using StellaOps.AirGap.Time.Models;
using StellaOps.AirGap.Time.Services;

namespace StellaOps.AirGap.Time.Tests;

public class Rfc3161VerifierTests
{
    [Fact]
    public void StubTokenProducesDeterministicAnchor()
    {
        var tokenBytes = new byte[] { 0x01, 0x02, 0x03 };
        var verifier = new Rfc3161Verifier();
        var trust = new[] { new TimeTrustRoot("tsa-root", new byte[] { 0x01 }, "rsa-pkcs1-sha256") };

        var result = verifier.Verify(tokenBytes, trust, out var anchor);

        Assert.True(result.IsValid);
        Assert.Equal("rfc3161-stub-verified", result.Reason);
        Assert.Equal("RFC3161", anchor.Format);
        Assert.Equal("tsa-root", anchor.SignatureFingerprint);
        Assert.False(string.IsNullOrEmpty(anchor.TokenDigest));
    }
}