<?php

// Copyright (c) ppy Pty Ltd <contact@ppy.sh>. Licensed under the GNU Affero General Public License v3.0.
// See the LICENCE file in the repository root for full licence text.

namespace Tests\Controllers;

use App\Models\Country;
use App\Models\LoginAttempt;
use App\Models\User;
use Tests\TestCase;

class SessionsControllerTest extends TestCase
{
    public function testLogin()
    {
        $password = 'password1';
        $user = User::factory()->create(compact('password'));

        $this->expectCountChange(fn () => LoginAttempt::count(), 1);
        $this->post(route('login'), [
            'username' => $user->username,
            'password' => $password,
        ])->assertSuccessful();

        $this->assertAuthenticated();
    }

    public function testLoginInactiveUser()
    {
        $password = 'password1';
        $countryAcronym = (Country::first() ?? Country::factory()->create())->getKey();
        $user = User::factory()->create(['password' => $password, 'country_acronym' => $countryAcronym]);
        $user->update(['user_lastvisit' => time() - $GLOBALS['cfg']['osu']['user']['inactive_seconds_verification'] - 1]);

        $this->post(route('login'), [
            'username' => $user->username,
            'password' => $password,
        ], [
            'CF_IPCOUNTRY' => $countryAcronym,
        ])->assertSuccessful();

        $this->assertAuthenticated();

        $this->get(route('home'))->assertStatus(401);
    }

    public function testLoginInactiveUserForceReset(): void
    {
        config_set('osu.user.inactive_force_password_reset', true);

        $password = 'password1';
        $countryAcronym = (Country::first() ?? Country::factory()->create())->getKey();
        $user = User::factory()->create(['password' => $password, 'country_acronym' => $countryAcronym]);
        $user->update(['user_lastvisit' => time() - $GLOBALS['cfg']['osu']['user']['inactive_seconds_verification'] - 1]);

        $this->post(route('login'), [
            'username' => $user->username,
            'password' => $password,
        ], [
            'CF_IPCOUNTRY' => $countryAcronym,
        ])->assertStatus(302);

        $this->assertGuest();
    }

    public function testLoginInactiveUserDifferentCountry()
    {
        $password = 'password1';
        $user = User::factory()->create(compact('password'));
        $user->update(['user_lastvisit' => time() - $GLOBALS['cfg']['osu']['user']['inactive_seconds_verification'] - 1]);

        $this->assertNotSame('', $user->fresh()->user_password);

        $this->post(route('login'), [
            'username' => $user->username,
            'password' => $password,
        ], [
            'CF_IPCOUNTRY' => '__',
        ])->assertStatus(302);

        $this->assertGuest();
        $this->assertSame('', $user->fresh()->user_password);
    }

    public function testLoginMissingParameters()
    {
        $password = 'password1';
        $user = User::factory()->create(compact('password'));

        $this->post(route('login'))->assertStatus(422);
        $this->assertGuest();

        $this->post(route('login'), ['username' => $user->username])->assertStatus(422);
        $this->assertGuest();

        $this->post(route('login'), compact('password'))->assertStatus(422);
        $this->assertGuest();
    }

    public function testLoginWrongPassword()
    {
        $password = 'password1';
        $user = User::factory()->create(compact('password'));

        $this->post(route('login'), [
            'username' => $user->username,
            'password' => "{$password}1",
        ])->assertStatus(403);

        $this->assertGuest();

        $record = LoginAttempt::find('127.0.0.1');
        $this->assertTrue($record->containsUser($user, 'fail:'));
        $this->assertSame(1, $record->unique_ids);
        $this->assertSame(1, $record->failed_attempts);
        $this->assertSame(1, $record->total_attempts);
    }

    public function testLoginWrongPasswordTwiceDifferent()
    {
        $password = 'password1';
        $user = User::factory()->create(compact('password'));

        $this->post(route('login'), [
            'username' => $user->username,
            'password' => 'password2',
        ])->assertStatus(403);

        $this->post(route('login'), [
            'username' => $user->username,
            'password' => 'password3',
        ])->assertStatus(403);

        $this->assertGuest();

        $record = LoginAttempt::find('127.0.0.1');
        $this->assertTrue($record->containsUser($user, 'fail:'));
        $this->assertSame(1, $record->unique_ids);
        $this->assertSame(2, $record->failed_attempts);
        $this->assertSame(2, $record->total_attempts);
    }

    public function testLoginWrongPasswordTwiceSame()
    {
        $password = 'password1';
        $wrongPassword = 'password2';
        $user = User::factory()->create(compact('password'));

        $this->post(route('login'), [
            'username' => $user->username,
            'password' => $wrongPassword,
        ])->assertStatus(403);

        $this->post(route('login'), [
            'username' => $user->username,
            'password' => $wrongPassword,
        ])->assertStatus(403);

        $this->assertGuest();

        $record = LoginAttempt::find('127.0.0.1');
        $this->assertTrue($record->containsUser($user, 'fail:'));
        $this->assertSame(1, $record->unique_ids);
        $this->assertSame(1, $record->failed_attempts);
        $this->assertSame(1, $record->total_attempts);
    }

    public function testLoginWrongPasswordExtraFailedOnAnotherUser()
    {
        $password = 'password1';
        $ip = '127.0.0.1';
        $firstUser = User::factory()->create(compact('password'));
        LoginAttempt::logAttempt($ip, $firstUser, 'fail', 'password2');

        $record = LoginAttempt::find('127.0.0.1');
        $this->assertTrue($record->containsUser($firstUser, 'fail:'));
        $this->assertSame(1, $record->unique_ids);
        $this->assertSame(1, $record->failed_attempts);
        $this->assertSame(1, $record->total_attempts);

        $secondUser = User::factory()->create(compact('password'));

        $this->post(route('login'), [
            'username' => $secondUser->username,
            'password' => "{$password}1",
        ])->assertStatus(403);

        $this->assertGuest();

        $record = LoginAttempt::find('127.0.0.1');
        $this->assertTrue($record->containsUser($secondUser, 'fail:'));
        $this->assertSame(2, $record->unique_ids);
        $this->assertSame(3, $record->failed_attempts);
        $this->assertSame(2, $record->total_attempts);
    }
}