deploy/util/localconfig/localconfig_test.go

//go:build !windows

package localconfig

import (
	"errors"
	"os"
	"path"
	"path/filepath"
	"testing"

	"github.com/stretchr/testify/require"

	"github.com/hanzoai/deploy/util/config"
)

func TestGetUsername(t *testing.T) {
	require.Equal(t, "admin", GetUsername("admin:login"))
	require.Equal(t, "admin", GetUsername("admin"))
	require.Empty(t, GetUsername(""))
}

func TestFilePermission(t *testing.T) {
	dirPath := "testfolder/"

	err := os.MkdirAll(path.Dir(dirPath), 0o700)
	require.NoError(t, err, "Could not create argocd folder with 0700 permission: %v", err)

	t.Cleanup(func() {
		err := os.RemoveAll(dirPath)
		require.NoError(t, err, "Could not remove directory")
	})

	for _, c := range []struct {
		name          string
		testfile      string
		perm          os.FileMode
		expectedError error
	}{
		{
			name:          "Test config file with permission 0700",
			testfile:      ".config_0700",
			perm:          0o700,
			expectedError: errors.New("config file has incorrect permission flags -rwx------, change the file permission either to 0400 or 0600"),
		},
		{
			name:          "Test config file with permission 0777",
			testfile:      ".config_0777",
			perm:          0o777,
			expectedError: errors.New("config file has incorrect permission flags -rwxrwxrwx, change the file permission either to 0400 or 0600"),
		},
		{
			name:          "Test config file with permission 0600",
			testfile:      ".config_0600",
			perm:          0o600,
			expectedError: nil,
		},
		{
			name:          "Test config file with permission 0400",
			testfile:      ".config_0400",
			perm:          0o400,
			expectedError: nil,
		},
		{
			name:          "Test config file with permission 0300",
			testfile:      ".config_0300",
			perm:          0o300,
			expectedError: errors.New("config file has incorrect permission flags --wx------, change the file permission either to 0400 or 0600"),
		},
	} {
		t.Run(c.name, func(t *testing.T) {
			filePath := filepath.Join(dirPath, c.testfile)

			f, err := os.Create(filePath)
			require.NoError(t, err, "Could not write  create config file: %v", err)
			defer func() {
				require.NoError(t, f.Close())
			}()

			err = f.Chmod(c.perm)
			require.NoError(t, err, "Could not change the file permission to %s: %v", c.perm, err)

			fi, err := os.Stat(filePath)
			require.NoError(t, err, "Could not access the fileinfo: %v", err)

			if err := getFilePermission(fi); err != nil {
				require.EqualError(t, err, c.expectedError.Error())
			} else {
				require.NoError(t, c.expectedError)
			}
		})
	}
}

const testConfig = `contexts:
- name: argocd1.example.com:443
  server: argocd1.example.com:443
  user: argocd1.example.com:443
- name: argocd2.example.com:443
  server: argocd2.example.com:443
  user: argocd2.example.com:443
- name: localhost:8080
  server: localhost:8080
  user: localhost:8080
current-context: localhost:8080
servers:
- server: argocd1.example.com:443
- server: argocd2.example.com:443
- plain-text: true
  server: localhost:8080
users:
- auth-token: vErrYS3c3tReFRe$hToken
  name: argocd1.example.com:443
  refresh-token: vErrYS3c3tReFRe$hToken
- auth-token: vErrYS3c3tReFRe$hToken
  name: argocd2.example.com:443
  refresh-token: vErrYS3c3tReFRe$hToken
- auth-token: vErrYS3c3tReFRe$hToken
  name: localhost:8080`

const (
	testConfigFilePath = "./testdata/local.config"
	testConfigFileName = "local.config"
	testWriteFileName  = "write-local.config"
)

func loadOpts(t *testing.T, opts string) {
	t.Helper()
	t.Setenv("ARGOCD_OPTS", opts)
	require.NoError(t, config.LoadFlags())
}

func TestGetPromptsEnabled_useCLIOpts_false_localConfigPromptsEnabled_true(t *testing.T) {
	// Write the test config file
	err := os.WriteFile(testConfigFilePath, []byte(testConfig+"\nprompts-enabled: true"), os.ModePerm)
	require.NoError(t, err)

	defer os.Remove(testConfigFilePath)

	err = os.Chmod(testConfigFilePath, 0o600)
	require.NoError(t, err, "Could not change the file permission to 0600 %v", err)

	loadOpts(t, "--config "+testConfigFilePath)

