<?php

declare(strict_types=1);

namespace Monitor\Api\Tests\Auth;

use Monitor\Api\Auth\AdminAuthenticator;
use Monitor\Api\Http\Request;
use PHPUnit\Framework\TestCase;

final class AdminAuthenticatorTest extends TestCase
{
    public function testAuthenticateAcceptsCorrectKey(): void
    {
        $auth = new AdminAuthenticator('secret');

        self::assertTrue($auth->authenticate(Request::create('POST', '/x', headers: ['X-Admin-Key' => 'secret'])));
    }

    public function testAuthenticateRejectsWrongKey(): void
    {
        $auth = new AdminAuthenticator('secret');

        self::assertFalse($auth->authenticate(Request::create('POST', '/x', headers: ['X-Admin-Key' => 'wrong'])));
    }

    public function testAuthenticateRejectsWhenNoAdminKeyConfigured(): void
    {
        $auth = new AdminAuthenticator(null);

        self::assertFalse($auth->authenticate(Request::create('POST', '/x', headers: ['X-Admin-Key' => 'anything'])));
    }

    public function testAuthenticateRejectsMissingHeader(): void
    {
        $auth = new AdminAuthenticator('secret');

        self::assertFalse($auth->authenticate(Request::create('POST', '/x')));
    }
}