handler_test.go

package inngestgo

import (
	"bytes"
	"context"
	"encoding/json"
	"fmt"
	"io"
	"net/http"
	"net/http/httptest"
	"net/url"
	"sync/atomic"
	"testing"
	"time"

	"github.com/gowebpki/jcs"
	"github.com/inngest/inngest/pkg/enums"
	"github.com/inngest/inngest/pkg/execution/state"
	"github.com/inngest/inngest/pkg/inngest"
	"github.com/inngest/inngest/pkg/sdk"
	"github.com/inngest/inngest/pkg/syscode"
	"github.com/inngest/inngestgo/internal/sdkrequest"
	"github.com/inngest/inngestgo/step"
	"github.com/stretchr/testify/require"
)

func setEnvVars(t *testing.T) {
	t.Setenv("INNGEST_EVENT_KEY", "abc123")
	t.Setenv("INNGEST_SIGNING_KEY", string(testKey))
	t.Setenv("INNGEST_SIGNING_KEY_FALLBACK", string(testKeyFallback))
}

type EventA struct {
	Name string `json:"name"`
	Data struct {
		Foo string `json:"foo"`
		Bar string `json:"bar"`
	} `json:"data"`
}

type EventB struct{}
type EventC struct{}

func TestRegister(t *testing.T) {
	r := require.New(t)
	setEnvVars(t)
	c, err := NewClient(ClientOpts{AppID: "inspection"})
	r.NoError(err)

	_, err = CreateFunction(
		c,
		FunctionOpts{
			ID: "my-func-name",
		},
		EventTrigger("test/event.a", nil),
		func(ctx context.Context, input Input[EventA]) (any, error) {
			return nil, nil
		},
	)
	r.NoError(err)

	_, err = CreateFunction(
		c,
		FunctionOpts{ID: "another-func"},
		EventTrigger("test/event.b", nil),
		func(ctx context.Context, input Input[EventB]) (any, error) {
			return nil, nil
		},
	)
	r.NoError(err)

	_, err = CreateFunction(
		c,
		FunctionOpts{ID: "batch-func", BatchEvents: &inngest.EventBatchConfig{MaxSize: 20, Timeout: "10s"}},
		EventTrigger("test/batch.a", nil),
		func(ctx context.Context, input Input[EventC]) (any, error) {
			return nil, nil
		},
	)
	r.NoError(err)
}

// TestInvoke asserts that invoking a function with both the correct and incorrect type
// works as expected.
func TestInvoke(t *testing.T) {
	t.Run("With a struct value event type", func(t *testing.T) {
		ctx := context.Background()
		r := require.New(t)
		c, err := NewClient(ClientOpts{AppID: "inspection"})
		r.NoError(err)

		input := EventA{
			Name: "test/event.a",
			Data: struct {
				Foo string `json:"foo"`
				Bar string `json:"bar"`
			}{
				Foo: "potato",
				Bar: "squished",
			},
		}
		resp := map[string]any{
			"test": true,
		}
		a, err := CreateFunction(
			c,
			FunctionOpts{ID: "my-func-name"},
			EventTrigger("test/event.a", nil),
			func(ctx context.Context, event Input[EventA]) (any, error) {
				require.EqualValues(t, event.Event, input)
				return resp, nil
			},
		)
		r.NoError(err)

		t.Run("it invokes the function with correct types", func(t *testing.T) {
			actual, op, err := invoke(ctx, a, testKey, createRequest(t, input), nil)
			require.NoError(t, err)
			require.Nil(t, op)
			require.Equal(t, resp, actual)
		})
	})

	t.Run("With a struct value event type batch", func(t *testing.T) {
		ctx := context.Background()
		r := require.New(t)
		c, err := NewClient(ClientOpts{AppID: "inspection"})
		r.NoError(err)
		input := EventA{
			Name: "test/event.a",
			Data: struct {
				Foo string `json:"foo"`
				Bar string `json:"bar"`
			}{
				Foo: "potato",
				Bar: "squished",
			},
		}
		resp := map[string]any{
			"test": true,
		}
		a, err := CreateFunction(
			c,
			FunctionOpts{ID: "my-func-name", BatchEvents: &inngest.EventBatchConfig{MaxSize: 5, Timeout: "10s"}},
			EventTrigger("test/event.a", nil),
			func(ctx context.Context, event Input[EventA]) (any, error) {
				require.EqualValues(t, event.Event, input)
				require.EqualValues(t, len(event.Events), 5)
				return resp, nil
			},
		)
		r.NoError(err)

