require 'spec_helper'

# require 'shared_examples/controller_oauth2_shared_examples'

describe SorceryController, active_record: true, type: :controller do
  before(:all) do
    if SORCERY_ORM == :active_record
      MigrationHelper.migrate("#{Rails.root}/db/migrate/external")
      MigrationHelper.migrate("#{Rails.root}/db/migrate/activation")
      MigrationHelper.migrate("#{Rails.root}/db/migrate/activity_logging")
      User.reset_column_information
    end

    sorcery_reload!([:external])
    set_external_property
  end

  after(:all) do
    if SORCERY_ORM == :active_record
      MigrationHelper.rollback("#{Rails.root}/db/migrate/external")
      MigrationHelper.rollback("#{Rails.root}/db/migrate/activity_logging")
      MigrationHelper.rollback("#{Rails.root}/db/migrate/activation")
    end
  end

  describe 'using create_from' do
    before(:each) do
      stub_all_oauth2_requests!
    end

    it 'creates a new user' do
      sorcery_model_property_set(:authentications_class, Authentication)
      sorcery_controller_external_property_set(:facebook, :user_info_mapping, username: 'name')

      expect(User).to receive(:create_from_provider).with('facebook', '123', username: 'Noam Ben Ari')
      get :test_create_from_provider, params: { provider: 'facebook' }
    end

    it 'supports nested attributes' do
      sorcery_model_property_set(:authentications_class, Authentication)
      sorcery_controller_external_property_set(:facebook, :user_info_mapping, username: 'hometown/name')
      expect(User).to receive(:create_from_provider).with('facebook', '123', username: 'Haifa, Israel')

      get :test_create_from_provider, params: { provider: 'facebook' }
    end

    it 'does not crash on missing nested attributes' do
      sorcery_model_property_set(:authentications_class, Authentication)
      sorcery_controller_external_property_set(:facebook, :user_info_mapping, username: 'name', created_at: 'does/not/exist')

      expect(User).to receive(:create_from_provider).with('facebook', '123', username: 'Noam Ben Ari')

      get :test_create_from_provider, params: { provider: 'facebook' }
    end

    describe 'with a block' do
      it 'does not create user' do
        sorcery_model_property_set(:authentications_class, Authentication)
        sorcery_controller_external_property_set(:facebook, :user_info_mapping, username: 'name')

        u = double('user')
        expect(User).to receive(:create_from_provider).with('facebook', '123', username: 'Noam Ben Ari').and_return(u).and_yield(u)
        # test_create_from_provider_with_block in controller will check for uniqueness of username
        get :test_create_from_provider_with_block, params: { provider: 'facebook' }
      end
    end
  end

  # ----------------- OAuth -----------------------
  context 'with OAuth features' do
    let(:user) { double('user', id: 42) }

    before(:each) do
      stub_all_oauth2_requests!
    end

    after(:each) do
      User.sorcery_adapter.delete_all
      Authentication.sorcery_adapter.delete_all
    end

    context 'when callback_url begin with /' do
      before do
        sorcery_controller_external_property_set(:facebook, :callback_url, '/oauth/twitter/callback')
      end
      it 'login_at redirects correctly' do
        get :login_at_test_facebook
        expect(response).to be_a_redirect
        expect(response).to redirect_to("https://www.facebook.com/dialog/oauth?client_id=#{::Sorcery::Controller::Config.facebook.key}&display=page&redirect_uri=http%3A%2F%2Ftest.host%2Foauth%2Ftwitter%2Fcallback&response_type=code&scope=email&state")
      end

      it 'logins with state' do
        get :login_at_test_with_state
        expect(response).to be_a_redirect
        expect(response).to redirect_to("https://www.facebook.com/dialog/oauth?client_id=#{::Sorcery::Controller::Config.facebook.key}&display=page&redirect_uri=http%3A%2F%2Ftest.host%2Foauth%2Ftwitter%2Fcallback&response_type=code&scope=email&state=bla")
      end

