Charon/backend/internal/api/handlers/proxy_host_handler_test.go

package handlers

import (
	"encoding/json"
	"fmt"
	"net"
	"net/http"
	"net/http/httptest"
	"strings"
	"testing"

	"github.com/gin-gonic/gin"
	"github.com/google/uuid"
	"github.com/stretchr/testify/require"
	"gorm.io/driver/sqlite"
	"gorm.io/gorm"

	"github.com/Wikid82/charon/backend/internal/caddy"
	"github.com/Wikid82/charon/backend/internal/models"
	"github.com/Wikid82/charon/backend/internal/services"
)

func setupTestRouter(t *testing.T) (*gin.Engine, *gorm.DB) {
	t.Helper()

	dsn := "file:" + t.Name() + "?mode=memory&cache=shared"
	db, err := gorm.Open(sqlite.Open(dsn), &gorm.Config{})
	require.NoError(t, err)
	require.NoError(t, db.AutoMigrate(&models.ProxyHost{}, &models.Location{}))

	ns := services.NewNotificationService(db)
	h := NewProxyHostHandler(db, nil, ns)
	r := gin.New()
	api := r.Group("/api/v1")
	h.RegisterRoutes(api)

	return r, db
}

func TestProxyHostLifecycle(t *testing.T) {
	router, _ := setupTestRouter(t)

	body := `{"name":"Media","domain_names":"media.example.com","forward_scheme":"http","forward_host":"media","forward_port":32400,"enabled":true}`
	req := httptest.NewRequest(http.MethodPost, "/api/v1/proxy-hosts", strings.NewReader(body))
	req.Header.Set("Content-Type", "application/json")

	resp := httptest.NewRecorder()
	router.ServeHTTP(resp, req)
	require.Equal(t, http.StatusCreated, resp.Code)

	var created models.ProxyHost
	require.NoError(t, json.Unmarshal(resp.Body.Bytes(), &created))
	require.Equal(t, "media.example.com", created.DomainNames)

	listReq := httptest.NewRequest(http.MethodGet, "/api/v1/proxy-hosts", nil)
	listResp := httptest.NewRecorder()
	router.ServeHTTP(listResp, listReq)
	require.Equal(t, http.StatusOK, listResp.Code)

	var hosts []models.ProxyHost
	require.NoError(t, json.Unmarshal(listResp.Body.Bytes(), &hosts))
	require.Len(t, hosts, 1)

	// Get by ID
	getReq := httptest.NewRequest(http.MethodGet, "/api/v1/proxy-hosts/"+created.UUID, nil)
	getResp := httptest.NewRecorder()
	router.ServeHTTP(getResp, getReq)
	require.Equal(t, http.StatusOK, getResp.Code)

	var fetched models.ProxyHost
	require.NoError(t, json.Unmarshal(getResp.Body.Bytes(), &fetched))
	require.Equal(t, created.UUID, fetched.UUID)

	// Update
	updateBody := `{"name":"Media Updated","domain_names":"media.example.com","forward_scheme":"http","forward_host":"media","forward_port":32400,"enabled":false}`
	updateReq := httptest.NewRequest(http.MethodPut, "/api/v1/proxy-hosts/"+created.UUID, strings.NewReader(updateBody))
	updateReq.Header.Set("Content-Type", "application/json")
	updateResp := httptest.NewRecorder()
	router.ServeHTTP(updateResp, updateReq)
	require.Equal(t, http.StatusOK, updateResp.Code)

	var updated models.ProxyHost
	require.NoError(t, json.Unmarshal(updateResp.Body.Bytes(), &updated))
	require.Equal(t, "Media Updated", updated.Name)
	require.False(t, updated.Enabled)

	// Delete
	delReq := httptest.NewRequest(http.MethodDelete, "/api/v1/proxy-hosts/"+created.UUID, nil)
	delResp := httptest.NewRecorder()
	router.ServeHTTP(delResp, delReq)
	require.Equal(t, http.StatusOK, delResp.Code)

	// Verify Delete
	getReq2 := httptest.NewRequest(http.MethodGet, "/api/v1/proxy-hosts/"+created.UUID, nil)
	getResp2 := httptest.NewRecorder()
	router.ServeHTTP(getResp2, getReq2)
	require.Equal(t, http.StatusNotFound, getResp2.Code)
}

func TestProxyHostErrors(t *testing.T) {
	// Mock Caddy Admin API that fails
	caddyServer := httptest.NewServer(http.HandlerFunc(func(w http.ResponseWriter, r *http.Request) {
		w.WriteHeader(http.StatusInternalServerError)
	}))
	defer caddyServer.Close()

