request)
		if err != nil {
			t.Fatal(err)
		}
		_ = response.Body.Close()
		if response.StatusCode != tc.status {
			t.Errorf("%s: got %d want %d", tc.path, response.StatusCode, tc.status)
		}
	}
}