geode-client 0.1.1-alpha.20

//! Authentication and authorization client.

use chrono::{DateTime, Utc};
use serde::{Deserialize, Serialize};

/// User in the system
#[derive(Debug, Clone, Serialize, Deserialize)]
pub struct User {
    pub id: i64,
    pub username: String,
    pub email: String,
    pub is_active: bool,
    pub created_at: DateTime<Utc>,
    pub roles: Vec<String>,
}

/// Role in the RBAC system
#[derive(Debug, Clone, Serialize, Deserialize)]
pub struct Role {
    pub id: i64,
    pub name: String,
    pub description: String,
    pub permissions: Vec<String>,
}

/// Permission
#[derive(Debug, Clone, Serialize, Deserialize)]
pub struct Permission {
    pub id: i64,
    pub name: String,
    pub resource: String,
    pub action: String,
}

/// RLS Policy
#[derive(Debug, Clone, Serialize, Deserialize)]
pub struct RLSPolicy {
    pub id: i64,
    pub name: String,
    pub table: String,
    pub operation: String,
    pub enabled: bool,
}

/// Session information
#[derive(Debug, Clone, Serialize, Deserialize)]
pub struct SessionInfo {
    pub token: String,
    pub user_id: i64,
    pub username: String,
    pub expires_at: DateTime<Utc>,
    pub roles: Vec<String>,
}

/// Authentication client
pub struct AuthClient {
    // Connection reference would go here
}

impl AuthClient {
    pub fn new() -> Self {
        Self {}
    }
}

impl Default for AuthClient {
    fn default() -> Self {
        Self::new()
    }
}

#[cfg(test)]
mod tests {
    use super::*;
    use chrono::TimeZone;

    // ==================== User Tests ====================

    #[test]
    fn test_user_creation() {
        let user = User {
            id: 1,
            username: "alice".to_string(),
            email: "alice@example.com".to_string(),
            is_active: true,
            created_at: Utc.with_ymd_and_hms(2024, 1, 15, 10, 30, 0).unwrap(),
            roles: vec!["admin".to_string(), "user".to_string()],
        };
        assert_eq!(user.id, 1);
        assert_eq!(user.username, "alice");
        assert_eq!(user.email, "alice@example.com");
        assert!(user.is_active);
        assert_eq!(user.roles.len(), 2);
    }

    #[test]
    fn test_user_clone() {
        let user = User {
            id: 1,
            username: "bob".to_string(),
            email: "bob@example.com".to_string(),
            is_active: false,
            created_at: Utc::now(),
            roles: vec![],
        };
        let cloned = user.clone();
        assert_eq!(cloned.id, user.id);
        assert_eq!(cloned.username, user.username);
    }

    #[test]
    fn test_user_serialization() {
        let user = User {
            id: 1,
            username: "test".to_string(),
            email: "test@example.com".to_string(),
            is_active: true,
            created_at: Utc.with_ymd_and_hms(2024, 1, 15, 10, 30, 0).unwrap(),
            roles: vec!["user".to_string()],
        };
        let json = serde_json::to_string(&user).unwrap();
        assert!(json.contains("\"username\":\"test\""));
        assert!(json.contains("\"email\":\"test@example.com\""));
    }

    #[test]
    fn test_user_deserialization() {
        let json = r#"{
            "id": 42,
            "username": "alice",
            "email": "alice@test.com",
            "is_active": true,
            "created_at": "2024-01-15T10:30:00Z",
            "roles": ["admin"]
        }"#;
        let user: User = serde_json::from_str(json).unwrap();
        assert_eq!(user.id, 42);
        assert_eq!(user.username, "alice");
        assert_eq!(user.roles, vec!["admin"]);
    }

    #[test]
    fn test_user_debug() {
        let user = User {
            id: 1,
            username: "debug_test".to_string(),
            email: "debug@test.com".to_string(),
            is_active: true,
            created_at: Utc::now(),
            roles: vec![],
        };
        let debug_str = format!("{:?}", user);
        assert!(debug_str.contains("User"));
        assert!(debug_str.contains("debug_test"));
    }

    // ==================== Role Tests ====================

    #[test]
    fn test_role_creation() {
        let role = Role {
            id: 1,
            name: "admin".to_string(),
            description: "Administrator role".to_string(),
            permissions: vec![
                "read".to_string(),
                "write".to_string(),
                "delete".to_string(),
            ],
        };
        assert_eq!(role.id, 1);
        assert_eq!(role.name, "admin");
        assert_eq!(role.permissions.len(), 3);
    }

    #[test]
    fn test_role_clone() {
        let role = Role {
            id: 2,
            name: "user".to_string(),
            description: "Regular user".to_string(),
            permissions: vec!["read".to_string()],
        };
        let cloned = role.clone();
        assert_eq!(cloned.name, "user");
    }

    #[test]
    fn test_role_serialization() {
        let role = Role {
            id: 1,
            name: "moderator".to_string(),
            description: "Can moderate content".to_string(),
            permissions: vec!["read".to_string(), "moderate".to_string()],
        };
        let json = serde_json::to_string(&role).unwrap();
        assert!(json.contains("\"name\":\"moderator\""));
    }

    #[test]
    fn test_role_deserialization() {
        let json = r#"{
            "id": 5,
            "name": "viewer",
            "description": "Read-only access",
            "permissions": ["read"]
        }"#;
        let role: Role = serde_json::from_str(json).unwrap();
        assert_eq!(role.id, 5);
        assert_eq!(role.name, "viewer");
    }

