from fastapi import APIRouter, Depends, HTTPException
from pydantic import BaseModel, Field

from ..auth import (
    admin_credentials_configured,
    create_access_token,
    verify_credentials,
)
from ..deps import verify_admin

router = APIRouter(prefix="/admin/auth", tags=["auth"])


class LoginRequest(BaseModel):
    username: str = Field(min_length=1)
    password: str = Field(min_length=1)


class TokenResponse(BaseModel):
    access_token: str
    token_type: str = "bearer"


class MeResponse(BaseModel):
    username: str
    role: str = "admin"


@router.post("/login", response_model=TokenResponse)
def login(payload: LoginRequest):
    if not admin_credentials_configured():
        raise HTTPException(status_code=503, detail="Admin auth is not configured")
    if not verify_credentials(payload.username, payload.password):
        raise HTTPException(status_code=401, detail="Invalid username or password")
    token = create_access_token(username=payload.username.strip())
    return TokenResponse(access_token=token)


@router.get("/me", response_model=MeResponse)
def me(username: str = Depends(verify_admin)):
    return MeResponse(username=username)