1. 1
2. 2
3. 3
4. 4
5. 5
6. 6
7. 7
8. 8
9. 9
10. 10
11. 11
12. 12
13. 13
14. 14
15. 15
16. 16
17. 17
18. 18
19. 19
20. 20
21. 21
22. 22
23. 23
24. 24
25. 25
26. 26
27. 27
28. 28
29. 29
30. 30
31. 31
32. 32
33. 33
34. 34
35. 35
36. 36
37. 37
38. 38
39. 39
40. 40
41. 41
42. 42
43. 43
44. 44
45. 45
46. 46
47. 47
48. 48
49. 49
50. 50
51. 51
52. 52
53. 53
54. 54
55. 55
56. 56
57. 57
58. 58
59. 59
60. 60
61. 61
62. 62
63. 63
64. 64
65. 65
66. 66
67. 67
68. 68
69. 69
70. 70
71. 71
72. 72
73. 73

// SPDX-FileCopyrightText: 2025 Shota FUJI <pockawoooh@gmail.com>
// SPDX-License-Identifier: AGPL-3.0-only

//go:build !js && !wasm

package v2

import (
	"context"
	"database/sql"
	"io"
	"log/slog"
	"reflect"
	"testing"

	"connectrpc.com/connect"
	"go.akshayshah.org/memhttp"
	"google.golang.org/protobuf/proto"

	workspaceV2 "pocka.jp/x/yamori/proto/go/workspace/v2"
	"pocka.jp/x/yamori/proto/go/workspace/v2/v2connect"

	"pocka.jp/x/yamori/backend/core"
	"pocka.jp/x/yamori/backend/services"

	_ "modernc.org/sqlite"
)

func TestRejectsInvalidAdminCreationPassword(t *testing.T) {
	logger := slog.New(slog.NewTextHandler(io.Discard, nil))
	db, err := sql.Open("sqlite", ":memory:")
	if err != nil {
		t.Fatal(err)
	}

	core, err := core.New(db, logger)
	if err != nil {
		t.Fatal(err)
	}

	if err := core.Init("initial_admin_password"); err != nil {
		t.Fatal(err)
	}

	server, err := memhttp.New(services.Mux(core))
	if err != nil {
		t.Fatal(err)
	}

	client := v2connect.NewWorkspaceServiceClient(
		server.Client(),
		server.URL(),
	)

	res, err := client.CreateUser(
		context.Background(),
		connect.NewRequest(&workspaceV2.CreateUserRequest{
			Name:                 proto.String("alice"),
			DisplayName:          proto.String("Alice"),
			Password:             proto.String("Alice's password"),
			InitialAdminPassword: proto.String("^-  w  -^"),
		}),
	)
	if err != nil {
		t.Fatal(err)
	}

	_, ok := res.Msg.Result.(*workspaceV2.CreateUserResponse_AuthenticationError)
	if !ok {
		typeName := reflect.Indirect(reflect.ValueOf(res.Msg.Result))
		t.Errorf("Expected authentication_error, got %s", typeName.Type().Name())
	}
}