		t.Run("it invokes the function with correct types", func(t *testing.T) {
			actual, op, err := invoke(ctx, a, testKey, createBatchRequest(t, input, 5), nil)
			require.NoError(t, err)
			require.Nil(t, op)
			require.Equal(t, resp, actual)
		})
	})

	t.Run("With a struct ptr event type", func(t *testing.T) {
		r := require.New(t)
		c, err := NewClient(ClientOpts{AppID: "inspection"})
		r.NoError(err)
		input := EventA{
			Name: "test/event.a",
			Data: struct {
				Foo string `json:"foo"`
				Bar string `json:"bar"`
			}{
				Foo: "potato",
				Bar: "squished",
			},
		}
		resp := map[string]any{
			"test": true,
		}
		a, err := CreateFunction(
			c,
			FunctionOpts{ID: "my-func-name"},
			EventTrigger("test/event.a", nil),
			func(ctx context.Context, event Input[*EventA]) (any, error) {
				require.NotNil(t, event.Event)
				require.EqualValues(t, *event.Event, input)
				return resp, nil
			},
		)
		r.NoError(err)

		ctx := context.Background()

		t.Run("it invokes the function with correct types", func(t *testing.T) {
			actual, op, err := invoke(ctx, a, testKey, createRequest(t, input), nil)
			require.NoError(t, err)
			require.Nil(t, op)
			require.Equal(t, resp, actual)
		})
	})

	t.Run("With Input[any] as a function type", func(t *testing.T) {
		r := require.New(t)
		c, err := NewClient(ClientOpts{AppID: "inspection"})
		r.NoError(err)
		resp := map[string]any{"test": true}
		input := EventA{
			Name: "test/event.a",
			Data: struct {
				Foo string `json:"foo"`
				Bar string `json:"bar"`
			}{
				Foo: "potato",
				Bar: "squished",
			},
		}
		a, err := CreateFunction(
			c,
			FunctionOpts{ID: "my-func-name"},
			EventTrigger("test/event.a", nil),
			func(ctx context.Context, event Input[any]) (any, error) {
				require.NotNil(t, event.Event)
				val, ok := event.Event.(map[string]any)
				require.True(t, ok)
				require.EqualValues(t, input.Name, val["name"])
				val, ok = val["data"].(map[string]any)
				require.True(t, ok)
				require.EqualValues(t, input.Data.Foo, val["foo"])
				require.EqualValues(t, input.Data.Bar, val["bar"])
				return resp, nil
			},
		)
		r.NoError(err)

		ctx := context.Background()
		t.Run("it invokes the function with correct types", func(t *testing.T) {
			actual, op, err := invoke(ctx, a, testKey, createRequest(t, input), nil)
			require.NoError(t, err)
			require.Nil(t, op)
			require.Equal(t, resp, actual)
		})
	})

	t.Run("With Input[map[string]any] as a function type", func(t *testing.T) {
		r := require.New(t)
		c, err := NewClient(ClientOpts{AppID: "inspection"})
		r.NoError(err)
		resp := map[string]any{"test": true}
		input := EventA{
			Name: "test/event.a",
			Data: struct {
				Foo string `json:"foo"`
				Bar string `json:"bar"`
			}{
				Foo: "potato",
				Bar: "squished",
			},
		}
		a, err := CreateFunction(
			c,
			FunctionOpts{ID: "my-func-name"},
			EventTrigger("test/event.a", nil),
			func(ctx context.Context, event Input[map[string]any]) (any, error) {
				require.NotNil(t, event.Event)
				val := event.Event
				require.EqualValues(t, input.Name, val["name"])
				val, ok := val["data"].(map[string]any)
				require.True(t, ok)
				require.EqualValues(t, input.Data.Foo, val["foo"])
				require.EqualValues(t, input.Data.Bar, val["bar"])
				return resp, nil
			},
		)
		r.NoError(err)

		ctx := context.Background()
		t.Run("it invokes the function with correct types", func(t *testing.T) {
			actual, op, err := invoke(ctx, a, testKey, createRequest(t, input), nil)
			require.NoError(t, err)
			require.Nil(t, op)
			require.Equal(t, resp, actual)
		})
	})

