ez-api/internal/service/ip_ban_test.go

package service

import (
	"testing"
)

func TestNormalizeCIDR_IPv4Address(t *testing.T) {
	tests := []struct {
		input    string
		expected string
		hasError bool
	}{
		{"10.0.0.1", "10.0.0.1/32", false},
		{"192.168.1.100", "192.168.1.100/32", false},
		{"8.8.8.8", "8.8.8.8/32", false},
	}

	for _, tt := range tests {
		result, err := NormalizeCIDR(tt.input)
		if tt.hasError {
			if err == nil {
				t.Errorf("NormalizeCIDR(%q): expected error, got nil", tt.input)
			}
			continue
		}
		if err != nil {
			t.Errorf("NormalizeCIDR(%q): unexpected error: %v", tt.input, err)
			continue
		}
		if result != tt.expected {
			t.Errorf("NormalizeCIDR(%q): expected %q, got %q", tt.input, tt.expected, result)
		}
	}
}

func TestNormalizeCIDR_IPv4CIDR(t *testing.T) {
	tests := []struct {
		input    string
		expected string
		hasError bool
	}{
		{"10.0.0.0/24", "10.0.0.0/24", false},
		{"192.168.1.0/16", "192.168.0.0/16", false}, // Normalized to network address
		{"172.16.0.1/32", "172.16.0.1/32", false},
	}

	for _, tt := range tests {
		result, err := NormalizeCIDR(tt.input)
		if tt.hasError {
			if err == nil {
				t.Errorf("NormalizeCIDR(%q): expected error, got nil", tt.input)
			}
			continue
		}
		if err != nil {
			t.Errorf("NormalizeCIDR(%q): unexpected error: %v", tt.input, err)
			continue
		}
		if result != tt.expected {
			t.Errorf("NormalizeCIDR(%q): expected %q, got %q", tt.input, tt.expected, result)
		}
	}
}

func TestNormalizeCIDR_IPv6Address(t *testing.T) {
	tests := []struct {
		input    string
		expected string
		hasError bool
	}{
		{"2001:db8::1", "2001:db8::1/128", false},
		{"::1", "::1/128", false},
	}

	for _, tt := range tests {
		result, err := NormalizeCIDR(tt.input)
		if tt.hasError {
			if err == nil {
				t.Errorf("NormalizeCIDR(%q): expected error, got nil", tt.input)
			}
			continue
		}
		if err != nil {
			t.Errorf("NormalizeCIDR(%q): unexpected error: %v", tt.input, err)
			continue
		}
		if result != tt.expected {
			t.Errorf("NormalizeCIDR(%q): expected %q, got %q", tt.input, tt.expected, result)
		}
	}
}

func TestNormalizeCIDR_Invalid(t *testing.T) {
	tests := []string{
		"",
		"not-an-ip",
		"10.0.0.256",
		"10.0.0.0/33",
		"10.0.0.0/abc",
	}

	for _, input := range tests {
		_, err := NormalizeCIDR(input)
		if err == nil {
			t.Errorf("NormalizeCIDR(%q): expected error for invalid input", input)
		}
	}
}

func TestCIDROverlaps_NoOverlap(t *testing.T) {
	tests := []struct {
		a, b string
	}{
		{"10.0.0.0/24", "192.168.1.0/24"},
		{"10.0.0.0/24", "10.0.1.0/24"},
		{"10.0.0.0/32", "10.0.0.1/32"},
	}

	for _, tt := range tests {
		if CIDROverlaps(tt.a, tt.b) {
			t.Errorf("CIDROverlaps(%q, %q): expected no overlap", tt.a, tt.b)
		}
	}
}

func TestCIDROverlaps_HasOverlap(t *testing.T) {
	tests := []struct {
		a, b string
	}{
		{"10.0.0.0/24", "10.0.0.0/24"},      // Exact same
		{"10.0.0.0/24", "10.0.0.0/25"},      // a contains b
		{"10.0.0.0/25", "10.0.0.0/24"},      // b contains a
		{"10.0.0.0/16", "10.0.1.0/24"},      // a contains b
		{"10.0.0.1/32", "10.0.0.0/24"},      // b contains a
	}

	for _, tt := range tests {
		if !CIDROverlaps(tt.a, tt.b) {
			t.Errorf("CIDROverlaps(%q, %q): expected overlap", tt.a, tt.b)
		}
	}
}

func TestCIDROverlaps_InvalidCIDR(t *testing.T) {
	// Invalid CIDR should return false (no overlap)
	if CIDROverlaps("not-valid", "10.0.0.0/24") {
		t.Error("expected no overlap with invalid CIDR")
	}
	if CIDROverlaps("10.0.0.0/24", "not-valid") {
		t.Error("expected no overlap with invalid CIDR")
	}
}