// The Lucia project.
// Copyright 2026-2026 DSP, inc.  All rights reserved.
// Authors:
//   imacat.yang@dsp.im (imacat), 2026/03/05

import { setupApiIntercepts, loginWithFixtures } from '../support/intercept';

describe('Login Flow', () => {
  beforeEach(() => {
    setupApiIntercepts();
  });

  it('renders the login form', () => {
    cy.visit('/login');
    cy.get('h2').should('contain', 'LOGIN');
    cy.get('#account').should('exist');
    cy.get('#password').should('exist');
    cy.get('#login_btn_main_btn').should('be.disabled');
  });

  it('login button is disabled when fields are empty', () => {
    cy.visit('/login');
    cy.get('#login_btn_main_btn').should('be.disabled');

    // Only username filled — still disabled
    cy.get('#account').type('testuser');
    cy.get('#login_btn_main_btn').should('be.disabled');
  });

  it('login button enables when both fields are filled', () => {
    cy.visit('/login');
    cy.get('#account').type('testadmin');
    cy.get('#password').type('password123');
    cy.get('#login_btn_main_btn').should('not.be.disabled');
  });

  it('successful login redirects to /files', () => {
    cy.visit('/login');
    cy.get('#account').type('testadmin');
    cy.get('#password').type('password123');
    cy.get('#login_btn_main_btn').click();

    cy.wait('@postToken');
    cy.url().should('include', '/files');
  });

  it('failed login shows error message', () => {
    // Override the token intercept to return 401
    cy.intercept('POST', '/api/oauth/token', {
      statusCode: 401,
      body: { detail: 'Incorrect username or password' },
    }).as('postTokenFail');

    cy.visit('/login');
    cy.get('#account').type('wronguser');
    cy.get('#password').type('wrongpass');
    cy.get('#login_btn_main_btn').click();

    cy.wait('@postTokenFail');
    cy.contains('Incorrect account or password').should('be.visible');
  });

  it('toggles password visibility', () => {
    cy.visit('/login');
    cy.get('#password').type('secret123');
    cy.get('#password').should('have.attr', 'type', 'password');

    // Click the eye icon to show password
    cy.get('label[for="passwordt"] span.cursor-pointer').click();
    cy.get('#password').should('have.attr', 'type', 'text');

    // Click again to hide
    cy.get('label[for="passwordt"] span.cursor-pointer').click();
    cy.get('#password').should('have.attr', 'type', 'password');
  });
});