import sys
from pathlib import Path

# Add scripts directory to path to import tg_bridge
sys.path.insert(0, str(Path(__file__).resolve().parent))

from fastapi.testclient import TestClient
import uvicorn

# We need to temporarily mock environment variable to import tg_bridge without error
import os
os.environ["TELEGRAM_BOT_TOKEN"] = "123456:mock_token"
os.environ["TELEGRAM_ALLOWED_USERS"] = "12345"

from tg_bridge import app

client = TestClient(app)

def test_cors():
    print("Testing CORS headers...")
    
    # 1. Test allowed origin
    allowed_origin = "https://proimport-shop.ru"
    response = client.options("/api/settings", headers={
        "Origin": allowed_origin,
        "Access-Control-Request-Method": "GET",
        "Access-Control-Request-Headers": "Authorization"
    })
    print(f"Allowed origin status: {response.status_code}")
    print(f"Allowed origin headers: {dict(response.headers)}")
    
    # 2. Test disallowed origin
    disallowed_origin = "https://evil.com"
    response_evil = client.options("/api/settings", headers={
        "Origin": disallowed_origin,
        "Access-Control-Request-Method": "GET",
        "Access-Control-Request-Headers": "Authorization"
    })
    print(f"Disallowed origin status: {response_evil.status_code}")
    print(f"Disallowed origin headers: {dict(response_evil.headers)}")
    
    allowed_header = response.headers.get("access-control-allow-origin")
    disallowed_header = response_evil.headers.get("access-control-allow-origin")
    
    print(f"Access-Control-Allow-Origin for allowed: {allowed_header}")
    print(f"Access-Control-Allow-Origin for disallowed: {disallowed_header}")
    
    # Check if we are in RED or GREEN state
    if disallowed_header == "https://evil.com" or disallowed_header == "*":
        print("RED State: evil.com is ALLOWED or all (*) are allowed.")
        sys.exit(1)
    else:
        print("GREEN State: evil.com is BLOCKED successfully!")
        sys.exit(0)

if __name__ == "__main__":
    test_cors()