<?php

declare(strict_types=1);

namespace App\Tests\Security;

use App\Security\Role;
use PHPUnit\Framework\TestCase;

class RoleTest extends TestCase
{
    public function testPrivilegedRolesAreNeverImported(): void
    {
        $roles = Role::filterImportable([
            Role::TEAMER,
            Role::ADMIN,
            Role::GROUPS_ADMIN,
            Role::GROUPS_MANAGER,
            Role::HOUSE_MANAGER,
        ]);

        self::assertSame([Role::TEAMER, Role::HOUSE_MANAGER], $roles);
    }

    public function testResultIsADedupedList(): void
    {
        // CrmAttributesResponseParser applies array_unique(), which preserves keys — a
        // non-list would be persisted as a JSON object instead of an array.
        $roles = Role::filterImportable([0 => Role::ADMIN, 2 => Role::TEAMER, 5 => Role::TEAMER]);

        self::assertSame([Role::TEAMER], $roles);
        self::assertSame(array_keys($roles), range(0, \count($roles) - 1));
    }

    public function testAccountWithOnlyPrivilegedRolesFallsBackToCustomer(): void
    {
        self::assertSame([Role::CUSTOMER], Role::filterImportable([Role::ADMIN]));
        self::assertSame([Role::CUSTOMER], Role::filterImportable([]));
    }

    public function testAssignedOnlyDropsTheImplicitRoleUser(): void
    {
        $roles = Role::assignedOnly([Role::USER, Role::TEAMER, Role::GROUPS_ADMIN]);

        self::assertSame([Role::TEAMER, Role::GROUPS_ADMIN], $roles);
        // The value is JSON-encoded into the userinfo response and must not become an object.
        self::assertSame(array_keys($roles), range(0, \count($roles) - 1));
    }

    public function testCombineKeepsEachHalfInItsOwnLane(): void
    {
        $roles = Role::combine([Role::TEAMER, Role::ADMIN], [Role::GROUPS_ADMIN, Role::TEAMER]);

        // The ADMIN from the synced half and the TEAMER from the privileged half are discarded.
        self::assertSame([Role::TEAMER, Role::GROUPS_ADMIN], $roles);
        self::assertSame(array_keys($roles), range(0, \count($roles) - 1));
    }

    public function testCombineDropsTheImplicitRoleUser(): void
    {
        self::assertSame([Role::TEAMER], Role::combine([Role::USER, Role::TEAMER], []));
    }

    public function testEveryRoleHasALabel(): void
    {
        self::assertSame(Role::ALL, array_keys(Role::labels()));
    }
}