require File.dirname(__FILE__) + '/../spec_helper'

describe SessionsController do
  integrate_views

  describe 'routes' do
    it 'should route /session/new to SessionsController#new' do
      params_from(:get, '/session/new').should == {:controller => 'sessions', :action => 'new'}
    end

    it 'should route /login to SessionsController#new' do
      params_from(:get, '/login').should == {:controller => 'sessions', :action => 'new'}
    end

    it 'should route /logout to SessionsController#destroy' do
      params_from(:get, '/logout').should == {:controller => 'sessions', :action => 'destroy'}
    end

    it 'should route DELETE /session to SessionsController#destroy' do
      params_from(:delete, '/session').should == {:controller => 'sessions', :action => 'destroy'}
    end

    it 'should route /oauth_callback to SessionsController#oauth_callback' do
      params_from(:get, '/oauth_callback').should == {:controller => 'sessions', :action => 'oauth_callback'}
    end

    it 'should route POST /session to SessionsController#create' do
      params_from(:post, '/session').should == {:controller => 'sessions', :action => 'create'}
    end
  end

  describe 'with OAuth strategy' do
    before do
      stub_oauth!
    end

    describe '#new' do
      it 'should retrieve a request token' do
        get :new
        assigns[:request_token].token.should == 'faketoken'
        assigns[:request_token].secret.should == 'faketokensecret'
      end

      it 'should set session variables for the request token' do
        get :new
        session[:request_token].should == 'faketoken'
        session[:request_token_secret].should == 'faketokensecret'
      end

      it 'should redirect to the oauth authorization url' do
        get :new
        response.should redirect_to('https://twitter.com/oauth/authorize?oauth_token=faketoken')
      end

      it 'should redirect to the oauth_callback if one is specified' do
        Stocktwits.stub!(:oauth_callback).and_return('http://localhost:3000/development')
        Stocktwits.stub!(:oauth_callback?).and_return(true)        

        get :new
        response.should redirect_to('https://twitter.com/oauth/authorize?oauth_token=faketoken&oauth_callback=' + CGI.escape(Stocktwits.oauth_callback))
      end
    end

    describe '#oauth_callback' do
      describe 'with no session info' do
        it 'should set the flash[:error]' do
          get :oauth_callback, :oauth_token => 'faketoken'
          flash[:error].should == 'No authentication information was found in the session. Please try again.'
        end

        it 'should redirect to "/" by default' do
          get :oauth_callback, :oauth_token => 'faketoken'
          response.should redirect_to('/')
        end

        it 'should call authentication_failed' do
          controller.should_receive(:authentication_failed).any_number_of_times
          get :oauth_callback, :oauth_token => 'faketoken'
        end
      end

      describe 'with proper info' do
        before do
          @user = Factory.create(:twitter_oauth_user, :twitter_id => '123')
          @time = Time.now
          @remember_token = ActiveSupport::SecureRandom.hex(10)
          
          Time.stub!(:now).and_return(@time)
          ActiveSupport::SecureRandom.stub!(:hex).and_return(@remember_token)

          request.session[:request_token] = 'faketoken'
          request.session[:request_token_secret] = 'faketokensecret'
          get :oauth_callback, :oauth_token => 'faketoken'
        end 

        describe 'building the access token' do
          it 'should rebuild the request token' do
            correct_token =  OAuth::RequestToken.new(Stocktwits.consumer,'faketoken','faketokensecret')
            
            %w(token secret).each do |att|
              assigns[:request_token].send(att).should == correct_token.send(att)
            end
          end

          it 'should exchange the request token for an access token' do
            assigns[:access_token].should be_a(OAuth::AccessToken)
            assigns[:access_token].token.should == 'fakeaccesstoken'
            assigns[:access_token].secret.should == 'fakeaccesstokensecret'
          end

          it 'should wipe the request token after exchange' do
            session[:request_token].should be_nil
            session[:request_token_secret].should be_nil
          end
        end
        
        describe 'identifying the user' do
          it "should find the user" do         
            assigns[:user].should == @user
          end

          it "should assign the user id to the session" do
            session[:user_id].should == @user.id
          end

          it "should call remember me" do
            @user.reload
            @user.remember_token.should == @remember_token
          end

          it "should set a cookie" do
            cookies[:remember_token].should == @remember_token
          end
        end

        describe "when OAuth doesn't work" do
          before do
            request.session[:request_token] = 'faketoken'
            request.session[:request_token_secret] = 'faketokensecret'
            @request_token =  OAuth::RequestToken.new(Stocktwits.consumer, session[:request_token], session[:request_token_secret])
            OAuth::RequestToken.stub!(:new).and_return(@request_token)
          end

          it 'should call authentication_failed when it gets a 401 from OAuth' do
            @request_token.stub!(:get_access_token).and_raise(Net::HTTPServerException.new('401 "Unauthorized"', '401 "Unauthorized"'))
            controller.should_receive(:authentication_failed).with('This authentication request is no longer valid. Please try again.')
            # the should raise_error is hacky because of the expectation
            # stubbing the proper behavior :-(
            lambda{get :oauth_callback, :oauth_token => 'faketoken'}.should raise_error(ActionView::MissingTemplate)
          end

          it 'should call authentication_failed when it gets a different HTTPServerException' do
            @request_token.stub!(:get_access_token).and_raise(Net::HTTPServerException.new('404 "Not Found"', '404 "Not Found"'))
            controller.should_receive(:authentication_failed).with('There was a problem trying to authenticate you. Please try again.')
            lambda{get :oauth_callback, :oauth_token => 'faketoken'}.should raise_error(ActionView::MissingTemplate)
          end
        end
      end
    end
  end

  describe 'with Basic strategy' do
    before do
      stub_basic!
    end
    
    describe '#new' do
      it 'should render the new action' do
        get :new
        response.should render_template('sessions/new')
      end

      it 'should render the login form' do
        get :new
        response.should have_tag('form[action=/session][id=login_form][method=post]')
      end
      
      describe '#create' do
        before do
          @user = Factory.create(:twitter_basic_user, :twitter_id => '123')
        end

        it 'should call logout_keeping_session! to remove session info' do
          controller.should_receive(:logout_keeping_session!)
          post :create
        end

        it 'should try to authenticate the user' do
          User.should_receive(:authenticate)
          post :create
        end

        it 'should call authentication_failed on authenticate failure' do
          User.should_receive(:authenticate).and_return(nil)
          post :create, :login => 'wrong', :password => 'false'
          response.should redirect_to('/login')
        end

        it 'should call authentication_succeeded on authentication success' do
          User.should_receive(:authenticate).and_return(@user)    
          post :create, :login => 'twitterman', :password => 'cool'
          response.should redirect_to('/')
          flash[:notice].should_not be_blank
        end
      end
    end

  end

  describe '#destroy' do
    it 'should call logout_keeping_session!' do
      controller.should_receive(:logout_keeping_session!).once
      get :destroy
    end

    it 'should redirect to the root' do
      get :destroy
      response.should redirect_to('/')
    end
  end
end