    // ==================== Permission Tests ====================

    #[test]
    fn test_permission_creation() {
        let perm = Permission {
            id: 1,
            name: "users:read".to_string(),
            resource: "users".to_string(),
            action: "read".to_string(),
        };
        assert_eq!(perm.id, 1);
        assert_eq!(perm.name, "users:read");
        assert_eq!(perm.resource, "users");
        assert_eq!(perm.action, "read");
    }

    #[test]
    fn test_permission_clone() {
        let perm = Permission {
            id: 2,
            name: "posts:write".to_string(),
            resource: "posts".to_string(),
            action: "write".to_string(),
        };
        let cloned = perm.clone();
        assert_eq!(cloned.action, "write");
    }

    #[test]
    fn test_permission_serialization() {
        let perm = Permission {
            id: 1,
            name: "nodes:delete".to_string(),
            resource: "nodes".to_string(),
            action: "delete".to_string(),
        };
        let json = serde_json::to_string(&perm).unwrap();
        assert!(json.contains("\"action\":\"delete\""));
    }

    #[test]
    fn test_permission_deserialization() {
        let json = r#"{
            "id": 10,
            "name": "graphs:create",
            "resource": "graphs",
            "action": "create"
        }"#;
        let perm: Permission = serde_json::from_str(json).unwrap();
        assert_eq!(perm.id, 10);
        assert_eq!(perm.resource, "graphs");
    }

    // ==================== RLSPolicy Tests ====================

    #[test]
    fn test_rls_policy_creation() {
        let policy = RLSPolicy {
            id: 1,
            name: "user_isolation".to_string(),
            table: "nodes".to_string(),
            operation: "SELECT".to_string(),
            enabled: true,
        };
        assert_eq!(policy.id, 1);
        assert_eq!(policy.name, "user_isolation");
        assert!(policy.enabled);
    }

    #[test]
    fn test_rls_policy_disabled() {
        let policy = RLSPolicy {
            id: 2,
            name: "disabled_policy".to_string(),
            table: "edges".to_string(),
            operation: "INSERT".to_string(),
            enabled: false,
        };
        assert!(!policy.enabled);
    }

    #[test]
    fn test_rls_policy_clone() {
        let policy = RLSPolicy {
            id: 3,
            name: "test_policy".to_string(),
            table: "test_table".to_string(),
            operation: "UPDATE".to_string(),
            enabled: true,
        };
        let cloned = policy.clone();
        assert_eq!(cloned.operation, "UPDATE");
    }

    #[test]
    fn test_rls_policy_serialization() {
        let policy = RLSPolicy {
            id: 1,
            name: "row_filter".to_string(),
            table: "users".to_string(),
            operation: "DELETE".to_string(),
            enabled: true,
        };
        let json = serde_json::to_string(&policy).unwrap();
        assert!(json.contains("\"enabled\":true"));
    }

    #[test]
    fn test_rls_policy_deserialization() {
        let json = r#"{
            "id": 7,
            "name": "tenant_isolation",
            "table": "tenants",
            "operation": "ALL",
            "enabled": true
        }"#;
        let policy: RLSPolicy = serde_json::from_str(json).unwrap();
        assert_eq!(policy.id, 7);
        assert_eq!(policy.table, "tenants");
    }

    // ==================== SessionInfo Tests ====================

    #[test]
    fn test_session_info_creation() {
        let session = SessionInfo {
            token: "abc123xyz".to_string(),
            user_id: 42,
            username: "alice".to_string(),
            expires_at: Utc.with_ymd_and_hms(2024, 12, 31, 23, 59, 59).unwrap(),
            roles: vec!["admin".to_string(), "user".to_string()],
        };
        assert_eq!(session.token, "abc123xyz");
        assert_eq!(session.user_id, 42);
        assert_eq!(session.roles.len(), 2);
    }

    #[test]
    fn test_session_info_clone() {
        let session = SessionInfo {
            token: "token123".to_string(),
            user_id: 1,
            username: "bob".to_string(),
            expires_at: Utc::now(),
            roles: vec![],
        };
        let cloned = session.clone();
        assert_eq!(cloned.token, "token123");
    }

    #[test]
    fn test_session_info_serialization() {
        let session = SessionInfo {
            token: "secret_token".to_string(),
            user_id: 100,
            username: "testuser".to_string(),
            expires_at: Utc.with_ymd_and_hms(2024, 6, 15, 12, 0, 0).unwrap(),
            roles: vec!["viewer".to_string()],
        };
        let json = serde_json::to_string(&session).unwrap();
        assert!(json.contains("\"user_id\":100"));
    }

    #[test]
    fn test_session_info_deserialization() {
        let json = r#"{
            "token": "jwt_token_here",
            "user_id": 99,
            "username": "session_user",
            "expires_at": "2024-12-25T00:00:00Z",
            "roles": ["guest"]
        }"#;
        let session: SessionInfo = serde_json::from_str(json).unwrap();
        assert_eq!(session.token, "jwt_token_here");
        assert_eq!(session.user_id, 99);
    }

    // ==================== AuthClient Tests ====================

    #[test]
    fn test_auth_client_new() {
        let client = AuthClient::new();
        // AuthClient is currently a stub, just verify it can be created
        let _ = client;
    }

    #[test]
    fn test_auth_client_default() {
        let client = AuthClient::default();
        let _ = client;
    }
}