# Test code for the Meraki SSID module
# Copyright: (c) 2018, Kevin Breit (@kbreit)

# GNU General Public License v3.0+ (see COPYING or https://www.gnu.org/licenses/gpl-3.0.txt)
---
- block:
  - name: Test an API key is provided
    fail:
      msg: Please define an API key
    when: auth_key is not defined
    
  # - name: Use an invalid domain
  #   meraki_organization:
  #     auth_key: '{{ auth_key }}'
  #     host: marrrraki.com
  #     state: present
  #     org_name: IntTestOrg
  #     output_level: debug
  #   delegate_to: localhost
  #   register: invalid_domain
  #   ignore_errors: yes
    
  - name: Disable HTTP
    meraki_organization:
      auth_key: '{{ auth_key }}'
      use_https: false
      state: query
      output_level: debug
    delegate_to: localhost
    register: http
    ignore_errors: yes

  - name: Connection assertions
    assert:
      that:
        # - '"Failed to connect to" in invalid_domain.msg'
        - '"http" in http.url'

  - name: Create test network
    meraki_network:
      auth_key: '{{auth_key}}'
      state: present
      org_name: '{{test_org_name}}'
      net_name: TestNetSSID
      type: wireless
    register: test_net

  - debug: 
      msg: '{{test_net}}'

  - name: Query all SSIDs
    meraki_ssid:
      auth_key: '{{auth_key}}'
      state: query
      org_name: '{{test_org_name}}'
      net_name: TestNetSSID
    delegate_to: localhost
    register: query_all

  - name: Enable and name SSID
    meraki_ssid:
      auth_key: '{{auth_key}}'
      state: present
      org_name: '{{test_org_name}}'
      net_name: TestNetSSID
      name: AnsibleSSID
      enabled: true
    delegate_to: localhost
    register: enable_name_ssid

  - debug:
      msg: '{{ enable_name_ssid }}'

  - assert:
      that:
        - query_all.data | length == 15
        - query_all.data.0.name == 'TestNetSSID WiFi'
        - enable_name_ssid.data.name == 'AnsibleSSID'

  - name: Check for idempotency
    meraki_ssid:
      auth_key: '{{auth_key}}'
      state: present
      org_name: '{{test_org_name}}'
      net_name: TestNetSSID
      name: AnsibleSSID
      enabled: true
    delegate_to: localhost
    register: enable_name_ssid_idempotent

  - debug:
      msg: '{{ enable_name_ssid_idempotent }}'

  - assert:
      that:
        - enable_name_ssid_idempotent.changed == False
        - enable_name_ssid_idempotent.data is defined

  - name: Query one SSIDs
    meraki_ssid:
      auth_key: '{{auth_key}}'
      state: query
      org_name: '{{test_org_name}}'
      net_name: TestNetSSID
      name: AnsibleSSID
    delegate_to: localhost
    register: query_one

  - debug:
      msg: '{{query_one}}'

  - assert:
      that:
        - query_one.data.name == 'AnsibleSSID'

  - name: Disable SSID without specifying number
    meraki_ssid:
      auth_key: '{{auth_key}}'
      state: present
      org_name: '{{test_org_name}}'
      net_name: TestNetSSID
      name: AnsibleSSID
      enabled: false
    delegate_to: localhost
    register: disable_ssid

  - debug:
      msg: '{{ disable_ssid.data.enabled }}'

  - assert:
      that:
        - disable_ssid.data.enabled == False

  - name: Enable SSID with number
    meraki_ssid:
      auth_key: '{{auth_key}}'
      state: present
      org_name: '{{test_org_name}}'
      net_name: TestNetSSID
      number: 1
      enabled: true
    delegate_to: localhost
    register: enable_ssid_number

  - debug:  
      msg: '{{ enable_ssid_number.data.enabled }}'

  - assert:
      that:
        - enable_ssid_number.data.enabled == True

  - name: Set PSK with wrong mode
    meraki_ssid:
      auth_key: '{{auth_key}}'
      state: present
      org_name: '{{test_org_name}}'
      net_name: TestNetSSID
      name: AnsibleSSID
      auth_mode: open
      psk: abc1234
    delegate_to: localhost
    register: psk_invalid
    ignore_errors: yes

  - debug:
      msg: '{{ psk_invalid }}'

  - assert:
      that:
        - psk_invalid.msg == 'PSK is only allowed when auth_mode is set to psk'

  - name: Set PSK with invalid encryption mode
    meraki_ssid:
      auth_key: '{{auth_key}}'
      state: present
      org_name: '{{test_org_name}}'
      net_name: TestNetSSID
      name: AnsibleSSID
      auth_mode: psk
      psk: abc1234
      encryption_mode: eap
    delegate_to: localhost
    register: psk_invalid_mode
    ignore_errors: yes

  - debug:
      msg: '{{ psk_invalid_mode }}'

  - assert:
      that:
        - psk_invalid_mode.msg == 'PSK requires encryption_mode be set to wpa'

  - name: Set PSK
    meraki_ssid:
      auth_key: '{{auth_key}}'
      state: present
      org_name: '{{test_org_name}}'
      net_name: TestNetSSID
      name: AnsibleSSID
      auth_mode: psk
      psk: abc1234567890
      encryption_mode: wpa
    delegate_to: localhost
    register: psk

  - debug:
      msg: '{{ psk }}'

  - assert:
      that:
        - psk.data.authMode == 'psk'
        - psk.data.encryptionMode == 'wpa'
        - psk.data.wpaEncryptionMode == 'WPA2 only'

  - name: Enable click-through splash page
    meraki_ssid:
      auth_key: '{{auth_key}}'
      state: present
      org_name: '{{test_org_name}}'
      net_name: TestNetSSID
      name: AnsibleSSID
      splash_page: Click-through splash page
    delegate_to: localhost
    register: splash_click

  - debug:
      msg: '{{ splash_click }}'

  - assert:
      that:
        - splash_click.data.splashPage == 'Click-through splash page'

  - name: Configure RADIUS servers
    meraki_ssid:
      auth_key: '{{auth_key}}'
      state: present
      org_name: '{{test_org_name}}'
      net_name: TestNetSSID
      name: AnsibleSSID
      auth_mode: open-with-radius
      radius_servers:
        - host: 192.0.1.200
          port: 1234
          secret: abc98765
    delegate_to: localhost
    register: set_radius_server

  - debug:
      msg: '{{ set_radius_server }}'

  - assert:
      that:
        - set_radius_server.data.radiusServers.0.host == '192.0.1.200'
  always:
  - name: Delete SSID
    meraki_ssid:
      auth_key: '{{auth_key}}'
      state: absent
      org_name: '{{test_org_name}}'
      net_name: TestNetSSID
      name: AnsibleSSID
    delegate_to: localhost
    register: delete_ssid

  - debug:
      msg: '{{ delete_ssid }}'

  - assert:
      that:
        - delete_ssid.data.name == 'Unconfigured SSID 2'

  - name: Delete test network
    meraki_network:
      auth_key: '{{auth_key}}'
      state: absent
      org_name: '{{test_org_name}}'
      net_name: TestNetSSID
    register: delete_net

  - debug: 
      msg: '{{delete_net}}'