<?php

use App\Filament\Resources\TenantResource;
use App\Models\Tenant;
use Illuminate\Foundation\Testing\RefreshDatabase;
use Tests\TestCase;

uses(TestCase::class, RefreshDatabase::class);

it('includes scope parameter in admin consent url', function () {
    config([
        'graph.scope' => 'https://graph.microsoft.com/.default offline_access openid',
    ]);

    $tenant = Tenant::create([
        'tenant_id' => 'b0091e5d-944f-4a34-bcd9-12cbfb7b75cf',
        'name' => 'Test Tenant',
        'app_client_id' => 'client-id',
    ]);

    $url = TenantResource::adminConsentUrl($tenant);

    expect($url)->toContain('scope=');
    expect($url)->toContain(urlencode('https://graph.microsoft.com/.default offline_access openid'));
});