      it 'logins with Graph API version' do
        sorcery_controller_external_property_set(:facebook, :api_version, 'v2.2')
        get :login_at_test_with_state
        expect(response).to be_a_redirect
        expect(response).to redirect_to("https://www.facebook.com/v2.2/dialog/oauth?client_id=#{::Sorcery::Controller::Config.facebook.key}&display=page&redirect_uri=http%3A%2F%2Ftest.host%2Foauth%2Ftwitter%2Fcallback&response_type=code&scope=email&state=bla")
      end

      it 'logins without state after login with state' do
        get :login_at_test_with_state
        expect(response).to redirect_to("https://www.facebook.com/v2.2/dialog/oauth?client_id=#{::Sorcery::Controller::Config.facebook.key}&display=page&redirect_uri=http%3A%2F%2Ftest.host%2Foauth%2Ftwitter%2Fcallback&response_type=code&scope=email&state=bla")

        get :login_at_test_facebook
        expect(response).to redirect_to("https://www.facebook.com/v2.2/dialog/oauth?client_id=#{::Sorcery::Controller::Config.facebook.key}&display=page&redirect_uri=http%3A%2F%2Ftest.host%2Foauth%2Ftwitter%2Fcallback&response_type=code&scope=email&state")
      end

      after do
        sorcery_controller_external_property_set(:facebook, :callback_url, 'http://blabla.com')
      end
    end

    context 'when callback_url begin with http://' do
      before do
        sorcery_controller_external_property_set(:facebook, :callback_url, '/oauth/twitter/callback')
        sorcery_controller_external_property_set(:facebook, :api_version, 'v2.2')
      end

      it 'login_at redirects correctly' do
        create_new_user
        get :login_at_test_facebook
        expect(response).to be_a_redirect
        expect(response).to redirect_to("https://www.facebook.com/v2.2/dialog/oauth?client_id=#{::Sorcery::Controller::Config.facebook.key}&display=page&redirect_uri=http%3A%2F%2Ftest.host%2Foauth%2Ftwitter%2Fcallback&response_type=code&scope=email&state")
      end

      after do
        sorcery_controller_external_property_set(:facebook, :callback_url, 'http://blabla.com')
      end
    end

    it "'login_from' logins if user exists" do
      # dirty hack for rails 4
      allow(subject).to receive(:register_last_activity_time_to_db)

      sorcery_model_property_set(:authentications_class, Authentication)
      expect(User).to receive(:load_from_provider).with(:facebook, '123').and_return(user)
      get :test_login_from_facebook

      expect(flash[:notice]).to eq 'Success!'
    end

    it "'login_from' fails if user doesn't exist" do
      sorcery_model_property_set(:authentications_class, Authentication)
      expect(User).to receive(:load_from_provider).with(:facebook, '123').and_return(nil)
      get :test_login_from_facebook

      expect(flash[:alert]).to eq 'Failed!'
    end

    it 'on successful login_from the user is redirected to the url he originally wanted' do
      # dirty hack for rails 4
      allow(subject).to receive(:register_last_activity_time_to_db)

      sorcery_model_property_set(:authentications_class, Authentication)
      expect(User).to receive(:load_from_provider).with(:facebook, '123').and_return(user)
      get :test_return_to_with_external_facebook, params: {}, session: { return_to_url: 'fuu' }

      expect(response).to redirect_to('fuu')
      expect(flash[:notice]).to eq 'Success!'
    end

