require 'spec_helper'

if defined?(ActionController::Request)

  describe ApiAuth::RequestDrivers::ActionControllerRequest do

    let(:timestamp){ Time.now.utc.httpdate }

    let(:request) do
      ActionController::Request.new(
        'AUTHORIZATION'  => 'APIAuth 1044:12345',
        'PATH_INFO' => '/resource.xml',
        'QUERY_STRING' => 'foo=bar&bar=foo',
        'REQUEST_METHOD' => 'PUT',
        'CONTENT_MD5' => '1B2M2Y8AsgTpgAmY7PhCfg==',
        'CONTENT_TYPE' => 'text/plain',
        'CONTENT_LENGTH' => '11',
        'HTTP_DATE' => timestamp,
        'rack.input' => StringIO.new("hello\nworld")
      )
    end

    subject(:driven_request){ ApiAuth::RequestDrivers::ActionControllerRequest.new(request) }

    describe "getting headers correctly" do
      it "gets the content_type" do
        expect(driven_request.content_type).to eq('text/plain')
      end

      it "gets the content_md5" do
        expect(driven_request.content_md5).to eq('1B2M2Y8AsgTpgAmY7PhCfg==')
      end

      it "gets the request_uri" do
        expect(driven_request.request_uri).to eq('/resource.xml?foo=bar&bar=foo')
      end

      it "gets the timestamp" do
        expect(driven_request.timestamp).to eq(timestamp)
      end

      it "gets the authorization_header" do
        expect(driven_request.authorization_header).to eq('APIAuth 1044:12345')
      end

      describe "#calculated_md5" do
        it "calculates md5 from the body" do
          expect(driven_request.calculated_md5).to eq('kZXQvrKoieG+Be1rsZVINw==')
        end

        it "treats no body as empty string" do
          request.env['rack.input'] = StringIO.new
          request.env['CONTENT_LENGTH'] = 0
          expect(driven_request.calculated_md5).to eq('1B2M2Y8AsgTpgAmY7PhCfg==')
        end
      end

      describe "http_method" do
        context "when put request" do
          let(:request) do
            ActionController::Request.new('REQUEST_METHOD' => 'PUT')
          end

          it "returns upcased put" do
            expect(driven_request.http_method).to eq('PUT')
          end
        end

        context "when get request" do
          let(:request) do
            ActionController::Request.new('REQUEST_METHOD' => 'GET')
          end

          it "returns upcased get" do
            expect(driven_request.http_method).to eq('GET')
          end
        end
      end
    end

    describe "setting headers correctly" do
      let(:request) do
        ActionController::Request.new(
          'PATH_INFO'      => '/resource.xml',
          'QUERY_STRING'   => 'foo=bar&bar=foo',
          'REQUEST_METHOD' => 'PUT',
          'CONTENT_TYPE'   => 'text/plain',
          'CONTENT_LENGTH' => '11',
          'rack.input'     => StringIO.new("hello\nworld")
        )
      end

      describe "#populate_content_md5" do
        context "when getting" do
          it "doesn't populate content-md5" do
            request.env['REQUEST_METHOD'] = 'GET'
            driven_request.populate_content_md5
            expect(request.env["Content-MD5"]).to be_nil
          end
        end

        context "when posting" do
          it "populates content-md5" do
            request.env['REQUEST_METHOD'] = 'POST'
            driven_request.populate_content_md5
            expect(request.env["Content-MD5"]).to eq('kZXQvrKoieG+Be1rsZVINw==')
          end

          it "refreshes the cached headers" do
            driven_request.populate_content_md5
            expect(driven_request.content_md5).to eq('kZXQvrKoieG+Be1rsZVINw==')
          end
        end

        context "when putting" do
          it "populates content-md5" do
            request.env['REQUEST_METHOD'] = 'PUT'
            driven_request.populate_content_md5
            expect(request.env["Content-MD5"]).to eq('kZXQvrKoieG+Be1rsZVINw==')
          end

          it "refreshes the cached headers" do
            driven_request.populate_content_md5
            expect(driven_request.content_md5).to eq('kZXQvrKoieG+Be1rsZVINw==')
          end
        end

        context "when deleting" do
          it "doesn't populate content-md5" do
            request.env['REQUEST_METHOD'] = 'DELETE'
            driven_request.populate_content_md5
            expect(request.env["Content-MD5"]).to be_nil
          end
        end

      end

      describe "#set_date" do
        before do
          allow(Time).to receive_message_chain(:now, :utc, :httpdate).and_return(timestamp)
        end

        it "sets the date header of the request" do
          driven_request.set_date
          expect(request.env['HTTP_DATE']).to eq(timestamp)
        end

        it "refreshes the cached headers" do
          driven_request.set_date
          expect(driven_request.timestamp).to eq(timestamp)
        end
      end

      describe "#set_auth_header" do
        it "sets the auth header" do
          driven_request.set_auth_header('APIAuth 1044:54321')
          expect(request.env['Authorization']).to eq('APIAuth 1044:54321')
        end
      end
    end

    describe "md5_mismatch?" do
      context "when getting" do
        before do
          request.env['REQUEST_METHOD'] = 'GET'
        end

        it "is false" do
          expect(driven_request.md5_mismatch?).to be false
        end
      end

      context "when posting" do
        before do
          request.env['REQUEST_METHOD'] = 'POST'
        end

        context "when calculated matches sent" do
          before do
            request.env["CONTENT_MD5"] = 'kZXQvrKoieG+Be1rsZVINw=='
          end

          it "is false" do
            expect(driven_request.md5_mismatch?).to be false
          end
        end

        context "when calculated doesn't match sent" do
          before do
            request.env["CONTENT_MD5"] = "3"
          end

          it "is true" do
            expect(driven_request.md5_mismatch?).to be true
          end
        end
      end

      context "when putting" do
        before do
          request.env['REQUEST_METHOD'] = 'PUT'
        end

        context "when calculated matches sent" do
          before do
            request.env["CONTENT_MD5"] = 'kZXQvrKoieG+Be1rsZVINw=='
          end

          it "is false" do
            expect(driven_request.md5_mismatch?).to be false
          end
        end

        context "when calculated doesn't match sent" do
          before do
            request.env["CONTENT_MD5"] = "3"
          end

          it "is true" do
            expect(driven_request.md5_mismatch?).to be true
          end
        end
      end

      context "when deleting" do
        before do
          request.env['REQUEST_METHOD'] = 'DELETE'
        end

        it "is false" do
          expect(driven_request.md5_mismatch?).to be false
        end
      end
    end
  end
end