package handler

import (
	"bytes"
	"encoding/json"
	"net/http"
	"net/http/httptest"
	"testing"

	"github.com/gofiber/fiber/v2"
	"github.com/stretchr/testify/assert"
	"gorm.io/gorm"
)

// Mock DB for ApiKey tests using a real GORM instance but with a hijacked connection
// or just a simple mock if we only check nil.
// For ApiKeyHandler, it uses DB for Create/List/Delete.

func TestApiKeyHandler_CreateApiKey(t *testing.T) {
	app := fiber.New()
	// ApiKeyHandler requires a valid DB connection to perform h.DB.Create
	// Since we don't have a real DB here, we'll check if it fails gracefully
	// or we can use sqlite in-memory for a more realistic test.
	h := &ApiKeyHandler{DB: nil} // Testing ServiceUnavailable

	app.Post("/api-keys", h.CreateApiKey)

	input := map[string]interface{}{
		"name":   "M2M Test",
		"scopes": []string{"read", "write"},
	}
	body, _ := json.Marshal(input)

	req := httptest.NewRequest("POST", "/api-keys", bytes.NewReader(body))
	req.Header.Set("Content-Type", "application/json")
	resp, _ := app.Test(req)

	assert.Equal(t, http.StatusServiceUnavailable, resp.StatusCode)
}

func TestApiKeyHandler_Validation(t *testing.T) {
	app := fiber.New()
	// Using a dummy DB pointer to pass the nil check
	h := &ApiKeyHandler{DB: &gorm.DB{}}

	app.Post("/api-keys", h.CreateApiKey)

	// Missing name
	input := map[string]interface{}{
		"scopes": []string{"read"},
	}
	body, _ := json.Marshal(input)

	req := httptest.NewRequest("POST", "/api-keys", bytes.NewReader(body))
	req.Header.Set("Content-Type", "application/json")
	resp, _ := app.Test(req)

	assert.Equal(t, http.StatusBadRequest, resp.StatusCode)
}