#!/bin/bash

echo "🧪 Testing Upload System with CSRF Protection"
echo "=============================================="

BASE_URL="https://localhost"
USER_AGENT="Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36"

echo ""
echo "📋 Test 1: CSRF Token Generation" 
echo "--------------------------------"

CSRF_RESPONSE=$(curl -k -s -H "User-Agent: $USER_AGENT" -H "Accept: application/json" "$BASE_URL/api/csrf/token?action=/api/images&method=post")

if [ $? -eq 0 ] && [[ $CSRF_RESPONSE == *"form_id"* ]]; then
    echo "✅ CSRF API working"
    echo "Response: $CSRF_RESPONSE"
else  
    echo "❌ CSRF API failed"
    exit 1
fi

echo ""
echo "🌐 Test 2: Test Page Check"
echo "-------------------------"

HTTP_STATUS=$(curl -k -s -o /dev/null -w "%{http_code}" -H "User-Agent: $USER_AGENT" "$BASE_URL/admin/test/upload")

if [ "$HTTP_STATUS" = "200" ]; then
    echo "✅ Test page accessible: $BASE_URL/admin/test/upload"
else
    echo "❌ Test page not accessible (HTTP $HTTP_STATUS)"
fi

echo ""
echo "📊 Summary: System ready for browser testing!"
echo "Open: $BASE_URL/admin/test/upload"