package upstream

import (
	"cmpp-platform/gateway/internal/queue"
	"context"
	"net/http"
	"net/http/httptest"
	"testing"
)

func TestDrainageGuardFailClosed(t *testing.T) {
	for _, body := range []string{`{"allowed":false,"reason":"未报备"}`, `{}`, `not json`} {
		server := httptest.NewServer(http.HandlerFunc(func(w http.ResponseWriter, r *http.Request) { w.Write([]byte(body)) }))
		m := &Manager{DrainageGuardEnabled: true, EventAPIBaseURL: server.URL}
		if err := m.authorizeDrainage(context.Background(), queue.SubmitCommand{SubmitID: "s", Content: "原文"}); err == nil {
			t.Fatalf("unexpected authorization: %s", body)
		}
		server.Close()
	}
}
func TestDrainageGuardRequiresFreshResponse(t *testing.T) {
	allowed := true
	server := httptest.NewServer(http.HandlerFunc(func(w http.ResponseWriter, r *http.Request) {
		if r.URL.Path != "/gateway/events/authorize-drainage" {
			t.Error(r.URL.Path)
		}
		if allowed {
			w.Write([]byte(`{"allowed":true}`))
		} else {
			w.WriteHeader(503)
		}
	}))
	defer server.Close()
	m := &Manager{DrainageGuardEnabled: true, EventAPIBaseURL: server.URL}
	cmd := queue.SubmitCommand{SubmitID: "s", Content: "unchanged"}
	if err := m.authorizeDrainage(context.Background(), cmd); err != nil {
		t.Fatal(err)
	}
	allowed = false
	if err := m.authorizeDrainage(context.Background(), cmd); err == nil {
		t.Fatal("reused stale permission")
	}
}