"""auth 도메인 e2e 테스트 (negodata: users/companies 기반).

실행 전제: PostgreSQL(negodata_db)이 떠 있어야 한다.
    docker compose up -d  # 또는 로컬 postgres
    cd negodata/backend && python -m pytest
계정 생성은 company_id 를 요구하므로 company_id 픽스처(conftest)가 소속사를 시드한다.
"""


async def test_create_and_login_flow(client, company_id):
    # 1) 계정 생성 (회사 하위로)
    r = await client.post(
        "/v1/auth/create",
        json={"id": "user1", "password": "pw1234", "company_id": company_id, "name": "홍길동"},
    )
    assert r.status_code == 200
    body = r.json()
    assert body["result"]["success"] is True
    assert body["user_id"]

    # 2) 로그인 -> 토큰 발급
    r = await client.post("/v1/auth/login", json={"id": "user1", "password": "pw1234"})
    assert r.status_code == 200
    body = r.json()
    assert body["result"]["success"] is True
    assert body["access_token"]
    assert body["refresh_token"]
    access_token = body["access_token"]

    # 3) 보호된 엔드포인트(/me) — 토큰의 유저 + 소속사 반환
    r = await client.get("/v1/auth/me", headers={"Authorization": f"Bearer {access_token}"})
    assert r.status_code == 200
    me = r.json()
    assert me["id"] == "user1"
    assert me["name"] == "홍길동"
    assert me["company"]["company_id"] == company_id


async def test_login_with_wrong_password(client, company_id):
    await client.post(
        "/v1/auth/create",
        json={"id": "user2", "password": "correct", "company_id": company_id, "name": "n"},
    )

    r = await client.post("/v1/auth/login", json={"id": "user2", "password": "wrong"})
    assert r.status_code == 200
    body = r.json()
    assert body["result"]["success"] is False
    # 자격증명 오류는 ACCOUNT_INVALID_INFO(1200)
    assert body["result"]["code"] == 1200
    assert body.get("access_token", "") == ""  # 실패 시 토큰은 빈 문자열


async def test_login_nonexistent_account(client):
    r = await client.post("/v1/auth/login", json={"id": "ghost", "password": "whatever"})
    assert r.json()["result"]["success"] is False


async def test_duplicate_account_create(client, company_id):
    r1 = await client.post(
        "/v1/auth/create",
        json={"id": "dup", "password": "pw1234", "company_id": company_id, "name": "n"},
    )
    assert r1.json()["result"]["success"] is True

    r2 = await client.post(
        "/v1/auth/create",
        json={"id": "dup", "password": "pw5678", "company_id": company_id, "name": "n2"},
    )
    body = r2.json()
    assert body["result"]["success"] is False
    # ACCOUNT_ALREADY_EXIST(1201)
    assert body["result"]["code"] == 1201


async def test_me_without_token_is_rejected(client):
    r = await client.get("/v1/auth/me")
    assert r.status_code in (401, 403)  # HTTPBearer 가 자격증명 없음을 거부