package audit

import (
	"encoding/json"
	"testing"
)

func TestSanitizeResponse(t *testing.T) {
	raw := []byte(`{
		"data": {
			"card": "6037997512345678",
			"iban": "IR820540102680020817909002"
		},
		"meta": {"isSuccess": true}
	}`)

	got := SanitizeResponse(raw, "603799******5678")
	if len(got) == 0 {
		t.Fatal("SanitizeResponse() returned an empty response")
	}

	var decoded map[string]any
	if err := json.Unmarshal(got, &decoded); err != nil {
		t.Fatalf("unmarshal sanitized response: %v", err)
	}

	data, ok := decoded["data"].(map[string]any)
	if !ok {
		t.Fatal("sanitized response does not contain data object")
	}

	if gotCard := data["card"]; gotCard != "603799******5678" {
		t.Errorf("sanitized card = %v, want masked card", gotCard)
	}

	if gotIBAN := data["iban"]; gotIBAN != "IR820540102680020817909002" {
		t.Errorf("sanitized iban = %v, want original iban", gotIBAN)
	}
}

func TestSanitizeResponseRejectsInvalidJSON(t *testing.T) {
	if got := SanitizeResponse([]byte(`not-json`), "603799******5678"); got != nil {
		t.Errorf("SanitizeResponse() = %q, want nil", got)
	}
}

func TestSanitizeResponseRedactsCardWhenMaskIsEmpty(t *testing.T) {
	got := SanitizeResponse(
		[]byte(`{"card":"6037997512345678"}`),
		"",
	)

	if string(got) != `{"card":"[redacted]"}` {
		t.Errorf("SanitizeResponse() = %s, want redacted card", got)
	}
}