# frozen_string_literal: true

require 'test_helper'

class DeviseJwtAuth::RefreshTokenControllerTest < ActionDispatch::IntegrationTest
  describe DeviseJwtAuth::RefreshTokenController do
    describe 'confirmed user' do
      before do
        @resource = create(:user, :confirmed)
        @auth_headers = get_cookie_header(DeviseJwtAuth.refresh_token_name,
                                          @resource.create_refresh_token)
        get DeviseJwtAuth.default_refresh_token_path, params: {}, headers: @auth_headers
        @resp = JSON.parse(response.body)
      end

      test 'response valid' do
        assert_equal 200, response.status
      end

      test 'should return access token' do
        assert @resp[DeviseJwtAuth.access_token_name]
      end
    end

    describe 'unconfirmed user' do
      before do
        @resource = create(:user)
        @auth_headers = get_cookie_header(DeviseJwtAuth.refresh_token_name,
                                          @resource.create_refresh_token)
        get DeviseJwtAuth.default_refresh_token_path, params: {}, headers: @auth_headers
        @resp = JSON.parse(response.body)
      end

      test 'response valid' do
        assert_equal 200, response.status
      end

      test 'should not return access token' do
        assert_nil @resp[DeviseJwtAuth.access_token_name]
      end
    end

    describe 'an expired token' do
      before do
        @resource = create(:user, :confirmed)
        @exp = (Time.now - 1.hour).to_i
        @expired_token = @resource.create_refresh_token(exp: @exp)
        @auth_headers = get_cookie_header(DeviseJwtAuth.refresh_token_name,
                                          @expired_token)
        get DeviseJwtAuth.default_refresh_token_path, params: {}, headers: @auth_headers
        @resp = JSON.parse(response.body)
      end

      it 'response error' do
        assert_equal 401, response.status
      end

      it 'should not return access token' do
        assert_nil @resp[DeviseJwtAuth.access_token_name]
      end
    end

    describe 'an invalid refresh token' do
      before do
        @auth_headers = get_cookie_header(DeviseJwtAuth.refresh_token_name, 'invalid-token')
        get DeviseJwtAuth.default_refresh_token_path, params: {}, headers: @auth_headers
        @resp = JSON.parse(response.body)
      end

      it 'response error' do
        assert_equal 401, response.status
      end

      it 'should not return access token' do
        assert_nil @resp[DeviseJwtAuth.access_token_name]
      end
    end
  end
end