package system

import (
	"github.com/cortezaproject/corteza-server/system/service"
	"github.com/cortezaproject/corteza-server/system/types"
	"github.com/cortezaproject/corteza-server/tests/helpers"
	sqlTypes "github.com/jmoiron/sqlx/types"
	jsonpath "github.com/steinfletcher/apitest-jsonpath"
	"net/http"
	"testing"
)

func TestSettingsList(t *testing.T) {
	h := newHelper(t)
	h.allow(types.SystemRBACResource, "settings.read")
	h.allow(types.SystemRBACResource, "settings.manage")

	err := service.DefaultSettings.BulkSet(h.secCtx(), types.SettingValueSet{
		&types.SettingValue{Name: "t_sys_k1.s1", Value: sqlTypes.JSONText(`"t_sys_v1"`)},
		&types.SettingValue{Name: "t_sys_k1.s2", Value: sqlTypes.JSONText(`"t_sys_v2"`)},
	})
	h.a.NoError(err)

	h.apiInit().
		Get("/settings/").
		Expect(t).
		Status(http.StatusOK).
		Assert(helpers.AssertNoErrors).
		Assert(jsonpath.Present(`$.response[? @.name=="t_sys_k1.s1"]`)).
		Assert(jsonpath.Present(`$.response[? @.value=="t_sys_v1"]`)).
		Assert(jsonpath.Present(`$.response[? @.name=="t_sys_k1.s2"]`)).
		Assert(jsonpath.Present(`$.response[? @.value=="t_sys_v2"]`)).
		End()
}

func TestSettingsList_noPermissions(t *testing.T) {
	h := newHelper(t)
	h.deny(types.SystemRBACResource, "settings.read")

	h.apiInit().
		Get("/settings/").
		Header("Accept", "application/json").
		Expect(t).
		Status(http.StatusOK).
		Assert(helpers.AssertError("not allowed to read settings")).
		End()
}

func TestSettingsUpdate(t *testing.T) {
	h := newHelper(t)
	h.allow(types.SystemRBACResource, "settings.manage")
	h.allow(types.SystemRBACResource, "settings.read")

	err := service.DefaultSettings.BulkSet(h.secCtx(), types.SettingValueSet{
		&types.SettingValue{Name: "t_sys_k1.s1", Value: sqlTypes.JSONText(`"t_sys_v1"`)},
	})
	h.a.NoError(err)

	h.apiInit().
		Patch("/settings/").
		JSON(`{"values":[{"name":"t_sys_k1.s1","value":"t_sys_v1_edited"},{"name":"t_sys_k2.s1","value":"t_sys_v2_new"}]}`).
		Expect(t).
		Status(http.StatusOK).
		Assert(helpers.AssertNoErrors).
		End()

	s, err := service.DefaultSettings.Get(h.secCtx(), "t_sys_k1.s1", 0)
	h.a.NoError(err)
	h.a.Equal(`"t_sys_v1_edited"`, s.Value.String(), "existing key should be updated")

	s, err = service.DefaultSettings.Get(h.secCtx(), "t_sys_k2.s1", 0)
	h.a.NoError(err)
	h.a.Equal(`"t_sys_v2_new"`, s.Value.String(), "new key should be added")
}

func TestSettingsUpdate_noPermissions(t *testing.T) {
	h := newHelper(t)
	h.deny(types.SystemRBACResource, "settings.manage")

	h.apiInit().
		Patch("/settings/").
		Header("Accept", "application/json").
		JSON(`{"values":[]}`).
		Expect(t).
		Status(http.StatusOK).
		Assert(helpers.AssertError("not allowed to manage settings")).
		End()
}

func TestSettingsGet(t *testing.T) {
	h := newHelper(t)
	h.allow(types.SystemRBACResource, "settings.read")
	h.allow(types.SystemRBACResource, "settings.manage")

	err := service.DefaultSettings.BulkSet(h.secCtx(), types.SettingValueSet{
		&types.SettingValue{Name: "t_sys_k1.s1", Value: sqlTypes.JSONText(`"t_sys_v1"`)},
	})
	h.a.NoError(err)

	h.apiInit().
		Get("/settings/t_sys_k1.s1").
		Expect(t).
		Status(http.StatusOK).
		Assert(helpers.AssertNoErrors).
		Assert(jsonpath.Present(`$.response.name=="t_sys_k1.s1"`)).
		Assert(jsonpath.Present(`$.response.value=="t_sys_v1"`)).
		End()

	h.apiInit().
		Get("/settings/t_sys_k1.missing").
		Expect(t).
		Status(http.StatusOK).
		Assert(helpers.AssertNoErrors).
		Assert(jsonpath.Equal(`$.response`, nil)).
		End()
}

func TestSettingsGet_noPermissions(t *testing.T) {
	h := newHelper(t)
	h.deny(types.SystemRBACResource, "settings.read")

	h.apiInit().
		Get("/settings/t_sys_k1.s1").
		Header("Accept", "application/json").
		Expect(t).
		Status(http.StatusOK).
		Assert(helpers.AssertError("not allowed to read settings")).
		End()
}