package jws_test

import (
	"strings"
	"testing"

	"github.com/lestrrat-go/jwx/v3/internal/jwxtest"
	"github.com/lestrrat-go/jwx/v3/jwa"
	"github.com/lestrrat-go/jwx/v3/jws"
	"github.com/stretchr/testify/require"
)

func TestSign(t *testing.T) {
	t.Parallel()
	t.Run("Bad algorithm", func(t *testing.T) {
		t.Parallel()
		_, err := jws.Sign([]byte(nil), jws.WithKey(jwa.NewSignatureAlgorithm("FooBar"), nil))
		require.Error(t, err, "Unknown algorithm should return error")
	})
	t.Run("No private key", func(t *testing.T) {
		t.Parallel()
		_, err := jws.Sign([]byte{'a', 'b', 'c'}, jws.WithKey(jwa.RS256(), nil))
		require.Error(t, err, "Sign with no private key should return error")
	})
	t.Run("RSA verify with no public key", func(t *testing.T) {
		t.Parallel()
		_, err := jws.Verify([]byte(nil), jws.WithKey(jwa.RS256(), nil))
		require.Error(t, err, "Verify with no private key should return error")
	})
}

func TestSignMulti(t *testing.T) {
	rsakey, err := jwxtest.GenerateRsaKey()
	require.NoError(t, err, "RSA key generated")
	dsakey, err := jwxtest.GenerateEcdsaKey(jwa.P521())
	require.NoError(t, err, "ECDSA key generated")

	s1hdr := jws.NewHeaders()
	s1hdr.Set(jws.KeyIDKey, "2010-12-29")

	s2hdr := jws.NewHeaders()
	s2hdr.Set(jws.KeyIDKey, "e9bc097a-ce51-4036-9562-d2ade882db0d")

	v := strings.Join([]string{`{"iss":"joe",`, ` "exp":1300819380,`, ` "http://example.com/is_root":true}`}, "\r\n")
	m, err := jws.Sign([]byte(v),
		jws.WithJSON(),
		jws.WithKey(jwa.RS256(), rsakey, jws.WithPublicHeaders(s1hdr)),
		jws.WithKey(jwa.ES256(), dsakey, jws.WithPublicHeaders(s2hdr)),
	)
	require.NoError(t, err, "jws.SignMulti should succeed")

	t.Logf("%s", m)
}