<?php

use WPGraphQL\WooCommerce\Vendor\Firebase\JWT\JWT;
use WPGraphQL\WooCommerce\Vendor\Firebase\JWT\Key;
class QLSessionHandlerCest {
	private $product_catalog;

	public function _before( FunctionalTester $I ) {
		// Create products.
		$this->product_catalog = $I->getCatalog();

		if ( ! defined( 'GRAPHQL_WOOCOMMERCE_SECRET_KEY' ) ) {
			define( 'GRAPHQL_WOOCOMMERCE_SECRET_KEY', 'testestestestest' );
		}
	}

	// tests
	public function testCartMutationsWithValidCartSessionToken( FunctionalTester $I ) {
		/**
		 * Add item to the cart
		 */
		$success = $I->addToCart(
			[
				'clientMutationId' => 'someId',
				'productId'        => $this->product_catalog['t-shirt'],
				'quantity'         => 5,
			]
		);

		$I->assertArrayNotHasKey( 'errors', $success );
		$I->assertArrayHasKey( 'data', $success );
		$I->assertArrayHasKey( 'addToCart', $success['data'] );
		$I->assertArrayHasKey( 'cartItem', $success['data']['addToCart'] );
		$I->assertArrayHasKey( 'key', $success['data']['addToCart']['cartItem'] );
		$cart_item_key = $success['data']['addToCart']['cartItem']['key'];

		/**
		 * Assert existence and validity of "woocommerce-session" HTTP header.
		 */
		$I->seeHttpHeaderOnce( 'woocommerce-session' );
		$session_token = $I->grabHttpHeader( 'woocommerce-session' );

		// Decode token
		JWT::$leeway = 60;
		$token_data  = ! empty( $session_token )
			? JWT::decode( $session_token, new Key( GRAPHQL_WOOCOMMERCE_SECRET_KEY, 'HS256' ) )
			: null;

		$I->assertNotEmpty( $token_data );
		$I->assertNotEmpty( $token_data->iss );
		$I->assertNotEmpty( $token_data->iat );
		$I->assertNotEmpty( $token_data->nbf );
		$I->assertNotEmpty( $token_data->exp );
		$I->assertNotEmpty( $token_data->data );
		$I->assertNotEmpty( $token_data->data->customer_id );

		$wp_url = getenv( 'WORDPRESS_URL' );
		$I->assertEquals( $token_data->iss, $wp_url );

		/**
		 * Make a cart query request with "woocommerce-session" HTTP Header and confirm
		 * correct cart contents.
		 */
		$query = '
            query {
                cart {
                    contents {
                        nodes {
                            key
                        }
                    }
                }
            }
        ';

		$actual   = $I->sendGraphQLRequest( $query, null, [ 'woocommerce-session' => "Session {$session_token}" ] );
		$expected = [
			'data' => [
				'cart' => [
					'contents' => [
						'nodes' => [
							[
								'key' => $cart_item_key,
							],
						],
					],
				],
			],
		];

		$I->assertEquals( $expected, $actual );

		/**
		 * Remove item from the cart
		 */
		$success = $I->removeItemsFromCart(
			[
				'clientMutationId' => 'someId',
				'keys'             => $cart_item_key,
			],
			[ 'woocommerce-session' => "Session {$session_token}" ]
		);

		$I->assertArrayNotHasKey( 'errors', $success );
		$I->assertArrayHasKey( 'data', $success );
		$I->assertArrayHasKey( 'removeItemsFromCart', $success['data'] );
		$I->assertArrayHasKey( 'cartItems', $success['data']['removeItemsFromCart'] );
		$I->assertCount( 1, $success['data']['removeItemsFromCart']['cartItems'] );

		/**
		 * Make a cart query request with "woocommerce-session" HTTP Header and confirm
		 * correct cart contents.
		 */
		$query = '
            query {
                cart {
                    contents {
                        nodes {
                            key
                        }
                    }
                }
            }
        ';

		$actual   = $I->sendGraphQLRequest( $query, null, [ 'woocommerce-session' => "Session {$session_token}" ] );
		$expected = [
			'data' => [
				'cart' => [
					'contents' => [
						'nodes' => [],
					],
				],
			],
		];

		$I->assertEquals( $expected, $actual );

