require 'spec_helper'
require 'puppet/network/http'
require 'puppet/network/http/api/indirected_routes'
require 'puppet/network/authorization'

describe Puppet::Network::Authorization do
  class AuthTest
    include Puppet::Network::Authorization
  end

  subject { AuthTest.new }

  context "when creating an authconfig object" do
    before :each do
      # Other tests may have created an authconfig, so we have to undo that.
      @orig_auth_config = Puppet::Network::AuthConfigLoader.instance_variable_get(:@auth_config)
      @orig_auth_config_file = Puppet::Network::AuthConfigLoader.instance_variable_get(:@auth_config_file)

      Puppet::Network::AuthConfigLoader.instance_variable_set(:@auth_config, nil)
      Puppet::Network::AuthConfigLoader.instance_variable_set(:@auth_config_file, nil)
    end

    after :each do
      Puppet::Network::AuthConfigLoader.instance_variable_set(:@auth_config, @orig_auth_config)
      Puppet::Network::AuthConfigLoader.instance_variable_set(:@auth_config_file, @orig_auth_config_file)
    end

    it "creates default ACL entries if no file has been read" do
      expect(Puppet::Network::AuthConfigParser).to receive(:new_from_file).and_raise(Errno::ENOENT)
      expect_any_instance_of(Puppet::Network::DefaultAuthProvider).to receive(:insert_default_acl)

      subject.authconfig
    end
  end

  class TestAuthConfig
    def check_authorization(method, path, params); end
  end

  class TestAuthConfigLoader
    def self.authconfig
      TestAuthConfig.new
    end
  end

  context "when checking authorization" do
    after :each do
      Puppet::Network::Authorization.authconfigloader_class = nil
    end

    it "delegates to the authconfig object" do
      Puppet::Network::Authorization.authconfigloader_class =
          TestAuthConfigLoader
      expect_any_instance_of(TestAuthConfig).to receive(:check_authorization).with(
          :save, '/mypath', {:param1 => "value1"}).and_return("yay, it worked!")
      expect(subject.check_authorization(
                 :save, '/mypath',
                 {:param1 => "value1"})).to eq("yay, it worked!")
    end
  end
end