# frozen_string_literal: true

require 'rails_helper'

RSpec.describe 'API Token validation' do
  let(:token_info_url) do
    URI.join(ENV['G5_AUTH_ENDPOINT'], '/oauth/token/info')
  end

  subject(:api_call) { safe_get '/rails_api/secure_resource.json' }

  context 'when token validation is enabled' do
    before { G5Authenticatable.strict_token_validation = true }

    context 'when user has a valid g5 access token' do
      let(:user) { FactoryGirl.create(:g5_authenticatable_user) }

      before do
        login_user(user)
        stub_valid_access_token(user.g5_access_token)
      end

      after { logout_user }

      it 'should allow the user to make the api call' do
        api_call
        expect(response).to be_success
      end
    end

    context 'when user has an invalid g5 access token' do
      let(:user) { FactoryGirl.create(:g5_authenticatable_user) }

      before do
        login_user(user)
        stub_invalid_access_token(user.g5_access_token)
      end

      after { logout_user }

      it 'should return a 401' do
        api_call
        expect(response.status).to eq(401)
      end
    end

    context 'with the :auth_request shared context', :auth_request do
      it 'should allow the user to make the api call' do
        api_call
        expect(response).to be_success
      end
    end
  end

  context 'when token validation is disabled' do
    before { G5Authenticatable.strict_token_validation = false }

    context 'when the user has an invalid g5 access token' do
      let(:user) { FactoryGirl.create(:g5_authenticatable_user) }

      before do
        login_user(user)
        stub_invalid_access_token(user.g5_access_token)
      end

      after { logout_user }

      it 'should allow the user to make the api call' do
        api_call
        expect(response).to be_success
      end
    end

    context 'with the :auth_request shared context', :auth_request do
      it 'should allow the user to make the api call' do
        api_call
        expect(response).to be_success
      end
    end
  end
end