MeBox/internal/service/telegram_bot_user_test.go

package service

import (
	"encoding/json"
	"strings"
	"testing"

	"go.uber.org/zap"

	"github.com/ShukeBta/MediaStationGo/internal/model"
)

func TestTelegramUpdateActionableDispatchesCallbackQuery(t *testing.T) {
	if !telegramUpdateActionable(TelegramUpdate{CallbackQuery: &TelegramCallbackQuery{Data: "adult_toggle"}}) {
		t.Fatal("callback_query update must be dispatched, otherwise inline buttons break")
	}
	if !telegramUpdateActionable(TelegramUpdate{Message: &TelegramMessage{Text: "/help"}}) {
		t.Fatal("text command message must be dispatched")
	}
	if telegramUpdateActionable(TelegramUpdate{}) {
		t.Fatal("empty update must be skipped")
	}
	if telegramUpdateActionable(TelegramUpdate{Message: &TelegramMessage{}}) {
		t.Fatal("message without text must be skipped")
	}
}

func TestTelegramCallbackTogglesAdultVisibility(t *testing.T) {
	ctx := t.Context()
	repos, auth, _, _ := newAuthTestServices(t)
	user, _, err := auth.Register(ctx, "viewer", "secret-pass")
	if err != nil {
		t.Fatalf("register user: %v", err)
	}
	if err := repos.DB.Create(&model.TelegramBinding{
		TelegramUserID: 30001,
		TelegramName:   "@viewer",
		ChatID:         30001,
		UserID:         user.ID,
	}).Error; err != nil {
		t.Fatalf("create binding: %v", err)
	}
	if err := repos.DB.AutoMigrate(&model.NotifyChannel{}); err != nil {
		t.Fatalf("migrate notify_channels: %v", err)
	}
	// 配置一个绑定该 Telegram 用户的渠道（无 bot_token，避免测试触发网络请求）。
	cfg, _ := json.Marshal(map[string]string{"admin_user_ids": "30001"})
	if err := repos.DB.Create(&model.NotifyChannel{
		Name:    "Telegram",
		Type:    "telegram",
		Enabled: true,
		Config:  string(cfg),
	}).Error; err != nil {
		t.Fatalf("create channel: %v", err)
	}

	before, err := repos.User.FindByID(ctx, user.ID)
	if err != nil || before == nil {
		t.Fatalf("load user before toggle: %v", err)
	}

	bot := NewTelegramBotService(zap.NewNop(), repos, nil, auth)
	update, _ := json.Marshal(TelegramUpdate{
		UpdateID: 1,
		CallbackQuery: &TelegramCallbackQuery{
			ID:      "cb1",
			From:    TelegramUser{ID: 30001, Username: "viewer", FirstName: "Viewer"},
			Message: &TelegramMessage{MessageID: 5, Chat: TelegramChat{ID: 30001, Type: "private"}},
			Data:    "adult_toggle",
		},
	})
	// reply 因 bot_token 为空会返回错误，但成人目录状态应已在数据库中被切换。
	_ = bot.HandleWebhook(ctx, update)

	updated, err := repos.User.FindByID(ctx, user.ID)
	if err != nil || updated == nil {
		t.Fatalf("reload user: %v", err)
	}
	if updated.HideAdult == before.HideAdult {
		t.Fatalf("adult_toggle callback should have flipped HideAdult (was %v)", before.HideAdult)
	}
}

func TestTelegramRegisterRespectsAdminToggle(t *testing.T) {
	ctx := t.Context()
	repos, auth, _, _ := newAuthTestServices(t)
	if err := repos.DB.AutoMigrate(&model.Setting{}, &model.NotifyChannel{}); err != nil {
		t.Fatalf("migrate: %v", err)
	}
	// 预置一个管理员，确保通过 Bot 注册的用户是普通角色而非首个管理员。
	if _, _, err := auth.Register(ctx, "rootadmin", "admin-pass"); err != nil {
		t.Fatalf("seed admin: %v", err)
	}

	bot := NewTelegramBotService(zap.NewNop(), repos, nil, auth)
	// 把注册者放进 admin_user_ids，即可让 telegramUserCanBind 通过（私聊场景，
	// 无需走 getChatMember 网络校验）；注册流程本身不依赖角色。
	cfgJSON, _ := json.Marshal(map[string]string{"admin_user_ids": "999"})
	channel := &model.NotifyChannel{Name: "Telegram", Type: "telegram", Enabled: true, Config: string(cfgJSON)}

	msg := &TelegramMessage{From: TelegramUser{ID: 999, Username: "newbie", FirstName: "Newbie"}, Chat: TelegramChat{ID: 999, Type: "private"}}

