import { vi, describe, it, beforeAll, expect, afterAll } from 'vitest'
import { Controller, Get, INestApplication, UseGuards } from '@nestjs/common'
import request from 'supertest'
import { Test } from '@nestjs/testing'
import Session from 'supertokens-node/recipe/session'
import EmailPassword from 'supertokens-node/recipe/emailpassword'

import { SuperTokensModule } from './supertokens.module'
import { SuperTokensAuthGuard } from './supertokens-auth.guard'
import { SuperTokensExpressExceptionFilter } from './supertokens-express-exception.filter'

const AppInfo = {
  appName: 'ST',
  apiDomain: 'http://localhost:3001',
  websiteDomain: 'http://localhost:3000',
  apiBasePath: '/auth',
  websiteBasePath: '/auth',
}

const connectionUri =
  process.env.VITE_ST_CONNECTION_URI || 'http://localhost:4356'

describe('SuperTokensExpressExceptionFilter', () => {
  let app: INestApplication
  let exceptionFilter: SuperTokensExpressExceptionFilter

  beforeAll(async () => {
    @Controller()
    @UseGuards(SuperTokensAuthGuard)
    class TestController {
      @Get('/')
      getPublic(): string {
        return 'public'
      }

      @Get('/protected')
      getProtected(): string {
        return 'protected'
      }
    }
    const moduleRef = await Test.createTestingModule({
      imports: [
        SuperTokensModule.forRoot({
          framework: 'express',
          supertokens: {
            connectionURI: connectionUri,
          },
          appInfo: AppInfo,
          recipeList: [Session.init(), EmailPassword.init()],
        }),
      ],
      controllers: [TestController],
    }).compile()

    app = moduleRef.createNestApplication()

    exceptionFilter = new SuperTokensExpressExceptionFilter()
    app.useGlobalFilters(exceptionFilter)
    await app.init()
    // This is required so that the filters get applied
    await app.listen(0)
  })

  afterAll(async () => {
    if (app) {
      await app.close()
    }
  })

  it('should catch authentication errors', async () => {
    const spy = vi.spyOn(exceptionFilter, 'handler')
    expect(spy).not.toHaveBeenCalled()
    await request(app.getHttpServer()).get(`/`).expect(401)
    const response = await request(app.getHttpServer())
      .get(`/protected`)
      .expect(401)
    expect(response.headers['content-type']).toContain('application/json')
    expect(spy).toHaveBeenCalled()
  })
})