// Copyright 2024 PingCAP, Inc.
//
// Licensed under the Apache License, Version 2.0 (the "License");
// you may not use this file except in compliance with the License.
// You may obtain a copy of the License at
//
//     http://www.apache.org/licenses/LICENSE-2.0
//
// Unless required by applicable law or agreed to in writing, software
// distributed under the License is distributed on an "AS IS" BASIS,
// See the License for the specific language governing permissions and
// limitations under the License.

package server

import (
	"testing"

	perrors "github.com/pingcap/errors"
	"github.com/pingcap/ticdc/pkg/security"
	"github.com/pingcap/ticdc/pkg/util"
	"github.com/stretchr/testify/require"
)

// TestServerRedactOptions tests the server options structure for log redaction.
// This validates that the server correctly initializes with default config.
func TestServerRedactOptions(t *testing.T) {
	o := newOptions()
	require.NotNil(t, o, "newOptions() should not return nil")
	require.NotNil(t, o.serverConfig, "serverConfig should be initialized")
	require.NotNil(t, o.serverConfig.Security, "Security config should be initialized")
	// RedactInfoLog in Security config defaults to empty string (OFF mode)
	require.Equal(t, security.RedactInfoLogType(""), o.serverConfig.Security.RedactInfoLog, "RedactInfoLog should be empty by default")
}

// TestServerRedactBackwardCompatibility tests that the server maintains
// backward compatibility when log redaction is not configured.
func TestServerRedactBackwardCompatibility(t *testing.T) {
	// Test that nil/unset config defaults to OFF mode
	o := newOptions()
	require.Equal(t, security.RedactInfoLogType(""), o.serverConfig.Security.RedactInfoLog, "Default RedactInfoLog should be empty string")

	// When empty string is used, server defaults to OFF mode (see server.go)
	// ParseRedactMode returns empty for empty input, server then defaults to OFF
	parsedMode := perrors.RedactLogDisable

	// Verify OFF mode doesn't redact (backward compatible behavior)
	perrors.RedactLogEnabled.Store(parsedMode)
	testData := "sensitive_data"
	result := util.RedactValue(testData)
	require.Equal(t, testData, result, "Default mode should not redact data")
}

// TestServerRedactModeInitialization tests that the server can initialize
// all three redaction modes correctly via the ServerConfig.Security.RedactInfoLog setting.
func TestServerRedactModeInitialization(t *testing.T) {
	tests := []struct {
		name     string
		cfgVal   security.RedactInfoLogType
		expected string
	}{
		// Canonical values (from TOML/JSON unmarshaling which now canonicalizes)
		{"OFF mode via config", "OFF", perrors.RedactLogDisable},
		{"ON mode via config", "ON", perrors.RedactLogEnable},
		{"MARKER mode via config", "MARKER", perrors.RedactLogMarker},
		{"empty config defaults to off", "", perrors.RedactLogDisable},
	}

	for _, tt := range tests {
		t.Run(tt.name, func(t *testing.T) {
			// Create options with custom RedactInfoLog setting
			o := newOptions()
			o.serverConfig.Security.RedactInfoLog = tt.cfgVal

			// Simulate what server.go does when parsing the config
			cfgValStr := tt.cfgVal.String()
			mode, err := util.ParseRedactMode(cfgValStr)
			require.NoError(t, err)
			if mode == "" {
				mode = perrors.RedactLogDisable // Server defaults to OFF when not set
			}
			require.Equal(t, tt.expected, mode)

			// Simulate storing the mode (as done in server initialization)
			perrors.RedactLogEnabled.Store(mode)
			require.Equal(t, tt.expected, perrors.RedactLogEnabled.Load())
		})
	}
}