// Licensed to the .NET Foundation under one or more agreements.
// The .NET Foundation licenses this file to you under the MIT license.
 
using System.Net;
using System.Net.Http;
using System.Threading.Tasks;
using Microsoft.AspNetCore.Mvc.Testing;
using Xunit;
 
namespace AuthSamples.FunctionalTests;
 
public class CustomAuthorizationFailureResponseTests : IClassFixture<WebApplicationFactory<CustomAuthorizationFailureResponse.Startup>>
{
    private HttpClient Client { get; }
 
    public CustomAuthorizationFailureResponseTests(WebApplicationFactory<CustomAuthorizationFailureResponse.Startup> fixture)
    {
        Client = fixture.CreateClient();
    }
 
    [Fact]
    public async Task SampleGetWithCustomPolicyWithCustomForbiddenMessage_Returns403WithCustomMessage()
    {
        var response = await Client.GetAsync("api/Sample/customPolicyWithCustomForbiddenMessage");
        var content = await response.Content.ReadAsStringAsync();
 
        Assert.Equal(HttpStatusCode.Forbidden, response.StatusCode);
        Assert.Equal(CustomAuthorizationFailureResponse.Startup.CustomForbiddenMessage, content);
    }
 
    [Fact]
    public async Task SampleGetWithCustomPolicy_Returns404WithCustomMessage()
    {
        var response = await Client.GetAsync("api/Sample/customPolicy");
        var content = await response.Content.ReadAsStringAsync();
 
        Assert.Equal(HttpStatusCode.NotFound, response.StatusCode);
        Assert.Equal(CustomAuthorizationFailureResponse.Startup.CustomForbiddenMessage, content);
    }
}