package api

import (
	"context"
	"encoding/json"
	"strings"
	"testing"

	hub "git.ipao.vip/rogee/creator-hub/internal/environment"
	douyin "git.ipao.vip/rogee/creator-hub/internal/platform/douyin"
)

const testDouyinIdentityURL = "https://www.douyin.com/aweme/v1/web/user/profile/self/?aid=6383&device_platform=webapp"

func TestDouyinGatewayBrowserFencesAccountGeneration(t *testing.T) {
	requests := 0
	cleanup := startFakeChannelGateway(t, 40, "test-access-key-0040", map[string]string{
		"POST /v1/browsers/account-a/douyin/get": `{"status": 412, "body": "{\"captcha\":true}", "challenge": "captcha"}`,
	}, func(task taskFrame) {
		var body map[string]any
		_ = json.Unmarshal(task.Payload, &body)
		if body["url"] != testDouyinIdentityURL {
			t.Fatalf("unexpected URL: %#v", body)
		}
		requests = 1
	})
	defer cleanup()
	browser := douyinGatewayBrowser{gateway: hub.Gateway{ID: 40, Name: "gw-test"}, environment: readyDouyinEnvironment()}
	result, err := browser.Get(context.Background(), testDouyinIdentityURL)
	if err != nil || result.Status != 412 || result.Challenge != douyin.ChallengeCaptcha || requests != 1 {
		t.Fatalf("unexpected result: %#v requests=%d err=%v", result, requests, err)
	}
}

func TestDouyinGatewayBrowserCapturesLoginScreen(t *testing.T) {
	encoded := strings.Repeat("cG5n", 300_000)
	cleanup := startFakeChannelGateway(t, 41, "test-access-key-0041", map[string]string{
		"POST /v1/browsers/account-a/douyin/login-qr": "200 " + `{"content_type":"image/png","body_base64":"` + encoded + `","qr_detected":true}`,
	})
	defer cleanup()
	browser := douyinGatewayBrowser{gateway: hub.Gateway{ID: 41, Name: "gw-test"}, environment: readyDouyinEnvironment()}
	result, err := browser.LoginQR(context.Background())
	if err != nil || result.ContentType != "image/png" || result.BodyBase64 != encoded || !result.QRDetected {
		t.Fatalf("unexpected login screen: %#v err=%v", result, err)
	}
}

func TestDouyinGatewayBrowserRejectsInvalidLoginScreen(t *testing.T) {
	cleanup := startFakeChannelGateway(t, 42, "test-access-key-0042", map[string]string{
		"POST /v1/browsers/account-a/douyin/login-qr": `{"content_type":"image/png","body_base64":"not-base64"}`,
	})
	defer cleanup()
	browser := douyinGatewayBrowser{gateway: hub.Gateway{ID: 42, Name: "gw-test"}, environment: readyDouyinEnvironment()}
	if _, err := browser.LoginQR(context.Background()); err == nil {
		t.Fatal("invalid login screen was accepted")
	}
}

func TestDouyinGatewayBrowserFailsClosedWithoutReadyBinding(t *testing.T) {
	environment := readyDouyinEnvironment()
	environment.Exit.HealthStatus = "unhealthy"
	browser := douyinGatewayBrowser{gateway: hub.Gateway{ID: 43, Name: "gw-test"}, environment: environment}
	if _, err := browser.Get(context.Background(), testDouyinIdentityURL); err == nil {
		t.Fatalf("unready binding reached gateway: err=%v", err)
	}
}

func TestDouyinGatewayBrowserDoesNotEchoCredentialOnFailure(t *testing.T) {
	cleanup := startFakeChannelGateway(t, 44, "test-access-key-0044", map[string]string{
		"POST /v1/browsers/account-a/douyin/get": "502 " + `{"error":"private-session"}`,
	})
	defer cleanup()
	browser := douyinGatewayBrowser{gateway: hub.Gateway{ID: 44, Name: "gw-test"}, environment: readyDouyinEnvironment()}
	_, err := browser.Get(context.Background(), testDouyinIdentityURL)
	if err == nil || strings.Contains(err.Error(), "private-session") {
		t.Fatalf("gateway failure leaked credential: %v", err)
	}
}

func readyDouyinEnvironment() hub.EnvironmentContext {
	return hub.EnvironmentContext{Env: hub.Env{Alias: "account-a", Gateway: "gateway-a"}, AccountID: "account-a",
		AccountStatus: "active", BindingVersion: 2,
		Exit:      hub.NetworkExit{ID: "exit-a", HealthStatus: "healthy"},
		RuntimeID: "bbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbb", RuntimeNetworkID: "native-aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa"}
}