const assert = require('node:assert/strict');
const supertest = require('supertest');
const testUtils = require('../../utils');
const localUtils = require('./utils');
const config = require('../../../core/shared/config');
const configUtils = require('../../utils/config-utils');

describe('Content API key authentication', function () {
    let request;

    before(async function () {
        await localUtils.startGhost();
        request = supertest.agent(config.get('url'));
        await testUtils.initFixtures('api_keys');
    });

    it('Can not access without key', async function () {
        await request.get(localUtils.API.getApiQuery('posts/'))
            .expect('Content-Type', /json/)
            .expect('Cache-Control', testUtils.cacheRules.private)
            .expect(403);
    });

    it('Can access with with valid key', async function () {
        const key = localUtils.getValidKey();

        await request.get(localUtils.API.getApiQuery(`posts/?key=${key}`))
            .expect('Content-Type', /json/)
            .expect('Cache-Control', testUtils.cacheRules.public)
            .expect(200);
    });

    describe('Host Settings: custom integration limits', function () {
        afterEach(function () {
            configUtils.set('hostSettings:limits', undefined);
        });

        it('Blocks the request when host limit is in place for custom integrations', async function () {
            configUtils.set('hostSettings:limits', {
                customIntegrations: {
                    disabled: true,
                    error: 'Custom limit error message'
                }
            });

            // NOTE: need to do a full reboot to reinitialize hostSettings
            await localUtils.startGhost();
            await testUtils.initFixtures('integrations');
            await testUtils.initFixtures('api_keys');

            const key = localUtils.getValidKey();

            const firstResponse = await request.get(localUtils.API.getApiQuery(`posts/?key=${key}`))
                .expect('Content-Type', /json/)
                .expect('Cache-Control', testUtils.cacheRules.private)
                .expect(403);

            assert.equal(firstResponse.body.errors[0].type, 'HostLimitError');
            assert.equal(firstResponse.body.errors[0].message, 'Custom limit error message');

            // CASE: explore endpoint can only be reached by Admin API
            const secondResponse = await request.get(localUtils.API.getApiQuery('explore/'))
                .expect('Content-Type', /json/)
                .expect('Cache-Control', testUtils.cacheRules.noCache)
                .expect(404);

            assert.equal(secondResponse.body.errors[0].type, 'NotFoundError');
        });
    });
});
