require 'spec_helper'
require 'conjur/dsl/runner'

describe Conjur::Command::Policy do
  describe ".default_collection_user" do
    it "returns the current username" do
      expect(Conjur::Command::Policy.default_collection_user).to eq(`whoami`.strip)
    end
  end

  describe ".default_collection_hostname" do
    it "returns the current hostname" do
      expect(Conjur::Command::Policy.default_collection_hostname).to eq(`hostname`.strip)
    end
  end

  context logged_in: true do
    let(:role) do
      double("role", exists?: true, api_key: "the-api-key", roleid: "the-role")
    end
    let(:resource) do
      double("resource", exists?: true).as_null_object
    end
    before {
      File.stub(:read).with("policy-body").and_return "{}"
      Conjur::DSL::Runner.any_instance.stub(:api).and_return api
    }
    before {
      api.stub(:role).and_call_original
      api.stub(:resource).and_call_original
      api.stub(:role).with("the-account:policy:#{collection}/the-policy-1.0.0").and_return role
      api.stub(:resource).with("the-account:policy:#{collection}/the-policy-1.0.0").and_return resource
    }
    
    describe_command 'policy:load --collection the-collection policy-body' do
      let(:collection) { "the-collection" }
      it "creates the policy" do
        invoke.should == 0
      end
    end
    context "default collection" do
      let(:collection) { "alice@localhost" }
      before {
        stub_const("ENV", "USER" => "alice", "HOSTNAME" => "localhost")
      }
      describe_command 'policy:load --as-group the-group policy-body' do
        let(:group) { double(:group, exists?: true) }
        it "creates the policy" do
          Conjur::Command.api.stub(:role).with("the-account:group:the-group").and_return group
          Conjur::DSL::Runner.any_instance.should_receive(:owner=).with("the-account:group:the-group")
          
          invoke.should == 0
        end
      end
      describe_command 'policy:load policy-body' do
        it "creates the policy with default collection" do
          invoke.should == 0
        end
      end
    end
  end
end