		/**
		 * Restore item to the cart
		 */
		$success = $I->restoreCartItems(
			[
				'clientMutationId' => 'someId',
				'keys'             => [ $cart_item_key ],
			],
			[ 'woocommerce-session' => "Session {$session_token}" ]
		);

		$I->assertArrayNotHasKey( 'errors', $success );
		$I->assertArrayHasKey( 'data', $success );
		$I->assertArrayHasKey( 'restoreCartItems', $success['data'] );
		$I->assertArrayHasKey( 'cartItems', $success['data']['restoreCartItems'] );
		$I->assertCount( 1, $success['data']['restoreCartItems']['cartItems'] );

		/**
		 * Make a cart query request with "woocommerce-session" HTTP Header and confirm
		 * correct cart contents.
		 */
		$query = '
            query {
                cart {
                    contents {
                        nodes {
                            key
                        }
                    }
                }
            }
        ';

		$actual   = $I->sendGraphQLRequest( $query, null, [ 'woocommerce-session' => "Session {$session_token}" ] );
		$expected = [
			'data' => [
				'cart' => [
					'contents' => [
						'nodes' => [
							[
								'key' => $cart_item_key,
							],
						],
					],
				],
			],
		];

		$I->assertEquals( $expected, $actual );
	}

	public function testCartMutationsWithInvalidCartSessionToken( FunctionalTester $I ) {
		/**
		 * Add item to cart and retrieve session token to corrupt.
		 */
		$success = $I->addToCart(
			[
				'clientMutationId' => 'someId',
				'productId'        => $this->product_catalog['t-shirt'],
				'quantity'         => 1,
			]
		);

		$I->assertArrayNotHasKey( 'errors', $success );
		$I->assertArrayHasKey( 'data', $success );
		$I->assertArrayHasKey( 'addToCart', $success['data'] );
		$I->assertArrayHasKey( 'cartItem', $success['data']['addToCart'] );
		$I->assertArrayHasKey( 'key', $success['data']['addToCart']['cartItem'] );
		$cart_item_key = $success['data']['addToCart']['cartItem']['key'];

		/**
		 * Retrieve session token from "woocommerce-session" HTTP response header.
		 */
		$I->seeHttpHeaderOnce( 'woocommerce-session' );
		$valid_token = $I->grabHttpHeader( 'woocommerce-session' );

		// Decode token
		$token_data = ! empty( $valid_token )
			? JWT::decode( $valid_token, new Key( GRAPHQL_WOOCOMMERCE_SECRET_KEY, 'HS256' ) )
			: null;

		/**
		 * Attempt to add item to the cart with invalid session token.
		 * GraphQL should throw an error and mutation will fail.
		 */
		$invalid_token                    = $token_data;
		$invalid_token->data->customer_id = '';
		$invalid_token                    = JWT::encode( (array) $invalid_token, GRAPHQL_WOOCOMMERCE_SECRET_KEY, 'HS256' );

		$failed = $I->addToCart(
			[
				'clientMutationId' => 'someId',
				'productId'        => $this->product_catalog['t-shirt'],
				'quantity'         => 1,
			],
			[ 'woocommerce-session' => "Session {$invalid_token}" ]
		);

		$I->assertArrayHasKey( 'errors', $failed );

		/**
		 * Attempt to remove item from the cart with invalid session token.
		 * GraphQL should throw an error and mutation will fail.
		 */
		$invalid_token      = $token_data;
		$invalid_token->iss = '';
		$invalid_token      = JWT::encode( (array) $invalid_token, GRAPHQL_WOOCOMMERCE_SECRET_KEY, 'HS256' );

		$failed = $I->removeItemsFromCart(
			[
				'clientMutationId' => 'someId',
				'keys'             => $cart_item_key,
			],
			[ 'woocommerce-session' => "Session {$invalid_token}" ]
		);

		$I->assertArrayHasKey( 'errors', $failed );

		/**
		 * Attempt to update quantity of item in the cart with invalid session token.
		 * GraphQL should throw an error and mutation will fail.
		 */
		$failed = $I->updateItemQuantities(
			[
				'clientMutationId' => 'someId',
				'items'            => [
					[
						'key'      => $cart_item_key,
						'quantity' => 0,
					],
				],
			],
			[ 'woocommerce-session' => 'Session invalid-jwt-token-string' ]
		);

		$I->assertArrayHasKey( 'errors', $failed );

