from odoo import fields, Command
from odoo.exceptions import AccessError
from odoo.tests.common import TransactionCase

class TestTokenAccess(TransactionCase):

    @classmethod
    def setUpClass(cls):
        super().setUpClass()

        cls.users = []
        for u in ('user1', 'user2'):
            user = cls.env['res.users'].create({
                'name': f'{u}',
                'login': f'{u}',
                'email': f'{u}@odoo.com',
            })
            user.res_users_settings_id.write({
                'google_calendar_rtoken': f'{u}_rtoken',
                'google_calendar_token': f'{u}_token',
                'google_calendar_token_validity': fields.Datetime.today(),
                'google_calendar_sync_token': f'{u}_sync_token',
            })
            cls.users += [user]

        cls.system_user = cls.env['res.users'].create({
            'name': 'system_user',
            'login': 'system_user',
            'email': 'system_user@odoo.com',
            'groups_id': [Command.link(cls.env.ref('base.group_system').id)],
        })

    def test_normal_user_should_be_able_to_reset_his_own_token(self):
        user = self.users[0]
        old_validity = user.res_users_settings_id.google_calendar_token_validity

        user.with_user(user).res_users_settings_id._set_google_auth_tokens('my_new_token', 'my_new_rtoken', 3600)

        self.assertEqual(user.res_users_settings_id.google_calendar_rtoken, 'my_new_rtoken')
        self.assertEqual(user.res_users_settings_id.google_calendar_token, 'my_new_token')
        self.assertNotEqual(
            user.res_users_settings_id.google_calendar_token_validity,
            old_validity
        )

    def test_normal_user_should_not_be_able_to_reset_other_user_tokens(self):
        user1, user2 = self.users
        # Skip test: the access error will not be raised anymore since the access rules were deleted.
        # with self.assertRaises(AccessError):
        #     user2.with_user(user1).res_users_settings_id._set_auth_tokens(False, False, 0)

    def test_system_user_should_be_able_to_reset_any_tokens(self):
        user = self.users[0]
        old_validity = user.res_users_settings_id.google_calendar_token_validity

        user.with_user(self.system_user).res_users_settings_id._set_google_auth_tokens(
            'my_new_token', 'my_new_rtoken', 3600
        )

        self.assertEqual(user.res_users_settings_id.google_calendar_rtoken, 'my_new_rtoken')
        self.assertEqual(user.res_users_settings_id.google_calendar_token, 'my_new_token')
        self.assertNotEqual(
            user.res_users_settings_id.google_calendar_token_validity,
            old_validity
        )