"use server"
import { cookies } from "next/headers"
import type { ApiResponse } from "@/lib/api"
import { callByDevice } from "./base"

export type TokenResp = {
  access_token: string
  refresh_token: string
  expires_in: number
  token_type: string
  scope?: string
}

export async function login(params: {
  username: string
  password: string
  remember: boolean
}): Promise<ApiResponse> {
  const resp = await callByDevice<TokenResp>("/api/auth/token", {
    grant_type: "password",
    login_type: "password",
    login_pool: "admin",
    ...params,
  })
  if (!resp.success) {
    return resp
  }

  // 保存到 cookies
  const data = resp.data
  const cookieStore = await cookies()
  cookieStore.set("auth_token", data.access_token, {
    httpOnly: true,
    sameSite: "strict",
    maxAge: Math.max(data.expires_in, 0),
  })
  cookieStore.set("auth_refresh", data.refresh_token, {
    httpOnly: true,
    sameSite: "strict",
    maxAge: Number.MAX_SAFE_INTEGER,
  })

  return {
    success: true,
    data: undefined,
  }
}

export async function refreshAuth() {
  const cookie = await cookies()

  const userRefresh = cookie.get("auth_refresh")?.value
  if (!userRefresh) {
    throw new Error("未授权访问")
  }

  // 请求刷新访问令牌
  const resp = await callByDevice<TokenResp>(`/api/auth/token`, {
    grant_type: "refresh_token",
    refresh_token: userRefresh,
  })

  // 处理请求
  if (!resp.success) {
    if (resp.status === 401) {
      cookie.delete("auth_refresh")
    }
    throw new Error("未授权访问")
  }

  // 解析响应
  const data = resp.data
  const nextAccessToken = data.access_token
  const nextRefreshToken = data.refresh_token
  const expiresIn = data.expires_in

  // 保存令牌到 cookies
  cookie.set("auth_token", nextAccessToken, {
    httpOnly: true,
    sameSite: "strict",
    maxAge: Math.max(expiresIn, 0),
  })
  cookie.set("auth_refresh", nextRefreshToken, {
    httpOnly: true,
    sameSite: "strict",
    maxAge: Number.MAX_SAFE_INTEGER,
  })

  // 返回新的访问令牌
  return {
    access_token: nextAccessToken,
    refresh_token: nextRefreshToken,
  }
}