package auth

import (
	"strings"
	"testing"
)

func TestGenerateSecret_Length(t *testing.T) {
	secret, err := generateSecret(8)
	if err != nil {
		t.Fatalf("generateSecret failed: %v", err)
	}
	// hex encoding doubles length
	if len(secret) != 16 {
		t.Fatalf("unexpected secret length: %d", len(secret))
	}
}

func TestGenerateAPIKey_Format(t *testing.T) {
	s := &Secrets{}
	key, err := s.generateAPIKey()
	if err != nil {
		t.Fatalf("generateAPIKey failed: %v", err)
	}
	if !strings.HasPrefix(key, "jk_r") {
		t.Fatalf("unexpected key prefix: %q", key)
	}
	if !strings.Contains(key, "_") {
		t.Fatalf("unexpected key format: %q", key)
	}
}