package sqluser

import (
	"strconv"
	"testing"

	"github.com/smartystreets/goconvey/convey"
	"go.uber.org/mock/gomock"
	"google.golang.org/protobuf/proto"

	globalserverlessv1 "github.com/tidbcloud/tidb-management-service/api/spec/global/serverless/v1"
	regionalserverlessv1 "github.com/tidbcloud/tidb-management-service/api/spec/regional/serverless/v1"
	"github.com/tidbcloud/tidb-management-service/serverless-global-service/domain/adapter/mock_adapter"
	"github.com/tidbcloud/tidb-management-service/serverless-global-service/domain/repository/mock_repository"
	"github.com/tidbcloud/tidb-management-service/serverless-global-service/domain/testdata"
	"github.com/tidbcloud/tidb-management-service/utilities/clusterproxy/mock_clusterproxy"
)

func TestUpdateRoleSvc(t *testing.T) {
	convey.Convey("TestUpdateRoleSvc", t, func() {
		ctrl := gomock.NewController(t)
		defer ctrl.Finish()

		clusterRepo := mock_repository.NewMockClusterRepo(ctrl)
		regionalSvc := mock_adapter.NewMockRegionalService(ctrl)
		encryptSvc := mock_adapter.NewMockEncryptorService(ctrl)
		sys9Lifecycle := mock_adapter.NewMockSys9Lifecycle(ctrl)
		clusterProxy := mock_clusterproxy.NewMockClusterProxy(ctrl)
		clusterProxyProvider := mock_clusterproxy.NewMockProvider(ctrl)
		regionalCluster := testdata.GetRegionalCluster()
		cluster := testdata.GetCluster()

		clusterIdInt, err := strconv.ParseUint(cluster.ClusterId, 10, 64)
		convey.So(err, convey.ShouldBeNil)

		req := &globalserverlessv1.SqlUserServiceUpdateSqlRoleRequest{
			ClusterId: cluster.ClusterId,
			Operator:  testdata.GetDBUserOperator(),
			// Cluster:    regionalCluster,
			RoleName:   "r1",
			Grants:     proto.String("GRANT SELECT ON *.* TO 'r1'"),
			Revocation: proto.String("REVOKE DELETE ON *.* FROM 'r1'"),
		}
		params := &UpdateRoleParams{
			Operator:   req.Operator,
			Cluster:    regionalCluster,
			RoleName:   req.RoleName,
			Grants:     *req.Grants,
			Revocation: *req.Revocation,
		}
		// enable token-based auth
		cluster.Attributes.TokenBasedAuthEnabled = true
		svc := NewSqlUserService(encryptSvc, clusterProxyProvider, clusterRepo, regionalSvc, sys9Lifecycle, nil, nil)

		convey.Convey("Update", func() {
			convey.Convey("have no any permission change", func() {
				req.Grants = proto.String("")
				req.Revocation = proto.String("")

				regionalSvc.EXPECT().
					ListCluster(gomock.Any(), gomock.Any(), gomock.Any()).
					Return([]*regionalserverlessv1.ServerlessRegionalServiceClusterInfo{regionalCluster}, nil)
				clusterRepo.EXPECT().Get(gomock.Any(), cluster.ClusterId, false).Return(cluster, nil)
				clusterProxyProvider.EXPECT().
					GetClusterProxy(gomock.Any(), clusterIdInt, regionalCluster.ProxyEndpoint, regionalCluster.Version, BuildClusterOperator(req.Operator)).
					Return(clusterProxy, nil)
				clusterProxy.EXPECT().ExecuteMultiSQL(gomock.Any(), []string(nil))

				err := svc.UpdateSqlUserRole(testdata.Ctx, req)
				convey.So(err, convey.ShouldBeNil)
			})
			convey.Convey("should be ok if all is well", func() {
				regionalSvc.EXPECT().
					ListCluster(gomock.Any(), gomock.Any(), gomock.Any()).
					Return([]*regionalserverlessv1.ServerlessRegionalServiceClusterInfo{regionalCluster}, nil)
				clusterRepo.EXPECT().Get(gomock.Any(), cluster.ClusterId, false).Return(cluster, nil)
				clusterProxyProvider.EXPECT().
					GetClusterProxy(gomock.Any(), clusterIdInt, regionalCluster.ProxyEndpoint, regionalCluster.Version, BuildClusterOperator(req.Operator)).
					Return(clusterProxy, nil)
				clusterProxy.EXPECT().ExecuteMultiSQL(gomock.Any(), []string{
					"GRANT SELECT ON *.* TO 'r1'",
					"REVOKE DELETE ON *.* FROM 'r1'",
				})

				err := svc.UpdateSqlUserRole(testdata.Ctx, req)
				convey.So(err, convey.ShouldBeNil)
			})
		})
		convey.Convey("checkParams", func() {
			convey.Convey("should be ok if all is well", func() {
				err := updateSqlRoleCheck(testdata.Ctx, params, cluster)
				convey.So(err, convey.ShouldBeNil)
			})
			convey.Convey("should return err if RoleName is empty", func() {
				params.RoleName = ""

				err := updateSqlRoleCheck(testdata.Ctx, params, cluster)
				convey.So(err, convey.ShouldNotBeNil)
				convey.So(err.Error(), convey.ShouldContainSubstring, "invalid role_name")
			})
			convey.Convey("should return err if role is builtin role", func() {
				params.RoleName = BuiltinRoleNameAdmin

				err := updateSqlRoleCheck(testdata.Ctx, params, cluster)
				convey.So(err, convey.ShouldNotBeNil)
				convey.So(err.Error(), convey.ShouldContainSubstring, "builtin role")
			})
		})
	})
}