"""Tests: Login/Logout und initialer Admin."""
from __future__ import annotations

from sqlalchemy import select

from redaktionskern.auth.models import User


def test_initialer_admin_wird_angelegt(app):
    with app.state.session_factory() as db:
        admin = db.scalar(select(User).where(User.username == "admin"))
    assert admin is not None
    assert admin.role == "admin"
    assert admin.active is True


def test_login_seite_erreichbar(client):
    antwort = client.get("/login")
    assert antwort.status_code == 200
    assert "Anmelden" in antwort.text


def test_geschuetzte_seite_leitet_anonym_zum_login(client):
    antwort = client.get("/", follow_redirects=False)
    assert antwort.status_code == 303
    assert antwort.headers["location"] == "/login"


def test_login_falsches_passwort(client):
    antwort = client.post(
        "/login",
        data={"username": "admin", "password": "falsch"},
        follow_redirects=False,
    )
    assert antwort.status_code == 200
    assert "falsch" in antwort.text


def test_login_unbekannter_benutzer(client):
    antwort = client.post(
        "/login",
        data={"username": "niemand", "password": "egal-egal-1"},
        follow_redirects=False,
    )
    assert antwort.status_code == 200
    assert "falsch" in antwort.text


def test_login_erfolg_und_dashboard(client):
    from tests.conftest import melde_an

    melde_an(client)
    antwort = client.get("/")
    assert antwort.status_code == 200
    assert "Willkommen" in antwort.text


def test_logout(client):
    from tests.conftest import melde_an

    melde_an(client)
    antwort = client.post("/logout", follow_redirects=False)
    assert antwort.status_code == 303
    assert antwort.headers["location"] == "/login"
    danach = client.get("/", follow_redirects=False)
    assert danach.status_code == 303  # wieder anonym