# frozen_string_literal: true

require 'spec_helper'

RSpec.describe 'User password', feature_category: :system_access do
  include EmailHelpers

  describe 'send password reset' do
    context 'when recaptcha is enabled' do
      before do
        stub_application_setting(recaptcha_enabled: true)
        allow(Gitlab::Recaptcha).to receive(:load_configurations!)
        visit new_user_password_path
      end

      it 'renders recaptcha' do
        expect(page).to have_css('.g-recaptcha')
      end
    end

    context 'when recaptcha is not enabled' do
      before do
        stub_application_setting(recaptcha_enabled: false)
        visit new_user_password_path
      end

      it 'does not render recaptcha' do
        expect(page).not_to have_css('.g-recaptcha')
      end
    end

    context 'when user has multiple emails' do
      let_it_be(:user) { create(:user, email: 'primary@example.com') }
      let_it_be(:verified_email) { create(:email, :confirmed, user: user, email: 'second@example.com') }
      let_it_be(:unverified_email) { create(:email, user: user, email: 'unverified@example.com') }

      let(:ff_enabled) { true }

      before do
        stub_feature_flags(password_reset_any_verified_email: ff_enabled)

        perform_enqueued_jobs do
          visit new_user_password_path
          fill_in 'user_email', with: email
          click_button 'Reset password'
        end
      end

      context 'when user enters the primary email' do
        let(:email) { user.email }

        it 'send the email to the correct email address' do
          expect(ActionMailer::Base.deliveries.first.to).to include(email)
        end
      end

      context 'when user enters a secondary verified email' do
        let(:email) { verified_email.email }

        context 'when password_reset_any_verified_email FF is enabled' do
          it 'send the email to the correct email address' do
            expect(ActionMailer::Base.deliveries.first.to).to include(email)
          end
        end

        context 'when password_reset_any_verified_email FF is not enabled' do
          let(:ff_enabled) { false }

          it 'does not send an email' do
            expect(ActionMailer::Base.deliveries.count).to eq(0)
          end
        end
      end

      context 'when user enters an unverified email' do
        let(:email) { unverified_email.email }

        it 'does not send an email' do
          expect(ActionMailer::Base.deliveries.count).to eq(0)
        end
      end
    end
  end
end