import logging

from fastapi import APIRouter
from pydantic import BaseModel, Field

from response import ApiResponse
from security import create_access_token, verify_credentials

logger = logging.getLogger(__name__)

router = APIRouter(prefix="/api/auth", tags=["auth"])


class LoginBody(BaseModel):
    username: str = Field(..., min_length=1, max_length=64)
    password: str = Field(..., min_length=1, max_length=128)


@router.post("/login", response_model=ApiResponse)
def login(body: LoginBody):
    """控制台登录，成功后返回 JWT（有效期 12 小时）"""
    if not verify_credentials(body.username.strip(), body.password):
        logger.warning("Login failed for username=%s", body.username)
        return ApiResponse(code=0, msg="用户名或密码错误", data=None)
    token = create_access_token()
    ttl_seconds = 12 * 60 * 60
    logger.info("User %s logged in", body.username.strip())
    return ApiResponse(
        code=1,
        msg="success",
        data={
            "access_token": token,
            "token_type": "bearer",
            "expires_in": ttl_seconds,
        },
    )