package auth

import (
	"errors"
	"testing"
	"time"
)

func TestDefaultPasswordResetTTL(t *testing.T) {
	t.Parallel()
	if DefaultPasswordResetTTL != time.Hour {
		t.Fatalf("DefaultPasswordResetTTL=%v want 1h", DefaultPasswordResetTTL)
	}
}

func TestIssuePasswordResetRejectsSyntheticEmail(t *testing.T) {
	t.Parallel()
	s := &Service{} // no Pool — synthetic check must return before any DB use
	for _, email := range []string{
		"user_abc@legacy.local",
		"  User_ABC@Legacy.Local ",
	} {
		_, err := s.IssuePasswordReset(t.Context(), email, 0)
		if !errors.Is(err, ErrSyntheticEmail) {
			t.Fatalf("email=%q err=%v want ErrSyntheticEmail", email, err)
		}
	}
}