import { TestBed } from '@angular/core/testing';
import { HttpClientTestingModule, HttpTestingController } from '@angular/common/http/testing';
import { AuthService } from './auth.service';

describe('AuthService', () => {
  let service: AuthService;
  let httpMock: HttpTestingController;

  beforeEach(() => {
    sessionStorage.clear();
    TestBed.configureTestingModule({
      imports: [HttpClientTestingModule],
      providers: [AuthService],
    });
    service = TestBed.inject(AuthService);
    httpMock = TestBed.inject(HttpTestingController);
  });

  afterEach(() => {
    httpMock.verify();
    sessionStorage.clear();
  });

  it('login stores token in sessionStorage', (done) => {
    service.login('owner', 'password').subscribe(() => {
      expect(sessionStorage.getItem('auth_token')).toBe('test-token');
      done();
    });
    const req = httpMock.expectOne('/api/v1/auth/token');
    expect(req.request.method).toBe('POST');
    req.flush({ access_token: 'test-token', token_type: 'bearer', expires_in: 3600 });
  });

  it('isAuthenticated returns true when token is present', () => {
    sessionStorage.setItem('auth_token', 'some-token');
    expect(service.isAuthenticated()).toBeTrue();
  });

  it('isAuthenticated returns false when no token', () => {
    expect(service.isAuthenticated()).toBeFalse();
  });

  // US4 logout tests (T025)
  it('logout removes token from sessionStorage', () => {
    sessionStorage.setItem('auth_token', 'tok');
    service.logout();
    expect(sessionStorage.getItem('auth_token')).toBeNull();
  });

  it('isAuthenticated returns false after logout', () => {
    sessionStorage.setItem('auth_token', 'tok');
    service.logout();
    expect(service.isAuthenticated()).toBeFalse();
  });
});