from datetime import datetime, timezone

from fastapi import APIRouter, Depends, HTTPException
from sqlalchemy.orm import Session

from auth import create_access_token, get_current_user, hash_password, verify_password
from database import get_db
from models import User, UserSettings
from schemas import TokenResponse, UserLogin, UserOut, UserRegister, UserUpdate

router = APIRouter(prefix="/api/auth", tags=["auth"])


def utc_now_iso() -> str:
    return datetime.now(timezone.utc).strftime("%Y-%m-%dT%H:%M:%SZ")


@router.post("/register", response_model=UserOut)
def register(data: UserRegister, db: Session = Depends(get_db)):
    if db.query(User).filter(User.username == data.username).first():
        raise HTTPException(status_code=400, detail="用户名已存在")

    user = User(
        username=data.username,
        password_hash=hash_password(data.password),
        created_at=utc_now_iso(),
    )
    db.add(user)
    db.flush()

    settings = UserSettings(
        user_id=user.id,
        daily_target=20,
        master_required_count=3,
        weak_wrong_threshold=3,
    )
    db.add(settings)
    db.commit()
    db.refresh(user)
    return user


@router.post("/login", response_model=TokenResponse)
def login(data: UserLogin, db: Session = Depends(get_db)):
    user = db.query(User).filter(User.username == data.username).first()
    if not user or not verify_password(data.password, user.password_hash):
        raise HTTPException(status_code=401, detail="用户名或密码错误")

    token = create_access_token(user.id, user.username, remember=data.remember)
    return TokenResponse(access_token=token)


@router.get("/me", response_model=UserOut)
def me(current_user: User = Depends(get_current_user)):
    return current_user


@router.patch("/me", response_model=UserOut)
def update_me(
    data: UserUpdate,
    db: Session = Depends(get_db),
    current_user: User = Depends(get_current_user),
):
    if data.username is None and data.new_password is None:
        raise HTTPException(status_code=400, detail="请填写要修改的内容")

    if data.username is not None:
        username = data.username.strip()
        if not username:
            raise HTTPException(status_code=400, detail="用户名不能为空")
        exists = (
            db.query(User)
            .filter(User.username == username, User.id != current_user.id)
            .first()
        )
        if exists:
            raise HTTPException(status_code=400, detail="用户名已存在")
        current_user.username = username

    if data.new_password is not None:
        if not data.current_password:
            raise HTTPException(status_code=400, detail="修改密码需要先输入当前密码")
        if not verify_password(data.current_password, current_user.password_hash):
            raise HTTPException(status_code=400, detail="当前密码不正确")
        current_user.password_hash = hash_password(data.new_password)

    db.add(current_user)
    db.commit()
    db.refresh(current_user)
    return current_user