#!/bin/bash
# Run REAL integration tests against live gateway
# These tests call actual services and validate real operations
# Not routing checks - actual API operations

set -e

GATEWAY_URL=${GATEWAY_URL:-http://localhost:8080}
AUTHENTIK_URL=${AUTHENTIK_URL:-https://authentik.riotpiao.com}
AUTHENTIK_CLIENT_ID=${AUTHENTIK_CLIENT_ID:-}
AUTHENTIK_CLIENT_SECRET=${AUTHENTIK_CLIENT_SECRET:-}
TEST_TIMEOUT=${TEST_TIMEOUT:-30}

echo "━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━"
echo "Real Integration Tests"
echo "━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━"
echo "Gateway:     $GATEWAY_URL"
echo "Authentik:   $AUTHENTIK_URL"
echo "Timeout:     ${TEST_TIMEOUT}s"
echo ""

if [ -z "$AUTHENTIK_CLIENT_ID" ]; then
  echo "⚠️  No AUTHENTIK_CLIENT_ID set"
  echo "Tests will skip JWT authentication"
  echo ""
  echo "To enable auth tests, set:"
  echo "  export AUTHENTIK_CLIENT_ID=<id>"
  echo "  export AUTHENTIK_CLIENT_SECRET=<secret>"
fi

echo "━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━"
echo ""

export GATEWAY_URL
export AUTHENTIK_URL
export AUTHENTIK_CLIENT_ID
export AUTHENTIK_CLIENT_SECRET
export TEST_TIMEOUT

go test -tags integration -v ./internal/serviceadapter -run TestRealIntegration