<?php

namespace Tests\Feature;

use App\Models\Merchant;
use App\Models\Plan;
use App\Models\PlatformOrder;
use App\Models\SiteSubscription;
use Illuminate\Foundation\Testing\RefreshDatabase;
use Tests\TestCase;

class AdminSiteSubscriptionShowPlatformOrdersLinksShouldUseSelfBackWhenOuterBackUnsafeTest extends TestCase
{
    use RefreshDatabase;

    protected function loginAsPlatformAdmin(): void
    {
        $this->seed();

        $this->post('/admin/login', [
            'email' => 'platform.admin@demo.local',
            'password' => 'Platform@123456',
        ])->assertRedirect('/admin');
    }

    public function test_subscription_show_page_platform_order_governance_links_should_still_use_subscription_show_self_back_when_outer_back_is_unsafe(): void
    {
        $this->loginAsPlatformAdmin();

        $merchant = Merchant::query()->firstOrFail();
        $plan = Plan::query()->create([
            'code' => 'sub_show_platform_orders_unsafe_back_test',
            'name' => '订阅详情平台订单治理 unsafe back 测试套餐',
            'billing_cycle' => 'monthly',
            'price' => 10,
            'list_price' => 10,
            'status' => 'active',
            'sort' => 10,
            'published_at' => now(),
        ]);

        $sub = SiteSubscription::query()->create([
            'merchant_id' => $merchant->id,
            'plan_id' => $plan->id,
            'status' => 'activated',
            'source' => 'manual',
            'subscription_no' => 'SUB_SHOW_PLATFORM_ORDERS_UNSAFE_BACK_0001',
            'plan_name' => $plan->name,
            'billing_cycle' => $plan->billing_cycle,
            'period_months' => 1,
            'amount' => 10,
            'starts_at' => now()->subDay(),
            'ends_at' => now()->addMonth(),
            'activated_at' => now()->subDay(),
        ]);

        PlatformOrder::query()->create([
            'merchant_id' => $merchant->id,
            'plan_id' => $plan->id,
            'site_subscription_id' => $sub->id,
            'order_no' => 'PO_SUB_SHOW_PLATFORM_ORDERS_UNSAFE_BACK_0001',
            'order_type' => 'renewal',
            'status' => 'activated',
            'payment_status' => 'paid',
            'plan_name' => $plan->name,
            'billing_cycle' => $plan->billing_cycle,
            'period_months' => 1,
            'quantity' => 1,
            'payable_amount' => 10,
            'paid_amount' => 10,
            'placed_at' => now(),
            'paid_at' => now(),
            'activated_at' => now(),
            'meta' => [],
        ]);

        $unsafeBack = '/admin/site-subscriptions?status=activated&back=/admin/platform-orders';
        $res = $this->get('/admin/site-subscriptions/' . $sub->id . '?back=' . urlencode($unsafeBack));
        $res->assertOk();

        $expectedBack = urlencode('/admin/site-subscriptions/' . $sub->id);

        $res->assertSee('/admin/platform-orders?site_subscription_id=' . $sub->id . '&back=' . $expectedBack, false);
        $res->assertSee('/admin/platform-orders?site_subscription_id=' . $sub->id . '&syncable_only=1&sync_status=unsynced&back=' . $expectedBack, false);
        $res->assertSee('/admin/platform-orders?merchant_id=' . $merchant->id . '&plan_id=' . $plan->id . '&renewal_missing_subscription=1&back=' . $expectedBack, false);
        $res->assertSee('/admin/platform-orders?merchant_id=' . $merchant->id . '&plan_id=' . $plan->id . '&payment_status=paid&receipt_status=none&back=' . $expectedBack, false);

        $res->assertDontSee(urlencode($unsafeBack), false);
        $res->assertDontSee('back%3D', false);
    }
}