import { afterEach, describe, expect, it, vi } from "vitest";

const cookieSet = vi.hoisted(() => vi.fn());

vi.mock("next/headers", () => ({
  cookies: vi.fn(async () => ({ set: cookieSet })),
}));

import { createManagerSession } from "../management-auth";

describe("Manager session cookie", () => {
  const originalAppUrl = process.env.NEXT_PUBLIC_APP_URL;
  const originalAdminEmail = process.env.MANAGER_ADMIN_EMAIL;
  const originalAuthSecret = process.env.MANAGER_AUTH_SECRET;

  afterEach(() => {
    if (originalAppUrl === undefined) delete process.env.NEXT_PUBLIC_APP_URL;
    else process.env.NEXT_PUBLIC_APP_URL = originalAppUrl;
    if (originalAdminEmail === undefined) delete process.env.MANAGER_ADMIN_EMAIL;
    else process.env.MANAGER_ADMIN_EMAIL = originalAdminEmail;
    if (originalAuthSecret === undefined) delete process.env.MANAGER_AUTH_SECRET;
    else process.env.MANAGER_AUTH_SECRET = originalAuthSecret;
    cookieSet.mockReset();
  });

  it("does not mark the cookie Secure for an HTTP deployment", async () => {
    process.env.NEXT_PUBLIC_APP_URL = "http://manager.example.com";
    process.env.MANAGER_ADMIN_EMAIL = "admin@example.com";
    process.env.MANAGER_AUTH_SECRET = "test-secret";

    await createManagerSession();

    expect(cookieSet).toHaveBeenCalledWith(
      "nextchair_manager_session",
      expect.any(String),
      expect.objectContaining({ secure: false, path: "/" }),
    );
    expect(cookieSet).toHaveBeenCalledWith("nextchair_manager_session", "", { path: "/manager", maxAge: 0 });
  });

  it("marks the cookie Secure for an HTTPS deployment", async () => {
    process.env.NEXT_PUBLIC_APP_URL = "https://manager.example.com";
    process.env.MANAGER_ADMIN_EMAIL = "admin@example.com";
    process.env.MANAGER_AUTH_SECRET = "test-secret";

    await createManagerSession();

    expect(cookieSet).toHaveBeenCalledWith(
      "nextchair_manager_session",
      expect.any(String),
      expect.objectContaining({ secure: true, path: "/" }),
    );
  });
});