	// Setup DB
	dsn := "file:" + t.Name() + "?mode=memory&cache=shared"
	db, err := gorm.Open(sqlite.Open(dsn), &gorm.Config{})
	require.NoError(t, err)
	require.NoError(t, db.AutoMigrate(&models.ProxyHost{}, &models.Location{}, &models.Setting{}, &models.CaddyConfig{}))

	// Setup Caddy Manager
	tmpDir := t.TempDir()
	client := caddy.NewClient(caddyServer.URL)
	manager := caddy.NewManager(client, db, tmpDir, "", false)

	// Setup Handler
	ns := services.NewNotificationService(db)
	h := NewProxyHostHandler(db, manager, ns)
	r := gin.New()
	api := r.Group("/api/v1")
	h.RegisterRoutes(api)

	// Test Create - Bind Error
	req := httptest.NewRequest(http.MethodPost, "/api/v1/proxy-hosts", strings.NewReader(`invalid json`))
	req.Header.Set("Content-Type", "application/json")
	resp := httptest.NewRecorder()
	r.ServeHTTP(resp, req)
	require.Equal(t, http.StatusBadRequest, resp.Code)

	// Test Create - Apply Config Error
	body := `{"name":"Fail Host","domain_names":"fail-unique-456.local","forward_scheme":"http","forward_host":"localhost","forward_port":8080,"enabled":true}`
	req = httptest.NewRequest(http.MethodPost, "/api/v1/proxy-hosts", strings.NewReader(body))
	req.Header.Set("Content-Type", "application/json")
	resp = httptest.NewRecorder()
	r.ServeHTTP(resp, req)
	require.Equal(t, http.StatusInternalServerError, resp.Code)

	// Create a host for Update/Delete/Get tests (manually in DB to avoid handler error)
	host := models.ProxyHost{
		UUID:          uuid.NewString(),
		Name:          "Existing Host",
		DomainNames:   "exist.local",
		ForwardScheme: "http",
		ForwardHost:   "localhost",
		ForwardPort:   8080,
		Enabled:       true,
	}
	db.Create(&host)

	// Test Get - Not Found
	req = httptest.NewRequest(http.MethodGet, "/api/v1/proxy-hosts/non-existent-uuid", nil)
	resp = httptest.NewRecorder()
	r.ServeHTTP(resp, req)
	require.Equal(t, http.StatusNotFound, resp.Code)

	// Test Update - Not Found
	req = httptest.NewRequest(http.MethodPut, "/api/v1/proxy-hosts/non-existent-uuid", strings.NewReader(body))
	req.Header.Set("Content-Type", "application/json")
	resp = httptest.NewRecorder()
	r.ServeHTTP(resp, req)
	require.Equal(t, http.StatusNotFound, resp.Code)

	// Test Update - Bind Error
	req = httptest.NewRequest(http.MethodPut, "/api/v1/proxy-hosts/"+host.UUID, strings.NewReader(`invalid json`))
	req.Header.Set("Content-Type", "application/json")
	resp = httptest.NewRecorder()
	r.ServeHTTP(resp, req)
	require.Equal(t, http.StatusBadRequest, resp.Code)

	// Test Update - Apply Config Error
	updateBody := `{"name":"Fail Host Update","domain_names":"fail-unique-update.local","forward_scheme":"http","forward_host":"localhost","forward_port":8080,"enabled":true}`
	req = httptest.NewRequest(http.MethodPut, "/api/v1/proxy-hosts/"+host.UUID, strings.NewReader(updateBody))
	req.Header.Set("Content-Type", "application/json")
	resp = httptest.NewRecorder()
	r.ServeHTTP(resp, req)
	require.Equal(t, http.StatusInternalServerError, resp.Code)

	// Test Delete - Not Found
	req = httptest.NewRequest(http.MethodDelete, "/api/v1/proxy-hosts/non-existent-uuid", nil)
	resp = httptest.NewRecorder()
	r.ServeHTTP(resp, req)
	require.Equal(t, http.StatusNotFound, resp.Code)

	// Test Delete - Apply Config Error
	req = httptest.NewRequest(http.MethodDelete, "/api/v1/proxy-hosts/"+host.UUID, nil)
	resp = httptest.NewRecorder()
	r.ServeHTTP(resp, req)
	require.Equal(t, http.StatusInternalServerError, resp.Code)

	// Test TestConnection - Bind Error
	req = httptest.NewRequest(http.MethodPost, "/api/v1/proxy-hosts/test", strings.NewReader(`invalid json`))
	req.Header.Set("Content-Type", "application/json")
	resp = httptest.NewRecorder()
	r.ServeHTTP(resp, req)
	require.Equal(t, http.StatusBadRequest, resp.Code)