	// This is silly and no one should ever do this.  The tests are here
	// so that we ensure the code panics on creation.
	t.Run("With an io.Reader as a function type", func(t *testing.T) {
		// Creating a function with an interface is impossible.  This can
		// never go into production, and you should always be testing this
		// before deploying to Inngest.

		r := require.New(t)
		c, err := NewClient(ClientOpts{AppID: "inspection"})
		r.NoError(err)
		_, err = CreateFunction(
			c,
			FunctionOpts{ID: "my-func-name"},
			EventTrigger("test/event.a", nil),
			func(ctx context.Context, event Input[io.Reader]) (any, error) {
				return nil, nil
			},
		)
		r.Error(err)
	})

	t.Run("captures panic stack", func(t *testing.T) {
		ctx := context.Background()
		r := require.New(t)
		c, err := NewClient(ClientOpts{AppID: "inspection"})
		r.NoError(err)

		a, err := CreateFunction(
			c,
			FunctionOpts{ID: "my-fn"},
			EventTrigger("my-event", nil),
			func(ctx context.Context, event Input[any]) (any, error) {
				panic("oh no!")
			},
		)
		r.NoError(err)

		actual, op, err := invoke(
			ctx, a, testKey,
			createRequest(t, EventA{Name: "my-event"}),
			nil,
		)
		r.Nil(actual)
		r.Nil(op)

		// Contains the panic message
		r.Contains(err.Error(), "oh no!")
		r.Contains(err.Error(), "stack:")

		// Hacky checks to ensure the stack trace is present
		r.Contains(err.Error(), "handler.go")
		r.Contains(err.Error(), "handler_test.go")
	})
}

func TestServe(t *testing.T) {
	setEnvVars(t)
	r := require.New(t)
	c, err := NewClient(ClientOpts{AppID: "my-app"})
	r.NoError(err)

	event := EventA{
		Name: "test/event.a",
		Data: struct {
			Foo string `json:"foo"`
			Bar string `json:"bar"`
		}{
			Foo: "potato",
			Bar: "squished",
		},
	}

	result := map[string]any{"result": true}

	var called int32
	a, err := CreateFunction(
		c,
		FunctionOpts{ID: "my-servable-function"},
		EventTrigger("test/event.a", nil),
		func(ctx context.Context, input Input[EventA]) (any, error) {
			atomic.AddInt32(&called, 1)
			require.EqualValues(t, event, input.Event)
			return result, nil
		},
	)
	r.NoError(err)
	server := httptest.NewServer(c.Serve())
	byt, err := json.Marshal(map[string]any{
		"event": event,
		"ctx": map[string]any{
			"fn_id":  "fn-id",
			"run_id": "run-id",
		},
	})
	require.NoError(t, err)

	t.Run("It calls the correct function with the correct data", func(t *testing.T) {
		queryParams := url.Values{}

		queryParams.Add("fnId", a.FullyQualifiedID())

		url := fmt.Sprintf("%s?%s", server.URL, queryParams.Encode())
		resp := handlerPost(t, url, createRequest(t, event))

		defer resp.Body.Close()
		require.Equal(t, int32(1), atomic.LoadInt32(&called), "http function was not called")

		// Assert that the output is correct.
		byt, _ = io.ReadAll(resp.Body)
		actual := map[string]any{}
		err := json.Unmarshal(byt, &actual)
		require.NoError(t, err)
		require.Equal(t, result, actual)
	})

	t.Run("It doesn't call the function with an incorrect function ID", func(t *testing.T) {
		queryParams := url.Values{}
		queryParams.Add("fnId", "lol")

		url := fmt.Sprintf("%s?%s", server.URL, queryParams.Encode())
		resp := handlerPost(t, url, createRequest(t, event))

		require.NoError(t, err)
		defer resp.Body.Close()
		require.Equal(t, 410, resp.StatusCode)
	})
}

func TestSteps(t *testing.T) {
	setEnvVars(t)
	r := require.New(t)
	c, err := NewClient(ClientOpts{AppID: "my-app"})
	r.NoError(err)

	event := EventA{
		Name: "test/event.a",
		Data: struct {
			Foo string `json:"foo"`
			Bar string `json:"bar"`
		}{
			Foo: "potato",
			Bar: "squished",
		},
	}

