// Copyright (c) HashiCorp, Inc.
// SPDX-License-Identifier: MPL-2.0

package configutil

import (
	"reflect"
	"testing"
	"time"
)

func TestParseUserLockout(t *testing.T) {
	t.Parallel()
	t.Run("Missing user lockout block in config file", func(t *testing.T) {
		t.Parallel()
		inputConfig := make(map[string]*UserLockout)
		expectedConfig := make(map[string]*UserLockout)
		expectedConfigall := &UserLockout{}
		expectedConfigall.Type = "all"
		expectedConfigall.LockoutThreshold = UserLockoutThresholdDefault
		expectedConfigall.LockoutDuration = UserLockoutDurationDefault
		expectedConfigall.LockoutCounterReset = UserLockoutCounterResetDefault
		expectedConfigall.DisableLockout = DisableUserLockoutDefault
		expectedConfig["all"] = expectedConfigall

		outputConfig := setMissingUserLockoutValuesInMap(inputConfig)
		if !reflect.DeepEqual(expectedConfig["all"], outputConfig["all"]) {
			t.Errorf("user lockout config: expected %#v\nactual %#v", expectedConfig["all"], outputConfig["all"])
		}
	})
	t.Run("setting default lockout counter reset and lockout duration for userpass in config ", func(t *testing.T) {
		t.Parallel()
		// input user lockout in config file
		inputConfig := make(map[string]*UserLockout)
		configAll := &UserLockout{}
		configAll.Type = "all"
		configAll.LockoutCounterReset = 20 * time.Minute
		configAll.LockoutCounterResetRaw = "1200000000000"
		inputConfig["all"] = configAll
		configUserpass := &UserLockout{}
		configUserpass.Type = "userpass"
		configUserpass.LockoutDuration = 10 * time.Minute
		configUserpass.LockoutDurationRaw = "600000000000"
		inputConfig["userpass"] = configUserpass

		expectedConfig := make(map[string]*UserLockout)
		expectedConfigall := &UserLockout{}
		expectedConfigUserpass := &UserLockout{}
		// expected default values
		expectedConfigall.Type = "all"
		expectedConfigall.LockoutThreshold = UserLockoutThresholdDefault
		expectedConfigall.LockoutDuration = UserLockoutDurationDefault
		expectedConfigall.LockoutCounterReset = 20 * time.Minute
		expectedConfigall.DisableLockout = DisableUserLockoutDefault
		// expected values for userpass
		expectedConfigUserpass.Type = "userpass"
		expectedConfigUserpass.LockoutThreshold = UserLockoutThresholdDefault
		expectedConfigUserpass.LockoutDuration = 10 * time.Minute
		expectedConfigUserpass.LockoutCounterReset = 20 * time.Minute
		expectedConfigUserpass.DisableLockout = DisableUserLockoutDefault
		expectedConfig["all"] = expectedConfigall
		expectedConfig["userpass"] = expectedConfigUserpass

		outputConfig := setMissingUserLockoutValuesInMap(inputConfig)
		if !reflect.DeepEqual(expectedConfig["all"], outputConfig["all"]) {
			t.Errorf("user lockout config: expected %#v\nactual %#v", expectedConfig["all"], outputConfig["all"])
		}
		if !reflect.DeepEqual(expectedConfig["userpass"], outputConfig["userpass"]) {
			t.Errorf("user lockout config: expected %#v\nactual %#v", expectedConfig["userpass"], outputConfig["userpass"])
		}
	})
}