using System.Security.Claims;
using ZB.MOM.WW.ScadaBridge.Security;
using System.Text.Json;
using Bunit;
using Microsoft.AspNetCore.Components;
using Microsoft.AspNetCore.Components.Authorization;
using Microsoft.Extensions.DependencyInjection;
using NSubstitute;
using ZB.MOM.WW.ScadaBridge.CentralUI.Services;
using ZB.MOM.WW.ScadaBridge.Commons.Entities.Sites;
using ZB.MOM.WW.ScadaBridge.Commons.Interfaces.Repositories;
using DataConnectionForm = ZB.MOM.WW.ScadaBridge.CentralUI.Components.Pages.Design.DataConnectionForm;

namespace ZB.MOM.WW.ScadaBridge.CentralUI.Tests;

public class DataConnectionFormTests : BunitContext
{
    private readonly ISiteRepository _siteRepo = Substitute.For<ISiteRepository>();

    public DataConnectionFormTests()
    {
        Services.AddSingleton(_siteRepo);
        // The OPC UA editor rendered inside the form injects IEndpointVerificationService
        // (B8 / T17 Verify-endpoint button) and ICertManagementService (B10 / T17
        // Trust-certificate button); no-op substitutes satisfy the injections.
        Services.AddSingleton<IEndpointVerificationService>(Substitute.For<IEndpointVerificationService>());
        Services.AddSingleton<ICertManagementService>(Substitute.For<ICertManagementService>());
        AddTestAuth();
        var sites = new List<Site> { new("Plant-A", "plant-a") { Id = 1 } };
        _siteRepo.GetAllSitesAsync(Arg.Any<CancellationToken>())
            .Returns(Task.FromResult<IReadOnlyList<Site>>(sites));
    }

    private void AddTestAuth()
    {
        var claims = new[]
        {
            new Claim(JwtTokenService.UsernameClaimType, "tester"),
            new Claim(JwtTokenService.RoleClaimType, "Administrator")
        };
        var user = new ClaimsPrincipal(new ClaimsIdentity(claims, "TestAuth"));
        Services.AddSingleton<AuthenticationStateProvider>(new TestAuthStateProvider(user));
        Services.AddAuthorizationCore();
    }

    private IRenderedComponent<DataConnectionForm> RenderForCreateSite(int siteId)
    {
        Services.GetRequiredService<NavigationManager>()
            .NavigateTo($"/admin/connections/create?siteId={siteId}");
        return Render<DataConnectionForm>();
    }

    [Fact]
    public void ProtocolDropdown_IsRendered_OnCreate_WithBothProtocols()
    {
        var cut = RenderForCreateSite(1);
        var labels = cut.FindAll("label").Select(l => l.TextContent.Trim()).ToList();
        Assert.Contains(labels, l => l == "Protocol");

        // The protocol select offers OPC UA and MxGateway.
        var optionTexts = cut.FindAll("option").Select(o => o.TextContent.Trim()).ToList();
        Assert.Contains("OPC UA", optionTexts);
        Assert.Contains("MxGateway", optionTexts);
    }

    [Fact]
    public async Task Save_MxGateway_PersistsTypedJsonAndProtocolMxGateway()
    {
        DataConnection? captured = null;
        await _siteRepo.AddDataConnectionAsync(
            Arg.Do<DataConnection>(d => captured = d));

        var cut = RenderForCreateSite(1);

        // Switch protocol to MxGateway — re-renders with the MxGateway editor.
        cut.FindAll("select")
           .First(s => s.QuerySelectorAll("option").Any(o => o.TextContent.Trim() == "MxGateway"))
           .Change("MxGateway");

        // Name (skip readonly Site plaintext input; MxGateway editor inputs carry placeholders).
        cut.FindAll("input[type='text']")
           .First(i => !i.HasAttribute("readonly") && i.GetAttribute("placeholder") is null)
           .Change("MX-1");
        // Gateway endpoint
        cut.FindAll("input[type='text']")
           .First(i => i.GetAttribute("placeholder")?.StartsWith("http://") == true)
           .Change("http://gw:5000");
        // API key (password input)
        cut.FindAll("input[type='password']")
           .First(i => i.GetAttribute("placeholder")?.Contains("API key") == true)
           .Change("secret");

        await cut.FindAll("button")
                 .First(b => b.TextContent.Trim() == "Save").ClickAsync(new());

        Assert.NotNull(captured);
        Assert.Equal("MxGateway", captured!.Protocol);
        Assert.NotNull(captured.PrimaryConfiguration);

        using var doc = JsonDocument.Parse(captured.PrimaryConfiguration!);
        Assert.Equal("http://gw:5000",
            doc.RootElement.GetProperty("endpoint").GetString());
    }

    [Fact]
    public async Task Save_InvalidPrimaryUrl_DoesNotCallRepo()
    {
        var cut = RenderForCreateSite(1);
        cut.FindAll("input[type='text']")
           .First(i => i.GetAttribute("placeholder")?.StartsWith("opc.tcp") == true)
           .Change("not-a-url");

        // Name field (the first editable text input that is NOT the OPC URL).
        // Site renders as a readonly plaintext input when locked — skip it.
        cut.FindAll("input[type='text']")
           .First(i => !i.HasAttribute("readonly")
                       && (i.GetAttribute("placeholder") is null
                           || !i.GetAttribute("placeholder")!.StartsWith("opc.tcp")))
           .Change("My Connection");

        await cut.FindAll("button")
                 .First(b => b.TextContent.Trim() == "Save").ClickAsync(new());

        await _siteRepo.DidNotReceive().AddDataConnectionAsync(Arg.Any<DataConnection>());
        Assert.Contains("Endpoint URL must be a valid", cut.Markup);
    }

    [Fact]
    public async Task Save_ValidConfig_PersistsTypedJsonAndProtocolOpcUa()
    {
        DataConnection? captured = null;
        await _siteRepo.AddDataConnectionAsync(
            Arg.Do<DataConnection>(d => captured = d));

        var cut = RenderForCreateSite(1);

        // Name (skip readonly Site plaintext input)
        cut.FindAll("input[type='text']")
           .First(i => !i.HasAttribute("readonly")
                       && (i.GetAttribute("placeholder") is null
                           || !i.GetAttribute("placeholder")!.StartsWith("opc.tcp")))
           .Change("PLC-1");
        // Endpoint URL
        cut.FindAll("input[type='text']")
           .First(i => i.GetAttribute("placeholder")?.StartsWith("opc.tcp") == true)
           .Change("opc.tcp://plant-a:4840");

        await cut.FindAll("button")
                 .First(b => b.TextContent.Trim() == "Save").ClickAsync(new());

        Assert.NotNull(captured);
        Assert.Equal("OpcUa", captured!.Protocol);
        Assert.NotNull(captured.PrimaryConfiguration);

        using var doc = JsonDocument.Parse(captured.PrimaryConfiguration!);
        Assert.Equal("opc.tcp://plant-a:4840",
            doc.RootElement.GetProperty("endpointUrl").GetString());
        Assert.Equal(60000,
            doc.RootElement.GetProperty("sessionTimeoutMs").GetInt32());
    }
}
