defmodule <%= inspect context.web_module %>.<%= inspect Module.concat(schema.web_namespace, schema.alias) %>SettingsControllerTest do
  use <%= inspect context.web_module %>.ConnCase<%= test_case_options %>

  alias <%= inspect context.module %>
  import <%= inspect context.module %>Fixtures

  setup :register_and_log_in_<%= schema.singular %>

  describe "GET <%= schema.route_prefix %>/settings" do
    test "renders settings page", %{conn: conn} do
      conn = get(conn, ~p"<%= schema.route_prefix %>/settings")
      response = html_response(conn, 200)
      assert response =~ "Settings"
    end

    test "redirects if <%= schema.singular %> is not logged in" do
      conn = build_conn()
      conn = get(conn, ~p"<%= schema.route_prefix %>/settings")
      assert redirected_to(conn) == ~p"<%= schema.route_prefix %>/log-in"
    end

    @tag token_authenticated_at: <%= inspect datetime_module %>.add(<%= datetime_now %>, -11, :minute)
    test "redirects if <%= schema.singular %> is not in sudo mode", %{conn: conn} do
      conn = get(conn, ~p"<%= schema.route_prefix %>/settings")
      assert redirected_to(conn) == ~p"<%= schema.route_prefix %>/log-in"

      assert Phoenix.Flash.get(conn.assigns.flash, :error) ==
               "You must re-authenticate to access this page."
    end
  end

  describe "PUT <%= schema.route_prefix %>/settings (change password form)" do
    test "updates the <%= schema.singular %> password and resets tokens", %{conn: conn, <%= schema.singular %>: <%= schema.singular %>} do
      new_password_conn =
        put(conn, ~p"<%= schema.route_prefix %>/settings", %{
          "action" => "update_password",
          "<%= schema.singular %>" => %{
            "password" => "new valid password",
            "password_confirmation" => "new valid password"
          }
        })

      assert redirected_to(new_password_conn) == ~p"<%= schema.route_prefix %>/settings"

      assert get_session(new_password_conn, :<%= schema.singular %>_token) != get_session(conn, :<%= schema.singular %>_token)

      assert Phoenix.Flash.get(new_password_conn.assigns.flash, :info) =~
               "Password updated successfully"

      assert <%= inspect context.alias %>.get_<%= schema.singular %>_by_email_and_password(<%= schema.singular %>.email, "new valid password")
    end

    test "does not update password on invalid data", %{conn: conn} do
      old_password_conn =
        put(conn, ~p"<%= schema.route_prefix %>/settings", %{
          "action" => "update_password",
          "<%= schema.singular %>" => %{
            "password" => "too short",
            "password_confirmation" => "does not match"
          }
        })

      response = html_response(old_password_conn, 200)
      assert response =~ "Settings"
      assert response =~ "should be at least 12 character(s)"
      assert response =~ "does not match password"

      assert get_session(old_password_conn, :<%= schema.singular %>_token) == get_session(conn, :<%= schema.singular %>_token)
    end
  end

  describe "PUT <%= schema.route_prefix %>/settings (change email form)" do
    @tag :capture_log
    test "updates the <%= schema.singular %> email", %{conn: conn, <%= schema.singular %>: <%= schema.singular %>} do
      conn =
        put(conn, ~p"<%= schema.route_prefix %>/settings", %{
          "action" => "update_email",
          "<%= schema.singular %>" => %{"email" => unique_<%= schema.singular %>_email()}
        })

      assert redirected_to(conn) == ~p"<%= schema.route_prefix %>/settings"

      assert Phoenix.Flash.get(conn.assigns.flash, :info) =~
               "A link to confirm your email"

      assert <%= inspect context.alias %>.get_<%= schema.singular %>_by_email(<%= schema.singular %>.email)
    end

    test "does not update email on invalid data", %{conn: conn} do
      conn =
        put(conn, ~p"<%= schema.route_prefix %>/settings", %{
          "action" => "update_email",
          "<%= schema.singular %>" => %{"email" => "with spaces"}
        })

      response = html_response(conn, 200)
      assert response =~ "Settings"
      assert response =~ "must have the @ sign and no spaces"
    end
  end

  describe "GET <%= schema.route_prefix %>/settings/confirm-email/:token" do
    setup %{<%= schema.singular %>: <%= schema.singular %>} do
      email = unique_<%= schema.singular %>_email()

      token =
        extract_<%= schema.singular %>_token(fn url ->
          <%= inspect context.alias %>.deliver_<%= schema.singular %>_update_email_instructions(%{<%= schema.singular %> | email: email}, <%= schema.singular %>.email, url)
        end)

      %{token: token, email: email}
    end

    test "updates the <%= schema.singular %> email once", %{conn: conn, <%= schema.singular %>: <%= schema.singular %>, token: token, email: email} do
      conn = get(conn, ~p"<%= schema.route_prefix %>/settings/confirm-email/#{token}")
      assert redirected_to(conn) == ~p"<%= schema.route_prefix %>/settings"

      assert Phoenix.Flash.get(conn.assigns.flash, :info) =~
               "Email changed successfully"

      refute <%= inspect context.alias %>.get_<%= schema.singular %>_by_email(<%= schema.singular %>.email)
      assert <%= inspect context.alias %>.get_<%= schema.singular %>_by_email(email)

      conn = get(conn, ~p"<%= schema.route_prefix %>/settings/confirm-email/#{token}")

      assert redirected_to(conn) == ~p"<%= schema.route_prefix %>/settings"

      assert Phoenix.Flash.get(conn.assigns.flash, :error) =~
               "Email change link is invalid or it has expired"
    end

    test "does not update email with invalid token", %{conn: conn, <%= schema.singular %>: <%= schema.singular %>} do
      conn = get(conn, ~p"<%= schema.route_prefix %>/settings/confirm-email/oops")
      assert redirected_to(conn) == ~p"<%= schema.route_prefix %>/settings"

      assert Phoenix.Flash.get(conn.assigns.flash, :error) =~
               "Email change link is invalid or it has expired"

      assert <%= inspect context.alias %>.get_<%= schema.singular %>_by_email(<%= schema.singular %>.email)
    end

    test "redirects if <%= schema.singular %> is not logged in", %{token: token} do
      conn = build_conn()
      conn = get(conn, ~p"<%= schema.route_prefix %>/settings/confirm-email/#{token}")
      assert redirected_to(conn) == ~p"<%= schema.route_prefix %>/log-in"
    end
  end
end
