using FluentAssertions;
using Microsoft.AspNetCore.Mvc.Testing;
using Microsoft.Extensions.DependencyInjection;
using System;
using System.Net.Http;
using Timeline.Controllers;
using Timeline.Models.Http;
using Timeline.Services;
using Timeline.Tests.Helpers;
using Timeline.Tests.Helpers.Authentication;
using Timeline.Tests.Mock.Data;
using Timeline.Tests.Mock.Services;
using Xunit;
using Xunit.Abstractions;

namespace Timeline.Tests
{
    public class TokenUnitTest : IClassFixture<MyWebApplicationFactory<Startup>>, IDisposable
    {
        private const string CreateTokenUrl = "token/create";
        private const string VerifyTokenUrl = "token/verify";

        private readonly WebApplicationFactory<Startup> _factory;
        private readonly Action _disposeAction;

        public TokenUnitTest(MyWebApplicationFactory<Startup> factory, ITestOutputHelper outputHelper)
        {
            _factory = factory.WithTestConfig(outputHelper, out _disposeAction);
        }

        public void Dispose()
        {
            _disposeAction();
        }

        [Fact]
        public async void CreateToken_InvalidModel()
        {
            using (var client = _factory.CreateDefaultClient())
            {
                // missing username
                await InvalidModelTestHelpers.TestPostInvalidModel(client, CreateTokenUrl,
                    new CreateTokenRequest { Username = null, Password = "user" });
                // missing password
                await InvalidModelTestHelpers.TestPostInvalidModel(client, CreateTokenUrl,
                    new CreateTokenRequest { Username = "user", Password = null });
                // bad expire offset
                await InvalidModelTestHelpers.TestPostInvalidModel(client, CreateTokenUrl,
                    new CreateTokenRequest
                    {
                        Username = MockUsers.UserUsername,
                        Password = MockUsers.UserPassword,
                        ExpireOffset = -1000
                    });
            }
        }

        [Fact]
        public async void CreateToken_UserNotExist()
        {
            using (var client = _factory.CreateDefaultClient())
            {
                var response = await client.PostAsJsonAsync(CreateTokenUrl,
                    new CreateTokenRequest { Username = "usernotexist", Password = "???" });
                response.Should().HaveStatusCodeBadRequest()
                    .And.Should().HaveBodyAsCommonResponseWithCode(TokenController.ErrorCodes.Create_UserNotExist);
            }
        }

        [Fact]
        public async void CreateToken_BadPassword()
        {
            using (var client = _factory.CreateDefaultClient())
            {
                var response = await client.PostAsJsonAsync(CreateTokenUrl,
                    new CreateTokenRequest { Username = MockUsers.UserUsername, Password = "???" });
                response.Should().HaveStatusCodeBadRequest()
                    .And.Should().HaveBodyAsCommonResponseWithCode(TokenController.ErrorCodes.Create_BadPassword);
            }
        }

        [Fact]
        public async void CreateToken_Success()
        {
            using (var client = _factory.CreateDefaultClient())
            {
                var response = await client.PostAsJsonAsync(CreateTokenUrl,
                    new CreateTokenRequest { Username = MockUsers.UserUsername, Password = MockUsers.UserPassword });
                var body = response.Should().HaveStatusCodeOk()
                   .And.Should().HaveBodyAsJson<CreateTokenResponse>().Which;
                body.Token.Should().NotBeNullOrWhiteSpace();
                body.User.Should().BeEquivalentTo(MockUsers.UserUserInfo);
            }
        }

        [Fact]
        public async void VerifyToken_InvalidModel()
        {
            using (var client = _factory.CreateDefaultClient())
            {
                // missing token
                await InvalidModelTestHelpers.TestPostInvalidModel(client, VerifyTokenUrl,
                    new VerifyTokenRequest { Token = null });
            }
        }

        [Fact]
        public async void VerifyToken_BadToken()
        {
            using (var client = _factory.CreateDefaultClient())
            {
                var response = await client.PostAsJsonAsync(VerifyTokenUrl, new VerifyTokenRequest { Token = "bad token hahaha" });
                response.Should().HaveStatusCodeBadRequest()
                     .And.Should().HaveBodyAsCommonResponseWithCode(TokenController.ErrorCodes.Verify_BadToken);
            }
        }

        [Fact]
        public async void VerifyToken_BadVersion()
        {
            using (var client = _factory.CreateDefaultClient())
            {
                var token = (await client.CreateUserTokenAsync(MockUsers.UserUsername, MockUsers.UserPassword)).Token;

                using (var scope = _factory.Server.Host.Services.CreateScope()) // UserService is scoped.
                {
                    // create a user for test
                    var userService = scope.ServiceProvider.GetRequiredService<IUserService>();
                    await userService.PatchUser(MockUsers.UserUsername, null, null);
                }

                var response = await client.PostAsJsonAsync(VerifyTokenUrl, new VerifyTokenRequest { Token = token });
                response.Should().HaveStatusCodeBadRequest()
                    .And.Should().HaveBodyAsCommonResponseWithCode(TokenController.ErrorCodes.Verify_BadVersion);
            }
        }

        [Fact]
        public async void VerifyToken_UserNotExist()
        {
            using (var client = _factory.CreateDefaultClient())
            {
                var token = (await client.CreateUserTokenAsync(MockUsers.UserUsername, MockUsers.UserPassword)).Token;

                using (var scope = _factory.Server.Host.Services.CreateScope()) // UserService is scoped.
                {
                    // create a user for test
                    var userService = scope.ServiceProvider.GetRequiredService<IUserService>();
                    await userService.DeleteUser(MockUsers.UserUsername);
                }

                var response = await client.PostAsJsonAsync(VerifyTokenUrl, new VerifyTokenRequest { Token = token });
                response.Should().HaveStatusCodeBadRequest()
                    .And.Should().HaveBodyAsCommonResponseWithCode(TokenController.ErrorCodes.Verify_UserNotExist);
            }
        }

        [Fact]
        public async void VerifyToken_Expired()
        {
            using (var client = _factory.CreateDefaultClient())
            {
                // I can only control the token expired time but not current time
                // because verify logic is encapsuled in other library.
                var mockClock = _factory.GetTestClock();
                mockClock.MockCurrentTime = DateTime.Now - TimeSpan.FromDays(2);
                var token = (await client.CreateUserTokenAsync(MockUsers.UserUsername, MockUsers.UserPassword, 1)).Token;
                var response = await client.PostAsJsonAsync(VerifyTokenUrl,
                    new VerifyTokenRequest { Token = token });
                response.Should().HaveStatusCodeBadRequest()
                    .And.Should().HaveBodyAsCommonResponseWithCode(TokenController.ErrorCodes.Verify_Expired);
                mockClock.MockCurrentTime = null;
            }
        }

        [Fact]
        public async void VerifyToken_Success()
        {
            using (var client = _factory.CreateDefaultClient())
            {
                var createTokenResult = await client.CreateUserTokenAsync(MockUsers.UserUsername, MockUsers.UserPassword);
                var response = await client.PostAsJsonAsync(VerifyTokenUrl,
                    new VerifyTokenRequest { Token = createTokenResult.Token });
                response.Should().HaveStatusCodeOk()
                    .And.Should().HaveBodyAsJson<VerifyTokenResponse>()
                    .Which.User.Should().BeEquivalentTo(MockUsers.UserUserInfo);
            }
        }
    }
}