package httpapi

import (
	"context"
	"net/http"
	"net/http/httptest"
	"strings"
	"testing"
)

func TestWriteLuCIErrorRendersSafeBrowserPage(t *testing.T) {
	app := &App{deviceDomain: "rmm.example", publicScheme: "https"}
	req := httptest.NewRequest(http.MethodGet, "https://router.rmm.example/cgi-bin/luci/?token=must-not-leak", nil)
	req.Header.Set("Accept", "text/html,application/xhtml+xml")
	req = req.WithContext(context.WithValue(req.Context(), requestIDContextKey, "req-test-123"))
	recorder := httptest.NewRecorder()

	app.writeLuCIError(recorder, req, http.StatusGatewayTimeout, "internal proxy details")

	if recorder.Code != http.StatusGatewayTimeout {
		t.Fatalf("status = %d, want %d", recorder.Code, http.StatusGatewayTimeout)
	}
	if got := recorder.Header().Get("Content-Type"); !strings.HasPrefix(got, "text/html") {
		t.Fatalf("content type = %q, want HTML", got)
	}
	body := recorder.Body.String()
	for _, expected := range []string{"LuCI не отвечает", "req-test-123", `href="/cgi-bin/luci/"`, `href="https://rmm.example/"`} {
		if !strings.Contains(body, expected) {
			t.Errorf("response does not contain %q", expected)
		}
	}
	for _, unexpected := range []string{"must-not-leak", "internal proxy details"} {
		if strings.Contains(body, unexpected) {
			t.Errorf("response leaked %q", unexpected)
		}
	}
}

func TestWriteLuCIErrorKeepsJSONForAPIClients(t *testing.T) {
	app := &App{deviceDomain: "rmm.example", publicScheme: "https"}
	req := httptest.NewRequest(http.MethodPost, "/api/devices/device-1/access", nil)
	req.Header.Set("Accept", "application/json")
	recorder := httptest.NewRecorder()

	app.writeLuCIError(recorder, req, http.StatusConflict, "LuCI session is not active")

	if recorder.Code != http.StatusConflict {
		t.Fatalf("status = %d, want %d", recorder.Code, http.StatusConflict)
	}
	if got := recorder.Header().Get("Content-Type"); got != "application/json" {
		t.Fatalf("content type = %q, want application/json", got)
	}
	if !strings.Contains(recorder.Body.String(), `"error":"LuCI session is not active"`) {
		t.Fatalf("unexpected JSON response: %s", recorder.Body.String())
	}
}