use strict;
use warnings;

use Test::More;

use lib 't/lib';
use Test::WWW::Mechanize::Catalyst 'TestApp';

my $mech = Test::WWW::Mechanize::Catalyst->new;

$mech->get_ok('http://localhost/token/form');

my ($form) = $mech->forms;

ok( $form, 'Found form' );

ok( $form->find_input('basic_form'), 'found input field' );

ok( my $token = $form->find_input('_token'), 'found token field' );

$token = $token->value;

like( $token, qr/^[a-z0-9]+$/, 'token value looks like a token' );

ok( my $res = $mech->submit_form( fields => { 'basic_form' => 1, '_token' => "123" } ), 'submit with different token' );

unlike( $res->as_string, qr/VALID/, 'form is not valid' );

$mech->get_ok('http://localhost/token/form');

ok( $res = $mech->submit_form( fields => { '_token' => $token } ), 'submit with token only' );

unlike( $res->as_string, qr/VALID/, 'basic_form is required' );

$mech->get_ok('http://localhost/token/form');

ok( $res = $mech->submit_form( fields => { 'basic_form' => 1, '_token' => $token } ), 'submit with valid token' );

like( $res->as_string, qr/VALID/, 'form is valid' );

$mech->get_ok( 'http://localhost/token/count_token', 'get token count' );

is( $mech->content, 4, "4 tokens" );

$mech->get_ok( 'http://localhost/tokenexpire/form', 'get token with negative expiration time' );

($form) = $mech->forms;

ok( $form, 'Found form' );

ok( $form->find_input('basic_form'), 'found input field' );

ok( $token = $form->find_input('token'), 'found token field' );

for ( 4 .. 21 ) {
    $mech->get_ok('http://localhost/token/count_token');
    is( $mech->content, $_ > 20 ? 20 : $_ );
    $mech->get_ok( 'http://localhost/token/form', 'get form #' . $_ );
}

($form) = $mech->forms;
ok( $token = $form->find_input('_token'), 'found token field' );

ok( $res = $mech->submit_form( fields => { 'basic_form' => 1, '_token' => $token->value } ),
    'submit with valid token' );

is( $mech->content, 'VALID', 'form is valid' );

done_testing;