    %i[github google liveid vk salesforce paypal slack wechat microsoft instagram auth0 discord battlenet].each do |provider|
      describe "with #{provider}" do
        it 'login_at redirects correctly' do
          get :"login_at_test_#{provider}"

          expect(response).to be_a_redirect
          expect(response).to redirect_to(provider_url(provider))
        end

        it "'login_from' logins if user exists" do
          # dirty hack for rails 4
          allow(subject).to receive(:register_last_activity_time_to_db)

          sorcery_model_property_set(:authentications_class, Authentication)
          expect(User).to receive(:load_from_provider).with(provider, '123').and_return(user)
          get :"test_login_from_#{provider}"

          expect(flash[:notice]).to eq 'Success!'
        end

        it "'login_from' fails if user doesn't exist" do
          sorcery_model_property_set(:authentications_class, Authentication)
          expect(User).to receive(:load_from_provider).with(provider, '123').and_return(nil)
          get :"test_login_from_#{provider}"

          expect(flash[:alert]).to eq 'Failed!'
        end

        it "on successful login_from the user is redirected to the url he originally wanted (#{provider})" do
          # dirty hack for rails 4
          allow(subject).to receive(:register_last_activity_time_to_db)

          sorcery_model_property_set(:authentications_class, Authentication)
          expect(User).to receive(:load_from_provider).with(provider, '123').and_return(user)
          get :"test_return_to_with_external_#{provider}", params: {}, session: { return_to_url: 'fuu' }

          expect(response).to redirect_to 'fuu'
          expect(flash[:notice]).to eq 'Success!'
        end
      end
    end
  end

  describe 'OAuth with User Activation features' do
    before(:all) do
      sorcery_reload!(%i[user_activation external], user_activation_mailer: ::SorceryMailer)
      sorcery_controller_property_set(
        :external_providers,
        %i[
          facebook
          github
          google
          liveid
          vk
          salesforce
          paypal
          slack
          wechat
          microsoft
          instagram
          auth0
          line
          discord
          battlenet
        ]
      )

