package link

import (
	"strings"
	"testing"

	"git.novox.be/novox/mesh-sdk/go/delivery"
)

// 774/S61/AC1 and AC2 (ADR 0583 §1): with no node-logins key, or one that names the first login, the engine dials as node.<n>
// with the membership's password as before; with a key naming node.<n>--b in use it dials as that login (whose value it
// holds), with the node's one inbox; a login whose value it does not hold is not dialled, and said.
func TestTheLoginDialledIsTheOneNodeLoginsNames(t *testing.T) {
	var saved LoginsState
	l := NewLogins("ace", "first-secret", LoginsState{}, func(s LoginsState) error { saved = s; return nil })
	m := Membership{Node: "ace", Password: "first-secret", Logins: l}
	if u, p := m.Credential(); u != "node.ace" || p != "first-secret" {
		t.Fatalf("no key: %s %s", u, p)
	}
	if u, p := (Membership{Node: "ace", Password: "plain"}).Credential(); u != "node.ace" || p != "plain" {
		t.Fatalf("no logins at all: %s %s", u, p)
	}
	if said := l.Heard(delivery.NodeLogin{Node: "ace", Login: "node.ace"}); said != "" || m.User() != "node.ace" {
		t.Errorf("the first login named: %q, %s", said, m.User())
	}
	if said := l.Heard(delivery.NodeLogin{Node: "ace", Login: "node.ace--b"}); !strings.Contains(said, "cannot dial as it") || m.User() != "node.ace" {
		t.Errorf("a login held no value for: %q, %s", said, m.User())
	}
	if err := l.Hold("node.ace--b", "second-secret"); err != nil {
		t.Fatal(err)
	}
	if err := l.Hold("node.g14", "x"); err == nil {
		t.Error("another node's login was kept")
	}
	if said := l.Heard(delivery.NodeLogin{Node: "ace", Login: "node.ace--b"}); !strings.Contains(said, "dialled as it") {
		t.Errorf("said %q", said)
	}
	if u, p := m.Credential(); u != "node.ace--b" || p != "second-secret" || saved.Current != "node.ace--b" {
		t.Errorf("node-logins names --b: %s %s, kept %+v", u, p, saved)
	}
	// A restart dials as the login kept, and the engine's own first password stays held until the vault says done.
	again := NewLogins("ace", "first-secret", saved, nil)
	if u, _ := again.Current(); u != "node.ace--b" || len(again.Held()) != 2 {
		t.Errorf("after a restart: %s, held %v", u, again.Held())
	}
	if CalledVaultSubjectAs("own", m.User()) != "mesh.seat.mesh-vault.call.own.node~ace--b" {
		t.Errorf("the vault is asked in the name of the login in use: %s", CalledVaultSubjectAs("own", m.User()))
	}
}