"""
用户认证 API 路由
使用邮箱和密码进行登录/注册
"""
from flask import Blueprint, request, jsonify, session
from db import create_user, verify_user

bp = Blueprint('auth', __name__, url_prefix='/api')


@bp.route('/register', methods=['POST'])
def register():
    """用户注册"""
    try:
        data = request.get_json()
        email = data.get('email', '').strip().lower()
        password = data.get('password', '')
        
        if not email or not password:
            return jsonify({'success': False, 'error': '邮箱和密码不能为空'}), 400
        
        # 验证邮箱格式
        import re
        if not re.match(r'^[^\s@]+@[^\s@]+\.[^\s@]+$', email):
            return jsonify({'success': False, 'error': '请输入有效的邮箱地址'}), 400
        
        if len(password) < 6:
            return jsonify({'success': False, 'error': '密码至少6位'}), 400
        
        user, error = create_user(email, password)
        if error:
            return jsonify({'success': False, 'error': error}), 400
        
        # 自动登录
        session['user_id'] = user['id']
        session['username'] = user['username']  # username存的是email
        session['email'] = user['username']
        
        return jsonify({
            'success': True,
            'user': {'id': user['id'], 'email': user['username'], 'username': user['username'].split('@')[0]}
        })
    except Exception as e:
        return jsonify({'success': False, 'error': str(e)}), 500


@bp.route('/login', methods=['POST'])
def login():
    """用户登录"""
    try:
        data = request.get_json()
        email = data.get('email', '').strip().lower()
        password = data.get('password', '')
        
        if not email or not password:
            return jsonify({'success': False, 'error': '邮箱和密码不能为空'}), 400
        
        user, error = verify_user(email, password)
        if error:
            return jsonify({'success': False, 'error': error}), 400
        
        session['user_id'] = user['id']
        session['username'] = user['username']
        session['email'] = user['username']
        
        return jsonify({
            'success': True,
            'user': {'id': user['id'], 'email': user['username'], 'username': user['username'].split('@')[0]}
        })
    except Exception as e:
        return jsonify({'success': False, 'error': str(e)}), 500


@bp.route('/logout', methods=['POST'])
def logout():
    """用户登出"""
    session.clear()
    return jsonify({'success': True})


@bp.route('/change_password', methods=['POST'])
def change_password():
    """修改密码"""
    if 'user_id' not in session:
        return jsonify({'success': False, 'error': '请先登录'}), 401
    
    try:
        data = request.get_json()
        old_password = data.get('old_password', '')
        new_password = data.get('new_password', '')
        
        if not old_password or not new_password:
            return jsonify({'success': False, 'error': '请填写所有字段'}), 400
        
        if len(new_password) < 6:
            return jsonify({'success': False, 'error': '新密码至少6位'}), 400
        
        from db import change_user_password
        success, error = change_user_password(session['user_id'], old_password, new_password)
        
        if success:
            return jsonify({'success': True})
        else:
            return jsonify({'success': False, 'error': error}), 400
    except Exception as e:
        return jsonify({'success': False, 'error': str(e)}), 500


@bp.route('/me', methods=['GET'])
def get_current_user():
    """获取当前用户"""
    if 'user_id' in session:
        email = session.get('email', session.get('username', ''))
        is_admin = False
        try:
            from db import get_db, put_db
            conn = get_db()
            if conn:
                try:
                    cur = conn.cursor()
                    cur.execute("SELECT is_admin FROM users WHERE id = %s", (session['user_id'],))
                    row = cur.fetchone()
                    if row:
                        is_admin = bool(row[0])
                finally:
                    put_db(conn)
        except Exception:
            pass
        return jsonify({
            'success': True,
            'user': {
                'id': session['user_id'],
                'email': email,
                'username': email.split('@')[0] if '@' in email else email,
                'is_admin': is_admin
            }
        })
    return jsonify({'success': False, 'user': None})