	// Test TestConnection - Connection Failure
	testBody := `{"forward_host": "invalid.host.local", "forward_port": 12345}`
	req = httptest.NewRequest(http.MethodPost, "/api/v1/proxy-hosts/test", strings.NewReader(testBody))
	req.Header.Set("Content-Type", "application/json")
	resp = httptest.NewRecorder()
	r.ServeHTTP(resp, req)
	require.Equal(t, http.StatusBadGateway, resp.Code)
}

func TestProxyHostValidation(t *testing.T) {
	router, db := setupTestRouter(t)

	// Invalid JSON
	req := httptest.NewRequest(http.MethodPost, "/api/v1/proxy-hosts", strings.NewReader(`{invalid json}`))
	req.Header.Set("Content-Type", "application/json")
	resp := httptest.NewRecorder()
	router.ServeHTTP(resp, req)
	require.Equal(t, http.StatusBadRequest, resp.Code)

	// Create a host first
	host := &models.ProxyHost{
		UUID:        "valid-uuid",
		DomainNames: "valid.com",
	}
	db.Create(host)

	// Update with invalid JSON
	req = httptest.NewRequest(http.MethodPut, "/api/v1/proxy-hosts/valid-uuid", strings.NewReader(`{invalid json}`))
	req.Header.Set("Content-Type", "application/json")
	resp = httptest.NewRecorder()
	router.ServeHTTP(resp, req)
	require.Equal(t, http.StatusBadRequest, resp.Code)
}

func TestProxyHostConnection(t *testing.T) {
	router, _ := setupTestRouter(t)

	// 1. Test Invalid Input (Missing Host)
	body := `{"forward_port": 80}`
	req := httptest.NewRequest(http.MethodPost, "/api/v1/proxy-hosts/test", strings.NewReader(body))
	req.Header.Set("Content-Type", "application/json")
	resp := httptest.NewRecorder()
	router.ServeHTTP(resp, req)
	require.Equal(t, http.StatusBadRequest, resp.Code)

	// 2. Test Connection Failure (Unreachable Port)
	// Use a reserved port or localhost port that is likely closed
	body = `{"forward_host": "localhost", "forward_port": 54321}`
	req = httptest.NewRequest(http.MethodPost, "/api/v1/proxy-hosts/test", strings.NewReader(body))
	req.Header.Set("Content-Type", "application/json")
	resp = httptest.NewRecorder()
	router.ServeHTTP(resp, req)
	// It should return 502 Bad Gateway
	require.Equal(t, http.StatusBadGateway, resp.Code)

	// 3. Test Connection Success
	// Start a local listener
	l, err := net.Listen("tcp", "127.0.0.1:0")
	require.NoError(t, err)
	defer l.Close()

	addr := l.Addr().(*net.TCPAddr)

	body = fmt.Sprintf(`{"forward_host": "%s", "forward_port": %d}`, addr.IP.String(), addr.Port)
	req = httptest.NewRequest(http.MethodPost, "/api/v1/proxy-hosts/test", strings.NewReader(body))
	req.Header.Set("Content-Type", "application/json")
	resp = httptest.NewRecorder()
	router.ServeHTTP(resp, req)
	require.Equal(t, http.StatusOK, resp.Code)
}

func TestProxyHostHandler_List_Error(t *testing.T) {
	router, db := setupTestRouter(t)

	// Close DB to force error
	sqlDB, _ := db.DB()
	sqlDB.Close()

	req := httptest.NewRequest(http.MethodGet, "/api/v1/proxy-hosts", nil)
	resp := httptest.NewRecorder()
	router.ServeHTTP(resp, req)
	require.Equal(t, http.StatusInternalServerError, resp.Code)
}

func TestProxyHostWithCaddyIntegration(t *testing.T) {
	// Mock Caddy Admin API
	caddyServer := httptest.NewServer(http.HandlerFunc(func(w http.ResponseWriter, r *http.Request) {
		if r.URL.Path == "/load" && r.Method == "POST" {
			w.WriteHeader(http.StatusOK)
			return
		}
		w.WriteHeader(http.StatusNotFound)
	}))
	defer caddyServer.Close()

	// Setup DB
	dsn := "file:" + t.Name() + "?mode=memory&cache=shared"
	db, err := gorm.Open(sqlite.Open(dsn), &gorm.Config{})
	require.NoError(t, err)
	require.NoError(t, db.AutoMigrate(&models.ProxyHost{}, &models.Location{}, &models.Setting{}, &models.CaddyConfig{}))

