package main

import (
	"bytes"
	"errors"
	"path/filepath"
	"strings"
	"testing"
)

func TestEncryptFile_Force(t *testing.T) {
	t.Parallel()

	for _, tc := range []struct {
		desc    string
		force   bool
		wantErr bool
	}{{
		desc:    "OutputExists",
		force:   false,
		wantErr: true,
	}, {
		desc:    "Force",
		force:   true,
		wantErr: false,
	}} {
		t.Run(tc.desc, func(t *testing.T) {
			t.Parallel()

			fileName := filepath.Join(t.TempDir(), "file")
			mustWriteFile(t, fileName, []byte("test file content"))
			mustWriteFile(t, fileName+".enc", []byte("file already exists"))
			err := (&encCmd{force: tc.force}).encryptFile(fileName, "asdf")
			if gotErr := err != nil; gotErr != tc.wantErr {
				t.Errorf("EncryptFile(force=%t) returned returned error %v when output file exists, want error? %t", tc.force, err, tc.wantErr)
			}
		})
	}
}

func TestEncryptFile_NotFound(t *testing.T) {
	t.Parallel()

	err := (&encCmd{}).encryptFile("my-nonexistent-file.txt", "asdf")
	if err == nil {
		t.Fatal("encryptFile succeeded for nonexistent file, want error")
	}
}

func TestEncryptFile_NoPermission(t *testing.T) {
	t.Parallel()

	fileName := filepath.Join(t.TempDir(), "file")
	mustWriteFile(t, fileName, []byte("test file content"))
	mustWriteFile(t, fileName+".enc", nil)
	mustChmod(t, fileName+".enc", 0400)
	err := (&encCmd{force: true}).encryptFile(fileName, "asdf")
	if err == nil {
		t.Fatal("encryptFile succeeded for unwritable file, want error")
	}
}

func TestEncCmd_Run(t *testing.T) {
	t.Parallel()

	const password = "asdf"
	fileContent := []byte("test file content")
	fileName := filepath.Join(t.TempDir(), "file")
	mustWriteFile(t, fileName, fileContent)
	if err := (&encCmd{password: password}).run(fileName); err != nil {
		t.Fatalf("enc failed: %s", err)
	}
	mustRemove(t, fileName)
	if err := (&decCmd{}).decryptFile(fileName+".enc", password); err != nil {
		t.Fatalf("Failed to decrypt encrypted file: %s", err)
	}
	gotFileContents := mustReadFile(t, fileName)
	if !bytes.Equal(gotFileContents, fileContent) {
		t.Errorf("encrypt round trip returned incorrect contents %q, want %q", gotFileContents, fileContent)
	}
}

func TestEncCmd_Run_UsageError(t *testing.T) {
	t.Parallel()

	for _, tc := range []struct {
		desc             string
		generatePassword bool
		password         string
		files            []string
	}{{
		desc:             "GeneratePasswordAndPassword",
		generatePassword: true,
		password:         "asdf",
	}, {
		desc:             "MissingPasswordStdin",
		generatePassword: false,
		password:         "",
	}, {
		desc:     "NonexistentFile",
		password: "asdf",
		files:    []string{"my-nonexistent-file.txt"},
	}} {
		t.Run(tc.desc, func(t *testing.T) {
			t.Parallel()

			opts := &encCmd{
				generatePassword: tc.generatePassword,
				password:         tc.password,
			}
			if err := opts.run(tc.files...); err == nil {
				t.Errorf("encCmd.run(%+v) succeeded, want error", opts)
			}
		})
	}
}

func TestEncCmd_Run_GeneratePassword(t *testing.T) {
	t.Parallel()

	fileContent := []byte("test file content")
	fileName := filepath.Join(t.TempDir(), "file")
	mustWriteFile(t, fileName, fileContent)

	password := new(strings.Builder)
	opts := &encCmd{
		generatePassword: true,
		passwordOut:      password,
	}
	if err := opts.run(fileName); err != nil {
		t.Fatalf("encCmd.run(%+v) failed: %s", opts, err)
	}
	pw := password.String()
	mustRemove(t, fileName)
	if err := (&decCmd{}).decryptFile(fileName+".enc", pw); err != nil {
		t.Fatalf("Failed to decrypt encrypted file with generated password %q: %s", pw, err)
	}
	gotFileContents := mustReadFile(t, fileName)
	if !bytes.Equal(gotFileContents, fileContent) {
		t.Errorf("encrypt round trip returned incorrect contents %q, want %q", gotFileContents, fileContent)
	}
}

func TestEncCmd_Run_Stdin(t *testing.T) {
	t.Parallel()

	const (
		input    = "test input"
		password = "asdf"
	)
	stdout := new(strings.Builder)
	if err := (&encCmd{
		password: password,
		stdin:    strings.NewReader(input),
		stdout:   stdout,
	}).run(); err != nil {
		t.Errorf("encCmd.run failed: %s", err)
	}
	got := new(strings.Builder)
	if err := (&decCmd{}).decrypt(got, strings.NewReader(stdout.String()), password); err != nil {
		t.Errorf("Failed to decrypt stdout content %q: %s", stdout, err)
	}
	if got, want := got.String(), input; got != want {
		t.Errorf("Encrypt round-trip to stdout returned incorrect contents: %q, want %q", got, want)
	}
}

func TestEncCmd_Run_ReadPassword(t *testing.T) {
	t.Parallel()

	for _, tc := range []struct {
		desc      string
		passwords []string
		err       error
		wantErr   bool
	}{{
		desc:      "Ok",
		passwords: []string{"asdf"},
	}, {
		desc:      "EmptyPassword",
		passwords: []string{""},
		wantErr:   true,
	}, {
		desc:      "PasswordsDoNotMatch",
		passwords: []string{"asdf", "jkl"},
		wantErr:   true,
	}, {
		desc:    "ReadPasswordErr",
		err:     errors.New("test error"),
		wantErr: true,
	}, {
		desc:      "RepeatPasswordErr",
		passwords: []string{"asdf"},
		err:       errors.New("test error"),
		wantErr:   true,
	}} {
		t.Run(tc.desc, func(t *testing.T) {
			t.Parallel()

			fileName := filepath.Join(t.TempDir(), "file")
			mustWriteFile(t, fileName, []byte("test file content"))

			passwordI := 0
			err := (&encCmd{
				passwordIn: func() (string, error) {
					if passwordI == len(tc.passwords) && tc.err != nil {
						return "", tc.err
					}
					pw := tc.passwords[passwordI%len(tc.passwords)]
					passwordI++
					return pw, nil
				},
			}).run(fileName)
			if gotErr := err != nil; gotErr != tc.wantErr {
				t.Errorf("encCmd.run returned error %v, want error? %t", err, tc.wantErr)
			}
		})
	}
}