<?php

use Symfony\Bundle\FrameworkBundle\Test\WebTestCase;

final class AuthTest extends WebTestCase
{
    public function testLogoutTokenInvalidation(): void
    {
        $client = self::createClient();

        // Load database fixtures

        $client->jsonRequest(
            'POST',
            '/api/internal/login',
            ['username' => '[email protected]', 'password' => 'password'],
        );

        $this->assertResponseIsSuccessful('Could not authenticate to the internal API.');

        $response = $client->getResponse();

        if ($response->getContent() === false) {
            $this->fail('The API did not send a proper response.');
        }

        $data = json_decode($response->getContent(), true, flags: \JSON_THROW_ON_ERROR);

        if (!isset($data['refresh_token'])) {
            $this->fail('The refresh token was not included in the authentication response.');
        }

        $client->jsonRequest(
            'POST',
            '/api/internal/logout',
            ['refresh_token' => $data['refresh_token']],
            ['HTTP_Authorization' => sprintf('Bearer %s', $data['token'])],
        );

        $this->assertResponseIsSuccessful();

        // Check token validity
    }
}