package oauthroutes

import "testing"

func TestScopeRegistryHasOneNormalizedReadPath(t *testing.T) {
	reset := SetScopeOwners([]ScopeOwner{{Scope: " Vendor.Builtin ", OwningAppPacks: []string{" CRM-Pack "}}})
	defer reset()
	policy := ScopePolicy{}
	if !policy.Allows("vendor.builtin") || !policy.AllowsForPack("VENDOR.BUILTIN", "crm-pack") {
		t.Fatal("registered route scope was not resolved through normalized owner path")
	}
	if policy.AllowsForPack("vendor.builtin", "other-pack") {
		t.Fatal("unowned pack was allowed")
	}
	if !policy.Allows("openid") || policy.Allows("unknown") {
		t.Fatal("platform or unknown scope classification drifted")
	}
}