use strict;
use warnings FATAL => 'all';

use Apache::Test;
use Apache::TestRequest;
use Apache::TestUtil;

# Basic auth tests

plan tests => 12, (need_lwp &&
                   need_module('mod_auth_basic'));

my $url = '/basic/index.html';

my $response = GET $url;
ok $response->code == 401;

# bad pass
$response = GET $url, username => 'user1', password => 'foo';
ok t_cmp($response->code,
         401,
         "GET $url, username => 'user1', password => 'foo'");

# authenticated in the first provider
$response = GET $url, username => 'user1', password => 'basic1';
ok t_cmp($response->code,
         200,
         "GET $url, username => 'user1', password => 'basic1'");

# declined in the first provider
$response = GET $url, username => 'user2', password => 'basic2';
ok t_cmp($response->code,
         401,
         "GET $url, username => 'user2', password => 'basic2'");

# bad pass
$response = GET $url, username => 'user3', password => 'foo';
ok t_cmp($response->code,
         401,
         "GET $url, username => 'user3', password => 'foo'");

# authenticated in the second provider
$response = GET $url, username => 'user3', password => 'basic3';
ok t_cmp($response->code,
         200,
         "GET $url, username => 'user3', password => 'basic3'");

# declined in the second provider
$response = GET $url, username => 'user4', password => 'basic4';
ok t_cmp($response->code,
         401,
         "GET $url, username => 'user4', password => 'basic4'");

# bad pass
$response = GET $url, username => 'user5', password => 'foo';
skip(! need_module('mod_authn_file'),
     ok t_cmp($response->code,
              401,
              "GET $url, username => 'user5', password => 'foo'")
    );

# authenticated in the file provider
$response = GET $url, username => 'user5', password => 'basic5';
skip(! have_module('mod_authn_file'),
     ok t_cmp($response->code,
              200,
              "GET $url, username => 'user5', password => 'basic5'")
    );

# non-existent anywhere
$response = GET $url, username => 'user6', password => 'basic6';
ok t_cmp($response->code,
         401,
         "GET $url, username => 'user6', password => 'basic6'");