package middleware

import (
	"net/http"
	"net/http/httptest"
	"testing"

	"github.com/gin-gonic/gin"
	"github.com/stretchr/testify/assert"
)

func TestFeatureFlagCheck_NoFeatureFlags(t *testing.T) {
	gin.SetMode(gin.TestMode)
	r := gin.New()
	r.Use(FeatureFlagCheck(FeatureCustomRoles))
	r.GET("/test", func(c *gin.Context) { c.JSON(200, gin.H{"ok": true}) })

	w := httptest.NewRecorder()
	req := httptest.NewRequest(http.MethodGet, "/test", nil)
	r.ServeHTTP(w, req)
	// No flags in context = allow (self-hosted mode, all features enabled)
	assert.Equal(t, 200, w.Code)
}

func TestFeatureFlagCheck_FeatureEnabled(t *testing.T) {
	gin.SetMode(gin.TestMode)
	r := gin.New()
	r.Use(func(c *gin.Context) { c.Set("feature_flags", `["custom_roles","automation"]`); c.Next() })
	r.Use(FeatureFlagCheck(FeatureCustomRoles))
	r.GET("/test", func(c *gin.Context) { c.JSON(200, gin.H{"ok": true}) })

	w := httptest.NewRecorder()
	req := httptest.NewRequest(http.MethodGet, "/test", nil)
	r.ServeHTTP(w, req)
	assert.Equal(t, 200, w.Code)
}

func TestFeatureFlagCheck_FeatureNotEnabled(t *testing.T) {
	gin.SetMode(gin.TestMode)
	r := gin.New()
	r.Use(func(c *gin.Context) { c.Set("feature_flags", `["automation"]`); c.Next() })
	r.Use(FeatureFlagCheck(FeatureCustomRoles))
	r.GET("/test", func(c *gin.Context) { c.JSON(200, gin.H{"ok": true}) })

	w := httptest.NewRecorder()
	req := httptest.NewRequest(http.MethodGet, "/test", nil)
	r.ServeHTTP(w, req)
	assert.Equal(t, 403, w.Code)
}

func TestFeatureFlagCheck_JSONObjectFormat(t *testing.T) {
	gin.SetMode(gin.TestMode)
	r := gin.New()
	r.Use(func(c *gin.Context) {
		c.Set("feature_flags", `{"help_center":true,"csat":false}`)
		c.Next()
	})
	r.Use(FeatureFlagCheck(FeatureHelpCenter))
	r.GET("/test", func(c *gin.Context) { c.JSON(200, gin.H{"ok": true}) })

	w := httptest.NewRecorder()
	req := httptest.NewRequest(http.MethodGet, "/test", nil)
	r.ServeHTTP(w, req)
	assert.Equal(t, 200, w.Code)
}

func TestFeatureFlagCheck_JSONObjectFormatDisabled(t *testing.T) {
	gin.SetMode(gin.TestMode)
	r := gin.New()
	r.Use(func(c *gin.Context) {
		c.Set("feature_flags", `{"help_center":true,"csat":false}`)
		c.Next()
	})
	r.Use(FeatureFlagCheck(FeatureCSAT))
	r.GET("/test", func(c *gin.Context) { c.JSON(200, gin.H{"ok": true}) })

	w := httptest.NewRecorder()
	req := httptest.NewRequest(http.MethodGet, "/test", nil)
	r.ServeHTTP(w, req)
	assert.Equal(t, 403, w.Code)
}

func TestFeatureFlagCheck_InvalidJSON(t *testing.T) {
	gin.SetMode(gin.TestMode)
	r := gin.New()
	r.Use(func(c *gin.Context) { c.Set("feature_flags", "not-json"); c.Next() })
	r.Use(FeatureFlagCheck(FeatureCustomRoles))
	r.GET("/test", func(c *gin.Context) { c.JSON(200, gin.H{"ok": true}) })

	w := httptest.NewRecorder()
	req := httptest.NewRequest(http.MethodGet, "/test", nil)
	r.ServeHTTP(w, req)
	// Invalid JSON that's not an empty string = treat as no matching flags = 403
	assert.Equal(t, 403, w.Code)
}