      # TODO: refactor
      sorcery_controller_external_property_set(:facebook, :key, 'eYVNBjBDi33aa9GkA3w')
      sorcery_controller_external_property_set(:facebook, :secret, 'XpbeSdCoaKSmQGSeokz5qcUATClRW5u08QWNfv71N8')
      sorcery_controller_external_property_set(:facebook, :callback_url, 'http://blabla.com')
      sorcery_controller_external_property_set(:github, :key, 'eYVNBjBDi33aa9GkA3w')
      sorcery_controller_external_property_set(:github, :secret, 'XpbeSdCoaKSmQGSeokz5qcUATClRW5u08QWNfv71N8')
      sorcery_controller_external_property_set(:github, :callback_url, 'http://blabla.com')
      sorcery_controller_external_property_set(:google, :key, 'eYVNBjBDi33aa9GkA3w')
      sorcery_controller_external_property_set(:google, :secret, 'XpbeSdCoaKSmQGSeokz5qcUATClRW5u08QWNfv71N8')
      sorcery_controller_external_property_set(:google, :callback_url, 'http://blabla.com')
      sorcery_controller_external_property_set(:liveid, :key, 'eYVNBjBDi33aa9GkA3w')
      sorcery_controller_external_property_set(:liveid, :secret, 'XpbeSdCoaKSmQGSeokz5qcUATClRW5u08QWNfv71N8')
      sorcery_controller_external_property_set(:liveid, :callback_url, 'http://blabla.com')
      sorcery_controller_external_property_set(:vk, :key, 'eYVNBjBDi33aa9GkA3w')
      sorcery_controller_external_property_set(:vk, :secret, 'XpbeSdCoaKSmQGSeokz5qcUATClRW5u08QWNfv71N8')
      sorcery_controller_external_property_set(:vk, :callback_url, 'http://blabla.com')
      sorcery_controller_external_property_set(:salesforce, :key, 'eYVNBjBDi33aa9GkA3w')
      sorcery_controller_external_property_set(:salesforce, :secret, 'XpbeSdCoaKSmQGSeokz5qcUATClRW5u08QWNfv71N8')
      sorcery_controller_external_property_set(:salesforce, :callback_url, 'http://blabla.com')
      sorcery_controller_external_property_set(:paypal, :key, 'eYVNBjBDi33aa9GkA3w')
      sorcery_controller_external_property_set(:paypal, :secret, 'XpbeSdCoaKSmQGSeokz5qcUATClRW5u08QWNfv71N8')
      sorcery_controller_external_property_set(:paypal, :callback_url, 'http://blabla.com')
      sorcery_controller_external_property_set(:slack, :key, 'eYVNBjBDi33aa9GkA3w')
      sorcery_controller_external_property_set(:slack, :secret, 'XpbeSdCoaKSmQGSeokz5qcUATClRW5u08QWNfv71N8')
      sorcery_controller_external_property_set(:slack, :callback_url, 'http://blabla.com')
      sorcery_controller_external_property_set(:wechat, :key, 'eYVNBjBDi33aa9GkA3w')
      sorcery_controller_external_property_set(:wechat, :secret, 'XpbeSdCoaKSmQGSeokz5qcUATClRW5u08QWNfv71N8')
      sorcery_controller_external_property_set(:wechat, :callback_url, 'http://blabla.com')
      sorcery_controller_external_property_set(:microsoft, :key, 'eYVNBjBDi33aa9GkA3w')
      sorcery_controller_external_property_set(:microsoft, :secret, 'XpbeSdCoaKSmQGSeokz5qcUATClRW5u08QWNfv71N8')
      sorcery_controller_external_property_set(:microsoft, :callback_url, 'http://blabla.com')
      sorcery_controller_external_property_set(:instagram, :key, 'eYVNBjBDi33aa9GkA3w')
      sorcery_controller_external_property_set(:instagram, :secret, 'XpbeSdCoaKSmQGSeokz5qcUATClRW5u08QWNfv71N8')
      sorcery_controller_external_property_set(:instagram, :callback_url, 'http://blabla.com')
      sorcery_controller_external_property_set(:auth0, :key, 'eYVNBjBDi33aa9GkA3w')
      sorcery_controller_external_property_set(:auth0, :secret, 'XpbeSdCoaKSmQGSeokz5qcUATClRW5u08QWNfv71N8')
      sorcery_controller_external_property_set(:auth0, :callback_url, 'http://blabla.com')
      sorcery_controller_external_property_set(:auth0, :site, 'https://sorcery-test.auth0.com')
      sorcery_controller_external_property_set(:line, :key, "eYVNBjBDi33aa9GkA3w")
      sorcery_controller_external_property_set(:line, :secret, "XpbeSdCoaKSmQGSeokz5qcUATClRW5u08QWNfv71N8")
      sorcery_controller_external_property_set(:line, :callback_url, "http://blabla.com")
      sorcery_controller_external_property_set(:discord, :key, 'eYVNBjBDi33aa9GkA3w')
      sorcery_controller_external_property_set(:discord, :secret, 'XpbeSdCoaKSmQGSeokz5qcUATClRW5u08QWNfv71N8')
      sorcery_controller_external_property_set(:discord, :callback_url, 'http://blabla.com')
      sorcery_controller_external_property_set(:battlenet, :key, '4c43d4862c774ca5bbde89873bf0d338')
      sorcery_controller_external_property_set(:battlenet, :secret, 'TxY7IwKOykACd8kUxPyVGTqBs44UBDdX')
      sorcery_controller_external_property_set(:battlenet, :callback_url, 'http://blabla.com')
    end

    after(:each) do
      User.sorcery_adapter.delete_all
    end

    it 'does not send activation email to external users' do
      old_size = ActionMailer::Base.deliveries.size
      create_new_external_user(:facebook)

      expect(ActionMailer::Base.deliveries.size).to eq old_size
    end

    it 'does not send external users an activation success email' do
      sorcery_model_property_set(:activation_success_email_method_name, nil)
      create_new_external_user(:facebook)
      old_size = ActionMailer::Base.deliveries.size
      @user.activate!

