const assert = require('node:assert/strict');
const fs = require('node:fs');
const path = require('node:path');
const test = require('node:test');

const AuthPages = require('../public/js/auth-pages.js');

test('password login includes a verification token only when the PC strategy returns one', () => {
  assert.deepEqual(
    AuthPages.buildLoginBody({
      phone: '13800000000',
      password: 'plain-password',
      validToken: 'captcha-ticket'
    }, (value) => 'md5-' + value),
    {
      phone: '13800000000',
      password: 'md5-plain-password',
      validToken: 'captcha-ticket'
    }
  );
  assert.deepEqual(
    AuthPages.buildLoginBody({ phone: '13800000000', password: 'plain-password' }, (value) => 'md5-' + value),
    { phone: '13800000000', password: 'md5-plain-password' }
  );
});

test('registration body carries the SMS code but never sends confirmation or captcha fields', () => {
  assert.deepEqual(
    AuthPages.buildRegisterBody({
      phone: '13800000000',
      smsCode: '123456',
      nickName: '小李',
      password: 'plain-password',
      confirmPassword: 'plain-password',
      validToken: 'captcha-ticket'
    }, (value) => 'md5-' + value),
    {
      phone: '13800000000',
      smsCode: '123456',
      nickName: '小李',
      password: 'md5-plain-password'
    }
  );
});

test('password reset body carries only the reset DTO fields', () => {
  assert.deepEqual(
    AuthPages.buildPasswordResetBody({
      phone: '13800000000',
      smsCode: '123456',
      newPassword: 'plain-password',
      validToken: 'captcha-ticket'
    }, (value) => 'md5-' + value),
    {
      phone: '13800000000',
      smsCode: '123456',
      newPassword: 'md5-plain-password'
    }
  );
});

test('authentication forms use the PC verification operation codes defined by Apifox', () => {
  assert.equal(AuthPages.getCaptchaOperation('login'), 'password-login');
  assert.equal(AuthPages.getCaptchaOperation('sms-login'), 'sms-login');
  assert.equal(AuthPages.getCaptchaOperation('register'), 'register');
  assert.equal(AuthPages.getCaptchaOperation('password-reset'), 'forgot-password');
});

test('registration validates SMS code and password confirmation before submission', () => {
  const base = {
    phone: '13800000000',
    smsCode: '123456',
    password: 'password',
    confirmPassword: 'password'
  };

  assert.equal(AuthPages.validateAuthValues('register', base), '');
  assert.equal(AuthPages.validateAuthValues('register', { ...base, smsCode: '' }), '请填写短信验证码');
  assert.equal(AuthPages.validateAuthValues('register', { ...base, confirmPassword: 'different' }), '两次输入的密码不一致');
});

test('registration page exposes the documented SMS and confirmation inputs', () => {
  const source = fs.readFileSync(path.join(__dirname, '..', 'register.html'), 'utf8');

  assert.match(source, /name="smsCode"/);
  assert.match(source, /data-api-send-code/);
  assert.match(source, /name="confirmPassword"/);
});

test('password login page retains a verification token field for the PC captcha strategy', () => {
  const source = fs.readFileSync(path.join(__dirname, '..', 'login.html'), 'utf8');

  assert.match(source, /id="login-password-form"[\s\S]*name="validToken"/);
});