// Copyright © 2022 Ory Corp
// SPDX-License-Identifier: Apache-2.0

package cmd_test

import (
	"testing"

	"github.com/gofrs/uuid"

	"github.com/stretchr/testify/assert"
	"github.com/stretchr/testify/require"
	"github.com/tidwall/gjson"

	"github.com/ory/hydra/v2/cmd"
	"github.com/ory/x/cmdx"
)

func TestGetJWKS(t *testing.T) {
	t.Parallel()

	c := cmd.NewGetJWKSCmd()
	reg := setup(t, c)

	set := uuid.Must(uuid.NewV4()).String()
	_ = createJWK(t, reg, set, "RS256")

	t.Run("case=gets jwks", func(t *testing.T) {
		actual := gjson.Parse(cmdx.ExecNoErr(t, c, set))
		assert.NotEmpty(t, actual.Get("kid").String(), actual.Raw)

		expected, err := reg.KeyManager().GetKeySet(t.Context(), set)
		require.NoError(t, err)

		assert.Equal(t, expected.Keys[0].KeyID, actual.Get("kid").String())
	})

	t.Run("case=gets jwks public", func(t *testing.T) {
		actual := gjson.Parse(cmdx.ExecNoErr(t, c, set, "--public"))

		expected, err := reg.KeyManager().GetKeySet(t.Context(), set)
		require.NoError(t, err)

		assert.Equal(t, expected.Keys[0].KeyID, actual.Get("kid").String())

		assert.NotEmptyf(t, actual.Get("kid").String(), "Expected kid to be set but got: %s", actual.Raw)
		assert.Empty(t, actual.Get("p").String(), "public key should not contain private key components: %s", actual.Raw)
	})
}