	require.True(t, GetPromptsEnabled(false))
}

func TestGetPromptsEnabled_useCLIOpts_false_localConfigPromptsEnabled_false(t *testing.T) {
	// Write the test config file
	err := os.WriteFile(testConfigFilePath, []byte(testConfig+"\nprompts-enabled: false"), os.ModePerm)
	require.NoError(t, err)

	defer os.Remove(testConfigFilePath)

	err = os.Chmod(testConfigFilePath, 0o600)
	require.NoError(t, err, "Could not change the file permission to 0600 %v", err)

	loadOpts(t, "--config "+testConfigFilePath)

	require.False(t, GetPromptsEnabled(false))
}

func TestGetPromptsEnabled_useCLIOpts_true_forcePromptsEnabled_default(t *testing.T) {
	// Write the test config file
	err := os.WriteFile(testConfigFilePath, []byte(testConfig+"\nprompts-enabled: false"), os.ModePerm)
	require.NoError(t, err)

	defer os.Remove(testConfigFilePath)

	err = os.Chmod(testConfigFilePath, 0o600)
	require.NoError(t, err, "Could not change the file permission to 0600 %v", err)

	loadOpts(t, "--config "+testConfigFilePath+" --prompts-enabled")

	require.True(t, GetPromptsEnabled(true))
}

func TestGetPromptsEnabled_useCLIOpts_true_forcePromptsEnabled_true(t *testing.T) {
	// Write the test config file
	err := os.WriteFile(testConfigFilePath, []byte(testConfig+"\nprompts-enabled: false"), os.ModePerm)
	require.NoError(t, err)

	defer os.Remove(testConfigFilePath)

	err = os.Chmod(testConfigFilePath, 0o600)
	require.NoError(t, err, "Could not change the file permission to 0600 %v", err)

	loadOpts(t, "--config "+testConfigFilePath+" --prompts-enabled=true")

	require.True(t, GetPromptsEnabled(true))
}

func TestGetPromptsEnabled_useCLIOpts_true_forcePromptsEnabled_false(t *testing.T) {
	// Write the test config file
	err := os.WriteFile(testConfigFilePath, []byte(testConfig+"\nprompts-enabled: true"), os.ModePerm)
	require.NoError(t, err)

	defer os.Remove(testConfigFilePath)

	err = os.Chmod(testConfigFilePath, 0o600)
	require.NoError(t, err, "Could not change the file permission to 0600 %v", err)

	loadOpts(t, "--config "+testConfigFilePath+" --prompts-enabled=false")

	require.False(t, GetPromptsEnabled(true))
}

func TestGetToken_Exist(t *testing.T) {
	testFilePath := filepath.Join(t.TempDir(), testConfigFileName)
	err := os.WriteFile(testFilePath, []byte(testConfig), os.ModePerm)
	require.NoError(t, err)

	err = os.Chmod(testFilePath, 0o600)
	require.NoError(t, err, "Could not change the file permission to 0600 %v", err)
	localConfig, err := ReadLocalConfig(testFilePath)
	require.NoError(t, err)

	token := localConfig.GetToken(localConfig.CurrentContext)

	require.Equal(t, "vErrYS3c3tReFRe$hToken", token)
}

func TestGetToken_Not_Exist(t *testing.T) {
	testFilePath := filepath.Join(t.TempDir(), testConfigFileName)
	err := os.WriteFile(testFilePath, []byte(testConfig), os.ModePerm)
	require.NoError(t, err)

	err = os.Chmod(testFilePath, 0o600)
	require.NoError(t, err, "Could not change the file permission to 0600 %v", err)
	localConfig, err := ReadLocalConfig(testFilePath)
	require.NoError(t, err)

	// serverName does exist in TestConfig
	token := localConfig.GetToken("localhost")

	require.Empty(t, token)
}

func TestRemoveToken_Exist(t *testing.T) {
	testFilePath := filepath.Join(t.TempDir(), testConfigFileName)
	err := os.WriteFile(testFilePath, []byte(testConfig), os.ModePerm)
	require.NoError(t, err)

	err = os.Chmod(testFilePath, 0o600)
	require.NoError(t, err, "Could not change the file permission to 0600 %v", err)
	localConfig, err := ReadLocalConfig(testFilePath)
	require.NoError(t, err)

	removed := localConfig.RemoveToken(localConfig.CurrentContext)

	require.True(t, removed)
}

func TestRemoveToken_ClearsBothTokens(t *testing.T) {
	testFilePath := filepath.Join(t.TempDir(), testConfigFileName)
	err := os.WriteFile(testFilePath, []byte(testConfig), os.ModePerm)
	require.NoError(t, err)

	err = os.Chmod(testFilePath, 0o600)
	require.NoError(t, err, "Could not change the file permission to 0600 %v", err)
	localConfig, err := ReadLocalConfig(testFilePath)
	require.NoError(t, err)

