# Part of Odoo. See LICENSE file for full copyright and licensing details.
from unittest.mock import patch

from lxml import html

import odoo.tests

from odoo.addons.base.tests.common import HttpCaseWithUserDemo
from odoo.addons.website.models.website import Website


@odoo.tests.common.tagged('post_install', '-at_install')
class TestWebsiteSession(HttpCaseWithUserDemo):

    def test_01_run_test(self):
        self.start_tour('/', 'test_json_auth')

    def test_02_inactive_session_lang(self):
        self.authenticate(None, None, session_extra={'context': {'lang': 'fr_FR'}})
        self.env.ref('base.lang_fr').active = False

        # ensure that _get_current_website_id will be able to match a website
        current_website_id = self.env["website"]._get_current_website_id(odoo.tests.HOST)
        self.env["website"].browse(current_website_id).domain = odoo.tests.HOST

        res = self.url_open('/test_website_sitemap')  # any auth='public' route would do
        res.raise_for_status()

    def test_03_totp_login_with_inactive_session_lang(self):
        self.authenticate(None, None, session_extra={'context': {'lang': 'fr_FR'}})
        self.env.ref('base.lang_fr').active = False

        # ensure that _get_current_website_id will be able to match a website
        current_website_id = self.env["website"]._get_current_website_id(odoo.tests.HOST)
        self.env["website"].browse(current_website_id).domain = odoo.tests.HOST

        with patch.object(self.env.registry["res.users"], "_mfa_url", return_value="/web/login/totp"):
            res = self.url_open('/web/login', allow_redirects=False, data={
                'login': 'demo',
                'password': 'demo',
                'csrf_token': self.csrf_token(),
            })
            res.raise_for_status()
        self.assertEqual(res.status_code, 303)
        self.assertTrue(res.next.path_url.startswith("/web/login/totp"))

    def test_04_ensure_website_cached_data_can_be_called(self):
        self.authenticate('admin', 'admin', session_extra={'context': {'lang': 'fr_MC'}})

        # Disable cache in order to make sure that values would be fetched at any time
        get_cached_values_without_cache = Website._cached_data.__cache__.method
        with patch.object(Website, '_cached_data',
                          side_effect=get_cached_values_without_cache, autospec=True):

            # ensure that permissions on logout are OK
            res = self.url_open(
                '/web/session/logout',
                method='POST',
                data={
                    "csrf_token": self.csrf_token(),
                },
            )
            self.assertEqual(res.status_code, 200)

    def test_branding_cache(self):
        def has_branding(html_text):
            el = html.fromstring(html_text)
            return el.xpath('//*[@data-oe-model="test.model"]')

        self.user_demo.group_ids += self.env.ref('website.group_website_restricted_editor')
        self.user_demo.group_ids += self.env.ref('test_website.group_test_website_admin')
        self.user_demo.group_ids -= self.env.ref('website.group_website_designer')

        # Create session for demo user.
        public_session = self.authenticate(None, None)
        demo_session = self.authenticate('demo', 'demo')
        record = self.env['test.model'].search([], limit=1)
        result = self.url_open(f'/test_website/model_item_sudo/{record.id}')
        self.assertTrue(has_branding(result.text), "Should have branding for user demo")

        # Public user.
        self.opener.cookies.set("session_id", public_session.sid, domain=odoo.tests.common.HOST)
        result = self.url_open(f'/test_website/model_item_sudo/{record.id}')
        self.assertFalse(has_branding(result.text), "Should have no branding for public user")

        # Back to demo user.
        self.opener.cookies.set("session_id", demo_session.sid, domain=odoo.tests.common.HOST)
        result = self.url_open(f'/test_website/model_item_sudo/{record.id}')
        self.assertTrue(has_branding(result.text), "Should have branding for user demo")