package sshcert

import (
	"testing"
)

func TestNewBuilderRequiresTrustDomain(t *testing.T) {
	_, err := NewBuilder(Config{})
	if err == nil {
		t.Fatal("expected error for empty trust domain")
	}
}

func TestNewBuilderAcceptsValidConfig(t *testing.T) {
	b, err := NewBuilder(Config{TrustDomain: "example.org"})
	if err != nil {
		t.Fatalf("unexpected error: %v", err)
	}
	if b == nil {
		t.Fatal("builder should not be nil")
	}
}

func TestBuildRequiresSpiffeID(t *testing.T) {
	b, _ := NewBuilder(Config{TrustDomain: "example.org"})
	_, err := b.Build(&CertRequest{})
	if err == nil {
		t.Fatal("expected error for empty spiffe ID")
	}
}