	// Setup Caddy Manager
	tmpDir := t.TempDir()
	client := caddy.NewClient(caddyServer.URL)
	manager := caddy.NewManager(client, db, tmpDir, "", false)

	// Setup Handler
	ns := services.NewNotificationService(db)
	h := NewProxyHostHandler(db, manager, ns)
	r := gin.New()
	api := r.Group("/api/v1")
	h.RegisterRoutes(api)

	// Test Create with Caddy Sync
	body := `{"name":"Caddy Host","domain_names":"caddy.local","forward_scheme":"http","forward_host":"localhost","forward_port":8080,"enabled":true}`
	req := httptest.NewRequest(http.MethodPost, "/api/v1/proxy-hosts", strings.NewReader(body))
	req.Header.Set("Content-Type", "application/json")

	resp := httptest.NewRecorder()
	r.ServeHTTP(resp, req)
	require.Equal(t, http.StatusCreated, resp.Code)

	// Test Update with Caddy Sync
	var createdHost models.ProxyHost
	require.NoError(t, json.Unmarshal(resp.Body.Bytes(), &createdHost))

	updateBody := `{"name":"Updated Caddy Host","domain_names":"caddy.local","forward_scheme":"http","forward_host":"localhost","forward_port":8081,"enabled":true}`
	req = httptest.NewRequest(http.MethodPut, "/api/v1/proxy-hosts/"+createdHost.UUID, strings.NewReader(updateBody))
	req.Header.Set("Content-Type", "application/json")

	resp = httptest.NewRecorder()
	r.ServeHTTP(resp, req)
	require.Equal(t, http.StatusOK, resp.Code)

	// Test Delete with Caddy Sync
	req = httptest.NewRequest(http.MethodDelete, "/api/v1/proxy-hosts/"+createdHost.UUID, nil)
	resp = httptest.NewRecorder()
	r.ServeHTTP(resp, req)
	require.Equal(t, http.StatusOK, resp.Code)
}

func TestProxyHostHandler_BulkUpdateACL_Success(t *testing.T) {
	router, db := setupTestRouter(t)

	// Create an access list
	acl := &models.AccessList{
		Name:    "Test ACL",
		Type:    "ip",
		Enabled: true,
	}
	require.NoError(t, db.Create(acl).Error)

	// Create multiple proxy hosts
	host1 := &models.ProxyHost{
		UUID:          uuid.NewString(),
		Name:          "Host 1",
		DomainNames:   "host1.example.com",
		ForwardScheme: "http",
		ForwardHost:   "localhost",
		ForwardPort:   8001,
		Enabled:       true,
	}
	host2 := &models.ProxyHost{
		UUID:          uuid.NewString(),
		Name:          "Host 2",
		DomainNames:   "host2.example.com",
		ForwardScheme: "http",
		ForwardHost:   "localhost",
		ForwardPort:   8002,
		Enabled:       true,
	}
	require.NoError(t, db.Create(host1).Error)
	require.NoError(t, db.Create(host2).Error)

	// Apply ACL to both hosts
	body := fmt.Sprintf(`{"host_uuids":["%s","%s"],"access_list_id":%d}`, host1.UUID, host2.UUID, acl.ID)
	req := httptest.NewRequest(http.MethodPut, "/api/v1/proxy-hosts/bulk-update-acl", strings.NewReader(body))
	req.Header.Set("Content-Type", "application/json")

	resp := httptest.NewRecorder()
	router.ServeHTTP(resp, req)
	require.Equal(t, http.StatusOK, resp.Code)

	var result map[string]interface{}
	require.NoError(t, json.Unmarshal(resp.Body.Bytes(), &result))
	require.Equal(t, float64(2), result["updated"])
	require.Empty(t, result["errors"])

	// Verify hosts have ACL assigned
	var updatedHost1 models.ProxyHost
	require.NoError(t, db.First(&updatedHost1, "uuid = ?", host1.UUID).Error)
	require.NotNil(t, updatedHost1.AccessListID)
	require.Equal(t, acl.ID, *updatedHost1.AccessListID)

	var updatedHost2 models.ProxyHost
	require.NoError(t, db.First(&updatedHost2, "uuid = ?", host2.UUID).Error)
	require.NotNil(t, updatedHost2.AccessListID)
	require.Equal(t, acl.ID, *updatedHost2.AccessListID)
}

func TestProxyHostHandler_BulkUpdateACL_RemoveACL(t *testing.T) {
	router, db := setupTestRouter(t)

	// Create an access list
	acl := &models.AccessList{
		Name:    "Test ACL",
		Type:    "ip",
		Enabled: true,
	}
	require.NoError(t, db.Create(acl).Error)