	var fnCt, aCt, bCt int32

	a, err := CreateFunction(
		c,
		FunctionOpts{ID: "step-function"},
		EventTrigger("test/event.a", nil),
		func(ctx context.Context, input Input[EventA]) (any, error) {
			atomic.AddInt32(&fnCt, 1)
			stepA, _ := step.Run(ctx, "First step", func(ctx context.Context) (map[string]any, error) {
				atomic.AddInt32(&aCt, 1)
				return map[string]any{
					"test": true,
					"foo":  input.Event.Data.Foo,
				}, nil
			})
			stepB, _ := step.Run(ctx, "Second step", func(ctx context.Context) (map[string]any, error) {
				atomic.AddInt32(&bCt, 1)
				return map[string]any{
					"b": "lol",
					"a": stepA,
				}, nil
			})
			return stepB, nil
		},
	)
	r.NoError(err)

	server := httptest.NewServer(c.Serve())

	queryParams := url.Values{}
	queryParams.Add("fnId", a.FullyQualifiedID())
	url := fmt.Sprintf("%s?%s", server.URL, queryParams.Encode())

	t.Run("It invokes the first step and returns an opcode", func(t *testing.T) {
		resp := handlerPost(t, url, createRequest(t, event))
		defer resp.Body.Close()

		// This should return an opcode indicating that the first step ran as expected.
		byt, _ := io.ReadAll(resp.Body)

		var (
			opcode state.GeneratorOpcode
			stepA  map[string]any
		)

		t.Run("The first step.Run opcodes are correct", func(t *testing.T) {
			opcodes := []state.GeneratorOpcode{}
			err := json.Unmarshal(byt, &opcodes)
			require.NoError(t, err, string(byt))

			require.Len(t, opcodes, 1)
			opcode = opcodes[0]

			require.Equal(t, enums.OpcodeStepRun, opcode.Op, "tools.Run didn't return the correct opcode")
			require.Equal(t, "First step", opcode.Name, "tools.Run didn't return the correct opcode")

			require.EqualValues(t, 1, fnCt)
			require.EqualValues(t, 1, aCt)
			require.EqualValues(t, 0, bCt)

			// Assert the opcode data is as expected
			stepA = map[string]any{}
			err = json.Unmarshal(opcode.Data, &stepA)
			require.NoError(t, err)
			require.EqualValues(t, map[string]any{
				"test": true, "foo": "potato",
			}, stepA)
		})

		t.Run("It invokes the second step if the first step's data is passed in", func(t *testing.T) {
			req := createRequest(t, event)
			req.Steps = map[string]json.RawMessage{
				opcode.ID: opcode.Data,
			}
			resp := handlerPost(t, url, req)
			defer resp.Body.Close()

			// The response should be a new opcode.
			opcodes := []state.GeneratorOpcode{}
			err := json.NewDecoder(resp.Body).Decode(&opcodes)
			require.NoError(t, err)

			require.Len(t, opcodes, 1)
			opcode = opcodes[0]

			require.Equal(t, enums.OpcodeStepRun, opcode.Op, "tools.Run didn't return the correct opcode")
			require.Equal(t, "Second step", opcode.Name, "tools.Run didn't return the correct opcode")

			require.EqualValues(t, 2, fnCt)
			require.EqualValues(t, 1, aCt)
			require.EqualValues(t, 1, bCt)

			// Assert the opcode data is as expected
			stepB := map[string]any{}
			err = json.Unmarshal(opcode.Data, &stepB)
			require.NoError(t, err)
			require.EqualValues(t, map[string]any{
				// data is wrapped in an object to conform to the spec.
				"b": "lol",
				"a": stepA,
			}, stepB)

		})
	})

}

func TestInspection(t *testing.T) {
	setEnvVars(t)

	t.Run("dev mode", func(t *testing.T) {
		r := require.New(t)
		c, err := NewClient(ClientOpts{
			AppID: "inspection",
			Dev:   BoolPtr(false),
		})
		r.NoError(err)
		_, err = CreateFunction(
			c,
			FunctionOpts{ID: "my-servable-function"},
			EventTrigger("test/event.a", nil),
			func(ctx context.Context, input Input[any]) (any, error) {
				return nil, nil
			},
		)
		r.NoError(err)

		server := httptest.NewServer(c.Serve())
		defer server.Close()

		t.Run("no signature", func(t *testing.T) {
			// When the request has no signature, respond with the insecure
			// inspection body

			r := require.New(t)

