<?php

use App\Support\OfficialDomains;
use App\Support\Settings;

/**
 * Telling a customer which addresses are ours.
 *
 * The failure mode is specific and bad in both directions: a stale list tells
 * somebody that a phishing domain is one of ours, or that one of ours is not.
 * So the list is derived from configuration and nothing here is allowed to be
 * a literal.
 */
beforeEach(function () {
    config()->set('admin_access.site_hosts', ['www.clupilot.com', 'clupilot.com']);
    config()->set('admin_access.app_host', 'app.clupilot.com');
    config()->set('admin_access.status_host', 'status.clupilot.com');
    Settings::set('provisioning.dns_zone', 'clupilot.cloud');
});

it('names both registrable domains, and says what each is for', function () {
    // Keyed by domain and valued by role, so the page never works the role out
    // from the order the list happens to come back in.
    expect(OfficialDomains::registrable())->toBe([
        'clupilot.com' => 'company',
        'clupilot.cloud' => 'instances',
    ]);
});

it('follows the configuration rather than a list somebody typed', function () {
    // The whole point. An installation moved to another zone must not go on
    // vouching for the old one.
    Settings::set('provisioning.dns_zone', 'kunden.example.test');

    expect(array_keys(OfficialDomains::registrable()))->toContain('example.test')
        ->and(array_keys(OfficialDomains::registrable()))->not->toContain('clupilot.cloud');
});

it('shows the instance zone as a pattern, never one customer’s address', function () {
    $hosts = collect(OfficialDomains::hosts())->pluck('host');

    expect($hosts)->toContain('*.clupilot.cloud');
});

it('does not print where the operator console lives', function () {
    // A public page listing the operator interface is a public page telling an
    // attacker where to aim.
    config()->set('admin_access.host', 'admin.clupilot.com');

    $hosts = collect(OfficialDomains::hosts())->pluck('host');

    expect($hosts)->not->toContain('admin.clupilot.com');
});

it('serves the page to somebody who is not signed in', function () {
    // Somebody who has just given their password to a copy of our sign-in form
    // is signed in nowhere. The page they need cannot be behind the thing they
    // lost.
    // The path is English (R13). /sicherheit shipped for two releases and
    // still redirects, which is asserted below.
    $this->get('/security')
        ->assertOk()
        ->assertSee('clupilot.com')
        ->assertSee('clupilot.cloud')
        ->assertSee(__('security.compromised_title'));

    // The German path went out in mail footers before the rule was applied.
    $this->get('/sicherheit')->assertRedirect('/security');
});

it('carries the domains in every mail footer', function () {
    // The mail is the vector, so the line travels with the mail.
    $layout = Illuminate\Support\Facades\File::get(resource_path('views/components/mail/layout.blade.php'));

    expect($layout)->toContain('OfficialDomains::registrable()')
        ->toContain("route('security')");
});

it('says on the sign-in form which host it is', function () {
    // This is the page a phishing kit copies, so the real one says how to tell.
    $this->get(route('login'))
        ->assertOk()
        ->assertSee(__('auth.phishing_link'));
});