# frozen_string_literal: true

require_relative "../spec_helper"

describe "Blocking an IP subnet" do
  before do
    Rack::Attack.blocklist_ip("1.2.3.4/31")
  end

  it "forbids request if IP is inside the subnet" do
    get "/", {}, "REMOTE_ADDR" => "1.2.3.4"

    assert_equal 403, last_response.status
  end

  it "forbids request for another IP in the subnet" do
    get "/", {}, "REMOTE_ADDR" => "1.2.3.5"

    assert_equal 403, last_response.status
  end

  it "succeeds if IP is outside the subnet" do
    get "/", {}, "REMOTE_ADDR" => "1.2.3.6"

    assert_equal 200, last_response.status
  end

  it "notifies when the request is blocked" do
    notified = false
    notification_type = nil

    ActiveSupport::Notifications.subscribe("blocklist.rack_attack") do |_name, _start, _finish, _id, payload|
      notified = true
      notification_type = payload[:request].env["rack.attack.match_type"]
    end

    get "/", {}, "REMOTE_ADDR" => "5.6.7.8"

    refute notified

    get "/", {}, "REMOTE_ADDR" => "1.2.3.4"

    assert notified
    assert_equal :blocklist, notification_type
  end
end