			reqBody := []byte("")
			req, err := http.NewRequest(http.MethodGet, server.URL, bytes.NewReader(reqBody))
			r.NoError(err)
			resp, err := http.DefaultClient.Do(req)
			r.Equal(http.StatusOK, resp.StatusCode)
			r.NoError(err)

			var respBody map[string]any
			err = json.NewDecoder(resp.Body).Decode(&respBody)
			r.NoError(err)

			r.Equal(map[string]any{
				"authentication_succeeded": nil,
				"function_count":           float64(1),
				"has_event_key":            true,
				"has_signing_key":          true,
				"has_signing_key_fallback": true,
				"mode":                     "cloud",
				"schema_version":           "2024-05-24",
			}, respBody)
		})

		t.Run("valid signature", func(t *testing.T) {
			// When the request has a valid signature, respond with the secure
			// inspection body

			r := require.New(t)

			reqBody := []byte("")
			sig, _ := Sign(context.Background(), time.Now(), []byte(testKey), reqBody)
			req, err := http.NewRequest(http.MethodGet, server.URL, bytes.NewReader(reqBody))
			r.NoError(err)
			req.Header.Set("X-Inngest-Signature", sig)
			resp, err := http.DefaultClient.Do(req)
			r.Equal(http.StatusOK, resp.StatusCode)
			r.NoError(err)

			var respBody map[string]any
			err = json.NewDecoder(resp.Body).Decode(&respBody)
			r.NoError(err)

			signingKeyHash, err := hashedSigningKey([]byte(testKey))
			r.NoError(err)
			signingKeyFallbackHash, err := hashedSigningKey([]byte(testKeyFallback))
			r.NoError(err)
			r.Equal(map[string]any{
				"api_origin":               "https://api.inngest.com",
				"app_id":                   "inspection",
				"authentication_succeeded": true,
				"capabilities": map[string]any{
					"in_band_sync": "v1",
					"trust_probe":  "v1",
					"connect":      "v1",
				},
				"env":                       nil,
				"event_api_origin":          "https://inn.gs",
				"event_key_hash":            "6ca13d52ca70c883e0f0bb101e425a89e8624de51db2d2392593af6a84118090",
				"framework":                 "",
				"function_count":            float64(1),
				"has_event_key":             true,
				"has_signing_key":           true,
				"has_signing_key_fallback":  true,
				"mode":                      "cloud",
				"schema_version":            "2024-05-24",
				"sdk_language":              "go",
				"sdk_version":               SDKVersion,
				"serve_origin":              nil,
				"serve_path":                nil,
				"signing_key_fallback_hash": string(signingKeyFallbackHash),
				"signing_key_hash":          string(signingKeyHash),
			}, respBody)
		})

		t.Run("invalid signature", func(t *testing.T) {
			// When the request has an invalid signature, respond with the insecure
			// inspection body

			r := require.New(t)

			reqBody := []byte("")
			invalidKey := "deadbeef"
			sig, _ := Sign(context.Background(), time.Now(), []byte(invalidKey), reqBody)
			req, err := http.NewRequest(http.MethodGet, server.URL, bytes.NewReader(reqBody))
			r.NoError(err)
			req.Header.Set("X-Inngest-Signature", sig)
			resp, err := http.DefaultClient.Do(req)
			r.Equal(http.StatusOK, resp.StatusCode)
			r.NoError(err)

			var respBody map[string]any
			err = json.NewDecoder(resp.Body).Decode(&respBody)
			r.NoError(err)

			r.Equal(map[string]any{
				"authentication_succeeded": false,
				"function_count":           float64(1),
				"has_event_key":            true,
				"has_signing_key":          true,
				"has_signing_key_fallback": true,
				"mode":                     "cloud",
				"schema_version":           "2024-05-24",
			}, respBody)
		})
	})

	t.Run("cloud mode", func(t *testing.T) {
		r := require.New(t)
		c, err := NewClient(ClientOpts{
			AppID: "inspection",
			Dev:   BoolPtr(false),
		})
		r.NoError(err)
		_, err = CreateFunction(
			c,
			FunctionOpts{ID: "my-servable-function"},
			EventTrigger("test/event.a", nil),
			func(ctx context.Context, input Input[any]) (any, error) {
				return nil, nil
			},
		)
		r.NoError(err)
		server := httptest.NewServer(c.Serve())
		defer server.Close()

