package problem

import (
	"encoding/json"
	"net/http"
	"net/http/httptest"
	"strings"
	"testing"

	"github.com/itworx/pulse/internal/correlation"
)

func TestWriteProducesSafeProblemDetails(t *testing.T) {
	handler := correlation.Middleware(http.HandlerFunc(func(response http.ResponseWriter, request *http.Request) {
		Write(response, request, http.StatusBadRequest, "INVALID_INPUT", "Invalid input", "The request could not be accepted.", nil)
	}))
	request := httptest.NewRequest(http.MethodGet, "/", nil)
	request.Header.Set(correlation.Header, "corr-1234")
	response := httptest.NewRecorder()
	handler.ServeHTTP(response, request)
	var details Details
	if err := json.Unmarshal(response.Body.Bytes(), &details); err != nil {
		t.Fatal(err)
	}
	if details.Status != http.StatusBadRequest || details.CorrelationID != "corr-1234" || details.Code != "INVALID_INPUT" {
		t.Fatalf("unexpected problem: %#v", details)
	}
	if response.Header().Get("Cache-Control") != "private, no-store" {
		t.Fatalf("problem response cache control = %q", response.Header().Get("Cache-Control"))
	}
	if strings.Contains(response.Body.String(), "stack") || strings.Contains(response.Body.String(), "goroutine") {
		t.Fatal("problem response contains implementation details")
	}
}