require File.expand_path("spec_helper", File.dirname(__FILE__))

describe 'Rodauth verify_account feature' do
  it "should support verifying accounts" do
    rodauth do
      enable :login, :create_account, :verify_account
      verify_account_autologin? false
    end
    roda do |r|
      r.rodauth
      r.root{view :content=>""}
    end

    visit '/create-account'
    fill_in 'Login', :with=>'foo@example2.com'
    fill_in 'Confirm Login', :with=>'foo@example2.com'
    fill_in 'Password', :with=>'0123456789'
    fill_in 'Confirm Password', :with=>'0123456789'
    click_button 'Create Account'
    page.find('#notice_flash').text.must_equal "An email has been sent to you with a link to verify your account"
    page.current_path.must_equal '/'

    link = email_link(/(\/verify-account\?key=.+)$/, 'foo@example2.com')
    login(:login=>'foo@example2.com')
    page.find('#error_flash').text.must_equal 'The account you tried to login with is currently awaiting verification'
    page.html.must_include("If you no longer have the email to verify the account, you can request that it be resent to you")
    click_button 'Send Verification Email Again'
    page.current_path.must_equal '/login'
    email_link(/(\/verify-account\?key=.+)$/, 'foo@example2.com').must_equal link

    click_link 'Resend Verify Account Information'
    fill_in 'Login', :with=>'foo@example2.com'
    click_button 'Send Verification Email Again'
    page.current_path.must_equal '/login'
    email_link(/(\/verify-account\?key=.+)$/, 'foo@example2.com').must_equal link

    visit '/create-account'
    fill_in 'Login', :with=>'foo@example2.com'
    click_button 'Create Account'
    click_button 'Send Verification Email Again'
    page.find('#notice_flash').text.must_equal "An email has been sent to you with a link to verify your account"
    page.current_path.must_equal '/login'

    link = email_link(/(\/verify-account\?key=.+)$/, 'foo@example2.com')
    visit link[0...-1]
    page.find('#error_flash').text.must_equal "invalid verify account key"

    visit link
    click_button 'Verify Account'
    page.find('#notice_flash').text.must_equal "Your account has been verified"
    page.current_path.must_equal '/'

    login(:login=>'foo@example2.com')
    page.find('#notice_flash').text.must_equal 'You have been logged in'
    page.current_path.must_equal '/'
  end

  it "should support autologin when verifying accounts" do
    rodauth do
      enable :login, :create_account, :verify_account
    end
    roda do |r|
      r.rodauth
      r.root{view :content=>rodauth.logged_in? ? "Logged In" : "Not Logged"}
    end

    visit '/create-account'
    fill_in 'Login', :with=>'foo@example2.com'
    fill_in 'Confirm Login', :with=>'foo@example2.com'
    fill_in 'Password', :with=>'0123456789'
    fill_in 'Confirm Password', :with=>'0123456789'
    click_button 'Create Account'
    page.find('#notice_flash').text.must_equal "An email has been sent to you with a link to verify your account"
    page.current_path.must_equal '/'

    link = email_link(/(\/verify-account\?key=.+)$/, 'foo@example2.com')
    visit link
    click_button 'Verify Account'
    page.find('#notice_flash').text.must_equal "Your account has been verified"
    page.body.must_include 'Logged In'
  end

  it "should handle uniqueness errors raised when inserting verify account token" do
    rodauth do
      enable :login, :verify_account
    end
    roda do |r|
      def rodauth.raised_uniqueness_violation(*) super; true; end
      r.rodauth
      r.root{view :content=>rodauth.logged_in? ? "Logged In" : "Not Logged"}
    end

    visit '/create-account'
    fill_in 'Login', :with=>'foo@example2.com'
    fill_in 'Confirm Login', :with=>'foo@example2.com'
    fill_in 'Password', :with=>'0123456789'
    fill_in 'Confirm Password', :with=>'0123456789'
    click_button 'Create Account'
    page.find('#notice_flash').text.must_equal "An email has been sent to you with a link to verify your account"
    page.current_path.must_equal '/'

    link = email_link(/(\/verify-account\?key=.+)$/, 'foo@example2.com')
    visit link
    click_button 'Verify Account'
    page.find('#notice_flash').text.must_equal "Your account has been verified"
    page.body.must_include 'Logged In'
  end

  it "should support verifying accounts via jwt" do
    rodauth do
      enable :login, :create_account, :verify_account
      verify_account_autologin? false
      verify_account_email_body{verify_account_email_link}
    end
    roda(:jwt) do |r|
      r.rodauth
      r.root{view :content=>""}
    end

    res = json_request('/create-account', :login=>'foo@example2.com', "login-confirm"=>'foo@example2.com', :password=>'0123456789', "password-confirm"=>'0123456789')
    res.must_equal [200, {'success'=>"An email has been sent to you with a link to verify your account"}]
    link = email_link(/key=.+$/, 'foo@example2.com')

    res = json_request('/verify-account-resend', :login=>'foo@example.com')
    res.must_equal [401, {'error'=>"Unable to resend verify account email"}]

    res = json_request('/verify-account-resend', :login=>'foo@example3.com')
    res.must_equal [401, {'error'=>"Unable to resend verify account email"}]

    res = json_request('/login', :login=>'foo@example2.com',:password=>'0123456789')
    res.must_equal [403, {'error'=>"The account you tried to login with is currently awaiting verification"}]

    res = json_request('/verify-account-resend', :login=>'foo@example2.com')
    res.must_equal [200, {'success'=>"An email has been sent to you with a link to verify your account"}]
    email_link(/key=.+$/, 'foo@example2.com').must_equal link

    res = json_request('/verify-account')
    res.must_equal [401, {'error'=>"Unable to verify account"}]

    res = json_request('/verify-account', :key=>link[4...-1])
    res.must_equal [401, {"error"=>"Unable to verify account"}]

    res = json_request('/verify-account', :key=>link[4..-1])
    res.must_equal [200, {"success"=>"Your account has been verified"}]

    json_login(:login=>'foo@example2.com')
  end
end