# ========= Copyright 2026 @ Strukto.AI All Rights Reserved. =========
# Licensed under the Apache License, Version 2.0 (the "License");
# you may not use this file except in compliance with the License.
# You may obtain a copy of the License at
#
#     http://www.apache.org/licenses/LICENSE-2.0
#
# Unless required by applicable law or agreed to in writing, software
# distributed under the License is distributed on an "AS IS" BASIS,
# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
# See the License for the specific language governing permissions and
# limitations under the License.
# ========= Copyright 2026 @ Strukto.AI All Rights Reserved. =========

import pytest


@pytest.fixture(autouse=True)
def _allow_asgi_test_host(monkeypatch, request):
    # Existing server tests drive the app through httpx.ASGITransport
    # with base_url="http://test", which sends Host=test. We extend
    # the allowlist to include that synthetic host rather than disabling
    # enforcement entirely, so the middleware still rejects anything
    # else (e.g. a future regression test that drops in an unexpected
    # Host header). Tests that exercise rejection paths opt out with
    # the @pytest.mark.no_host_override marker.
    if "no_host_override" in request.keywords:
        return
    monkeypatch.setenv("MIRAGE_ALLOWED_HOSTS", "test,127.0.0.1,localhost,::1")


@pytest.fixture(autouse=True)
def _disable_auth_for_legacy_tests(monkeypatch, request, tmp_path_factory):
    # Existing server tests don't send Authorization headers. With the
    # auth middleware now installed by build_app, we keep them passing
    # by forcing the daemon into mode=local with no token configured
    # (env unset + MIRAGE_HOME pointed at an empty temp dir, so the
    # default token file does not exist), which the middleware treats
    # as "no auth" and lets every request through with a startup
    # warning. Redirecting MIRAGE_HOME also keeps these tests from
    # touching the real ~/.mirage tree. Tests that exercise auth paths
    # opt out with the @pytest.mark.no_auth_override marker.
    if "no_auth_override" in request.keywords:
        return
    monkeypatch.setenv("MIRAGE_AUTH_MODE", "local")
    monkeypatch.delenv("MIRAGE_AUTH_TOKEN", raising=False)
    monkeypatch.setenv("MIRAGE_HOME",
                       str(tmp_path_factory.mktemp("mirage_home")))