package httpd

import (
	"net/http"
	"net/http/httptest"
	"strings"
	"testing"
)

// A path that only misses because of a trailing slash redirects to the
// path without it, query intact; one that misses either way is 404, and
// a POST is never redirected (#233).
func TestTrailingSlashRedirects(t *testing.T) {
	h := plainServer().Handler()
	for from, to := range map[string]string{
		"/cmc/":                   "/cmc",
		"/cmc/ccleberg/":          "/cmc/ccleberg",
		"/cmc/-/snippets/":        "/cmc/-/snippets",
		"/krz/gitbay/mrs/12/":     "/krz/gitbay/mrs/12",
		"/krz/gitbay/issues/?q=x": "/krz/gitbay/issues?q=x",
	} {
		w := get(t, h, from, nil)
		if w.Code != http.StatusMovedPermanently || w.Header().Get("Location") != to {
			t.Errorf("%s: %d %q, want 301 %q", from, w.Code, w.Header().Get("Location"), to)
		}
	}
	for _, p := range []string{"/", "/krz/gitbay/nothing/"} {
		if w := get(t, h, p, nil); p != "/" && w.Code != 404 {
			t.Errorf("%s: status %d, want 404", p, w.Code)
		}
	}
	// A Location must not leave the site: the mux cleans a leading //
	// before the fallback runs, and a backslash is escaped (#153).
	for _, p := range []string{"//evil.example/", "/\\evil.example/"} {
		w := get(t, h, p, nil)
		if loc := w.Header().Get("Location"); strings.HasPrefix(loc, "//") || strings.Contains(loc, "\\") {
			t.Errorf("%s: Location %q leaves the site", p, loc)
		}
	}
	r := httptest.NewRequest("POST", "/cmc/", nil)
	r.Host = "forge.test"
	w := httptest.NewRecorder()
	h.ServeHTTP(w, r)
	if w.Code != 404 {
		t.Errorf("POST /cmc/: status %d, want 404", w.Code)
	}
}