package integration_test

import (
	"context"
	"encoding/json"
	"fmt"
	"net/http"
	"testing"
	"time"

	"github.com/google/uuid"
	"golang.org/x/crypto/bcrypt"
)

func TestExploreScaleDefinitions(t *testing.T) {
	r, pool := setupAPIPool(t)
	ctx := context.Background()
	tok := adminLogin(t, r, "admin", "change-me")

	_, code := doAdminJSON(t, r, http.MethodGet, "/api/v1/admin/explore/scales", nil, "")
	if code != http.StatusUnauthorized {
		t.Fatalf("expected 401, got %d", code)
	}

	limitedRoleID := uuid.New()
	_, err := pool.Exec(ctx, `INSERT INTO admin_roles(id, name, system) VALUES ($1,$2,false)`,
		limitedRoleID, "sc_lim_"+limitedRoleID.String()[:8])
	if err != nil {
		t.Fatal(err)
	}
	_, err = pool.Exec(ctx, `INSERT INTO admin_role_permissions(role_id, code) VALUES ($1,'admin.users.read')`, limitedRoleID)
	if err != nil {
		t.Fatal(err)
	}
	hash, err := bcrypt.GenerateFromPassword([]byte("limited-pass"), bcrypt.DefaultCost)
	if err != nil {
		t.Fatal(err)
	}
	limUser := fmt.Sprintf("sclim_%d", time.Now().UnixNano())
	_, err = pool.Exec(ctx, `INSERT INTO admin_accounts(username, password_hash, role_id) VALUES ($1,$2,$3)`,
		limUser, string(hash), limitedRoleID)
	if err != nil {
		t.Fatal(err)
	}
	t.Cleanup(func() {
		_, _ = pool.Exec(ctx, `DELETE FROM admin_accounts WHERE username=$1`, limUser)
		_, _ = pool.Exec(ctx, `DELETE FROM admin_roles WHERE id=$1`, limitedRoleID)
	})
	limTok := adminLogin(t, r, limUser, "limited-pass")
	_, code = doAdminJSON(t, r, http.MethodGet, "/api/v1/admin/explore/scales", nil, limTok)
	if code != http.StatusForbidden {
		t.Fatalf("expected 403, got %d", code)
	}

	start := time.Now()
	env, code := doAdminJSON(t, r, http.MethodGet, "/api/v1/admin/explore/scales", nil, tok)
	if code != 200 || env.Code != 0 {
		t.Fatalf("list http=%d msg=%s", code, env.Message)
	}
	if time.Since(start) > 500*time.Millisecond {
		t.Fatalf("list too slow %v", time.Since(start))
	}
	var list struct {
		Items []struct {
			ID string `json:"id"`
		} `json:"items"`
	}
	_ = json.Unmarshal(env.Data, &list)
	if len(list.Items) == 0 {
		t.Fatal("expected at least one scale")
	}
	id := list.Items[0].ID
	env, code = doAdminJSON(t, r, http.MethodGet, "/api/v1/admin/explore/scales/"+id, nil, tok)
	if code != 200 {
		t.Fatalf("get %d", code)
	}
	_, code = doAdminJSON(t, r, http.MethodGet, "/api/v1/admin/explore/scales/"+fakeUUID(), nil, tok)
	if code != http.StatusNotFound {
		t.Fatalf("expected 404, got %d", code)
	}
}