package arm

import (
	"bytes"
	"context"
	"testing"

	azcommon "github.com/hashicorp/packer/builder/azure/common"
	"github.com/hashicorp/packer/builder/azure/common/constants"
	"github.com/hashicorp/packer/packer"
	"github.com/hashicorp/packer/packer-plugin-sdk/multistep"
)

func TestNewStepCertificateInKeyVault(t *testing.T) {
	cli := azcommon.MockAZVaultClient{}
	ui := &packer.BasicUi{
		Reader: new(bytes.Buffer),
		Writer: new(bytes.Buffer),
	}
	state := new(multistep.BasicStateBag)
	state.Put(constants.ArmKeyVaultName, "testKeyVaultName")

	config := &Config{
		winrmCertificate: "testCertificateString",
	}

	certKVStep := NewStepCertificateInKeyVault(&cli, ui, config)
	stepAction := certKVStep.Run(context.TODO(), state)

	if stepAction == multistep.ActionHalt {
		t.Fatalf("step should have succeeded.")
	}
	if !cli.SetSecretCalled {
		t.Fatalf("Step should have called SetSecret on Azure client.")
	}
	if cli.SetSecretCert != "testCertificateString" {
		t.Fatalf("Step should have read cert from winRMCertificate field on config.")
	}
	if cli.SetSecretVaultName != "testKeyVaultName" {
		t.Fatalf("step should have read keyvault name from state.")
	}
}

func TestNewStepCertificateInKeyVault_error(t *testing.T) {
	// Tell mock to return an error
	cli := azcommon.MockAZVaultClient{}
	cli.IsError = true

	ui := &packer.BasicUi{
		Reader: new(bytes.Buffer),
		Writer: new(bytes.Buffer),
	}
	state := new(multistep.BasicStateBag)
	state.Put(constants.ArmKeyVaultName, "testKeyVaultName")

	config := &Config{
		winrmCertificate: "testCertificateString",
	}

	certKVStep := NewStepCertificateInKeyVault(&cli, ui, config)
	stepAction := certKVStep.Run(context.TODO(), state)

	if stepAction != multistep.ActionHalt {
		t.Fatalf("step should have failed.")
	}
}