"""Example jwtauth."""

from collections.abc import Callable
from typing import Any

import pytest

from jwtauth.testing import (
    JwtAuthSecretsManager,
    SecretLookupInfo,
    JWT_USER_METADATA,
    CLAIM_ORCHARD_IDENTITY_ID
)
from jwtauth.utils import jwt_auth_from_environment


@pytest.fixture
def pdp_test_bearer_token(
    generate_bearer_token: Callable[..., str],
    jwtauth_secrets_manager: JwtAuthSecretsManager
) -> str:
    """Example that uses the jwtauth plugins."""
    return generate_bearer_token(
        get_user_creds_args=SecretLookupInfo(
            environment="qa",
            service_name="pdp-integration-test",
            secret_name="PDP_TEST_USER_CREDENTIALS",
        ),
        get_auth0_creds_args=SecretLookupInfo(
            environment="qa",
            service_name="pdp-integration-test",
            secret_name="PDP_TEST_APP_AUTH0_CREDENTIALS",
        ),
        secrets_manager=jwtauth_secrets_manager,
    )


def test_generate_bearer_token(pdp_test_bearer_token: Any) -> None:
    """Verify that the generated JWT has an `orchardIdentityId`."""

    auth = jwt_auth_from_environment(environment="qa")
    token_claims = auth.get_token(pdp_test_bearer_token)
    assert token_claims.get(JWT_USER_METADATA, {}).get(CLAIM_ORCHARD_IDENTITY_ID)