require 'test_helper'

class UserTest < ActiveSupport::TestCase
  describe User do
    before do
      @password    = Faker::Internet.password(10, 20)
      @email       = Faker::Internet.email
      @success_url = Faker::Internet.url
      @user        = User.new()
    end

    describe 'serialization' do
      test 'hash should not include sensitive info' do
        refute @user.as_json[:tokens]
      end
    end

    describe 'email registration' do
      test 'model should not save if email is blank' do
        @user.provider              = 'email'
        @user.password              = @password
        @user.password_confirmation = @password

        refute @user.save
        assert @user.errors.messages[:email]
      end
    end

    describe 'oauth2 authentication' do
      test 'model should save even if email is blank' do
        @user.provider              = 'facebook'
	@user.email                 = @email
        @user.password              = @password
        @user.password_confirmation = @password
        @user.confirm_success_url   = @success_url

        assert @user.save
      end
    end

    describe 'token expiry' do
      before do
        @user = users(:confirmed_email_user)
        @user.skip_confirmation!
        @user.save!

        @auth_headers = @user.create_new_auth_token

        @token     = @auth_headers['access-token']
        @client_id = @auth_headers['client']
      end

      test 'should properly indicate whether token is current' do
        assert @user.token_is_current?(@token, @client_id)
        # we want to update the expiry without forcing a cleanup (see below)
        @user.tokens[@client_id]['expiry'] = Time.now.to_i - 10.seconds
        refute @user.token_is_current?(@token, @client_id)
      end
    end

    describe 'expired tokens are destroyed on save' do
      before do
        @user = users(:confirmed_email_user)
        @user.skip_confirmation!
        @user.save!

        @old_auth_headers = @user.create_new_auth_token
        @new_auth_headers = @user.create_new_auth_token
        expire_token(@user, @old_auth_headers['client'])
      end

      test 'expired token was removed' do
        refute @user.tokens[@old_auth_headers['client']]
      end

      test 'current token was not removed' do
        assert @user.tokens[@new_auth_headers['client']]
      end
    end
  end
end