docuseal/spec/lib/external_config_spec.rb

# frozen_string_literal: true

require 'rails_helper'
require 'external_config'

RSpec.describe ExternalConfig do
  describe '.smtp_configured?' do
    it 'returns true when DOCUSEAL_CONFIG_SMTP_ADDRESS is set' do
      with_env('DOCUSEAL_CONFIG_SMTP_ADDRESS' => 'smtp.example.com') do
        expect(described_class.smtp_configured?).to be(true)
      end
    end

    it 'returns false when the env var is absent' do
      with_env('DOCUSEAL_CONFIG_SMTP_ADDRESS' => nil) do
        expect(described_class.smtp_configured?).to be(false)
      end
    end
  end

  describe '.smtp_settings' do
    it 'returns an empty hash when not configured' do
      with_env('DOCUSEAL_CONFIG_SMTP_ADDRESS' => nil) do
        expect(described_class.smtp_settings).to eq({})
      end
    end

    it 'returns a hash built from env vars' do
      envs = {
        'DOCUSEAL_CONFIG_SMTP_ADDRESS' => 'smtp.example.com',
        'DOCUSEAL_CONFIG_SMTP_PORT' => '2525',
        'DOCUSEAL_CONFIG_SMTP_USERNAME' => 'user',
        'DOCUSEAL_CONFIG_SMTP_PASSWORD' => 'secret',
        'DOCUSEAL_CONFIG_SMTP_DOMAIN' => 'example.com',
        'DOCUSEAL_CONFIG_SMTP_FROM' => 'noreply@example.com'
      }
      with_env(envs) do
        settings = described_class.smtp_settings
        expect(settings[:address]).to eq('smtp.example.com')
        expect(settings[:port]).to eq(2525)
        expect(settings[:user_name]).to eq('user')
        expect(settings[:password]).to eq('secret')
        expect(settings[:domain]).to eq('example.com')
        expect(settings[:from]).to eq('noreply@example.com')
        expect(settings[:authentication]).to eq(:plain)
      end
    end

    it 'honours DOCUSEAL_CONFIG_SMTP_AUTHENTICATION when password is set' do
      envs = {
        'DOCUSEAL_CONFIG_SMTP_ADDRESS' => 'smtp.example.com',
        'DOCUSEAL_CONFIG_SMTP_PASSWORD' => 'secret',
        'DOCUSEAL_CONFIG_SMTP_AUTHENTICATION' => 'login'
      }
      with_env(envs) do
        expect(described_class.smtp_settings[:authentication]).to eq(:login)
      end
    end

    it 'sets ssl flag when SECURITY=ssl' do
      envs = {
        'DOCUSEAL_CONFIG_SMTP_ADDRESS' => 'smtp.example.com',
        'DOCUSEAL_CONFIG_SMTP_SECURITY' => 'ssl'
      }
      with_env(envs) do
        settings = described_class.smtp_settings
        expect(settings[:ssl]).to be(true)
        expect(settings[:tls]).to be_nil.or be(false)
      end
    end

    it 'sets tls flag when SECURITY=tls' do
      envs = {
        'DOCUSEAL_CONFIG_SMTP_ADDRESS' => 'smtp.example.com',
        'DOCUSEAL_CONFIG_SMTP_SECURITY' => 'tls'
      }
      with_env(envs) do
        settings = described_class.smtp_settings
        expect(settings[:tls]).to be(true)
        expect(settings[:ssl]).to be_nil.or be(false)
      end
    end

    it 'enables starttls_auto and skips cert verification when SECURITY=noverify' do
      envs = {
        'DOCUSEAL_CONFIG_SMTP_ADDRESS' => 'smtp.example.com',
        'DOCUSEAL_CONFIG_SMTP_SECURITY' => 'noverify'
      }
      with_env(envs) do
        settings = described_class.smtp_settings
        expect(settings[:openssl_verify_mode]).to eq(OpenSSL::SSL::VERIFY_NONE)
        expect(settings[:enable_starttls_auto]).to be(true)
        expect(settings[:enable_starttls]).to be_nil
      end
    end

    it 'defaults to enable_starttls=true with no SECURITY' do
      with_env('DOCUSEAL_CONFIG_SMTP_ADDRESS' => 'smtp.example.com') do
        settings = described_class.smtp_settings
        expect(settings[:enable_starttls]).to be(true)
        expect(settings[:enable_starttls_auto]).to be_nil
      end
    end

    it 'infers tls when port is 465 and SECURITY is blank' do
      envs = {
        'DOCUSEAL_CONFIG_SMTP_ADDRESS' => 'smtp.example.com',
        'DOCUSEAL_CONFIG_SMTP_PORT' => '465'
      }
      with_env(envs) do
        expect(described_class.smtp_settings[:tls]).to be(true)
      end
    end
  end