		/**
		 * Attempt to empty cart with invalid session token.
		 * GraphQL should throw an error and mutation will fail.
		 */
		$failed = $I->emptyCart(
			[ 'clientMutationId' => 'someId' ],
			[ 'woocommerce-session' => 'Session invalid-jwt-token-string' ]
		);

		$I->assertArrayHasKey( 'errors', $failed );

		/**
		 * Attempt to add fee on cart with invalid session token.
		 * GraphQL should throw an error and mutation will fail.
		 */
		$failed = $I->addFee(
			[
				'clientMutationId' => 'someId',
				'name'             => 'extra_fee',
				'amount'           => 49.99,
			],
			[ 'woocommerce-session' => 'Session invalid-jwt-token-string' ]
		);

		$I->assertArrayHasKey( 'errors', $failed );

		/**
		 * Attempt to apply coupon on cart with invalid session token.
		 * GraphQL should throw an error and mutation will fail.
		 *
		 * @Note: No coupons exist in the database, but mutation should fail before that becomes a factor.
		 */
		$failed = $I->applyCoupon(
			[
				'clientMutationId' => 'someId',
				'code'             => 'some_coupon',
			],
			[ 'woocommerce-session' => 'Session invalid-jwt-token-string' ]
		);

		$I->assertArrayHasKey( 'errors', $failed );

		/**
		 * Attempt to remove coupon from cart with invalid session token.
		 * GraphQL should throw an error and mutation will fail.
		 *
		 * @Note: No coupons exist on the cart, but mutation should failed before that becomes a factor.
		 */
		$failed = $I->removeCoupons(
			[
				'clientMutationId' => 'someId',
				'codes'            => [ 'some_coupon' ],
			],
			[ 'woocommerce-session' => 'Session invalid-jwt-token-string' ]
		);

		$I->assertArrayHasKey( 'errors', $failed );

		/**
		 * Attempt to restore item to the cart with invalid session token.
		 * GraphQL should throw an error and mutation will fail.
		 *
		 * @Note: No items have been removed from the cart in this session,
		 * but mutation should failed before that becomes a factor.
		 */
		$failed = $I->restoreCartItems(
			[
				'clientMutationId' => 'someId',
				'keys'             => [ $cart_item_key ],
			],
			[ 'woocommerce-session' => 'Session invalid-jwt-token-string' ]
		);

		$I->assertArrayHasKey( 'errors', $failed );

		/**
		 * Attempt to restore item to the cart with invalid session token.
		 * GraphQL should throw an error and mutation will fail.
		 *
		 * @Note: No items have been removed from the cart in this session,
		 * but mutation should failed before that becomes a factor.
		 */
		$failed = $I->updateShippingMethod(
			[
				'clientMutationId' => 'someId',
				'shippingMethods'  => [ 'legacy_flat_rate' ],
			],
			[ 'woocommerce-session' => 'Session invalid-jwt-token-string' ]
		);

		$I->assertArrayHasKey( 'errors', $failed );

		/**
		 * Attempt to query cart with invalid session token.
		 * GraphQL should throw an error and query will fail.
		 */
		$query = '
            query {
                cart {
                    contents {
                        nodes {
                            key
                        }
                    }
                }
            }
        ';

		$failed = $I->sendGraphQLRequest(
			$query,
			null,
			[ 'woocommerce-session' => 'Session invalid-jwt-token-string' ]
		);

		$I->assertArrayHasKey( 'errors', $failed );
	}

	public function testCartSessionDataMutations( FunctionalTester $I ) {
		/**
		 * Add item to the cart
		 */
		$success = $I->addToCart(
			[
				'clientMutationId' => 'someId',
				'productId'        => $this->product_catalog['socks'],
				'quantity'         => 2,
			]
		);

		$I->assertArrayNotHasKey( 'errors', $success );
		$I->assertArrayHasKey( 'data', $success );
		$I->assertArrayHasKey( 'addToCart', $success['data'] );
		$I->assertArrayHasKey( 'cartItem', $success['data']['addToCart'] );
		$I->assertArrayHasKey( 'key', $success['data']['addToCart']['cartItem'] );
		$cart_item_key = $success['data']['addToCart']['cartItem']['key'];

		/**
		 * Assert existence and validity of "woocommerce-session" HTTP header.
		 */
		$I->seeHttpHeaderOnce( 'woocommerce-session' );
		$session_token = $I->grabHttpHeader( 'woocommerce-session' );