	// Verify tokens exist before removal (use argocd1 which has both auth-token and refresh-token)
	serverName := "argocd1.example.com:443"
	require.Equal(t, "vErrYS3c3tReFRe$hToken", localConfig.GetToken(serverName))

	removed := localConfig.RemoveToken(serverName)
	require.True(t, removed)

	// Verify both AuthToken and RefreshToken are cleared
	require.Empty(t, localConfig.GetToken(serverName))
	for _, u := range localConfig.Users {
		if u.Name == serverName {
			require.Empty(t, u.AuthToken, "AuthToken should be cleared after RemoveToken")
			require.Empty(t, u.RefreshToken, "RefreshToken should be cleared after RemoveToken")
			return
		}
	}
	t.Fatal("user entry should still exist after RemoveToken")
}

func TestRemoveToken_Not_Exist(t *testing.T) {
	testFilePath := filepath.Join(t.TempDir(), testConfigFileName)
	err := os.WriteFile(testFilePath, []byte(testConfig), os.ModePerm)
	require.NoError(t, err)

	err = os.Chmod(testFilePath, 0o600)
	require.NoError(t, err, "Could not change the file permission to 0600 %v", err)
	localConfig, err := ReadLocalConfig(testFilePath)
	require.NoError(t, err)

	// serverName does exist in TestConfig
	removed := localConfig.RemoveToken("localhost")

	require.False(t, removed)
}

func TestValidateLocalConfig(t *testing.T) {
	testFilePath := filepath.Join(t.TempDir(), testConfigFileName)
	err := os.WriteFile(testFilePath, []byte(testConfig), os.ModePerm)
	require.NoError(t, err)

	err = os.Chmod(testFilePath, 0o600)
	require.NoError(t, err, "Could not change the file permission to 0600 %v", err)
	localConfig, err := ReadLocalConfig(testFilePath)
	require.NoError(t, err)

	err = ValidateLocalConfig(*localConfig)

	require.NoError(t, err)
}

func TestWriteLocalConfig(t *testing.T) {
	testFilePath := filepath.Join(t.TempDir(), testConfigFileName)
	err := os.WriteFile(testFilePath, []byte(testConfig), os.ModePerm)
	require.NoError(t, err)

	err = os.Chmod(testFilePath, 0o600)
	require.NoError(t, err, "Could not change the file permission to 0600 %v", err)
	localConfig, err := ReadLocalConfig(testFilePath)
	require.NoError(t, err)

	testWriteFilePath := filepath.Join(t.TempDir(), testWriteFileName)
	err = WriteLocalConfig(*localConfig, testWriteFilePath)

	require.NoError(t, err)
}

func TestReadLocalConfig_FileNotExist(t *testing.T) {
	config, err := ReadLocalConfig("/nonexistent/path/config")
	require.NoError(t, err)
	require.Nil(t, config)
}

func TestReadLocalConfig_InvalidYAML(t *testing.T) {
	tmpFile := filepath.Join(t.TempDir(), "config")
	err := os.WriteFile(tmpFile, []byte("invalid: yaml: content: ["), 0o600)
	require.NoError(t, err)

	config, err := ReadLocalConfig(tmpFile)
	require.Error(t, err)
	require.Nil(t, config)
}

func TestReadLocalConfig_EmptyFile(t *testing.T) {
	tmpFile := filepath.Join(t.TempDir(), "config")
	err := os.WriteFile(tmpFile, []byte(""), 0o600)
	require.NoError(t, err)

	config, err := ReadLocalConfig(tmpFile)
	require.NoError(t, err)
	// Empty file results in empty config, not nil
	require.NotNil(t, config)
}

func TestReadLocalConfig_ValidConfig(t *testing.T) {
	tmpFile := filepath.Join(t.TempDir(), "config")
	err := os.WriteFile(tmpFile, []byte(testConfig), 0o600)
	require.NoError(t, err)

	config, err := ReadLocalConfig(tmpFile)
	require.NoError(t, err)
	require.NotNil(t, config)
	require.Equal(t, "localhost:8080", config.CurrentContext)
	require.Len(t, config.Contexts, 3)
}