	// 默认关闭：拒绝且不创建用户。
	if reply := bot.cmdRegister(ctx, channel, msg, []string{"newbie", "secret-pass"}); !strings.Contains(reply.Text, "未开放") {
		t.Fatalf("registration disabled by default, got %q", reply.Text)
	}
	if u, _ := repos.User.FindByUsername(ctx, "newbie"); u != nil {
		t.Fatal("no user should be created while registration disabled")
	}

	// 管理员开启后注册成功并自动绑定。
	if err := bot.setRegistrationEnabled(ctx, true); err != nil {
		t.Fatalf("enable registration: %v", err)
	}
	reply := bot.cmdRegister(ctx, channel, msg, []string{"newbie", "secret-pass"})
	if !strings.Contains(reply.Text, "注册并绑定成功") {
		t.Fatalf("expected success reply, got %q", reply.Text)
	}
	created, err := repos.User.FindByUsername(ctx, "newbie")
	if err != nil || created == nil {
		t.Fatalf("user should be created after enabling: %v", err)
	}
	if created.Role != "user" {
		t.Fatalf("bot-registered account should be a regular user, got role %q", created.Role)
	}
	if binding := bot.telegramBinding(ctx, 999); binding == nil || binding.UserID != created.ID {
		t.Fatalf("telegram should be bound to the newly registered user")
	}

	// 重复注册：已绑定 → 提示无需重复注册。
	if reply := bot.cmdRegister(ctx, channel, msg, []string{"another", "pass-2"}); !strings.Contains(reply.Text, "无需重复注册") {
		t.Fatalf("expected already-bound reply, got %q", reply.Text)
	}
}

func TestTelegramGroupHidesAdminPanelFromRegularUsers(t *testing.T) {
	ctx := t.Context()
	_, bot := newBotTestService(t)
	channel := &model.NotifyChannel{Name: "Telegram", Type: "telegram", Enabled: true, Config: `{"group_chat_id":"-100123","admin_user_ids":"9001"}`}
	msg := &TelegramMessage{
		From: TelegramUser{ID: 9002, Username: "viewer", FirstName: "Viewer"},
		Chat: TelegramChat{ID: -100123, Type: "supergroup"},
	}

	menu := bot.mainMenu(ctx, channel, msg)
	if strings.Contains(menu.Text, "管理员") || telegramReplyHasButtonPrefix(menu, "adm_") {
		t.Fatalf("regular group user must not see admin panel: text=%q buttons=%#v", menu.Text, menu.Buttons)
	}

	reply, err := bot.executeCommand(ctx, channel, msg, "/users")
	if err != nil {
		t.Fatal(err)
	}
	if reply.Text != "" || len(reply.Buttons) != 0 {
		t.Fatalf("regular group user admin command should be ignored, got %#v", reply)
	}

	reply, err = bot.executeCommand(ctx, channel, msg, "/start viewer secret-pass")
	if err != nil {
		t.Fatal(err)
	}
	if !strings.Contains(reply.Text, "请私聊 Bot") {
		t.Fatalf("group credential command should point to private chat, got %q", reply.Text)
	}
}

func TestTelegramGroupAdminMenuExposesButtonsOnlyToAdmins(t *testing.T) {
	ctx := t.Context()
	repos, bot := newBotTestService(t)
	admin := &model.User{Username: "root", PasswordHash: "x", Role: "admin", IsActive: true}
	if err := repos.User.Create(ctx, admin); err != nil {
		t.Fatal(err)
	}
	channel := &model.NotifyChannel{Name: "Telegram", Type: "telegram", Enabled: true, Config: `{"group_chat_id":"-100123","admin_user_ids":"9001"}`}
	msg := &TelegramMessage{
		From: TelegramUser{ID: 9001, Username: "admin", FirstName: "Admin"},
		Chat: TelegramChat{ID: -100123, Type: "group"},
	}

	menu := bot.mainMenu(ctx, channel, msg)
	if !telegramReplyHasButtonPrefix(menu, "adm_") {
		t.Fatalf("admin group menu should expose admin buttons, got %#v", menu.Buttons)
	}
	if !strings.Contains(menu.Text, "管理员入口") {
		t.Fatalf("admin group menu should label admin section, got %q", menu.Text)
	}

