# frozen_string_literal: true

require 'spec_helper'

RSpec.describe "Server" do
  let(:host) { RSpec.configuration.bind_addr }
  let(:base_url) { "http://#{host}" }
  let(:client) { RSpec.configuration.http }

  describe "GET /" do
    it 'returns OK' do
      response = client.get(base_url + "/")
      expect(response.code).to eq("200")
    end
  end

  describe "GET /404" do
    it 'returns 404' do
      response = client.get(base_url + "/404")
      expect(response.code).to eq("404")
    end
  end

  # https://datatracker.ietf.org/doc/html/rfc8414#section-3.1
  describe "GET /.well-known/oauth-authorization-server" do
    let(:response) { client.get(base_url + "/.well-known/oauth-authorization-server") }
    let(:json) { JSON.parse(response.body, symbolize_names: true) }

    it { expect(response.code).to eq("200") }
    it { expect(response["Content-Type"]).to eq("application/json") }

    it 'returns required fields' do
      expect(json[:issuer]).to eq("#{base_url}")
      expect(json[:authorization_endpoint]).to eq("#{base_url}/authorize")
      expect(json[:token_endpoint]).to eq("#{base_url}/token")
      expect(json[:response_types_supported]).to match_array(["code"])
    end

    it 'returns recommended fields' do
      expect(json[:scopes_supported]).to match_array(["openid", "profile", "email"])
    end

    describe "optional fields" do
      pending { expect(json[:response_modes_supported]).to eq("") }
      pending { expect(json[:jwks_uri]).to eq("#{base_url}/jwks.json") }
      pending { expect(json[:registration_endpoint]).to eq("#{base_url}/register") }
      pending { expect(json[:token_endpoint_auth_methods_supported]).to match_array(["client_secret_basic"]) }
      pending { expect(json[:token_endpoint_auth_signing_alg_values_supported]).to match_array(["RS256"]) }
      pending { expect(json[:service_documentation]).to eq("#{base_url}/service_documentation.html") }
      pending { expect(json[:ui_locales_supported]).to match_array(["en-US"]) }
      pending { expect(json[:op_policy_uri]).to eq("") }
      pending { expect(json[:op_tos_uri]).to eq("") }
      pending { expect(json[:revocation_endpoint]).to eq("") }
      pending { expect(json[:revocation_endpoint_auth_methods_supported]).to eq("") }
      pending { expect(json[:revocation_endpoint_auth_signing_alg_values_supported]).to eq("") }
      pending { expect(json[:introspection_endpoint]).to eq("") }
      pending { expect(json[:introspection_endpoint_auth_methods_supported]).to eq("") }
      pending { expect(json[:introspection_endpoint_auth_signing_alg_values_supported]).to eq("") }
      pending { expect(json[:code_challenge_methods_supported]).to eq("") }
      pending { expect(json[:signed_metadata]).to eq("") }
      pending { expect(json[:grant_types_supported]).to match_array(["authorization_code"]) }
    end
  end

  describe "GET /authorize" do
    pending
  end

  # https://datatracker.ietf.org/doc/html/rfc8693#section-2.3
  describe "POST /token" do
    pending
  end

  # https://datatracker.ietf.org/doc/html/rfc7662#section-2
  describe "POST /introspect" do
    pending
  end

  # https://datatracker.ietf.org/doc/html/rfc7009#section-2.1
  describe "POST /revoke" do
    pending
  end
end