package oci_test

import (
	"fmt"
	"net/http/httptest"
	"net/url"
	"strings"
	"testing"

	"github.com/docker/attest/internal/test"
	"github.com/docker/attest/pkg/attest"
	"github.com/docker/attest/pkg/attestation"
	"github.com/docker/attest/pkg/mirror"
	"github.com/docker/attest/pkg/oci"
	"github.com/docker/attest/pkg/policy"
	"github.com/google/go-containerregistry/pkg/registry"
	"github.com/stretchr/testify/assert"
	"github.com/stretchr/testify/require"
)

func TestRegistry(t *testing.T) {
	ctx, signer := test.Setup(t)
	server := httptest.NewServer(registry.New(registry.WithReferrersSupport(false)))
	defer server.Close()
	u, err := url.Parse(server.URL)
	require.NoError(t, err)

	opts := &attestation.SigningOptions{
		Replace:     true,
		SkipSubject: true,
	}
	attIdx, err := oci.SubjectIndexFromPath(oci.UnsignedTestImage)
	require.NoError(t, err)
	signedIndex, err := attest.Sign(ctx, attIdx.Index, signer, opts)
	require.NoError(t, err)

	indexName := fmt.Sprintf("%s/repo:root", u.Host)
	require.NoError(t, err)
	err = mirror.PushIndexToRegistry(signedIndex, indexName)
	require.NoError(t, err)

	spec, err := oci.ParseImageSpec(indexName)
	require.NoError(t, err)

	resolver, err := policy.CreateImageDetailsResolver(spec)
	require.NoError(t, err)
	digest, err := resolver.ImageDigest(ctx)
	require.NoError(t, err)
	assert.True(t, strings.Contains(digest, "sha256:"))
}