"""Tests für auth.py: Hashing, Token-Lebenszyklus, Blacklist."""

import time

from auth import (
    add_to_blacklist,
    cleanup_blacklist,
    create_access_token,
    create_refresh_token,
    decode_token,
    get_password_hash,
    is_access_token,
    is_blacklisted,
    is_refresh_token,
    token_blacklist,
    verify_password,
)


def test_passwort_hash_roundtrip():
    hashed = get_password_hash("geheim123")
    assert hashed != "geheim123"
    assert verify_password("geheim123", hashed) is True
    assert verify_password("falsch", hashed) is False


def test_access_token_roundtrip():
    token = create_access_token({"sub": "commander"})
    payload = decode_token(token)
    assert payload is not None
    assert payload["sub"] == "commander"
    assert payload["type"] == "access"
    assert is_access_token(token) is True
    assert is_refresh_token(token) is False


def test_refresh_token_roundtrip():
    token = create_refresh_token({"sub": "commander"})
    payload = decode_token(token)
    assert payload is not None
    assert payload["type"] == "refresh"
    assert is_refresh_token(token) is True
    assert is_access_token(token) is False


def test_muell_token_gibt_none_und_false():
    assert decode_token("kein.echter.token") is None
    # Rückgabetyp muss bool sein, nicht None (Review-Fund 22.07.)
    assert is_access_token("kein.echter.token") is False
    assert is_refresh_token("kein.echter.token") is False


def test_blacklist_logout_wirkt():
    token = create_access_token({"sub": "commander"})
    assert is_blacklisted(token) is False
    add_to_blacklist(token)
    assert is_blacklisted(token) is True


def test_cleanup_entfernt_nur_abgelaufene():
    """Review-Fund 22.07.: das alte cleanup löschte ALLES — Logout war Placebo."""
    frisch = create_access_token({"sub": "commander"})
    add_to_blacklist(frisch)
    token_blacklist["laengst-abgelaufener-token"] = time.time() - 3600

    cleanup_blacklist()

    assert "laengst-abgelaufener-token" not in token_blacklist
    assert is_blacklisted(frisch) is True