import pytest
from httpx import AsyncClient


class TestAuthAPI:
    async def test_health_endpoint(self, client: AsyncClient):
        response = await client.get("/health")
        assert response.status_code == 200
        data = response.json()
        assert data["status"] == "ok"
        assert data["app"] == "TradeMate"

    async def test_register_new_user(self, client: AsyncClient):
        response = await client.post(
            "/api/v1/auth/register",
            json={
                "phone": "13900139001",
                "password": "test123456",
                "username": "newuser",
            },
        )
        assert response.status_code == 200
        data = response.json()
        assert data["phone"] == "13900139001"
        assert data["username"] == "newuser"
        assert data["tier"] == "free"

    async def test_register_duplicate_phone(self, client: AsyncClient, test_user):
        response = await client.post(
            "/api/v1/auth/register",
            json={
                "phone": "13800138000",
                "password": "test123456",
                "username": "duplicate",
            },
        )
        assert response.status_code == 400
        assert "already registered" in response.json()["detail"]

    async def test_login_success(self, client: AsyncClient, test_user):
        response = await client.post(
            "/api/v1/auth/login",
            data={
                "username": "13800138000",
                "password": "test123456",
            },
        )
        assert response.status_code == 200
        data = response.json()
        assert "access_token" in data
        assert "refresh_token" in data
        assert data["token_type"] == "bearer"

    async def test_login_wrong_password(self, client: AsyncClient, test_user):
        response = await client.post(
            "/api/v1/auth/login",
            data={
                "username": "13800138000",
                "password": "wrongpassword",
            },
        )
        assert response.status_code == 401

    async def test_login_nonexistent_user(self, client: AsyncClient):
        response = await client.post(
            "/api/v1/auth/login",
            data={
                "username": "13999999999",
                "password": "test123456",
            },
        )
        assert response.status_code == 401

    async def test_get_current_user(self, client: AsyncClient, auth_headers):
        response = await client.get("/api/v1/auth/me", headers=auth_headers)
        assert response.status_code == 200
        data = response.json()
        assert data["phone"] == "13800138000"
        assert data["username"] == "test_user"

    async def test_get_user_unauthorized(self, client: AsyncClient):
        response = await client.get("/api/v1/auth/me")
        assert response.status_code == 401

    async def test_refresh_token(self, client: AsyncClient, test_user):
        from app.core.security import create_refresh_token
        refresh = create_refresh_token({"sub": str(test_user.id)})

        response = await client.post(
            "/api/v1/auth/refresh",
            json={"refresh_token": refresh},
        )
        assert response.status_code == 200
        assert "access_token" in response.json()