      expect(ActionMailer::Base.deliveries.size).to eq old_size
    end

    %i[github google liveid vk salesforce paypal wechat microsoft instagram auth0 discord battlenet].each do |provider|
      it "does not send activation email to external users (#{provider})" do
        old_size = ActionMailer::Base.deliveries.size
        create_new_external_user provider
        expect(ActionMailer::Base.deliveries.size).to eq old_size
      end

      it "does not send external users an activation success email (#{provider})" do
        sorcery_model_property_set(:activation_success_email_method_name, nil)
        create_new_external_user provider
        old_size = ActionMailer::Base.deliveries.size
        @user.activate!
        expect(ActionMailer::Base.deliveries.size).to eq old_size
      end
    end
  end

  describe 'OAuth with user activation features' do
    let(:user) { double('user', id: 42) }

    before(:all) do
      sorcery_reload!(%i[activity_logging external])
    end

    %w[facebook github google liveid vk salesforce slack discord battlenet].each do |provider|
      context "when #{provider}" do
        before(:each) do
          sorcery_controller_property_set(:register_login_time, true)
          sorcery_controller_property_set(:register_logout_time, false)
          sorcery_controller_property_set(:register_last_activity_time, false)
          sorcery_controller_property_set(:register_last_ip_address, false)
          stub_all_oauth2_requests!
          sorcery_model_property_set(:authentications_class, Authentication)
        end

        it 'registers login time' do
          now = Time.now.in_time_zone
          Timecop.freeze(now)
          expect(User).to receive(:load_from_provider).and_return(user)
          expect(user).to receive(:set_last_login_at).with(be_within(0.1).of(now))
          get "test_login_from_#{provider}".to_sym
          Timecop.return
        end

        it 'does not register login time if configured so' do
          sorcery_controller_property_set(:register_login_time, false)
          now = Time.now.in_time_zone
          Timecop.freeze(now)
          expect(User).to receive(:load_from_provider).and_return(user)
          expect(user).to receive(:set_last_login_at).never
          get "test_login_from_#{provider}".to_sym
        end
      end
    end
  end

  describe 'OAuth with session timeout features' do
    before(:all) do
      sorcery_reload!(%i[session_timeout external])
    end

    let(:user) { double('user', id: 42) }

    %w[facebook github google liveid vk salesforce slack discord battlenet].each do |provider|
      context "when #{provider}" do
        before(:each) do
          sorcery_model_property_set(:authentications_class, Authentication)
          sorcery_controller_property_set(:session_timeout, 0.5)
          stub_all_oauth2_requests!
        end

        after(:each) do
          Timecop.return
        end

        it 'does not reset session before session timeout' do
          expect(User).to receive(:load_from_provider).with(provider.to_sym, '123').and_return(user)
          get "test_login_from_#{provider}".to_sym

          expect(session[:user_id]).not_to be_nil
          expect(flash[:notice]).to eq 'Success!'
        end

        it 'resets session after session timeout' do
          expect(User).to receive(:load_from_provider).with(provider.to_sym, '123').and_return(user)
          get "test_login_from_#{provider}".to_sym
          expect(session[:user_id]).to eq '42'
          Timecop.travel(Time.now.in_time_zone + 0.6)
          get :test_should_be_logged_in

          expect(session[:user_id]).to be_nil
          expect(response).to be_a_redirect
        end
      end
    end
  end

