import pytest
from django.urls import reverse
from rest_framework import status
from rest_framework.test import APIClient

from apps.user_management.models import Team
from common.constants.role import Role

GENERAL_TEAM = Team(public_primary_key=None, name="General", email=None, avatar_url=None)


def get_payload_from_team(team):
    return {"id": team.public_primary_key, "name": team.name, "email": team.email, "avatar_url": team.avatar_url}


@pytest.mark.django_db
def test_list_teams(
    make_organization,
    make_team,
    make_user_for_organization,
    make_token_for_organization,
    make_user_auth_headers,
):
    organization = make_organization()
    user = make_user_for_organization(organization)
    _, token = make_token_for_organization(organization)

    team = make_team(organization)
    team.users.add(user)

    client = APIClient()
    url = reverse("api-internal:team-list")
    response = client.get(url, format="json", **make_user_auth_headers(user, token))

    expected_payload = [get_payload_from_team(team), get_payload_from_team(GENERAL_TEAM)]

    assert response.status_code == status.HTTP_200_OK
    assert response.json() == expected_payload


@pytest.mark.django_db
def test_list_teams_for_non_member(
    make_organization,
    make_team,
    make_user_for_organization,
    make_token_for_organization,
    make_user_auth_headers,
):
    organization = make_organization()
    make_team(organization)
    user = make_user_for_organization(organization)
    _, token = make_token_for_organization(organization)

    client = APIClient()
    url = reverse("api-internal:team-list")
    response = client.get(url, format="json", **make_user_auth_headers(user, token))

    assert response.status_code == status.HTTP_200_OK
    assert response.json() == [get_payload_from_team(GENERAL_TEAM)]


@pytest.mark.django_db
@pytest.mark.parametrize(
    "role,expected_status",
    [
        (Role.ADMIN, status.HTTP_200_OK),
        (Role.EDITOR, status.HTTP_200_OK),
        (Role.VIEWER, status.HTTP_200_OK),
    ],
)
def test_list_teams_permissions(
    make_organization,
    make_token_for_organization,
    make_user_for_organization,
    make_user_auth_headers,
    role,
    expected_status,
):
    organization = make_organization()
    _, token = make_token_for_organization(organization)
    user = make_user_for_organization(organization, role=role)

    client = APIClient()
    url = reverse("api-internal:team-list")
    response = client.get(url, format="json", **make_user_auth_headers(user, token))

    assert response.status_code == status.HTTP_200_OK


@pytest.mark.django_db
def test_team_permissions_wrong_team_general(
    make_organization,
    make_team,
    make_alert_group,
    make_alert_receive_channel,
    make_user,
    make_escalation_chain,
    make_schedule,
    make_custom_action,
    make_token_for_organization,
    make_user_auth_headers,
):
    organization = make_organization()

    user = make_user(organization=organization)
    _, token = make_token_for_organization(organization)

    team = make_team(organization)

    user.teams.add(team)
    user.current_team = team
    user.save(update_fields=["current_team"])

    alert_receive_channel = make_alert_receive_channel(organization)
    alert_group = make_alert_group(alert_receive_channel)

    # escalation_chain = make_escalation_chain(organization)
    # schedule = make_schedule(organization, schedule_class=OnCallScheduleCalendar)
    # webhook = make_custom_action(organization)

    for endpoint, instance in (
        ("alertgroup", alert_group),
        # todo: implement team filtering for other resources
        # ("alert_receive_channel", alert_receive_channel),
        # ("escalation_chain", escalation_chain),
        # ("schedule", schedule),
        # ("custom_button", webhook),
    ):
        client = APIClient()
        url = reverse(f"api-internal:{endpoint}-detail", kwargs={"pk": instance.public_primary_key})

        response = client.get(url, **make_user_auth_headers(user, token))

        assert response.status_code == status.HTTP_403_FORBIDDEN
        assert response.json() == {
            "error_code": "wrong_team",
            "owner_team": {"name": "General", "id": None, "email": None, "avatar_url": None},
        }


