# frozen_string_literal: true

RSpec.describe OAuth2::Strategy::Implicit do
  subject { client.implicit }

  let(:client) { OAuth2::Client.new("abc", "def", site: "http://api.example.com") }

  describe "#authorize_url" do
    it "includes the client_id" do
      expect(subject.authorize_url).to include("client_id=abc")
    end

    it "includes the type" do
      expect(subject.authorize_url).to include("response_type=token")
    end

    it "does not include the client_secret" do
      expect(subject.authorize_url).not_to include("client_secret=def")
    end

    it "raises an error if the client_secret is passed in" do
      expect { subject.authorize_url(client_secret: "def") }.to raise_error(ArgumentError)
    end

    it "raises an error if the client_secret is passed in with string keys" do
      expect { subject.authorize_url("client_secret" => "def") }.to raise_error(ArgumentError)
    end

    it "includes passed in options" do
      cb = "http://myserver.local/oauth/callback"
      expect(subject.authorize_url(redirect_uri: cb)).to include("redirect_uri=#{CGI.escape(cb)}")
    end
  end

  describe "#get_token" do
    it "raises NotImplementedError" do
      expect { subject.get_token }.to raise_error(NotImplementedError)
    end
  end
end
