// tests/auth/login.spec.ts
import { test, expect } from '@playwright/test';

test.describe('Authentication', () => {
  test.beforeEach(async ({ page }) => {
    await page.goto('/login');
    await page.waitForSelector('[data-testid="login-submit"]');
  });

  // Covers: As a user, I can log in with email and password
  test('successful login redirects to dashboard', async ({ page }) => {
    await page.fill('[data-testid="email-input"]', 'user@example.com');
    await page.fill('[data-testid="password-input"]', 'ValidPass123!');
    await page.click('[data-testid="login-submit"]');

    await expect(page).toHaveURL('/dashboard');
    // Verify token was stored
    const token = await page.evaluate(() => localStorage.getItem('auth_token'));
    expect(token).toBeTruthy();
  });

  // Covers: I see an error if I enter the wrong password 3 times
  test('locks account after 3 failed attempts', async ({ page }) => {
    for (let attempt = 1; attempt <= 3; attempt++) {
      await page.fill('[data-testid="email-input"]', 'user@example.com');
      await page.fill('[data-testid="password-input"]', 'WrongPassword');
      await page.click('[data-testid="login-submit"]');
      await expect(page.locator('[data-testid="login-error"]')).toBeVisible();

      if (attempt < 3) {
        // Clear for next attempt
        await page.fill('[data-testid="password-input"]', '');
      }
    }

    // Third failure should show lockout message
    await expect(page.locator('[data-testid="login-error"]')).toContainText(
      /locked|too many attempts/i
    );
  });

  // Covers: As an admin, I can log in and see the admin dashboard
  test('admin login redirects to admin dashboard', async ({ page }) => {
    // Mock admin credentials check — in real test, use test admin account
    await page.route('**/api/auth/login', async route => {
      const body = route.request().postDataJSON();
      if (body.email === 'admin@example.com') {
        await route.fulfill({
          status: 200,
          contentType: 'application/json',
          body: JSON.stringify({ token: 'admin-test-token', role: 'admin' }),
        });
      } else {
        await route.continue();
      }
    });

    await page.fill('[data-testid="email-input"]', 'admin@example.com');
    await page.fill('[data-testid="password-input"]', 'AdminPass123!');
    await page.click('[data-testid="login-submit"]');

    await expect(page).toHaveURL('/admin/dashboard');
  });
});

// tests/fixtures/stripe/payment-intent-success.json
{
  "id": "pi_test_123",
  "status": "succeeded",
  "amount": 4999,
  "currency": "usd",
  "client_secret": "pi_test_123_secret_abc"
}

// In the test:
test.beforeEach(async ({ page }) => {
  // Mock Stripe API
  await page.route('**/api.stripe.com/**', async route => {
    const url = route.request().url();
    if (url.includes('payment_intents')) {
      const fixture = require('./fixtures/stripe/payment-intent-success.json');
      await route.fulfill({
        status: 200,
        contentType: 'application/json',
        body: JSON.stringify(fixture),
      });
    } else {
      await route.abort();
    }
  });
});

// tests/pages/CheckoutPage.ts
import { Page, Locator, expect } from '@playwright/test';

export class CheckoutPage {
  readonly page: Page;

  // Locators
  readonly emailInput: Locator;
  readonly cardNumberInput: Locator;
  readonly cardExpiryInput: Locator;
  readonly cardCvcInput: Locator;
  readonly submitButton: Locator;
  readonly errorMessage: Locator;
  readonly orderSummary: Locator;

  constructor(page: Page) {
    this.page = page;
    this.emailInput = page.getByTestId('checkout-email');
    this.cardNumberInput = page.getByTestId('card-number');
    this.cardExpiryInput = page.getByTestId('card-expiry');
    this.cardCvcInput = page.getByTestId('card-cvc');
    this.submitButton = page.getByTestId('place-order-btn');
    this.errorMessage = page.getByTestId('checkout-error');
    this.orderSummary = page.getByTestId('order-summary');
  }

  async goto() {
    await this.page.goto('/checkout');
    await this.submitButton.waitFor({ state: 'visible' });
  }

  async fillContactDetails(email: string) {
    await this.emailInput.fill(email);
    return this; // enables chaining
  }

  async fillPaymentDetails(card: {
    number: string;
    expiry: string;
    cvc: string;
  }) {
    await this.cardNumberInput.fill(card.number);
    await this.cardExpiryInput.fill(card.expiry);
    await this.cardCvcInput.fill(card.cvc);
    return this;
  }

  async placeOrder() {
    await this.submitButton.click();
  }

  async expectError(message: string | RegExp) {
    await expect(this.errorMessage).toBeVisible();
    await expect(this.errorMessage).toContainText(message);
  }

  async expectOrderTotal(amount: string) {
    await expect(this.orderSummary).toContainText(amount);
  }
}