require 'spec_helper'
require 'bundler/audit/cli/formats'
require 'bundler/audit/cli/formats/text'
require 'bundler/audit/report'

describe Bundler::Audit::CLI::Formats::Text do
  it "must register the 'text' format" do
    expect(Bundler::Audit::CLI::Formats[:text]).to be described_class
  end

  let(:options) { {} }

  subject do
    Bundler::Audit::CLI.new([],options).tap do |obj|
      obj.extend described_class
    end
  end

  describe "#print_report" do
    let(:report) { Bundler::Audit::Report.new }
    let(:stdout) { StringIO.new }

    before { subject.print_report(report,stdout) }

    let(:output) { stdout.string }
    let(:output_lines) { output.lines.map(&:chomp) }

    context "when vulnerabilities were found" do
      context "when the report contains InsecureSources" do
        let(:uri) { URI('git://github.com/foo/bar.git') }
        let(:insecure_source) do
          Bundler::Audit::Results::InsecureSource.new(uri)
        end

        let(:report) do
          super().tap do |report|
            report << insecure_source
          end
        end

        it 'must print "Insecure Source URI found: ..."' do
          expect(output_lines).to include("Insecure Source URI found: #{uri}")
        end

        it 'must print "Vulnerabilities found!"' do
          expect(output_lines).to include("Vulnerabilities found!")
        end
      end

      context "when the report contains UnpatchedGems" do
        let(:gem) do
          Gem::Specification.new do |spec|
            spec.name = 'test'
            spec.version = '0.1.0'
          end
        end

        let(:advisory) do
          Bundler::Audit::Advisory.load(Fixtures.join('advisory','CVE-2020-1234.yml'))
        end
        let(:unpatched_gem) do
          Bundler::Audit::Results::UnpatchedGem.new(gem,advisory)
        end

        let(:report) do
          super().tap do |report|
            report << unpatched_gem
          end
        end

        it "must print 'Name: ...'" do
          expect(output_lines).to include("Name: #{gem.name}")
        end

        it "must print 'Version: ...'" do
          expect(output_lines).to include("Version: #{gem.version}")
        end

        it "must print 'Advisory: CVE-YYYY-NNNN'" do
          expect(output_lines).to include("Advisory: CVE-#{advisory.cve}")
        end

        context "when Advisory#criticality is :low" do
          let(:advisory) do
            super().tap do |advisory|
              advisory.cvss_v2 = 0.0
            end
          end

          it "must print 'Criticality: Low'" do
            expect(output_lines).to include("Criticality: Low")
          end
        end

        context "when Advisory#criticality is :medium" do
          let(:advisory) do
            super().tap do |advisory|
              advisory.cvss_v2 = 6.9
            end
          end

          it "must print 'Criticality: Medium'" do
            expect(output_lines).to include("Criticality: Medium")
          end
        end

        context "when Advisory#criticality is :high" do
          let(:advisory) do
            super().tap do |advisory|
              advisory.cvss_v2 = 10.0
            end
          end

          it "must print 'Criticality: High'" do
            expect(output_lines).to include("Criticality: High")
          end
        end

        it "must print 'URL: ...'" do
          expect(output_lines).to include("URL: #{advisory.url}")
        end

        context "when :verbose is enabled" do
          let(:options) { {verbose: true} }

          it 'must print "Description:" and the advisory description' do
            expect(output_lines).to include("Description:","","  #{advisory.description.chomp}",'')
          end
        end

        context "when :verbose is not enabled" do
          it 'must print "Title:" and the advisory description' do
            expect(output_lines).to include("Title: #{advisory.title}")
          end
        end

        context "when Advisory#patched_versions is not empty" do
          it 'must print "Solution: upgrade to ..."' do
            expect(output_lines).to include("Solution: upgrade to #{advisory.patched_versions.join(', ')}")
          end
        end

        context "when Advisory#patched_versions is empty" do
          let(:advisory) do
            super().tap do |advisory|
              advisory.patched_versions = []
            end
          end

          it 'must print "Solution: remove or disable this gem until a patch is available!"' do
            expect(output_lines).to include("Solution: remove or disable this gem until a patch is available!")
          end
        end

        it 'must print "Vulnerabilities found!"' do
          expect(output_lines).to include("Vulnerabilities found!")
        end
      end
    end

    context "when no vulnerabilities were found" do
      it 'must print "No vulnerabilities found"' do
        expect(output_lines).to include('No vulnerabilities found')
      end

      context "when :quiet is enabled" do
        let(:options) { {quiet: true} }

        it "should print nothing" do
          expect(output_lines).to be_empty
        end
      end
    end

    it "must restore $stdout" do
      expect($stdout).to_not be(stdout)
    end
  end
end