"""Integration tests for auth endpoints."""

import pytest
import pytest_asyncio


@pytest.mark.asyncio
@pytest.mark.integration
async def test_register_creates_member(client, db_session):
    resp = await client.post(
        "/api/v1/auth/register",
        json={"email": "newuser@test.com", "password": "pass123!", "display_name": "New User"},
    )
    assert resp.status_code == 201, resp.text
    data = resp.json()
    assert data["email"] == "newuser@test.com"
    assert data["display_name"] == "New User"
    assert "password_hash" not in data
    assert "id" in data


@pytest.mark.asyncio
@pytest.mark.integration
async def test_register_duplicate_email_returns_409(client, db_session):
    await client.post(
        "/api/v1/auth/register",
        json={"email": "dup@test.com", "password": "pass123!", "display_name": "User"},
    )
    resp = await client.post(
        "/api/v1/auth/register",
        json={"email": "dup@test.com", "password": "pass456!", "display_name": "User2"},
    )
    assert resp.status_code == 409


@pytest.mark.asyncio
@pytest.mark.integration
async def test_login_returns_jwt(client, db_session):
    await client.post(
        "/api/v1/auth/register",
        json={"email": "login@test.com", "password": "pass123!", "display_name": "Login User"},
    )
    resp = await client.post(
        "/api/v1/auth/login",
        json={"email": "login@test.com", "password": "pass123!"},
    )
    assert resp.status_code == 200, resp.text
    data = resp.json()
    assert "access_token" in data
    assert data["token_type"] == "bearer"


@pytest.mark.asyncio
@pytest.mark.integration
async def test_login_wrong_password_returns_401(client, db_session):
    await client.post(
        "/api/v1/auth/register",
        json={"email": "wrongpw@test.com", "password": "correct!", "display_name": "User"},
    )
    resp = await client.post(
        "/api/v1/auth/login",
        json={"email": "wrongpw@test.com", "password": "wrong!"},
    )
    assert resp.status_code == 401


@pytest.mark.asyncio
@pytest.mark.integration
async def test_protected_endpoint_without_token_returns_401(client):
    import uuid

    resp = await client.get(f"/api/v1/bands/{uuid.uuid4()}")
    assert resp.status_code == 401