package helpers

import (
	"net/http"
	"net/http/httptest"
	"testing"

	"tea.chunkbyte.com/kato/go-worm/lib/config"
)

func TestBasicAuth(t *testing.T) {
	mux := http.NewServeMux()
	mux.HandleFunc("/openapi", func(w http.ResponseWriter, r *http.Request) {
		w.WriteHeader(http.StatusOK)
	})
	mux.HandleFunc("/health", func(w http.ResponseWriter, r *http.Request) {
		w.WriteHeader(http.StatusOK)
	})
	h := BasicAuth(mux)

	t.Run("openapi public", func(t *testing.T) {
		req := httptest.NewRequest(http.MethodGet, "/openapi", nil)
		rec := httptest.NewRecorder()
		h.ServeHTTP(rec, req)
		if rec.Code != http.StatusOK {
			t.Fatalf("status = %d, want 200", rec.Code)
		}
	})

	t.Run("protected without creds", func(t *testing.T) {
		req := httptest.NewRequest(http.MethodGet, "/health", nil)
		rec := httptest.NewRecorder()
		h.ServeHTTP(rec, req)
		if rec.Code != http.StatusUnauthorized {
			t.Fatalf("status = %d, want 401", rec.Code)
		}
		if got := rec.Header().Get("WWW-Authenticate"); got == "" {
			t.Fatal("missing WWW-Authenticate")
		}
	})

	t.Run("protected with creds", func(t *testing.T) {
		req := httptest.NewRequest(http.MethodGet, "/health", nil)
		req.SetBasicAuth(config.AuthUser, config.AuthPass)
		rec := httptest.NewRecorder()
		h.ServeHTTP(rec, req)
		if rec.Code != http.StatusOK {
			t.Fatalf("status = %d, want 200", rec.Code)
		}
	})
}