class SrpTest < RackTest

  setup do
    @testcode = InviteCode.new
    @testcode.save!
  end

  teardown do
    if @user
      cleanup_user
    end
    Warden.test_reset!
  end

  # this test wraps the api and implements the interface the ruby-srp client.
  def handshake(login, aa)
    post api_url("sessions.json"),
      :login => login,
      'A' => aa,
      :format => :json
    response = JSON.parse(last_response.body)
    if response['errors']
      raise RECORD_NOT_FOUND.new(response['errors'])
    else
      return response['B']
    end
  end

  def validate(m)
    put api_url("sessions/#{@login}.json"),
      :client_auth => m,
      :format => :json
    return JSON.parse(last_response.body)
  end

  protected

  attr_reader :server_auth

  def register_user(login = "integration_test", password = 'srp, verify me!', invite_code = @testcode.invite_code)
    cleanup_user(login)
    post api_url('users.json'),
      user_params(login: login, password: password, invite_code: invite_code)
    assert(@user = User.find_by_login(login), 'user should have been created: %s' % last_response_errors)
    @login = login
    @password = password
  end

  def update_user(params)
    put api_url("users/#{@user.id}.json"),
      user_params(params),
      auth_headers
  end

  def authenticate(params = nil)
    @server_auth = srp(params).authenticate(self)
  end

  def auth_headers
    return {} if @server_auth.nil?
    {
      "HTTP_AUTHORIZATION" => encoded_token
    }
  end

  def encoded_token
    ActionController::HttpAuthentication::Token.encode_credentials(server_auth["token"])
  end

  def logout(params=nil, headers=nil)
    delete api_url("logout.json"),
      params || {format: :json},
      headers || auth_headers
  end

  def cleanup_user(login = nil)
    login ||= @user.login
    Identity.by_address.key(login + '@' + APP_CONFIG[:domain]).each do |identity|
      identity.destroy
    end
    if user = User.find_by_login(login)
      user.destroy
    end
  end

  def user_params(params)
    if params.keys.include?(:password)
      srp_process_password(params)
    end
    return { user: params, format: :json }
  end

  def srp_process_password(params)
    params.reverse_merge! login: @login, salt: @salt
    @srp = SRP::Client.new params[:login], password: params.delete(:password)
    @salt = srp.salt.to_s(16)
    params.merge! :password_verifier => srp.verifier.to_s(16),
      :password_salt => @salt
  end

  def srp(params = nil)
    if params.nil?
      @srp
    else
      params.reverse_merge! password: @password
      SRP::Client.new(params.delete(:login) || @login, params)
    end
  end

  def last_response_errors
    JSON.parse(last_response.body)['errors']
  rescue
    ""
  end

  def api_url(path)
    "http://api.lvh.me:3000/#{api_version}/#{path}"
  end

  def api_version
    2
  end
end