# frozen_string_literal: true

# Redmine - project management software
# Copyright (C) 2006-  Jean-Philippe Lang
#
# This program is free software; you can redistribute it and/or
# modify it under the terms of the GNU General Public License
# as published by the Free Software Foundation; either version 2
# of the License, or (at your option) any later version.
#
# This program is distributed in the hope that it will be useful,
# but WITHOUT ANY WARRANTY; without even the implied warranty of
# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
# GNU General Public License for more details.
#
# You should have received a copy of the GNU General Public License
# along with this program; if not, write to the Free Software
# Foundation, Inc., 51 Franklin Street, Fifth Floor, Boston, MA  02110-1301, USA.

require_relative '../test_helper'

class GroupsControllerTest < Redmine::ControllerTest
  include Redmine::I18n

  def setup
    @request.session[:user_id] = 1
    set_language_if_valid User.find(1).language
  end

  def test_index
    get :index
    assert_response :success
    assert_select 'table.groups'
  end

  def test_index_should_show_user_count
    get :index
    assert_response :success
    assert_select 'tr#group-11 td.user_count', :text => '1'
  end

  def test_index_with_name_filter
    Group.generate!(:name => "Clients")
    get(:index, :params => {:name => "cli"})
    assert_response :success
    assert_select 'table.groups tbody tr', 1
    assert_select 'table.groups tbody td.name', :text => 'Clients'
  end

  def test_show
    Role.anonymous.update! :users_visibility => 'all'

    @request.session[:user_id] = nil
    get(:show, :params => {:id => 10})
    assert_response :success

    assert_select 'li a.user.active[href=?]', '/users/8', :text => 'User Misc'
  end

  def test_show_should_display_custom_fields
    GroupCustomField.generate!(name: 'field_visible', visible: true)
    Group.find(10).update(custom_field_values: {GroupCustomField.last.id => 'value_visible'})
    GroupCustomField.generate!(name: 'field_invisible', visible: false)
    Group.find(10).update(custom_field_values: {GroupCustomField.last.id => 'value_invisible'})
    get :show, :params => {:id => 10}
    assert_response :success

    assert_select 'li', :text => /field_visible/
    assert_select 'li', :text => /value_visible/
    assert_select 'li', :text => /field_invisible/, :count => 0
    assert_select 'li', :text => /value_invisible/, :count => 0
  end

  def test_show_invalid_should_return_404
    get(:show, :params => {:id => 99})
    assert_response :not_found
  end

  def test_show_group_that_is_not_visible_should_return_404
    Role.anonymous.update! :users_visibility => 'members_of_visible_projects'

    @request.session[:user_id] = nil
    get :show, :params => {:id => 10}
    assert_response :not_found
  end

  def test_show_should_display_only_visible_users
    group = Group.find(10)
    locked_user = User.find(5)
    group.users << locked_user
    assert locked_user.locked?

    @request.session[:user_id] = nil
    get :show, :params => {:id => group.id}
    assert_response :success

    assert_select 'li', :text => 'User Misc'
    assert_select 'li', :text => locked_user.name, :count => 0
  end

  def test_new
    get :new
    assert_response :success
    assert_select 'input[name=?]', 'group[name]'
  end

  def test_create
    assert_difference 'Group.count' do
      post(
        :create, :params => {
          :group => {
            :name => 'New group'
          }
        }
      )
    end
    assert_redirected_to '/groups'
    group = Group.order(id: :desc).first
    assert_equal 'New group', group.name
    assert_equal [], group.users
  end

  def test_create_and_continue
    assert_difference 'Group.count' do
      post(
        :create,
        :params => {
          :group => {
            :name => 'New group'
          },
          :continue => 'Create and continue'
        }
      )
    end
    assert_redirected_to '/groups/new'
    group = Group.order(id: :desc).first
    assert_equal 'New group', group.name
  end

  def test_create_with_failure
    assert_no_difference 'Group.count' do
      post(
        :create,
        :params => {
          :group => {
            :name => ''
          }
        }
      )
    end
    assert_response :success
    assert_select_error /Name cannot be blank/i
  end

  def test_edit
    get(
      :edit,
      :params => {
        :id => 10
      }
    )
    assert_response :success

    assert_select 'div#tab-content-users'
    assert_select 'div#tab-content-memberships' do
      assert_select 'a', :text => 'Private child of eCookbook'
    end
    assert_select 'div#tab-content-users a.icon-link-break', :text => 'Remove'
    assert_select 'div#tab-content-memberships a.icon-link-break', :text => 'Remove'
  end

  def test_update
    new_name = 'New name'
    put(
      :update,
      :params => {
        :id => 10,
        :group => {
          :name => new_name
        }
      }
    )
    assert_redirected_to '/groups'
    group = Group.find(10)
    assert_equal new_name, group.name
  end

  def test_update_with_failure
    put(
      :update,
      :params => {
        :id => 10,
        :group => {
          :name => ''
        }
      }
    )
    assert_response :success
    assert_select_error /Name cannot be blank/i
  end

  def test_destroy
    assert_difference 'Group.count', -1 do
      post(:destroy, :params => {:id => 10})
    end
    assert_redirected_to '/groups'
  end

  def test_new_users
    get(:new_users, :params => {:id => 10})
    assert_response :success
    assert_select 'input[name=?]', 'user_search'
  end

  def test_xhr_new_users
    get(
      :new_users,
      :params => {
        :id => 10
      },
      :xhr => true
    )
    assert_response :success
    assert_equal 'text/javascript', response.media_type
  end

  def test_add_users
    assert_difference 'Group.find(10).users.count', 2 do
      post(
        :add_users,
        :params => {
          :id => 10,
          :user_ids => ['2', '3']
        }
      )
    end
    assert_equal 'Successful update.', flash[:notice]

