package httpapi

import (
	"bytes"
	"context"
	"net/http"
	"net/http/httptest"
	"testing"

	"github.com/descrybe/descrybe-v2/apps/api/internal/auth"
	"github.com/go-chi/chi/v5"
	"github.com/google/uuid"
)

func TestHandleAdminSetStaffRoleRejectsSelf(t *testing.T) {
	t.Parallel()
	uid := uuid.MustParse("aaaaaaaa-aaaa-aaaa-aaaa-aaaaaaaaaaaa")
	s := &Server{Auth: &auth.Service{}}
	req := httptest.NewRequest(http.MethodPatch, "/api/admin/users/"+uid.String()+"/staff-role",
		bytes.NewBufferString(`{"staff_role":"support_staff"}`))
	ctx := context.WithValue(context.Background(), ctxUserID, uid)
	rctx := chi.NewRouteContext()
	rctx.URLParams.Add("id", uid.String())
	ctx = context.WithValue(ctx, chi.RouteCtxKey, rctx)
	req = req.WithContext(ctx)
	rec := httptest.NewRecorder()
	s.handleAdminSetStaffRole(rec, req)
	if rec.Code != http.StatusForbidden {
		t.Fatalf("status = %d body=%s, want 403", rec.Code, rec.Body.String())
	}
}

func TestHandleAdminSetStaffRoleInvalidJSON(t *testing.T) {
	t.Parallel()
	actor := uuid.MustParse("aaaaaaaa-aaaa-aaaa-aaaa-aaaaaaaaaaaa")
	target := uuid.MustParse("bbbbbbbb-bbbb-bbbb-bbbb-bbbbbbbbbbbb")
	s := &Server{Auth: &auth.Service{}}
	req := httptest.NewRequest(http.MethodPatch, "/api/admin/users/"+target.String()+"/staff-role",
		bytes.NewBufferString(`{`))
	ctx := context.WithValue(context.Background(), ctxUserID, actor)
	rctx := chi.NewRouteContext()
	rctx.URLParams.Add("id", target.String())
	ctx = context.WithValue(ctx, chi.RouteCtxKey, rctx)
	req = req.WithContext(ctx)
	rec := httptest.NewRecorder()
	s.handleAdminSetStaffRole(rec, req)
	if rec.Code != http.StatusBadRequest {
		t.Fatalf("status = %d, want 400", rec.Code)
	}
}