// Copyright 2026 Alibaba Group
// Licensed under the Apache License, Version 2.0 (the "License");
// you may not use this file except in compliance with the License.
// You may obtain a copy of the License at
//
//     http://www.apache.org/licenses/LICENSE-2.0
//
// Unless required by applicable law or agreed to in writing, software
// distributed under the License is distributed on an "AS IS" BASIS,
// WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
// See the License for the specific language governing permissions and
// limitations under the License.

//go:build windows

package keychain

import (
	"errors"
	"strings"
	"testing"

	"golang.org/x/sys/windows"
	"golang.org/x/sys/windows/registry"
)

func TestCrossPlatformCoverageRegistryPathForServiceHonorsTestNamespace(t *testing.T) {
	t.Setenv(TestNamespaceEnv, "")
	defaultPath := registryPathForService("service")
	if defaultPath != regRootPath+`\service` {
		t.Fatalf("default registry path = %q, want historical path %q", defaultPath, regRootPath+`\service`)
	}

	t.Setenv(TestNamespaceEnv, t.TempDir())
	firstPath := registryPathForService("service")

	t.Setenv(TestNamespaceEnv, t.TempDir())
	secondPath := registryPathForService("service")

	if firstPath == defaultPath || secondPath == defaultPath {
		t.Fatalf("isolated registry paths = %q, %q; want paths distinct from %q", firstPath, secondPath, defaultPath)
	}
	if firstPath == secondPath {
		t.Fatalf("isolated registry paths collide: %q", firstPath)
	}
	if !strings.HasPrefix(firstPath, defaultPath+`\test-`) {
		t.Fatalf("isolated registry path = %q, want prefix %q", firstPath, defaultPath+`\test-`)
	}
}

func TestDeleteRegistryValuePropagatesFailure(t *testing.T) {
	originalDelete := registryDeleteValue
	failure := errors.New("delete failed")
	registryDeleteValue = func(registry.Key, string) error { return failure }
	t.Cleanup(func() { registryDeleteValue = originalDelete })

	if err := deleteRegistryValue(0, "auth-token"); !errors.Is(err, failure) {
		t.Fatalf("deleteRegistryValue() error = %v, want %v", err, failure)
	}
}

func TestRegistryRemoveAuthTokenEntriesPropagatesOpenFailure(t *testing.T) {
	originalOpen := registryOpenDeleteKey
	failure := windows.ERROR_ACCESS_DENIED
	registryOpenDeleteKey = func(string, uint32) (registry.Key, error) {
		return 0, failure
	}
	t.Cleanup(func() { registryOpenDeleteKey = originalOpen })

	if err := registryRemoveAuthTokenEntries("service"); !errors.Is(err, failure) {
		t.Fatalf("registryRemoveAuthTokenEntries() error = %v, want %v", err, failure)
	}
}