  def stub_all_oauth2_requests!
    access_token = double(OAuth2::AccessToken)
    allow(access_token).to receive(:token_param=)
    # Needed for Instagram
    allow(access_token).to receive(:[]).with(:client_id) { 'eYVNBjBDi33aa9GkA3w' }
    response = double(OAuth2::Response)
    allow(response).to receive(:body) {
      {
        'id' => '123',
        'user_id' => '123', # Needed for Salesforce
        'sub' => '123', # Needed for Auth0
        'name' => 'Noam Ben Ari',
        'first_name' => 'Noam',
        'last_name' => 'Ben Ari',
        'link' => 'http://www.facebook.com/nbenari1',
        'hometown' => {
          'id' => '110619208966868',
          'name' => 'Haifa, Israel'
        },
        'location' => {
          'id' => '106906559341067',
          'name' => 'Pardes Hanah, Hefa, Israel'
        },
        'bio' => "I'm a new daddy, and enjoying it!",
        'gender' => 'male',
        'email' => 'nbenari@gmail.com',
        'timezone' => 2,
        'locale' => 'en_US',
        'languages' => [
          {
            'id' => '108405449189952',
            'name' => 'Hebrew'
          },
          {
            'id' => '106059522759137',
            'name' => 'English'
          },
          {
            'id' => '112624162082677',
            'name' => 'Russian'
          }
        ],
        'verified' => true,
        'updated_time' => '2011-02-16T20:59:38+0000',
        # response for VK auth
        'response' => [
          {
            'id' => '123',
            'first_name' => 'Noam',
            'last_name' => 'Ben Ari'
          }
        ],
        'user' => {
          'name' => 'Sonny Whether',
          'id' => '123',
          'email' => 'bobby@example.com'
        },
        # response for wechat auth
        'unionid' => '123',
        # response for instagram
        'data' => {
          'username' => 'pnmahoney',
          'bio' => 'turn WHAT down?',
          'website' => '',
          'profile_picture' => 'http://photos-d.ak.instagram.com/hphotos-ak-xpa1/10454121_417985815007395_867850883_a.jpg',
          'full_name' => 'Patrick Mahoney',
          'counts' => {
            'media' => 2,
            'followed_by' => 100,
            'follows' => 71
          },
          'id' => '123'
        }
      }.to_json
    }
    allow(access_token).to receive(:get) { response }
    allow(access_token).to receive(:token) { '187041a618229fdaf16613e96e1caabc1e86e46bbfad228de41520e63fe45873684c365a14417289599f3' }
    # access_token params for VK auth
    allow(access_token).to receive(:params) { { 'user_id' => '100500', 'email' => 'nbenari@gmail.com' } }
    allow_any_instance_of(OAuth2::Strategy::AuthCode).to receive(:get_token) { access_token }
  end