		// Decode token
		JWT::$leeway = 60;
		$token_data  = ! empty( $session_token )
			? JWT::decode( $session_token, new Key( GRAPHQL_WOOCOMMERCE_SECRET_KEY, 'HS256' ) )
			: null;

		$I->assertNotEmpty( $token_data );
		$I->assertNotEmpty( $token_data->iss );
		$I->assertNotEmpty( $token_data->iat );
		$I->assertNotEmpty( $token_data->nbf );
		$I->assertNotEmpty( $token_data->exp );
		$I->assertNotEmpty( $token_data->data );
		$I->assertNotEmpty( $token_data->data->customer_id );

		$wp_url = getenv( 'WORDPRESS_URL' );
		$I->assertEquals( $token_data->iss, $wp_url );

		/**
		 * Set shipping address, so shipping rates can be calculated
		 */
		$input = [
			'clientMutationId' => 'someId',
			'shipping'         => [
				'state'    => 'New York',
				'country'  => 'US',
				'postcode' => '12345',
			],
		];

		$mutation = '
            mutation ( $input: UpdateCustomerInput! ){
                updateCustomer ( input: $input ) {
                    customer {
                        shipping {
                            state
                            country
                            postcode
                        }
                    }
                }
            }
        ';

		$actual   = $I->sendGraphQLRequest( $mutation, $input, [ 'woocommerce-session' => "Session {$session_token}" ] );
		$expected = [
			'data' => [
				'updateCustomer' => [
					'customer' => [
						'shipping' => [
							'state'    => 'New York',
							'country'  => 'US',
							'postcode' => '12345',
						],
					],
				],
			],
		];

		$I->assertEquals( $expected, $actual );

		/**
		 * Make a cart query request with "woocommerce-session" HTTP Header and confirm
		 * correct cart contents and chosen and available shipping methods.
		 */
		$query = '
            query {
                cart {
                    contents {
                        nodes {
                            key
                        }
                    }
                    availableShippingMethods {
                        packageDetails
                        supportsShippingCalculator
                        rates {
                            id
                            cost
                            label
                        }
                    }
                }
            }
        ';

		$actual   = $I->sendGraphQLRequest( $query, null, [ 'woocommerce-session' => "Session {$session_token}" ] );
		$expected = [
			'data' => [
				'cart' => [
					'contents'                 => [
						'nodes' => [
							[
								'key' => $cart_item_key,
							],
						],
					],
					'availableShippingMethods' => [
						[
							'packageDetails'             => \html_entity_decode( 'socks &times;2' ),
							'supportsShippingCalculator' => true,
							'rates'                      => [
								[
									'id'    => 'flat_rate:7',
									'cost'  => '0.00',
									'label' => 'Flat rate',
								],
								[
									'id'    => 'free_shipping:8',
									'cost'  => '0.00',
									'label' => 'Free shipping',
								],
							],
						],
					],
				],
			],
		];

		$I->assertEquals( $expected, $actual );

		/**
		 * Update shipping method to 'flat_rate' shipping.
		 */
		$mutation = '
            mutation ($input: UpdateShippingMethodInput!){
                updateShippingMethod(input: $input) {
                    cart {
                        availableShippingMethods {
                            packageDetails
                            supportsShippingCalculator
                            rates {
                                id
                                cost
                                label
                            }
                        }
                        chosenShippingMethods
                        shippingTotal
                        shippingTax
                        subtotal
                        subtotalTax
                        total
                    }
                }
            }
        ';

		$success = $I->sendGraphQLRequest(
			$mutation,
			[
				'clientMutationId' => 'someId',
				'shippingMethods'  => [ 'flat_rate:7' ],
			],
			[ 'woocommerce-session' => "Session {$session_token}" ]
		);

		$I->assertArrayNotHasKey( 'errors', $success );
		$I->assertNotEmpty( $success['data'] );
		$I->assertNotEmpty( $success['data']['updateShippingMethod'] );
		$I->assertNotEmpty( $success['data']['updateShippingMethod']['cart'] );
		$cart = $success['data']['updateShippingMethod']['cart'];
		$I->assertNotEmpty( $cart['availableShippingMethods'] );
		$I->assertEquals( 'flat_rate:7', $cart['chosenShippingMethods'][0] );
	}
}