namespace JdeScoping.Infrastructure.Tests.Helpers;

/// <summary>
/// Helper class for mock LDAP test data.
/// Provides test user scenarios for LDAP integration tests.
/// </summary>
/// <remarks>
/// This is not an actual LDAP server mock, but provides test data structures
/// that document the expected behavior of LDAP authentication.
/// For real LDAP server mocking, consider using a containerized LDAP server
/// (e.g., OpenLDAP in Docker) or a protocol-level mock.
/// </remarks>
public static class MockLdapServer
{
    /// <summary>
    /// Test user with valid credentials who is a member of the required security group.
    /// Expected result: Authentication succeeds with user info.
    /// </summary>
    public static TestLdapUser ValidGroupMemberUser { get; } = new(
        Username: "testuser",
        Password: "validPassword123",
        FirstName: "Test",
        LastName: "User",
        Email: "testuser@example.com",
        Title: "Software Engineer",
        IsInRequiredGroup: true);

    /// <summary>
    /// Test user with valid credentials who is NOT a member of the required security group.
    /// Expected result: Authentication fails with "User is not a member of the required security group".
    /// </summary>
    public static TestLdapUser ValidNotInGroupUser { get; } = new(
        Username: "nogroupuser",
        Password: "validPassword456",
        FirstName: "NoGroup",
        LastName: "User",
        Email: "nogroupuser@example.com",
        Title: "External Contractor",
        IsInRequiredGroup: false);

    /// <summary>
    /// Test user with invalid credentials.
    /// Expected result: Authentication fails with "Incorrect username or password".
    /// </summary>
    public static TestLdapUser InvalidCredentialsUser { get; } = new(
        Username: "invaliduser",
        Password: "wrongPassword",
        FirstName: null,
        LastName: null,
        Email: null,
        Title: null,
        IsInRequiredGroup: false);

    /// <summary>
    /// Expected error message when user is not in the required security group.
    /// </summary>
    public const string GroupMembershipErrorMessage = "User is not a member of the required security group";

    /// <summary>
    /// Expected error message when credentials are invalid.
    /// </summary>
    public const string InvalidCredentialsErrorMessage = "Incorrect username or password";

    /// <summary>
    /// Expected error message when all LDAP servers are unreachable.
    /// </summary>
    public const string ConnectionErrorMessage = "Unable to connect to directory server";

    /// <summary>
    /// Expected error message when username or password is empty.
    /// </summary>
    public const string RequiredFieldsErrorMessage = "Username and password are required";

    /// <summary>
    /// Sample fake LDAP server URLs for testing connection failures.
    /// These are intentionally invalid/unreachable hostnames.
    /// </summary>
    public static string[] FakeServerUrls { get; } =
    [
        "ldap.fake-server-1.invalid",
        "ldap.fake-server-2.invalid",
        "ldap.fake-server-3.invalid"
    ];

    /// <summary>
    /// Sample group DN for testing.
    /// </summary>
    public const string TestGroupDn = "CN=ScopingTool-Users,OU=Groups,DC=corp,DC=example,DC=com";

    /// <summary>
    /// Sample search base for testing.
    /// </summary>
    public const string TestSearchBase = "DC=corp,DC=example,DC=com";
}

/// <summary>
/// Represents test data for an LDAP user scenario.
/// </summary>
/// <param name="Username">The user's sAMAccountName</param>
/// <param name="Password">The user's password</param>
/// <param name="FirstName">The user's first name (givenName attribute)</param>
/// <param name="LastName">The user's last name (sn attribute)</param>
/// <param name="Email">The user's email address (mail attribute)</param>
/// <param name="Title">The user's job title (title attribute)</param>
/// <param name="IsInRequiredGroup">Whether the user is a member of the required security group</param>
public record TestLdapUser(
    string Username,
    string Password,
    string? FirstName,
    string? LastName,
    string? Email,
    string? Title,
    bool IsInRequiredGroup);