    # assert add users redirects to group members page
    assert_redirected_to '/groups/10/edit?tab=users'
  end

  def test_xhr_add_users
    assert_difference 'Group.find(10).users.count', 2 do
      post(
        :add_users,
        :params => {
          :id => 10,
          :user_ids => ['2', '3']
        },
        :xhr => true
      )
      assert_response :success
      assert_equal 'text/javascript', response.media_type
    end
    assert_match /John Smith/, response.body
  end

  def test_remove_users
    assert_difference 'Group.find(10).users.count', -1 do
      delete(
        :remove_users,
        :params => {
          :id => 10,
          :user_id => '8',
          :confirm => I18n.t(:general_text_Yes)
        }
      )
    end
    # remove users should redirect to group members page when no back url is provided
    assert_redirected_to '/groups/10/edit?tab=users'
  end

  def test_remove_users_without_confirmation
    assert_no_difference 'Group.find(10).users.count' do
      delete(
        :remove_users,
        :params => {
          :id => 10,
          :user_id => '8'
        }
      )
    end
    assert_response :success
    assert_select 'input[name=confirm]'
  end

  def test_remove_users_plural
    group = Group.find(10)
    group.users << User.find(2)
    assert_difference 'group.users.count', -2 do
      delete(
        :remove_users,
        :params => {
          :id => 10,
          :user_ids => ['2', '8'],
          :confirm => I18n.t(:general_text_Yes)
        }
      )
    end
  end

  def test_remove_users_should_only_include_group_members
    assert !Group.find(10).users.include?(User.find(3))

    get(
      :remove_users,
      :params => {
        :id => 10,
        :user_ids => ['3', '8']
      }
    )
    assert_response :success
    assert_select 'input[name=confirm]'
    # Should show user 8 but not user 3
    assert_select 'p strong', :text => 'User Misc'
    assert_select 'p strong', :text => 'Dave Lopper', :count => 0
  end

  def test_remove_users_should_preserve_back_url_through_confirmation
    delete(
      :remove_users,
      :params => {
        :id => 10,
        :user_id => '8',
        :back_url => '/users'
      }
    )
    assert_response :success
    assert_select 'form[action=?]', '/groups/10/users?user_ids%5B%5D=8' do
      assert_select 'input[name=back_url][value=?]', '/users'
    end

    # 2. Submit confirmation with back_url
    assert_difference 'Group.find(10).users.count', -1 do
      delete(
        :remove_users,
        :params => {
          :id => 10,
          :user_ids => ['8'],
          :confirm => I18n.t(:general_text_Yes),
          :back_url => '/users'
        }
      )
    end
    assert_redirected_to '/users'
  end

  def test_remove_users_without_confirmation_with_unsafe_back_url_should_ignore_back_url
    assert_no_difference 'Group.find(10).users.count' do
      delete(
        :remove_users,
        :params => {
          :id => 10,
          :user_id => '8',
          :back_url => 'http://example.com/issues'
        }
      )
    end
    assert_response :success
    assert_select 'form[action=?]', '/groups/10/users?user_ids%5B%5D=8' do
      assert_select 'input[name=back_url]', 0
    end
  end

  def test_remove_users_with_unsafe_back_url_should_redirect_to_default_url
    assert_difference 'Group.find(10).users.count', -1 do
      delete(
        :remove_users,
        :params => {
          :id => 10,
          :user_id => '8',
          :confirm => I18n.t(:general_text_Yes),
          :back_url => 'http://example.com/issues'
        }
      )
    end
    # Should redirect to the default group page, not the external URL
    assert_redirected_to '/groups/10/edit?tab=users'
  end

  def test_remove_user_should_be_deprecated
    Rails.application.deprecators[:redmine].expects(:warn).with(regexp_matches(/GroupsController#remove_user is deprecated/))
    delete(
      :remove_user,
      :params => {
        :id => 10,
        :user_id => '8'
      }
    )
  end

  def test_autocomplete_for_user
    get(
      :autocomplete_for_user,
      :params => {
        :id => 10,
        :q => 'smi',
        :format => 'js'
      },
      :xhr => true
    )
    assert_response :success
    assert_include 'John Smith', response.body
  end

  def test_add_users_from_context_menu_should_redirect_to_back_url
    assert_difference 'Group.find(10).users.count', 1 do
      post(
        :add_users,
        :params => {
          :id => 10,
          :user_ids => ['2'],
          :back_url => '/users'
        }
      )
      assert_redirected_to '/users'
    end
  end
end