	reply, handled := bot.handleMenuCallback(ctx, channel, msg, "adm_users")
	if !handled {
		t.Fatal("admin callback should be handled")
	}
	if !strings.Contains(reply.Text, "用户管理") {
		t.Fatalf("group admin callback should render admin panel, got %#v", reply)
	}

	normal := &TelegramMessage{
		From: TelegramUser{ID: 9002, Username: "viewer", FirstName: "Viewer"},
		Chat: TelegramChat{ID: -100123, Type: "group"},
	}
	normalMenu := bot.mainMenu(ctx, channel, normal)
	if telegramReplyHasButtonPrefix(normalMenu, "adm_") || strings.Contains(normalMenu.Text, "管理员入口") {
		t.Fatalf("normal group user must not see admin controls: %#v", normalMenu)
	}
	normalReply, handled := bot.handleMenuCallback(ctx, channel, normal, "adm_users")
	if !handled || normalReply.Text != "" || len(normalReply.Buttons) != 0 {
		t.Fatalf("normal group user must not use admin callbacks: %#v handled=%v", normalReply, handled)
	}

	reply, err := bot.executeCommand(ctx, channel, msg, "/users")
	if err != nil {
		t.Fatal(err)
	}
	if !strings.Contains(reply.Text, "用户管理") {
		t.Fatalf("bound group admin text command should run, got %q", reply.Text)
	}
	if len(reply.Buttons) == 0 {
		t.Fatalf("group admin text command should expose admin action buttons: %#v", reply.Buttons)
	}
}

func TestTelegramPollingChannelHintWinsForPrivateMessages(t *testing.T) {
	ctx := t.Context()
	repos, bot := newBotTestService(t)
	msg := &TelegramMessage{
		From: TelegramUser{ID: 9101, Username: "viewer", FirstName: "Viewer"},
		Chat: TelegramChat{ID: 9101, Type: "private"},
	}
	bad := model.NotifyChannel{Name: "BadToken", Type: "telegram", Enabled: true, Config: `{"bot_token":"bad","admin_user_ids":"9101"}`}
	good := model.NotifyChannel{Name: "GoodToken", Type: "telegram", Enabled: true, Config: `{"bot_token":"good","admin_user_ids":"9101"}`}
	if err := repos.DB.Create(&bad).Error; err != nil {
		t.Fatal(err)
	}
	if err := repos.DB.Create(&good).Error; err != nil {
		t.Fatal(err)
	}

	if first := bot.findChannelForMessage(ctx, msg); first == nil || first.ID != bad.ID {
		t.Fatalf("setup expected normal private lookup to pick first channel, got %#v", first)
	}
	if hinted := bot.channelForMessage(ctx, msg, &good); hinted == nil || hinted.ID != good.ID {
		t.Fatalf("polling channel hint should route replies through the token that received the update, got %#v", hinted)
	}
}

func TestTelegramMgoCompatibleUserCommands(t *testing.T) {
	ctx := t.Context()
	repos, bot := newBotTestService(t)
	user := &model.User{Username: "viewer", PasswordHash: "hash", Role: "user", IsActive: true}
	if err := repos.User.Create(ctx, user); err != nil {
		t.Fatal(err)
	}
	if err := repos.DB.Create(&model.TelegramBinding{TelegramUserID: 9102, ChatID: 9102, UserID: user.ID}).Error; err != nil {
		t.Fatal(err)
	}
	channel := &model.NotifyChannel{Name: "Telegram", Type: "telegram", Enabled: true, Config: `{"admin_user_ids":"9102"}`}
	msg := &TelegramMessage{
		From: TelegramUser{ID: 9102, Username: "viewer", FirstName: "Viewer"},
		Chat: TelegramChat{ID: 9102, Type: "private"},
	}

	info, err := bot.executeCommand(ctx, channel, msg, "/myinfo")
	if err != nil {
		t.Fatal(err)
	}
	if !strings.Contains(info.Text, "我的账号") {
		t.Fatalf("/myinfo should show account info, got %q", info.Text)
	}
	count, err := bot.executeCommand(ctx, channel, msg, "/count")
	if err != nil {
		t.Fatal(err)
	}
	if !strings.Contains(count.Text, "媒体库统计") {
		t.Fatalf("/count should show library counts, got %q", count.Text)
	}
}

func telegramReplyHasButtonPrefix(reply telegramCommandReply, prefix string) bool {
	for _, row := range reply.Buttons {
		for _, button := range row {
			if strings.HasPrefix(button.Data, prefix) {
				return true
			}
		}
	}
	return false
}