package secrets

import (
	"context"
	"strings"
	"testing"

	"github.com/kandev/kandev/internal/testutil"
)

func TestPostgresStoreRoundTrip(t *testing.T) {
	db := testutil.OpenIsolatedPostgres(t, testutil.PostgresDSNFromEnv(t))

	crypto, err := NewMasterKeyProvider(t.TempDir())
	if err != nil {
		t.Fatalf("master key: %v", err)
	}
	store, cleanup, err := Provide(db, db, crypto)
	if err != nil {
		t.Fatalf("provide store: %v", err)
	}
	t.Cleanup(func() {
		_ = cleanup()
	})

	ctx := context.Background()
	secret := &SecretWithValue{Secret: Secret{Name: "token"}, Value: "s3cr3t"}
	if err := store.Create(ctx, secret); err != nil {
		t.Fatalf("create secret: %v", err)
	}
	got, err := store.Reveal(ctx, secret.ID)
	if err != nil {
		t.Fatalf("reveal secret: %v", err)
	}
	if got != "s3cr3t" {
		t.Fatalf("revealed value = %q, want %q", got, "s3cr3t")
	}

	metadata, err := store.Get(ctx, secret.ID)
	if err != nil {
		t.Fatalf("get secret: %v", err)
	}
	if metadata.Name != "token" {
		t.Fatalf("secret name = %q, want %q", metadata.Name, "token")
	}

	nameOnly := "renamed-token"
	if err := store.Update(ctx, secret.ID, &UpdateSecretRequest{Name: &nameOnly}); err != nil {
		t.Fatalf("update secret name: %v", err)
	}
	metadata, err = store.Get(ctx, secret.ID)
	if err != nil {
		t.Fatalf("get renamed secret: %v", err)
	}
	if metadata.Name != nameOnly {
		t.Fatalf("renamed secret name = %q, want %q", metadata.Name, nameOnly)
	}
	got, err = store.Reveal(ctx, secret.ID)
	if err != nil {
		t.Fatalf("reveal renamed secret: %v", err)
	}
	if got != "s3cr3t" {
		t.Fatalf("renamed secret value = %q, want %q", got, "s3cr3t")
	}

	newValue := "n3w-s3cr3t"
	valueName := "renamed-token-with-value"
	if err := store.Update(ctx, secret.ID, &UpdateSecretRequest{Name: &valueName, Value: &newValue}); err != nil {
		t.Fatalf("update secret value: %v", err)
	}
	metadata, err = store.Get(ctx, secret.ID)
	if err != nil {
		t.Fatalf("get updated secret: %v", err)
	}
	if metadata.Name != valueName {
		t.Fatalf("updated secret name = %q, want %q", metadata.Name, valueName)
	}
	got, err = store.Reveal(ctx, secret.ID)
	if err != nil {
		t.Fatalf("reveal updated secret: %v", err)
	}
	if got != newValue {
		t.Fatalf("updated secret value = %q, want %q", got, newValue)
	}

	if err := store.Delete(ctx, secret.ID); err != nil {
		t.Fatalf("delete secret: %v", err)
	}
	if _, err := store.Get(ctx, secret.ID); err == nil || !strings.Contains(err.Error(), "secret not found") {
		t.Fatalf("get deleted secret error = %v, want not found", err)
	}
}