	// Create proxy host with ACL
	host := &models.ProxyHost{
		UUID:          uuid.NewString(),
		Name:          "Host with ACL",
		DomainNames:   "acl-host.example.com",
		ForwardScheme: "http",
		ForwardHost:   "localhost",
		ForwardPort:   8000,
		AccessListID:  &acl.ID,
		Enabled:       true,
	}
	require.NoError(t, db.Create(host).Error)

	// Remove ACL (access_list_id: null)
	body := fmt.Sprintf(`{"host_uuids":["%s"],"access_list_id":null}`, host.UUID)
	req := httptest.NewRequest(http.MethodPut, "/api/v1/proxy-hosts/bulk-update-acl", strings.NewReader(body))
	req.Header.Set("Content-Type", "application/json")

	resp := httptest.NewRecorder()
	router.ServeHTTP(resp, req)
	require.Equal(t, http.StatusOK, resp.Code)

	var result map[string]interface{}
	require.NoError(t, json.Unmarshal(resp.Body.Bytes(), &result))
	require.Equal(t, float64(1), result["updated"])
	require.Empty(t, result["errors"])

	// Verify ACL removed
	var updatedHost models.ProxyHost
	require.NoError(t, db.First(&updatedHost, "uuid = ?", host.UUID).Error)
	require.Nil(t, updatedHost.AccessListID)
}

func TestProxyHostHandler_BulkUpdateACL_PartialFailure(t *testing.T) {
	router, db := setupTestRouter(t)

	// Create an access list
	acl := &models.AccessList{
		Name:    "Test ACL",
		Type:    "ip",
		Enabled: true,
	}
	require.NoError(t, db.Create(acl).Error)

	// Create one valid host
	host := &models.ProxyHost{
		UUID:          uuid.NewString(),
		Name:          "Valid Host",
		DomainNames:   "valid.example.com",
		ForwardScheme: "http",
		ForwardHost:   "localhost",
		ForwardPort:   8000,
		Enabled:       true,
	}
	require.NoError(t, db.Create(host).Error)

	// Try to update valid host + non-existent host
	nonExistentUUID := uuid.NewString()
	body := fmt.Sprintf(`{"host_uuids":["%s","%s"],"access_list_id":%d}`, host.UUID, nonExistentUUID, acl.ID)
	req := httptest.NewRequest(http.MethodPut, "/api/v1/proxy-hosts/bulk-update-acl", strings.NewReader(body))
	req.Header.Set("Content-Type", "application/json")

	resp := httptest.NewRecorder()
	router.ServeHTTP(resp, req)
	require.Equal(t, http.StatusOK, resp.Code)

	var result map[string]interface{}
	require.NoError(t, json.Unmarshal(resp.Body.Bytes(), &result))
	require.Equal(t, float64(1), result["updated"])

	errors := result["errors"].([]interface{})
	require.Len(t, errors, 1)
	errorMap := errors[0].(map[string]interface{})
	require.Equal(t, nonExistentUUID, errorMap["uuid"])
	require.Equal(t, "proxy host not found", errorMap["error"])

	// Verify valid host was updated
	var updatedHost models.ProxyHost
	require.NoError(t, db.First(&updatedHost, "uuid = ?", host.UUID).Error)
	require.NotNil(t, updatedHost.AccessListID)
	require.Equal(t, acl.ID, *updatedHost.AccessListID)
}

func TestProxyHostHandler_BulkUpdateACL_EmptyUUIDs(t *testing.T) {
	router, _ := setupTestRouter(t)

	body := `{"host_uuids":[],"access_list_id":1}`
	req := httptest.NewRequest(http.MethodPut, "/api/v1/proxy-hosts/bulk-update-acl", strings.NewReader(body))
	req.Header.Set("Content-Type", "application/json")

	resp := httptest.NewRecorder()
	router.ServeHTTP(resp, req)
	require.Equal(t, http.StatusBadRequest, resp.Code)

	var result map[string]interface{}
	require.NoError(t, json.Unmarshal(resp.Body.Bytes(), &result))
	require.Contains(t, result["error"], "host_uuids cannot be empty")
}

func TestProxyHostHandler_BulkUpdateACL_InvalidJSON(t *testing.T) {
	router, _ := setupTestRouter(t)

	body := `{"host_uuids": invalid json}`
	req := httptest.NewRequest(http.MethodPut, "/api/v1/proxy-hosts/bulk-update-acl", strings.NewReader(body))
	req.Header.Set("Content-Type", "application/json")

	resp := httptest.NewRecorder()
	router.ServeHTTP(resp, req)
	require.Equal(t, http.StatusBadRequest, resp.Code)
}