package rtc

import (
	"testing"
	"time"
)

func TestLocalTokenIsDeterministicBoundAndExpiring(t *testing.T) {
	issuer, err := NewLocalTokenIssuer([]byte("01234567890123456789012345678901"))
	if err != nil {
		t.Fatal(err)
	}
	expiresAt := time.Unix(2_000_000_000, 0)
	first, _ := issuer.Issue("room-1", "device-user-1", expiresAt)
	second, _ := issuer.Issue("room-1", "device-user-1", expiresAt)
	if first != second {
		t.Fatal("same claims must regenerate the same token for idempotent replay")
	}
	claims, err := issuer.Verify(first, expiresAt.Add(-time.Second))
	if err != nil || claims.RoomID != "room-1" || claims.UserID != "device-user-1" {
		t.Fatalf("claims = %#v, err = %v", claims, err)
	}
	if _, err := issuer.Verify(first, expiresAt); err == nil {
		t.Fatal("expired token was accepted")
	}
	if _, err := issuer.Verify(first+"x", expiresAt.Add(-time.Second)); err == nil {
		t.Fatal("tampered token was accepted")
	}
}