  def set_external_property
    sorcery_controller_property_set(
      :external_providers,
      %i[
        facebook
        github
        google
        liveid
        vk
        salesforce
        paypal
        slack
        wechat
        microsoft
        instagram
        auth0
        line
        discord
        battlenet
      ]
    )
    sorcery_controller_external_property_set(:facebook, :key, 'eYVNBjBDi33aa9GkA3w')
    sorcery_controller_external_property_set(:facebook, :secret, 'XpbeSdCoaKSmQGSeokz5qcUATClRW5u08QWNfv71N8')
    sorcery_controller_external_property_set(:facebook, :callback_url, 'http://blabla.com')
    sorcery_controller_external_property_set(:github, :key, 'eYVNBjBDi33aa9GkA3w')
    sorcery_controller_external_property_set(:github, :secret, 'XpbeSdCoaKSmQGSeokz5qcUATClRW5u08QWNfv71N8')
    sorcery_controller_external_property_set(:github, :callback_url, 'http://blabla.com')
    sorcery_controller_external_property_set(:google, :key, 'eYVNBjBDi33aa9GkA3w')
    sorcery_controller_external_property_set(:google, :secret, 'XpbeSdCoaKSmQGSeokz5qcUATClRW5u08QWNfv71N8')
    sorcery_controller_external_property_set(:google, :callback_url, 'http://blabla.com')
    sorcery_controller_external_property_set(:liveid, :key, 'eYVNBjBDi33aa9GkA3w')
    sorcery_controller_external_property_set(:liveid, :secret, 'XpbeSdCoaKSmQGSeokz5qcUATClRW5u08QWNfv71N8')
    sorcery_controller_external_property_set(:liveid, :callback_url, 'http://blabla.com')
    sorcery_controller_external_property_set(:vk, :key, 'eYVNBjBDi33aa9GkA3w')
    sorcery_controller_external_property_set(:vk, :secret, 'XpbeSdCoaKSmQGSeokz5qcUATClRW5u08QWNfv71N8')
    sorcery_controller_external_property_set(:vk, :callback_url, 'http://blabla.com')
    sorcery_controller_external_property_set(:salesforce, :key, 'eYVNBjBDi33aa9GkA3w')
    sorcery_controller_external_property_set(:salesforce, :secret, 'XpbeSdCoaKSmQGSeokz5qcUATClRW5u08QWNfv71N8')
    sorcery_controller_external_property_set(:salesforce, :callback_url, 'http://blabla.com')
    sorcery_controller_external_property_set(:paypal, :key, 'eYVNBjBDi33aa9GkA3w')
    sorcery_controller_external_property_set(:paypal, :secret, 'XpbeSdCoaKSmQGSeokz5qcUATClRW5u08QWNfv71N8')
    sorcery_controller_external_property_set(:paypal, :callback_url, 'http://blabla.com')
    sorcery_controller_external_property_set(:slack, :key, 'eYVNBjBDi33aa9GkA3w')
    sorcery_controller_external_property_set(:slack, :secret, 'XpbeSdCoaKSmQGSeokz5qcUATClRW5u08QWNfv71N8')
    sorcery_controller_external_property_set(:slack, :callback_url, 'http://blabla.com')
    sorcery_controller_external_property_set(:wechat, :key, 'eYVNBjBDi33aa9GkA3w')
    sorcery_controller_external_property_set(:wechat, :secret, 'XpbeSdCoaKSmQGSeokz5qcUATClRW5u08QWNfv71N8')
    sorcery_controller_external_property_set(:wechat, :callback_url, 'http://blabla.com')
    sorcery_controller_external_property_set(:microsoft, :key, 'eYVNBjBDi33aa9GkA3w')
    sorcery_controller_external_property_set(:microsoft, :secret, 'XpbeSdCoaKSmQGSeokz5qcUATClRW5u08QWNfv71N8')
    sorcery_controller_external_property_set(:microsoft, :callback_url, 'http://blabla.com')
    sorcery_controller_external_property_set(:instagram, :key, 'eYVNBjBDi33aa9GkA3w')
    sorcery_controller_external_property_set(:instagram, :secret, 'XpbeSdCoaKSmQGSeokz5qcUATClRW5u08QWNfv71N8')
    sorcery_controller_external_property_set(:instagram, :callback_url, 'http://blabla.com')
    sorcery_controller_external_property_set(:auth0, :key, 'eYVNBjBDi33aa9GkA3w')
    sorcery_controller_external_property_set(:auth0, :secret, 'XpbeSdCoaKSmQGSeokz5qcUATClRW5u08QWNfv71N8')
    sorcery_controller_external_property_set(:auth0, :callback_url, 'http://blabla.com')
    sorcery_controller_external_property_set(:auth0, :site, 'https://sorcery-test.auth0.com')
    sorcery_controller_external_property_set(:line, :key, "eYVNBjBDi33aa9GkA3w")
    sorcery_controller_external_property_set(:line, :secret, "XpbeSdCoaKSmQGSeokz5qcUATClRW5u08QWNfv71N8")
    sorcery_controller_external_property_set(:line, :callback_url, "http://blabla.com")
    sorcery_controller_external_property_set(:discord, :key, 'eYVNBjBDi33aa9GkA3w')
    sorcery_controller_external_property_set(:discord, :secret, 'XpbeSdCoaKSmQGSeokz5qcUATClRW5u08QWNfv71N8')
    sorcery_controller_external_property_set(:discord, :callback_url, 'http://blabla.com')
    sorcery_controller_external_property_set(:battlenet, :key, '4c43d4862c774ca5bbde89873bf0d338')
    sorcery_controller_external_property_set(:battlenet, :secret, 'TxY7IwKOykACd8kUxPyVGTqBs44UBDdX')
    sorcery_controller_external_property_set(:battlenet, :callback_url, 'http://blabla.com')
  end

