-- This file is part of the Wire Server implementation.
--
-- Copyright (C) 2025 Wire Swiss GmbH <opensource@wire.com>
--
-- This program is free software: you can redistribute it and/or modify it under
-- the terms of the GNU Affero General Public License as published by the Free
-- Software Foundation, either version 3 of the License, or (at your option) any
-- later version.
--
-- This program is distributed in the hope that it will be useful, but WITHOUT
-- ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or FITNESS
-- FOR A PARTICULAR PURPOSE. See the GNU Affero General Public License for more
-- details.
--
-- You should have received a copy of the GNU Affero General Public License along
-- with this program. If not, see <https://www.gnu.org/licenses/>.

module Test.FeatureFlags.AssetAuditLog where

import qualified API.Galley as Public
import qualified API.GalleyInternal as Internal
import SetupHelpers
import Test.FeatureFlags.Util
import Testlib.Prelude

testAssetAuditLog :: (HasCallStack) => TaggedBool "isSet" -> App ()
testAssetAuditLog :: HasCallStack => TaggedBool "isSet" -> App ()
testAssetAuditLog (TaggedBool Bool
isSet) = do
  let setting :: Value
setting = [Pair] -> Value
object [String
"status" String -> String -> Pair
forall a. ToJSON a => String -> a -> Pair
.= String
"enabled"]
      defSetting :: Value
defSetting = [Pair] -> Value
object [String
"status" String -> String -> Pair
forall a. ToJSON a => String -> a -> Pair
.= String
"disabled"]

  let galleyConf :: ServiceOverrides
galleyConf =
        if Bool
isSet
          then ServiceOverrides
forall a. Default a => a
def {galleyCfg = setField "settings.featureFlags.assetAuditLog" $ setting}
          else ServiceOverrides
forall a. Default a => a
def {galleyCfg = removeField "settings.featureFlags.assetAuditLog"}

  ServiceOverrides -> (HasCallStack => String -> App ()) -> App ()
forall a.
HasCallStack =>
ServiceOverrides -> (HasCallStack => String -> App a) -> App a
withModifiedBackend ServiceOverrides
galleyConf ((HasCallStack => String -> App ()) -> App ())
-> (HasCallStack => String -> App ()) -> App ()
forall a b. (a -> b) -> a -> b
$ \String
domain -> do
    (admin, tid, _) <- String -> Int -> App (Value, String, [Value])
forall domain.
(HasCallStack, MakesValue domain) =>
domain -> Int -> App (Value, String, [Value])
createTeam String
domain Int
0
    expected <-
      if isSet
        then setting & setField "lockStatus" "locked" & setField "ttl" "unlimited"
        else defSetting & setField "lockStatus" "locked" & setField "ttl" "unlimited"

    checkFeature "assetAuditLog" admin tid expected

    -- feature is immutable (no PUT/PATCH available)
    Public.setTeamFeatureConfig admin tid "assetAuditLog" (object ["status" .= "enabled"]) `bindResponse` \Response
resp ->
      Response
resp.status Int -> Int -> App ()
forall a. (MakesValue a, HasCallStack) => a -> Int -> App ()
`shouldMatchInt` Int
404

    req <- baseRequest admin Galley Unversioned $ joinHttpPath ["i", "teams", tid, "features", "assetAuditLog", "unlocked"]
    bindResponse (submit "PUT" $ req) $ \Response
resp ->
      Response
resp.status Int -> Int -> App ()
forall a. (MakesValue a, HasCallStack) => a -> Int -> App ()
`shouldMatchInt` Int
404

    Internal.setTeamFeatureStatus admin tid "assetAuditLog" "enabled" `bindResponse` \Response
resp ->
      Response
resp.status Int -> Int -> App ()
forall a. (MakesValue a, HasCallStack) => a -> Int -> App ()
`shouldMatchInt` Int
404

    -- check with personal user
    personalUser <- randomUser domain def
    bindResponse (Public.getFeatureConfigs personalUser) $ \Response
resp -> do
      Response
resp.status Int -> Int -> App ()
forall a. (MakesValue a, HasCallStack) => a -> Int -> App ()
`shouldMatchInt` Int
200
      Response
resp.json App Value -> String -> App Value
forall a. (HasCallStack, MakesValue a) => a -> String -> App Value
%. String
"assetAuditLog" App Value -> Value -> App ()
forall a b.
(MakesValue a, MakesValue b, HasCallStack) =>
a -> b -> App ()
`shouldMatch` Value
expected