// Copyright (c) 2019-2026 Alexander Medvednikov. All rights reserved.
// Use of this source code is governed by an MIT license
// that can be found in the LICENSE file.
module s3

fn test_parse_s3_url_full() {
	bucket, key := parse_s3_url('s3://my-bucket/path/to/key.txt') or { panic(err) }
	assert bucket == 'my-bucket'
	assert key == 'path/to/key.txt'
}

fn test_parse_s3_url_only_key() {
	bucket, key := parse_s3_url('s3://standalone-key') or { panic(err) }
	assert bucket == ''
	assert key == 'standalone-key'
}

fn test_parse_s3_url_rejects_other_schemes() {
	if _, _ := parse_s3_url('https://example.com/x') {
		assert false, 'should have errored'
	}
	if _, _ := parse_s3_url('http://x') {
		assert false, 'should have errored'
	}
	if _, _ := parse_s3_url('') {
		assert false, 'should have errored'
	}
}

fn test_parse_s3_url_rejects_empty_key() {
	if _, _ := parse_s3_url('s3://my-bucket/') {
		assert false, 'should have errored'
	}
	if _, _ := parse_s3_url('s3://') {
		assert false, 'should have errored'
	}
}

fn test_redact_url_strips_query() {
	assert redact_url('https://x.y/path?X-Amz-Signature=abc') == 'https://x.y/path?<redacted>'
	assert redact_url('https://x.y/path') == 'https://x.y/path'
}

fn test_fetch_rejects_non_s3_scheme() {
	if _ := fetch('https://example.com/x') {
		assert false
	}
	if _ := fetch('http://example.com/x') {
		assert false
	}
	if _ := fetch('file:///etc/passwd') {
		assert false
	}
}

fn test_fetch_rejects_post_method() {
	// POST is not part of the s3.fetch contract: object writes use PUT,
	// and POST in S3 is reserved for multipart-control endpoints which
	// take an XML body that fetch does not generate. Reject explicitly
	// rather than silently rewriting to PUT.
	if _ := fetch('s3://my-bucket/key.txt', method: .post, body: 'x'.bytes()) {
		assert false, 'POST should be rejected'
	}
}

fn test_build_object_path_preserves_leading_and_trailing_slashes() {
	creds := Credentials{
		access_key_id:     'K'
		secret_access_key: 'S'
		bucket:            'b'
	}
	// S3 keys are byte-exact: `folder/`, `/x` and `a//b` must round-trip
	// untouched (only percent-encoded). Stripping slashes would address a
	// different object than requested.
	assert build_object_path(creds, '', 'folder/')! == '/b/folder/'
	assert build_object_path(creds, '', '/x')! == '/b//x'
	assert build_object_path(creds, '', 'a//b')! == '/b/a//b'
	assert build_object_path(creds, '', 'plain.txt')! == '/b/plain.txt'
}