use chrono::Utc;

use redis::Client;

use std::sync::{Arc, Once};

use uuid::Uuid;

use web::{AppState, Config, jwt_auth::JWTAuthMiddleware, model::User};

static TEST_ENV_INIT: Once = Once::new();

        // `..` because cargo runs a test binary with the CRATE as its working

        // directory, while `.env` sits at the workspace root — so the plain

        // relative read never matched and every DB test quietly required

        // DATABASE_URL to be exported by hand.

        {

            // Used by server::db LazyLock during integration tests.

            // Connection may still fail, but this avoids startup panic and lock poisoning.

/// Create a test app state with mock configuration

/// A limiter for router tests: trusts no proxy, so requests key on their peer

/// (or the unidentified bucket when the harness supplies no connect info).

#[must_use]

    ))

/// Create a mock user for testing

/// A fixed RS256 pair. Generating one per test would put an RSA keygen on the

/// shared runtime for no benefit.

pub const TEST_PRIVATE_KEY_B64: &str = "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";

pub const TEST_PUBLIC_KEY_B64: &str = "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";

/// One runtime for the whole test binary; see `supp_macro::shared_runtime_test`.

    static RUNTIME: std::sync::OnceLock<tokio::runtime::Runtime> = std::sync::OnceLock::new();

        // Before any body runs: `server::db` caches DATABASE_URL in a LazyLock,

        // so the first test to reach it without the .env loaded poisons every

        // later one. Only `create_test_app_state` used to do this.

/// Create mock JWT auth middleware for testing