package cli_test

import (
	"bytes"
	"net/http"
	"testing"

	"github.com/stretchr/testify/assert"
	"github.com/stretchr/testify/require"

	"github.com/coder/coder/v2/cli/clitest"
	"github.com/coder/coder/v2/coderd/coderdtest"
	"github.com/coder/coder/v2/codersdk"
	"github.com/coder/coder/v2/testutil"
)

func TestOAuth2ProviderDCR(t *testing.T) {
	t.Parallel()

	tests := []struct {
		name        string
		command     string
		expectValue bool
		expectMsg   string
	}{
		{
			name:        "Enable",
			command:     "enable",
			expectValue: true,
			expectMsg:   "Dynamic client registration is now enabled.",
		},
		{
			name:        "Disable",
			command:     "disable",
			expectValue: false,
			expectMsg:   "Dynamic client registration is now disabled.",
		},
	}

	for _, tt := range tests {
		t.Run(tt.name, func(t *testing.T) {
			t.Parallel()

			client := coderdtest.New(t, nil)
			_ = coderdtest.CreateFirstUser(t, client)

			inv, root := clitest.New(t, "oauth2-provider", "dcr", tt.command)
			clitest.SetupConfig(t, client, root)

			var buf bytes.Buffer
			inv.Stderr = &buf
			err := inv.Run()
			require.NoError(t, err)
			assert.Contains(t, buf.String(), tt.expectMsg)

			ctx := testutil.Context(t, testutil.WaitShort)
			settings, err := client.OAuth2ProviderSettings(ctx)
			require.NoError(t, err)
			require.NotNil(t, settings.DynamicClientRegistrationEnabled, "GET must always return a concrete value")
			require.Equal(t, tt.expectValue, *settings.DynamicClientRegistrationEnabled)
		})
	}
}

func TestOAuth2ProviderDCR_RegularUser(t *testing.T) {
	t.Parallel()

	client := coderdtest.New(t, nil)
	owner := coderdtest.CreateFirstUser(t, client)
	anotherClient, _ := coderdtest.CreateAnotherUser(t, client, owner.OrganizationID)

	inv, root := clitest.New(t, "oauth2-provider", "dcr", "enable")
	clitest.SetupConfig(t, anotherClient, root)

	var buf bytes.Buffer
	inv.Stderr = &buf
	err := inv.Run()
	var sdkError *codersdk.Error
	require.Error(t, err)
	require.ErrorAsf(t, err, &sdkError, "error should be of type *codersdk.Error")
	assert.Equal(t, http.StatusForbidden, sdkError.StatusCode())
}