package handler

import (
	"context"
	"net/http"
	"net/http/httptest"
	"testing"

	"img_infinite_canvas/internal/domain/design"
)

type fakeBearerAuthenticator struct{}

func (fakeBearerAuthenticator) UserIDFromBearer(_ context.Context, authorization string) (string, bool) {
	if authorization == "Bearer valid" {
		return "91cd197b-8255-4172-9981-77391fd38f33", true
	}
	return "", false
}

func TestUserContextMiddlewareUsesAuthorizationHeader(t *testing.T) {
	req := httptest.NewRequest(http.MethodGet, "/api/projects", nil)
	req.Header.Set("Authorization", "Bearer valid")
	rec := httptest.NewRecorder()

	called := false
	UserContextMiddleware(fakeBearerAuthenticator{})(func(w http.ResponseWriter, r *http.Request) {
		called = true
		if got := design.UserIDFromContext(r.Context()); got != "91cd197b-8255-4172-9981-77391fd38f33" {
			t.Fatalf("expected authenticated user in context, got %s", got)
		}
		w.WriteHeader(http.StatusNoContent)
	})(rec, req)

	if !called {
		t.Fatal("expected next handler to be called")
	}
	if rec.Code != http.StatusNoContent {
		t.Fatalf("expected status %d, got %d", http.StatusNoContent, rec.Code)
	}
}

func TestUserContextMiddlewareIgnoresLegacyTokenHeaderAndCookie(t *testing.T) {
	req := httptest.NewRequest(http.MethodGet, "/api/projects", nil)
	req.Header.Set("token", "valid")
	req.AddCookie(&http.Cookie{Name: "usertoken", Value: "valid"})
	rec := httptest.NewRecorder()

	called := false
	UserContextMiddleware(fakeBearerAuthenticator{})(func(w http.ResponseWriter, r *http.Request) {
		called = true
	})(rec, req)

	if called {
		t.Fatal("expected next handler not to be called")
	}
	if rec.Code != http.StatusUnauthorized {
		t.Fatalf("expected status %d, got %d", http.StatusUnauthorized, rec.Code)
	}
}