namespace NpgsqlRestTests;

public static partial class Database
{
    public static void AuthTests()
    {
        script.Append("""
        create function authorized() returns text language sql as 'select ''authorized''';
        comment on function authorized() is 'authorize';

        create function authorized_roles1() returns text language sql as 'select ''roles1''';
        comment on function authorized_roles1() is 'authorize test_role';

        create function authorized_roles2() returns text language sql as 'select ''roles2''';
        comment on function authorized_roles2() is 'authorize test_role, role1';

        create function authorized_roles3() returns text language sql as 'select ''roles3''';
        comment on function authorized_roles3() is 'authorize test_role1 role1 test_role2 test_role1';

        create function authorized_roles4() returns text language sql as 'select ''roles4''';
        comment on function authorized_roles4() is 'authorize test_role1 test_role2 test_role3';
        """);
    }
}

[Collection("TestFixture")]
public class AuthTests(TestFixture test)
{
    [Fact]
    public async Task Test_authorized()
    {
        using var client = test.Application.CreateClient();
        client.Timeout = TimeSpan.FromHours(1);

        using var response1 = await client.PostAsync("/api/authorized/", null);
        response1.StatusCode.Should().Be(HttpStatusCode.Unauthorized);

        using var login = await client.GetAsync("/login");

        using var response2 = await client.PostAsync("/api/authorized/", null);
        response2.StatusCode.Should().Be(HttpStatusCode.OK);
    }

    [Fact]
    public async Task Test_authorized_roles1()
    {
        using var client = test.Application.CreateClient();
        client.Timeout = TimeSpan.FromHours(1);

        using var response1 = await client.PostAsync("/api/authorized-roles1/", null);
        response1.StatusCode.Should().Be(HttpStatusCode.Unauthorized);

        using var login = await client.GetAsync("/login");

        using var response2 = await client.PostAsync("/api/authorized-roles1/", null);
        response2.StatusCode.Should().Be(HttpStatusCode.Forbidden);
    }

    [Fact]
    public async Task Test_authorized_roles2()
    {
        using var client = test.Application.CreateClient();
        client.Timeout = TimeSpan.FromHours(1);

        using var response1 = await client.PostAsync("/api/authorized-roles2/", null);
        response1.StatusCode.Should().Be(HttpStatusCode.Unauthorized);

        using var login = await client.GetAsync("/login");

        using var response2 = await client.PostAsync("/api/authorized-roles2/", null);
        response2.StatusCode.Should().Be(HttpStatusCode.OK);
    }

    [Fact]
    public async Task Test_authorized_roles3()
    {
        using var client = test.Application.CreateClient();
        client.Timeout = TimeSpan.FromHours(1);

        using var response1 = await client.PostAsync("/api/authorized-roles3/", null);
        response1.StatusCode.Should().Be(HttpStatusCode.Unauthorized);

        using var login = await client.GetAsync("/login");

        using var response2 = await client.PostAsync("/api/authorized-roles3/", null);
        response2.StatusCode.Should().Be(HttpStatusCode.OK);
    }

    [Fact]
    public async Task Test_authorized_roles4()
    {
        using var client = test.Application.CreateClient();
        client.Timeout = TimeSpan.FromHours(1);

        using var response1 = await client.PostAsync("/api/authorized-roles4/", null);
        response1.StatusCode.Should().Be(HttpStatusCode.Unauthorized);

        using var login = await client.GetAsync("/login");

        using var response2 = await client.PostAsync("/api/authorized-roles4/", null);
        response2.StatusCode.Should().Be(HttpStatusCode.Forbidden);
    }
}