package config

import (
	"testing"
	"time"
)

func TestConsoleLoginConfiguration(t *testing.T) {
	p, err := loginPolicyFromEnv(func(string) string { return "" })
	if err != nil || p.FailureLimit != 5 || p.LockDuration != 15*time.Minute || p.AuditDays != 90 {
		t.Fatalf("defaults: %+v %v", p, err)
	}
	env := map[string]string{"ORBIT_CONSOLE_LOGIN_FAILURE_LIMIT": "3", "ORBIT_CONSOLE_LOGIN_LOCK_DURATION": "20m", "ORBIT_CONSOLE_TRUSTED_PROXIES": "127.0.0.1/32, ::1/128"}
	p, err = loginPolicyFromEnv(func(k string) string { return env[k] })
	if err != nil || p.FailureLimit != 3 || len(p.TrustedProxies) != 2 {
		t.Fatalf("configured: %+v %v", p, err)
	}
	for k, v := range map[string]string{"ORBIT_CONSOLE_LOGIN_FAILURE_LIMIT": "0", "ORBIT_CONSOLE_LOGIN_ACCOUNT_LIMIT": "-1", "ORBIT_CONSOLE_LOGIN_IP_LIMIT": "10001", "ORBIT_CONSOLE_LOGIN_FAILURE_WINDOW": "0s", "ORBIT_CONSOLE_LOGIN_LOCK_DURATION": "25h", "ORBIT_CONSOLE_LOGIN_RATE_WINDOW": "bad", "ORBIT_CONSOLE_LOGIN_AUDIT_DAYS": "0", "ORBIT_CONSOLE_TRUSTED_PROXIES": "all"} {
		t.Run(k, func(t *testing.T) {
			if _, err := loginPolicyFromEnv(func(name string) string {
				if name == k {
					return v
				}
				return ""
			}); err == nil {
				t.Fatal("invalid policy accepted")
			}
		})
	}
}