// Copyright 2020 TiKV Project Authors. Licensed under Apache-2.0.

use grpcio::{ChannelBuilder, Environment};
use kvproto::kvrpcpb::*;
use kvproto::tikvpb::TikvClient;
use std::sync::Arc;
use test_raftstore::new_server_cluster;
use tikv_util::collections::HashSet;
use tikv_util::HandyRwLock;

#[test]
fn test_check_cn_success() {
    let mut cluster = new_server_cluster(0, 1);
    let mut allowed_cn = HashSet::default();
    allowed_cn.insert("tikv-server".to_owned());
    cluster.cfg.security = test_util::new_security_cfg(Some(allowed_cn));
    cluster.run();

    let leader = cluster.get_region(b"").get_peers()[0].clone();
    let addr = cluster.sim.rl().get_addr(leader.get_store_id()).to_owned();

    let env = Arc::new(Environment::new(1));
    let cred = test_util::new_channel_cred();
    let channel = ChannelBuilder::new(env).secure_connect(&addr, cred);

    let client = TikvClient::new(channel);
    let status = client.kv_get(&GetRequest::default());
    assert!(status.is_ok());
}

#[test]
fn test_check_cn_fail() {
    let mut cluster = new_server_cluster(0, 1);
    let mut allowed_cn = HashSet::default();
    allowed_cn.insert("invaild-server".to_owned());
    cluster.cfg.security = test_util::new_security_cfg(Some(allowed_cn));
    cluster.run();

    let leader = cluster.get_region(b"").get_peers()[0].clone();
    let addr = cluster.sim.rl().get_addr(leader.get_store_id()).to_owned();

    let env = Arc::new(Environment::new(1));
    let cred = test_util::new_channel_cred();
    let channel = ChannelBuilder::new(env).secure_connect(&addr, cred);

    let client = TikvClient::new(channel);
    let status = client.kv_get(&GetRequest::default());
    assert!(status.is_err());
}