import { describe, it, expect, afterAll, beforeEach } from 'vitest'
import request from 'supertest'
import { createApp } from '@app/createApp'
import { buildPrisma, cleanupTestDb, createTestUser } from '../test-helper'
import { recordedJobs, resetQueueMocks } from '../mocks/queue'

const app = createApp()
const db = buildPrisma()

afterAll(() => db.$disconnect())
beforeEach(async () => {
  await cleanupTestDb(db)

  resetQueueMocks()
})

describe('POST /auth/forgot-password', () => {
  it('stores a reset token and enqueues the email for a known user', async () => {
    const user = await createTestUser(db, { email: 'forgot@example.com' })

    const res = await request(app)
      .post('/auth/forgot-password')
      .send({ email: 'forgot@example.com' })

    expect(res.status).toBe(200)
    expect(res.body.success).toBe(true)
    expect(res.body.token).toBeUndefined()

    const dbUser = await db.user.findUnique({ where: { id: user.id } })

    expect(dbUser!.passwordResetToken).toBeTruthy()
    expect(dbUser!.passwordResetExpires).not.toBeNull()

    expect(recordedJobs).toContainEqual(
      expect.objectContaining({
        queue: 'mail',
        name: 'mail:password-reset',
        data: { userId: user.id, token: dbUser!.passwordResetToken },
      })
    )
  })

  it('answers 200 without a token for an unknown email (no enumeration)', async () => {
    const res = await request(app)
      .post('/auth/forgot-password')
      .send({ email: 'ghost@example.com' })

    expect(res.status).toBe(200)
    expect(res.body.success).toBe(true)
    expect(res.body.token).toBeUndefined()
    expect(recordedJobs).toHaveLength(0)
  })

  it('returns 400 for an invalid email', async () => {
    const res = await request(app)
      .post('/auth/forgot-password')
      .send({ email: 'not-an-email' })

    expect(res.status).toBe(400)
    expect(res.body.error).toBeTruthy()
    expect(res.body.fields).toBeTruthy()
  })
})