		t.Run("no signature", func(t *testing.T) {
			// When the request has no signature, respond with the insecure
			// inspection body

			r := require.New(t)

			reqBody := []byte("")
			req, err := http.NewRequest(http.MethodGet, server.URL, bytes.NewReader(reqBody))
			r.NoError(err)
			resp, err := http.DefaultClient.Do(req)
			r.Equal(http.StatusOK, resp.StatusCode)
			r.NoError(err)

			var respBody map[string]any
			err = json.NewDecoder(resp.Body).Decode(&respBody)
			r.NoError(err)

			r.Equal(map[string]any{
				"authentication_succeeded": nil,
				"function_count":           float64(1),
				"has_event_key":            true,
				"has_signing_key":          true,
				"has_signing_key_fallback": true,
				"mode":                     "cloud",
				"schema_version":           "2024-05-24",
			}, respBody)
		})

		t.Run("valid signature", func(t *testing.T) {
			// When the request has a valid signature, respond with the secure
			// inspection body

			r := require.New(t)

			reqBody := []byte("")
			sig, _ := Sign(context.Background(), time.Now(), []byte(testKey), reqBody)
			req, err := http.NewRequest(http.MethodGet, server.URL, bytes.NewReader(reqBody))
			r.NoError(err)
			req.Header.Set("X-Inngest-Signature", sig)
			resp, err := http.DefaultClient.Do(req)
			r.Equal(http.StatusOK, resp.StatusCode)
			r.NoError(err)

			var respBody map[string]any
			err = json.NewDecoder(resp.Body).Decode(&respBody)
			r.NoError(err)

			signingKeyHash, err := hashedSigningKey([]byte(testKey))
			r.NoError(err)
			signingKeyFallbackHash, err := hashedSigningKey([]byte(testKeyFallback))
			r.NoError(err)
			r.Equal(map[string]any{
				"api_origin":               "https://api.inngest.com",
				"app_id":                   "inspection",
				"authentication_succeeded": true,
				"capabilities": map[string]any{
					"in_band_sync": "v1",
					"trust_probe":  "v1",
					"connect":      "v1",
				},
				"env":                       nil,
				"event_api_origin":          "https://inn.gs",
				"event_key_hash":            "6ca13d52ca70c883e0f0bb101e425a89e8624de51db2d2392593af6a84118090",
				"framework":                 "",
				"function_count":            float64(1),
				"has_event_key":             true,
				"has_signing_key":           true,
				"has_signing_key_fallback":  true,
				"mode":                      "cloud",
				"schema_version":            "2024-05-24",
				"sdk_language":              "go",
				"sdk_version":               SDKVersion,
				"serve_origin":              nil,
				"serve_path":                nil,
				"signing_key_fallback_hash": string(signingKeyFallbackHash),
				"signing_key_hash":          string(signingKeyHash),
			}, respBody)
		})

		t.Run("invalid signature", func(t *testing.T) {
			// When the request has an invalid signature, respond with the insecure
			// inspection body

			r := require.New(t)

			reqBody := []byte("")
			invalidKey := "deadbeef"
			sig, _ := Sign(context.Background(), time.Now(), []byte(invalidKey), reqBody)
			req, err := http.NewRequest(http.MethodGet, server.URL, bytes.NewReader(reqBody))
			r.NoError(err)
			req.Header.Set("X-Inngest-Signature", sig)
			resp, err := http.DefaultClient.Do(req)
			r.Equal(http.StatusOK, resp.StatusCode)
			r.NoError(err)

			var respBody map[string]any
			err = json.NewDecoder(resp.Body).Decode(&respBody)
			r.NoError(err)

			r.Equal(map[string]any{
				"authentication_succeeded": false,
				"function_count":           float64(1),
				"has_event_key":            true,
				"has_signing_key":          true,
				"has_signing_key_fallback": true,
				"mode":                     "cloud",
				"schema_version":           "2024-05-24",
			}, respBody)
		})
	})
}

func TestInBandSync(t *testing.T) {
	setEnvVars(t)
	r := require.New(t)
	c, err := NewClient(ClientOpts{AppID: "test-in-band-sync"})
	r.NoError(err)

	fn, err := CreateFunction(
		c,
		FunctionOpts{ID: "my-fn"},
		EventTrigger("my-event", nil),
		func(ctx context.Context, input Input[any]) (any, error) {
			return nil, nil
		},
	)
	r.NoError(err)
	h := newHandler(c, handlerOpts{
		AllowInBandSync: toPtr(true),
		Env:             toPtr("my-env"),
	})
	h.Register(fn)
	server := httptest.NewServer(h)
	defer server.Close()