@pytest.mark.django_db
def test_team_permissions_wrong_team(
    make_organization,
    make_team,
    make_alert_group,
    make_alert_receive_channel,
    make_user,
    make_escalation_chain,
    make_schedule,
    make_custom_action,
    make_token_for_organization,
    make_user_auth_headers,
):
    organization = make_organization()

    user = make_user(organization=organization)
    _, token = make_token_for_organization(organization)

    team = make_team(organization)
    user.teams.add(team)

    alert_receive_channel = make_alert_receive_channel(organization, team=team)
    alert_group = make_alert_group(alert_receive_channel)

    # escalation_chain = make_escalation_chain(organization, team=team)
    # schedule = make_schedule(organization, schedule_class=OnCallScheduleCalendar, team=team)
    # webhook = make_custom_action(organization, team=team)

    for endpoint, instance in (
        ("alertgroup", alert_group),
        # todo: implement team filtering for other resources
        # ("alert_receive_channel", alert_receive_channel),
        # ("escalation_chain", escalation_chain),
        # ("schedule", schedule),
        # ("custom_button", webhook),
    ):
        client = APIClient()
        url = reverse(f"api-internal:{endpoint}-detail", kwargs={"pk": instance.public_primary_key})

        response = client.get(url, **make_user_auth_headers(user, token))

        assert response.status_code == status.HTTP_403_FORBIDDEN
        assert response.json() == {
            "error_code": "wrong_team",
            "owner_team": {
                "name": team.name,
                "id": team.public_primary_key,
                "email": team.email,
                "avatar_url": team.avatar_url,
            },
        }


@pytest.mark.django_db
def test_team_permissions_not_in_team(
    make_organization,
    make_team,
    make_alert_group,
    make_alert_receive_channel,
    make_user,
    make_escalation_chain,
    make_schedule,
    make_custom_action,
    make_token_for_organization,
    make_user_auth_headers,
):
    organization = make_organization()

    user = make_user(organization=organization)
    _, token = make_token_for_organization(organization)

    team = make_team(organization)

    alert_receive_channel = make_alert_receive_channel(organization, team=team)
    alert_group = make_alert_group(alert_receive_channel)

    # escalation_chain = make_escalation_chain(organization, team=team)
    # schedule = make_schedule(organization, schedule_class=OnCallScheduleCalendar, team=team)
    # webhook = make_custom_action(organization, team=team)

    for endpoint, instance in (
        ("alertgroup", alert_group),
        # todo: implement team filtering for other resources
        # ("alert_receive_channel", alert_receive_channel),
        # ("escalation_chain", escalation_chain),
        # ("schedule", schedule),
        # ("custom_button", webhook),
    ):
        client = APIClient()
        url = reverse(f"api-internal:{endpoint}-detail", kwargs={"pk": instance.public_primary_key})

        response = client.get(url, **make_user_auth_headers(user, token))

        assert response.status_code == status.HTTP_403_FORBIDDEN
        assert response.json() == {"error_code": "wrong_team"}


@pytest.mark.django_db
def test_team_permissions_right_team(
    make_organization,
    make_team,
    make_alert_group,
    make_alert_receive_channel,
    make_user,
    make_escalation_chain,
    make_schedule,
    make_custom_action,
    make_token_for_organization,
    make_user_auth_headers,
):
    organization = make_organization()

    user = make_user(organization=organization)
    _, token = make_token_for_organization(organization)

    team = make_team(organization)

    user.teams.add(team)
    user.current_team = team
    user.save(update_fields=["current_team"])

    alert_receive_channel = make_alert_receive_channel(organization, team=team)
    alert_group = make_alert_group(alert_receive_channel)

    # escalation_chain = make_escalation_chain(organization, team=team)
    # schedule = make_schedule(organization, schedule_class=OnCallScheduleCalendar, team=team)
    # webhook = make_custom_action(organization, team=team)

    for endpoint, instance in (
        ("alertgroup", alert_group),
        # todo: implement team filtering for other resources
        # ("alert_receive_channel", alert_receive_channel),
        # ("escalation_chain", escalation_chain),
        # ("schedule", schedule),
        # ("custom_button", webhook),
    ):
        client = APIClient()
        url = reverse(f"api-internal:{endpoint}-detail", kwargs={"pk": instance.public_primary_key})

        response = client.get(url, **make_user_auth_headers(user, token))

        assert response.status_code == status.HTTP_200_OK