<?php

namespace Tests\Unit\Auth\UseCases;

use App\Auth\PasswordHasher;
use App\Auth\UseCases\AuthenticateUser\AuthenticateUser;
use App\Auth\UseCases\AuthenticateUser\AuthenticateUserRequest;
use App\Exceptions\BadRequestException;
use App\Exceptions\UnauthorizedException;
use App\Shared\ValueObject\EmailAddress;
use App\User\CreateUserDto;
use App\User\User;
use Tests\Fakes\FakeHasher;
use Tests\Fakes\FakeUserRepository;
use Tests\TestCase;

class AuthenticateUserTest extends TestCase
{
    private FakeUserRepository $userRepo;
    private PasswordHasher $hasher;
    private AuthenticateUser $authenticateUser;

    protected function setUp(): void
    {
        $this->userRepo = new FakeUserRepository();
        $this->hasher = new FakeHasher();

        $this->authenticateUser = new AuthenticateUser($this->userRepo, $this->hasher);
    }

    public function testAuthenticatesValidUser(): void
    {
        $email = new EmailAddress('user@example.com');
        $this->userRepo->create(new CreateUserDto($email, 'hashed-secret'));

        $request = new AuthenticateUserRequest('user@example.com', 'secret');
        $user = $this->authenticateUser->execute($request);

        $this->assertInstanceOf(User::class, $user);
        $this->assertSame('user@example.com', $user->getEmail()->value());
    }

    public function testThrowsWhenEmailMissing(): void
    {
        $this->expectException(BadRequestException::class);
        $this->expectExceptionMessage('email is required');

        $request = new AuthenticateUserRequest(null, 'secret');
        $this->authenticateUser->execute($request);
    }

    public function testThrowsWhenPasswordMissing(): void
    {
        $this->expectException(BadRequestException::class);
        $this->expectExceptionMessage('password is required');

        $request = new AuthenticateUserRequest('user@example.com', null);
        $this->authenticateUser->execute($request);
    }

    public function testThrowsWhenEmailEmpty(): void
    {
        $this->expectException(BadRequestException::class);
        $this->expectExceptionMessage('email is required');

        $request = new AuthenticateUserRequest('', 'secret');
        $this->authenticateUser->execute($request);
    }

    public function testThrowsWhenPasswordEmpty(): void
    {
        $this->expectException(BadRequestException::class);
        $this->expectExceptionMessage('password is required');

        $request = new AuthenticateUserRequest('user@example.com', '');
        $this->authenticateUser->execute($request);
    }

    public function testThrowsWhenUserNotFound(): void
    {
        $this->expectException(UnauthorizedException::class);
        $this->expectExceptionMessage('invalid credentials');

        $request = new AuthenticateUserRequest('missing@example.com', 'secret');
        $this->authenticateUser->execute($request);
    }

    public function testThrowsWhenPasswordIncorrect(): void
    {
        $email = new EmailAddress('user@example.com');
        $this->userRepo->create(new CreateUserDto($email, 'hashed-secret'));

        $this->expectException(UnauthorizedException::class);
        $this->expectExceptionMessage('invalid credentials');

        $request = new AuthenticateUserRequest('user@example.com', 'wrong');
        $this->authenticateUser->execute($request);
    }
}