	reqBodyByt, _ := json.Marshal(inBandSynchronizeRequest{
		URL: "http://test.local",
	})

	t.Run("success", func(t *testing.T) {
		// SDK responds with sync data when receiving a valid in-band sync
		// request

		r := require.New(t)
		ctx := context.Background()

		sig, _ := Sign(ctx, time.Now(), []byte(testKey), reqBodyByt)
		req, err := http.NewRequest(
			http.MethodPut,
			server.URL,
			bytes.NewReader(reqBodyByt),
		)
		r.NoError(err)
		req.Header.Set("x-inngest-signature", sig)
		req.Header.Set("x-inngest-sync-kind", "in_band")
		resp, err := http.DefaultClient.Do(req)
		r.NoError(err)
		r.Equal(http.StatusOK, resp.StatusCode)
		r.Equal(resp.Header.Get("x-inngest-sync-kind"), "in_band")

		var respBody inBandSynchronizeResponse
		err = json.NewDecoder(resp.Body).Decode(&respBody)
		r.NoError(err)

		r.Equal(
			inBandSynchronizeResponse{
				AppID: c.AppID(),
				Env:   toPtr("my-env"),
				Functions: []sdk.SDKFunction{{
					Name: "my-fn",
					Slug: fmt.Sprintf("%s-my-fn", c.AppID()),
					Steps: map[string]sdk.SDKStep{
						"step": {
							ID:   "step",
							Name: "my-fn",
							Runtime: map[string]any{
								"url": fmt.Sprintf("http://test.local?fnId=%s-my-fn&step=step", c.AppID()),
							},
						},
					},
					Triggers: []inngest.Trigger{EventTrigger("my-event", nil)},
				}},
				Inspection: map[string]any{
					"api_origin":               "https://api.inngest.com",
					"app_id":                   "test-in-band-sync",
					"authentication_succeeded": true,
					"capabilities": map[string]any{
						"in_band_sync": "v1",
						"trust_probe":  "v1",
						"connect":      "v1",
					},
					"env":                       "my-env",
					"event_api_origin":          "https://inn.gs",
					"event_key_hash":            "6ca13d52ca70c883e0f0bb101e425a89e8624de51db2d2392593af6a84118090",
					"framework":                 "",
					"function_count":            float64(1),
					"has_event_key":             true,
					"has_signing_key":           true,
					"has_signing_key_fallback":  true,
					"mode":                      "cloud",
					"schema_version":            "2024-05-24",
					"sdk_language":              "go",
					"sdk_version":               SDKVersion,
					"serve_origin":              nil,
					"serve_path":                nil,
					"signing_key_fallback_hash": "signkey-test-df3f619804a92fdb4057192dc43dd748ea778adc52bc498ce80524c014b81119",
					"signing_key_hash":          "signkey-test-b2ed992186a5cb19f6668aade821f502c1d00970dfd0e35128d51bac4649916c",
				},
				SDKAuthor:   "inngest",
				SDKLanguage: "go",
				SDKVersion:  SDKVersion,
				URL:         "http://test.local",
			},
			respBody,
		)
	})

	t.Run("invalid signature", func(t *testing.T) {
		// SDK responds with an error when receiving an in-band sync request
		// with an invalid signature

		r := require.New(t)
		ctx := context.Background()

		invalidKey := "deadbeef"
		sig, _ := Sign(ctx, time.Now(), []byte(invalidKey), reqBodyByt)
		req, err := http.NewRequest(
			http.MethodPut,
			server.URL,
			bytes.NewReader(reqBodyByt),
		)
		r.NoError(err)
		req.Header.Set("x-inngest-signature", sig)
		req.Header.Set("x-inngest-sync-kind", "in_band")
		resp, err := http.DefaultClient.Do(req)
		r.NoError(err)
		r.Equal(http.StatusUnauthorized, resp.StatusCode)
		r.Equal(resp.Header.Get("x-inngest-sync-kind"), "")

		var respBody map[string]any
		err = json.NewDecoder(resp.Body).Decode(&respBody)
		r.NoError(err)

		r.Equal(map[string]any{
			"code":    syscode.CodeSigVerificationFailed,
			"message": "error validating signature",
		}, respBody)
	})

