"""Auth routes: register / login / logout / refresh."""
import uuid

from flask import Blueprint, request, g, jsonify

from auth import hash_password, verify_password, sign_token, require_auth
from db import execute, query_one

bp = Blueprint("auth", __name__)


@bp.route("/register", methods=["POST"])
def register():
    data = request.get_json(silent=True) or {}
    email = (data.get("email") or "").strip()
    garmin_email = (data.get("garminEmail") or "").strip()
    garmin_password = data.get("garminPassword") or ""
    if not email or not garmin_email or not garmin_password:
        return jsonify({"error": "email, garminEmail, garminPassword 均为必填"}), 400

    if query_one("SELECT id FROM users WHERE email = ?", [email]):
        return jsonify({"error": "该邮箱已注册"}), 409

    uid = str(uuid.uuid4())
    token = sign_token(uid)
    execute(
        "INSERT INTO users (id, email, garmin_email, garmin_password_hash, jwt_token) "
        "VALUES (?, ?, ?, ?, ?)",
        [uid, email, garmin_email, hash_password(garmin_password), token],
    )
    return jsonify({"id": uid, "email": email, "token": token}), 201


@bp.route("/login", methods=["POST"])
def login():
    data = request.get_json(silent=True) or {}
    email = (data.get("email") or "").strip()
    password = data.get("password") or ""
    user = query_one("SELECT * FROM users WHERE email = ?", [email])
    if not user or not verify_password(password, user["garmin_password_hash"]):
        return jsonify({"error": "邮箱或密码错误"}), 401
    token = sign_token(user["id"])
    execute("UPDATE users SET jwt_token = ? WHERE id = ?", [token, user["id"]])
    return jsonify({"id": user["id"], "email": user["email"], "token": token})


@bp.route("/logout", methods=["POST"])
@require_auth
def logout():
    execute("UPDATE users SET jwt_token = NULL WHERE id = ?", [g.user_id])
    return jsonify({"message": "ok"})


@bp.route("/refresh", methods=["POST"])
@require_auth
def refresh():
    token = sign_token(g.user_id)
    execute("UPDATE users SET jwt_token = ? WHERE id = ?", [token, g.user_id])
    return jsonify({"token": token})