  describe '.smtp_display_settings' do
    it 'returns empty hash when not configured' do
      with_env('DOCUSEAL_CONFIG_SMTP_ADDRESS' => nil) do
        expect(described_class.smtp_display_settings).to eq({})
      end
    end

    it 'maps env vars to form-shaped string keys' do
      envs = {
        'DOCUSEAL_CONFIG_SMTP_ADDRESS' => 'smtp.example.com',
        'DOCUSEAL_CONFIG_SMTP_PORT' => '2525',
        'DOCUSEAL_CONFIG_SMTP_USERNAME' => 'user',
        'DOCUSEAL_CONFIG_SMTP_PASSWORD' => 'secret',
        'DOCUSEAL_CONFIG_SMTP_DOMAIN' => 'example.com',
        'DOCUSEAL_CONFIG_SMTP_FROM' => 'noreply@example.com',
        'DOCUSEAL_CONFIG_SMTP_SECURITY' => 'noverify',
        'DOCUSEAL_CONFIG_SMTP_AUTHENTICATION' => 'login'
      }
      with_env(envs) do
        settings = described_class.smtp_display_settings
        expect(settings['host']).to eq('smtp.example.com')
        expect(settings['port']).to eq('2525')
        expect(settings['username']).to eq('user')
        expect(settings['password']).to eq('secret')
        expect(settings['domain']).to eq('example.com')
        expect(settings['from_email']).to eq('noreply@example.com')
        expect(settings['security']).to eq('noverify')
        expect(settings['authentication']).to eq('login')
      end
    end

    it 'defaults security to "none" when blank' do
      with_env('DOCUSEAL_CONFIG_SMTP_ADDRESS' => 'smtp.example.com') do
        expect(described_class.smtp_display_settings['security']).to eq('none')
      end
    end
  end

  describe '.storage_configured?' do
    it 'returns true when S3_ATTACHMENTS_BUCKET is set' do
      with_env('S3_ATTACHMENTS_BUCKET' => 'my-bucket') do
        expect(described_class.storage_configured?).to be(true)
      end
    end

    it 'returns true when GCS_BUCKET is set' do
      with_env('S3_ATTACHMENTS_BUCKET' => nil, 'GCS_BUCKET' => 'my-gcs-bucket') do
        expect(described_class.storage_configured?).to be(true)
      end
    end

    it 'returns true when AZURE_CONTAINER is set' do
      with_env('S3_ATTACHMENTS_BUCKET' => nil, 'GCS_BUCKET' => nil, 'AZURE_CONTAINER' => 'my-container') do
        expect(described_class.storage_configured?).to be(true)
      end
    end

    it 'returns false when no storage env var is set' do
      with_env('S3_ATTACHMENTS_BUCKET' => nil, 'GCS_BUCKET' => nil, 'AZURE_CONTAINER' => nil) do
        expect(described_class.storage_configured?).to be(false)
      end
    end
  end

  describe '.storage_service' do
    it 'returns aws_s3 when S3_ATTACHMENTS_BUCKET is set' do
      with_env('S3_ATTACHMENTS_BUCKET' => 'my-bucket') do
        expect(described_class.storage_service).to eq('aws_s3')
      end
    end

    it 'returns google when GCS_BUCKET is set' do
      with_env('S3_ATTACHMENTS_BUCKET' => nil, 'GCS_BUCKET' => 'my-gcs-bucket') do
        expect(described_class.storage_service).to eq('google')
      end
    end

    it 'returns azure when AZURE_CONTAINER is set' do
      with_env('S3_ATTACHMENTS_BUCKET' => nil, 'GCS_BUCKET' => nil, 'AZURE_CONTAINER' => 'my-container') do
        expect(described_class.storage_service).to eq('azure')
      end
    end
  end

  describe '.storage_settings' do
    it 'returns empty hash when not configured' do
      with_env('S3_ATTACHMENTS_BUCKET' => nil, 'GCS_BUCKET' => nil, 'AZURE_CONTAINER' => nil) do
        expect(described_class.storage_settings).to eq({})
      end
    end

    it 'returns AWS S3 config hash from env vars' do
      envs = {
        'S3_ATTACHMENTS_BUCKET' => 'my-bucket',
        'AWS_ACCESS_KEY_ID' => 'AKIAEXAMPLE',
        'AWS_SECRET_ACCESS_KEY' => 'secret123',
        'AWS_REGION' => 'ca-central-1',
        'S3_ENDPOINT' => nil
      }
      with_env(envs) do
        settings = described_class.storage_settings
        expect(settings['service']).to eq('aws_s3')
        expect(settings['configs']['bucket']).to eq('my-bucket')
        expect(settings['configs']['access_key_id']).to eq('AKIAEXAMPLE')
        expect(settings['configs']['region']).to eq('ca-central-1')
      end
    end
  end
end