require 'rails_helper'

RSpec.describe Dradis::Plugins::CSV::Importer do
  let(:file) { File.expand_path('../../../.../../../fixtures/files/simple.csv', __dir__) }
  let(:project) { create(:project) }

  let(:instance) do
    described_class.new(
      default_user_id: create(:user).id,
      logger: Log.new(uid: 1),
      plugin: Dradis::Plugins::CSV,
      project_id: project.id
    )
  end

  let(:import_csv) do
    instance.import_csv(file: file, mappings: mappings)
  end

  describe '#import_csv' do
    context 'when project has RTP' do
      let(:mappings) do
        {
          '0' => { 'type' => 'identifier' },
          '1' => { 'type' => 'issue', 'field' => 'MyTitle' },
          '3' => { 'type' => 'node', 'field' => '' },
          '4' => { 'type' => 'evidence', 'field' => 'MyLocation' },
          '5' => { 'type' => 'evidence', 'field' => '' }
        }
      end

      before do
        project.update(report_template_properties: create(:report_template_properties))
      end

      it 'uses the field as Dradis Field' do
        import_csv

        issue = Issue.first
        expect(issue.fields).to eq({ 'MyTitle' => 'SQL Injection', 'plugin' => 'csv', 'plugin_id' => '1' })

        node = issue.affected.first
        expect(node.label).to eq('10.0.0.1')

        evidence = node.evidence.first
        expect(evidence.fields).to eq({ 'Label' => '10.0.0.1', 'Title' => '(No #[Title]# field)', 'MyLocation' => '10.0.0.1' })
      end
    end

    context 'when project does not have RTP' do
      let(:mappings) do
        {
          '0' => { 'type' => 'identifier' },
          '1' => { 'type' => 'issue', 'field' => 'MyTitle' },
          '3' => { 'type' => 'node', 'field' => '' },
          '4' => { 'type' => 'evidence', 'field' => 'MyLocation' },
          '5' => { 'type' => 'evidence', 'field' => '' },
          '6' => { 'type' => 'issue', 'field' => '' }
        }
      end

      it 'uses the column name as Dradis Field' do
        import_csv

        issue = Issue.first
        expect(issue.fields).to eq({ 'Title' => 'SQL Injection', 'VulnerabilityCategory' => 'High', 'plugin' => 'csv', 'plugin_id' => '1' })

        node = issue.affected.first
        expect(node.label).to eq('10.0.0.1')

        evidence = node.evidence.first
        expect(evidence.fields).to eq({ 'Label' => '10.0.0.1', 'Location' => '10.0.0.1', 'Port' => '443', 'Title' => 'SQL Injection' })
      end

      it 'strips out whitespace from column header' do
        import_csv

        issue = Issue.first
        expect(issue.fields.keys).to include('VulnerabilityCategory')
      end
    end

    context 'when mapping does not have a node type' do
      let(:mappings) do
        {
          '0' => { 'type' => 'identifier' },
          '1' => { 'type' => 'issue' },
          '4' => { 'type' => 'evidence' }
        }
      end

      it 'does not create node and evidence' do
        import_csv

        issue = Issue.last
        expect(issue.affected.length).to eq(0)
        expect(issue.evidence.length).to eq(0)
      end
    end

    context 'when no identifier is passed in' do
      let(:mappings) do
        {
          '1' => { 'type' => 'issue' },
          '4' => { 'type' => 'evidence' }
        }
      end

      it 'uses filename and row index as csv_id' do
        import_csv

        issue = Issue.last
        expect(issue.fields).to eq({ 'Title' => 'SQL Injection', 'plugin' => 'csv', 'plugin_id' => 'simple.csv-0' })
      end
    end

    context 'when no evidence fields' do
      let(:mappings) do
        {
          '0' => { 'type' => 'identifier' },
          '1' => { 'type' => 'issue', 'field' => 'MyTitle' },
          '3' => { 'type' => 'node', 'field' => '' }
        }
      end

      it 'still creates evidence record' do
        import_csv

        issue = Issue.first
        expect(issue.fields).to eq({ 'Title' => 'SQL Injection', 'plugin' => 'csv', 'plugin_id' => '1' })

        node = issue.affected.first
        expect(node.label).to eq('10.0.0.1')

        evidence = node.evidence.first
        expect(evidence.content).to eq('')
      end
    end
  end
end