# frozen_string_literal: true

describe 'Api::V2::Resource::Otp' do
  include_context 'bearer authentication'
  let!(:create_member_permission) do
    create :permission,
           role: 'member'
  end
  let(:do_request) { post '/api/v2/resource/otp/enable', headers: auth_header }
  let(:otp_code) { '111111' }

  context 'valid request' do
    before do
      allow(TOTPService).to receive(:validate?)
      .with(test_user.uid, otp_code) { true }
    end

    it 'user enables 2fa successfully' do
      post '/api/v2/resource/otp/enable', headers: auth_header, params: {
        code: otp_code
      }

      expect(response.status).to eq 201
      expect(test_user.reload.otp).to eq true
      expect(test_user.reload.labels.find_by(key: :otp, scope: :private)).not_to eq nil
    end

    it 'user disables 2fa successfully' do
      test_user.update(otp: true)
      test_user.labels.create(value: 'verified', key: :otp, scope: :private)
      post '/api/v2/resource/otp/disable', headers: auth_header, params: {
        code: otp_code
      }

      expect(response.status).to eq 200
      expect(test_user.reload.otp).to eq false
      expect(test_user.reload.labels.find_by(key: :otp, scope: :private)).to eq nil
    end

    it 'user verify otp Code' do

      test_user.update(otp: true)
      test_user.labels.create(value: 'verified', key: :otp, scope: :private)
      
      post '/api/v2/resource/otp/verify', headers: auth_header, params: {
        code: otp_code
      }

      expect(response.status).to eq 201
      expect(test_user.reload.otp).to eq true
      expect(test_user.reload.labels.find_by(key: :otp, scope: :private)).not_to eq nil
    end
  end

  context 'incomplete request' do
    it 'user receives error in enabling' do
      post '/api/v2/resource/otp/enable', headers: auth_header, params: {
        code: otp_code
      }

      expect(response.status).to eq 422
      expect(test_user.reload.otp).to eq false
      expect(test_user.reload.labels.find_by(key: :otp, scope: :private)).to eq nil
    end

    it 'user receives error in disabling' do
      test_user.update(otp: true)
      test_user.labels.create(key: :otp, scope: :private)
      post '/api/v2/resource/otp/disable', headers: auth_header, params: {
        code: otp_code
      }

      expect(response.status).to eq 422
      expect(test_user.reload.otp).to eq true
      expect(test_user.reload.labels.find_by(key: :otp, scope: :private)).to eq nil
    end

  end


  context 'already done' do
    before do
      allow(TOTPService).to receive(:validate?)
      .with(test_user.uid, otp_code) { true }
    end

    it 'enabling otp' do
      test_user.update(otp: true)
      test_user.labels.create(value: 'verified', key: :otp, scope: :private)
      post '/api/v2/resource/otp/enable', headers: auth_header, params: {
        code: otp_code
      }

      expect(response.status).to eq 400
      expect(test_user.reload.otp).to eq true
      expect(test_user.reload.labels.find_by(key: :otp, scope: :private)).not_to eq nil
    end

    it 'disabling otp' do
      post '/api/v2/resource/otp/disable', headers: auth_header, params: {
        code: otp_code
      }

      expect(response.status).to eq 400
      expect(test_user.reload.otp).to eq false
      expect(test_user.reload.labels.find_by(key: :otp, scope: :private)).to eq nil
    end

    it 'otp disabled' do
      post '/api/v2/resource/otp/verify', headers: auth_header, params: {
        code: otp_code
      }

      expect(response.status).to eq 400
      expect(test_user.reload.otp).to eq false
      expect(test_user.reload.labels.find_by(key: :otp, scope: :private)).to eq nil
    end

    it 'otp enabled' do
      test_user.update(otp: true)
      test_user.labels.create(value: 'verified', key: :otp, scope: :private)
      post '/api/v2/resource/otp/generate_qrcode', headers: auth_header

      expect(response.status).to eq 400
      expect(test_user.reload.otp).to eq true
      expect(test_user.reload.labels.find_by(key: :otp, scope: :private)).not_to eq nil
    end
  end
end