require_relative '../test_helper'

class AccessControlTest < ActionDispatch::IntegrationTest

  module TestAuthentication
    module Authenticate
      def authenticate
        render :text => 'Test Login Denied', :status => :unauthorized
      end
    end

    # faking ComfortableMexicanSofa.config.admin_auth = 'AccessControlTest::TestAuthentication'
    # faking ComfortableMexicanSofa.config.public_auth = 'AccessControlTest::TestAuthentication'
    class SitesController   < Comfy::Admin::Cms::SitesController; include Authenticate; end
    class ContentController < Comfy::Cms::ContentController;      include Authenticate; end
  end

  module TestAuthorization
    module Authorize
      def authorize
        @authorization_vars = self.instance_variables
        render :text => 'Test Access Denied', :status => :forbidden
      end
    end

    # faking ComfortableMexicanSofa.config.admin_authorization = 'AccessControlTest::TestAuthorization'
    # faking ComfortableMexicanSofa.config.public_authorization = 'AccessControlTest::TestAuthorization'
    class SitesController       < Comfy::Admin::Cms::SitesController;       include Authorize; end
    class LayoutsController     < Comfy::Admin::Cms::LayoutsController;     include Authorize; end
    class PagesController       < Comfy::Admin::Cms::PagesController;       include Authorize; end
    class SnippetsController    < Comfy::Admin::Cms::SnippetsController;    include Authorize; end
    class FilesController       < Comfy::Admin::Cms::FilesController;       include Authorize; end
    class CategoriesController  < Comfy::Admin::Cms::CategoriesController;  include Authorize; end
    class RevisionsController   < Comfy::Admin::Cms::RevisionsController;   include Authorize; end
    class ContentController     < Comfy::Cms::ContentController;            include Authorize; end
  end


  def test_admin_authentication_default
    assert_equal 'ComfortableMexicanSofa::AccessControl::AdminAuthentication',
      ComfortableMexicanSofa.config.admin_auth

    get '/admin/sites'
    assert_response :unauthorized

    http_auth :get, '/admin/sites'
    assert_response :success
  end

  def test_admin_authentication_custom
    with_routing do |routes|
      routes.draw do
        get '/admin/sites' => 'access_control_test/test_authentication/sites#index'
      end

      get '/admin/sites'
      assert_response :unauthorized
      assert_equal 'Test Login Denied', response.body
    end
  end

  def test_admin_authorization_default
    assert_equal 'ComfortableMexicanSofa::AccessControl::AdminAuthorization',
      ComfortableMexicanSofa.config.admin_authorization

    Comfy::Admin::Cms::BaseController.send(:include, ComfortableMexicanSofa::AccessControl::AdminAuthorization)
    http_auth :get, "/admin/sites/#{comfy_cms_sites(:default).to_param}/edit"
    assert_response :success, response.body
  end

  def test_admin_authorization_custom
    site = comfy_cms_sites(:default)
    with_routing do |routes|
      routes.draw do
        s   = '/admin/sites'
        ns  = 'access_control_test/test_authorization'
        get "#{s}/:id/edit"                                   => "#{ns}/sites#edit"
        get "#{s}/:site_id/layouts/:id/edit"                  => "#{ns}/layouts#edit"
        get "#{s}/:site_id/layouts/:layout_id/revisions/:id"  => "#{ns}/revisions#show"
        get "#{s}/:site_id/pages/:id/edit"                    => "#{ns}/pages#edit"
        get "#{s}/:site_id/snippets/:id/edit"                 => "#{ns}/snippets#edit"
        get "#{s}/:site_id/files/:id/edit"                    => "#{ns}/files#edit"
        get "#{s}/:site_id/categories/:id/edit"               => "#{ns}/categories#edit"
      end

      http_auth :get, "/admin/sites/#{site.id}/edit"
      assert_response :forbidden
      assert_equal 'Test Access Denied', response.body
      assert assigns(:authorization_vars)
      assert assigns(:authorization_vars).member?(:@site)

      layout = comfy_cms_layouts(:default)
      http_auth :get, "/admin/sites/#{site.id}/layouts/#{layout.id}/edit"
      assert assigns(:authorization_vars).member?(:@site)
      assert assigns(:authorization_vars).member?(:@layout)

      revision = comfy_cms_revisions(:layout)
      http_auth :get, "/admin/sites/#{site.id}/layouts/#{layout.id}/revisions/#{revision.id}"
      assert assigns(:authorization_vars).member?(:@site)
      assert assigns(:authorization_vars).member?(:@record)

      page = comfy_cms_pages(:default)
      http_auth :get, "/admin/sites/#{site.id}/pages/#{page.id}/edit"
      assert assigns(:authorization_vars).member?(:@site)
      assert assigns(:authorization_vars).member?(:@page)

      snippet = comfy_cms_snippets(:default)
      http_auth :get, "/admin/sites/#{site.id}/snippets/#{snippet.id}/edit"
      assert assigns(:authorization_vars).member?(:@site)
      assert assigns(:authorization_vars).member?(:@snippet)

      file = comfy_cms_files(:default)
      http_auth :get, "/admin/sites/#{site.id}/files/#{file.id}/edit"
      assert assigns(:authorization_vars).member?(:@site)
      assert assigns(:authorization_vars).member?(:@file)

      category = comfy_cms_categories(:default)
      http_auth :get, "/admin/sites/#{site.id}/categories/#{category.id}/edit"
      assert assigns(:authorization_vars).member?(:@site)
      assert assigns(:authorization_vars).member?(:@category)
    end
  end

  def test_public_authentication_default
    assert_equal 'ComfortableMexicanSofa::AccessControl::PublicAuthentication',
      ComfortableMexicanSofa.config.public_auth

    get '/'
    assert_response :success, response.body
  end

  def test_public_authorization_default
    assert_equal 'ComfortableMexicanSofa::AccessControl::PublicAuthorization',
      ComfortableMexicanSofa.config.public_authorization

    get '/'
    assert_response :success, response.body
  end

  def test_public_authentication_custom
    with_routing do |routes|
      routes.draw do
        get '/:format' => 'access_control_test/test_authentication/content#show', :path => "(*cms_path)"
      end

      get '/'
      assert_response :unauthorized
      assert_equal 'Test Login Denied', response.body
    end
  end

  def test_public_authorization_custom
    with_routing do |routes|
      routes.draw do
        get '/:format' => 'access_control_test/test_authorization/content#show', :path => "(*cms_path)"
      end

      get '/'
      assert_response :forbidden
      assert_equal 'Test Access Denied', response.body
    end
  end

end