<?php

namespace Tests\Feature;

use App\Models\BannedIp;
use App\Models\Setting;
use App\Models\User;
use Illuminate\Foundation\Testing\RefreshDatabase;
use Illuminate\Support\Facades\Cache;
use Tests\TestCase;

class BlockBannedIpMiddlewareTest extends TestCase
{
    use RefreshDatabase;

    protected function setUp(): void
    {
        parent::setUp();
        Cache::flush();
    }

    private function banned(string $ip = '203.0.113.5'): void
    {
        BannedIp::create(['ip' => $ip, 'banned_until' => now()->addHour(), 'attempts' => 10]);
    }

    public function test_guest_from_banned_ip_is_blocked_with_403(): void
    {
        $this->banned();
        $this->withServerVariables(['REMOTE_ADDR' => '203.0.113.5'])
            ->get('/login')
            ->assertStatus(403)
            ->assertSee(__('errors.blocked_title'));
    }

    public function test_guest_from_clean_ip_passes(): void
    {
        $this->banned();
        $this->withServerVariables(['REMOTE_ADDR' => '198.51.100.9'])->get('/login')->assertStatus(200);
    }

    public function test_authenticated_user_from_banned_ip_passes(): void
    {
        $this->banned();
        $user = User::factory()->create(['must_change_password' => false]);
        $this->actingAs($user)
            ->withServerVariables(['REMOTE_ADDR' => '203.0.113.5'])
            ->get('/')
            ->assertSuccessful();
    }

    public function test_feature_disabled_lets_banned_ip_through(): void
    {
        Setting::put('bruteforce_enabled', '0');
        $this->banned();
        $this->withServerVariables(['REMOTE_ADDR' => '203.0.113.5'])->get('/login')->assertStatus(200);
    }
}