	t.Run("missing signature", func(t *testing.T) {
		// SDK responds with an error when receiving an in-band sync request
		// with a missing signature

		r := require.New(t)

		req, err := http.NewRequest(
			http.MethodPut,
			server.URL,
			bytes.NewReader(reqBodyByt),
		)
		r.NoError(err)
		req.Header.Set("x-inngest-sync-kind", "in_band")
		resp, err := http.DefaultClient.Do(req)
		r.NoError(err)
		r.Equal(http.StatusUnauthorized, resp.StatusCode)
		r.Equal(resp.Header.Get("x-inngest-sync-kind"), "")

		var respBody map[string]any
		err = json.NewDecoder(resp.Body).Decode(&respBody)
		r.NoError(err)

		r.Equal(map[string]any{
			"code":    syscode.CodeHTTPMissingHeader,
			"message": "missing X-Inngest-Signature header",
		}, respBody)
	})

	t.Run("missing sync kind header", func(t *testing.T) {
		// SDK attempts an out-of-band sync when the sync kind header is missing

		r := require.New(t)
		ctx := context.Background()

		// Create a simple Go HTTP mockCloud that responds with hello world
		mockCloud := httptest.NewServer(http.HandlerFunc(func(w http.ResponseWriter, r *http.Request) {
			w.WriteHeader(http.StatusOK)
			_, _ = w.Write([]byte(`{"ok":true,"modified":true}`))
		}))
		defer mockCloud.Close()

		fn, err := CreateFunction(
			c,
			FunctionOpts{ID: "my-fn"},
			EventTrigger("my-event", nil),
			func(ctx context.Context, input Input[any]) (any, error) {
				return nil, nil
			},
		)
		r.NoError(err)
		h := newHandler(c, handlerOpts{
			Env:         toPtr("my-env"),
			RegisterURL: &mockCloud.URL,
		})
		h.Register(fn)
		server := httptest.NewServer(h)
		defer server.Close()

		sig, _ := Sign(ctx, time.Now(), []byte(testKey), reqBodyByt)
		req, err := http.NewRequest(
			http.MethodPut,
			server.URL,
			bytes.NewReader(reqBodyByt),
		)
		r.NoError(err)
		req.Header.Set("x-inngest-signature", sig)
		resp, err := http.DefaultClient.Do(req)
		r.NoError(err)
		r.Equal(http.StatusOK, resp.StatusCode)
		r.Equal("out_of_band", resp.Header.Get("x-inngest-sync-kind"))

		respByt, err := io.ReadAll(resp.Body)
		r.NoError(err)
		r.Equal("", string(respByt))
	})
}

func createRequest(t *testing.T, evt any) *sdkrequest.Request {
	t.Helper()

	byt, err := json.Marshal(evt)
	require.NoError(t, err)

	return &sdkrequest.Request{
		Event: byt,
		CallCtx: sdkrequest.CallCtx{
			FunctionID: "fn-id",
			RunID:      "run-id",
		},
	}
}

func createBatchRequest(t *testing.T, evt any, num int) *sdkrequest.Request {
	t.Helper()

	events := make([]json.RawMessage, num)
	for i := 0; i < num; i++ {
		byt, err := json.Marshal(evt)
		require.NoError(t, err)
		events[i] = byt
	}

	return &sdkrequest.Request{
		Event:  events[0],
		Events: events,
		CallCtx: sdkrequest.CallCtx{
			FunctionID: "fn-id",
			RunID:      "run-id",
		},
	}
}

func handlerPost(t *testing.T, url string, r *sdkrequest.Request) *http.Response {
	t.Helper()

	body := marshalRequest(t, r)
	sig, _ := Sign(context.Background(), time.Now(), []byte(testKey), body)

	req, err := http.NewRequest(http.MethodPost, url, bytes.NewReader(body))
	require.NoError(t, err)
	req.Header.Set("X-Inngest-Signature", sig)

	resp, err := http.DefaultClient.Do(req)
	require.NoError(t, err)
	return resp
}

func marshalRequest(t *testing.T, r *sdkrequest.Request) []byte {
	t.Helper()

	byt, err := json.Marshal(r)
	require.NoError(t, err)
	byt, err = jcs.Transform(byt)
	require.NoError(t, err)
	return byt
}

func toPtr[T any](v T) *T {
	return &v
}