import { describe, expect, it } from "vitest";

import { classifyDdos, isSuspiciousPath } from "@/lib/ddos";

describe("classifyDdos", () => {
	it.each([
		["/", "pages"],
		["/community", "pages"],
		["/login", "auth"],
		["/login/", "auth"],
		["/register", "auth"],
		["/admin", "auth"],
		["/admin/home", "auth"],
		["/api/auth/callback/credentials", "auth"],
		["/api/articles/hello", "api"],
		["/api/radio/stream", "api"],
	])(`classifies %s as %s`, (pathname, expected) => {
		expect(classifyDdos(pathname)).toBe(expected);
	});
});

describe("isSuspiciousPath", () => {
	it.each([
		["/wp-admin/index.php", true],
		["/wp-login.php", true],
		["/.env", true],
		["/.git/config", true],
		["/phpmyadmin/", true],
		["/server-status", true],
		["/index.php", true],
		["/shell.aspx", true],
	])(`flags scanner path %s`, (pathname, expected) => {
		expect(isSuspiciousPath(pathname)).toBe(expected);
	});

	it("does not flag real app routes", () => {
		expect(isSuspiciousPath("/")).toBe(false);
		expect(isSuspiciousPath("/community")).toBe(false);
		expect(isSuspiciousPath("/api/health")).toBe(false);
		expect(isSuspiciousPath("/login")).toBe(false);
		expect(isSuspiciousPath("/news/article/hello-world")).toBe(false);
	});
});