  def provider_url(provider)
    {
      github: "https://github.com/login/oauth/authorize?client_id=#{::Sorcery::Controller::Config.github.key}&display&redirect_uri=http%3A%2F%2Fblabla.com&response_type=code&scope&state",
      paypal: "https://www.paypal.com/webapps/auth/protocol/openidconnect/v1/authorize?client_id=#{::Sorcery::Controller::Config.paypal.key}&display&redirect_uri=http%3A%2F%2Fblabla.com&response_type=code&scope=openid+email&state",
      google: "https://accounts.google.com/o/oauth2/auth?client_id=#{::Sorcery::Controller::Config.google.key}&display&redirect_uri=http%3A%2F%2Fblabla.com&response_type=code&scope=https%3A%2F%2Fwww.googleapis.com%2Fauth%2Fuserinfo.email+https%3A%2F%2Fwww.googleapis.com%2Fauth%2Fuserinfo.profile&state",
      liveid: "https://oauth.live.com/authorize?client_id=#{::Sorcery::Controller::Config.liveid.key}&display&redirect_uri=http%3A%2F%2Fblabla.com&response_type=code&scope=wl.basic+wl.emails+wl.offline_access&state",
      vk: "https://oauth.vk.com/authorize?client_id=#{::Sorcery::Controller::Config.vk.key}&display&redirect_uri=http%3A%2F%2Fblabla.com&response_type=code&scope=#{::Sorcery::Controller::Config.vk.scope}&state",
      salesforce: "https://login.salesforce.com/services/oauth2/authorize?client_id=#{::Sorcery::Controller::Config.salesforce.key}&display&redirect_uri=http%3A%2F%2Fblabla.com&response_type=code&scope#{'=' + ::Sorcery::Controller::Config.salesforce.scope unless ::Sorcery::Controller::Config.salesforce.scope.nil?}&state",
      slack: "https://slack.com/oauth/authorize?client_id=#{::Sorcery::Controller::Config.slack.key}&display&redirect_uri=http%3A%2F%2Fblabla.com&response_type=code&scope=identity.basic%2C+identity.email&state",
      wechat: "https://open.weixin.qq.com/connect/qrconnect?appid=#{::Sorcery::Controller::Config.wechat.key}&redirect_uri=http%3A%2F%2Fblabla.com&response_type=code&scope=snsapi_login&state=#wechat_redirect",
      microsoft: "https://login.microsoftonline.com/common/oauth2/v2.0/authorize?client_id=#{::Sorcery::Controller::Config.microsoft.key}&display&redirect_uri=http%3A%2F%2Fblabla.com&response_type=code&scope=openid+email+https%3A%2F%2Fgraph.microsoft.com%2FUser.Read&state",
      instagram: "https://api.instagram.com/oauth/authorize?client_id=#{::Sorcery::Controller::Config.instagram.key}&display&redirect_uri=http%3A%2F%2Fblabla.com&response_type=code&scope=#{::Sorcery::Controller::Config.instagram.scope}&state",
      auth0: "https://sorcery-test.auth0.com/authorize?client_id=#{::Sorcery::Controller::Config.auth0.key}&display&redirect_uri=http%3A%2F%2Fblabla.com&response_type=code&scope=openid+profile+email&state",
      discord: "https://discordapp.com/api/oauth2/authorize?client_id=#{::Sorcery::Controller::Config.discord.key}&display&redirect_uri=http%3A%2F%2Fblabla.com&response_type=code&scope=identify&state",
      battlenet: "https://eu.battle.net/oauth/authorize?client_id=#{::Sorcery::Controller::Config.battlenet.key}&display&redirect_uri=http%3A%2F%2Fblabla.com&response_type=code&scope=openid&state"
    }[provider]
  end
end