package auth

import (
	"encoding/json"
	"net/http"
	"net/http/httptest"
	"testing"

	"github.com/stretchr/testify/require"
)

func TestProtectedResourceHandler(t *testing.T) {
	t.Parallel()

	h := ProtectedResourceHandler(
		"https://brain-mcp.d-ma.be",
		"https://auth.d-ma.be",
	)

	rec := httptest.NewRecorder()
	h.ServeHTTP(rec, httptest.NewRequest(http.MethodGet, "/.well-known/oauth-protected-resource", nil))

	require.Equal(t, http.StatusOK, rec.Code)
	require.Equal(t, "application/json", rec.Header().Get("Content-Type"))

	var got struct {
		Resource             string   `json:"resource"`
		AuthorizationServers []string `json:"authorization_servers"`
	}
	require.NoError(t, json.Unmarshal(rec.Body.Bytes(), &got))
	require.Equal(t, "https://brain-mcp.d-ma.be", got.Resource)
	require.Equal(t, []string{"https://auth.d-ma.be"}, got.AuthorizationServers)
}