var rewire = require('rewire');
var security = rewire('../lib/security');

var config = {
  dbUrl: 'https://api.mongolab.com/api/1/databases',
  apiKey: '4fb51e55e4b02e56a67b0b66',
  dbName: 'ascrum',
  usersCollection: 'users'
};

function mockUpUser(isAdmin) {
  return {
    _id : { $oid: '1234567' },
    email: 'email',
    password: 'password',
    firstName: 'firstName',
    lastName: 'lastName',
    admin: !!isAdmin
  };
}

function mockUpPassport(test, authenticated) {
  var spies = { };
  security.__set__('passport', {
    use: function(fn) {
      spies.useCalled = true;
    },
    authenticate: function(strategy, callback) {
      spies.authenticateCalled = true;
      return function() { callback(); };
    }
  });
  return spies;
}

function mockUpMongoStrategy(test) {
  var strategy = function(dbUrl, apiKey, dbName, usersCollection) {
    test.equal(dbUrl, config.dbUrl);
    test.equal(apiKey, config.apiKey);
    test.equal(dbName, config.dbName);
    test.equal(usersCollection, config.usersCollection);
  };
  strategy.name = 'mongo';
  security.__set__('MongoStrategy', strategy);
}

module.exports = {
  initialize: function(test) {
    mockUpMongoStrategy(test);
    var passportSpy = mockUpPassport(test);
    security.initialize(config.dbUrl, config.apiKey, config.dbName, config.usersCollection);
    test.ok(passportSpy.useCalled);
    test.done();
  },

  authenticationRequired: function(test) {
    // Setup mocks
    var req = {};
    var res = {
      json: function() { jsonCalled = true; }
    };
    var nextCalled = false;
    var jsonCalled = false;
    var next = function() { nextCalled = true; };

    // Test when user is unauthenticated
    req.isAuthenticated = function() { return false; };
    security.authenticationRequired(req, res, next);
    test.ok(jsonCalled);

    // Test when user is authenticated
    req.isAuthenticated = function() { return true; };
    security.authenticationRequired(req, res, next);
    test.ok(nextCalled);

    test.done();
  },

  adminRequired: function(test) {
    // Setup mocks
    var nextCalled = false;
    var jsonCalled = false;
    var req = {};
    var res = {
      json: function(status) {
        test.equal(status, 401);
        jsonCalled = true;
      }
    };
    var next = function() {
      nextCalled = true;
    };

    // Test when user is unauthenticated
    req.user = null;
    security.adminRequired(req, res, next);
    test.ok(jsonCalled);

    // Test when user is authenticated but not admin
    req.user = mockUpUser(false);
    security.adminRequired(req, res, next);
    test.ok(jsonCalled);

    // Test when user is admin
    req.user = mockUpUser(true);
    security.adminRequired(req, res, next);
    test.ok(nextCalled);

    test.done();
  },

  sendCurrentUser: function(test) {
    var jsonCalled = false;
    var req = { user : mockUpUser(false) };
    var res = {
      json: function(status, userInfo) {
        test.equal(status, 200);
        test.equal(userInfo.user.id, req.user._id.$oid);
        jsonCalled = true;
      },
      end: function() {}
    };
    security.sendCurrentUser(req, res, null);
    test.ok(jsonCalled);
    test.done();
  },

  login: function(test) {
    var req = {};

    var jsonCalled = false;
    var res = {
      json: function() { jsonCalled = true; }
    };

    var nextCalled = false;
    var next = function() { nextCalled = true; };

    var spies = mockUpPassport(test);
    security.login(req, res, next);
    test.ok(spies.authenticateCalled);
    test.ok(jsonCalled);
    test.done();
  },

  logoutPOST: function(test) {
    var logoutCalled = false;
    var req = {
      method: 'POST',
      logout: function() {
        logoutCalled = true;
      }
    };
    var redirectCalled = false;
    var sendCalled = false;
    var res = {
      redirect: function() {
        redirectCalled = true;
      },
      send: function() {
        sendCalled = true;
      }
    };
    // Test without POST
    security.logout(req, res);
    test.ok(logoutCalled);
    test.ok(!redirectCalled);
    test.ok(sendCalled);
    test.done();
  }
};