from fastapi import APIRouter, Depends, Request
from fastapi.security import HTTPAuthorizationCredentials, HTTPBearer

from common.models.gmodel import UserInfo
from router.v1.validator.dependencies import IsValidAccessToken, IsValidRefreshToken, RemoveNoneResponse
from services.auth_service import AuthService
from .protocol import Req_GoogleLogin, Req_Login, Req_Signup, Req_UpdateMe, Res_Login, Res_Me, Res_RefreshToken

security = HTTPBearer()

# 라우터(MVC 의 컨트롤러). 요청 검증 -> service 호출 -> RemoveNoneResponse 반환만 담당.
router = APIRouter(prefix="/v1/auth", tags=["Auth"], responses={404: {"description": "Not found"}})


@router.post(path="/login", response_model=Res_Login, summary="로그인", description="id/pw 로 로그인하고 JWT 토큰을 발급한다.")
async def login(request: Request, req: Req_Login, service: AuthService = Depends()):
    return RemoveNoneResponse(await service.attempt_login(req.id, req.password, request.client.host))


@router.post(
    path="/signup",
    response_model=Res_Login,
    summary="회원가입",
    description="id/pw 로 가입한다. 회사(테넌트) 1개가 함께 생기고, 성공하면 곧바로 로그인 토큰을 발급한다.",
)
async def signup(req: Req_Signup, service: AuthService = Depends()):
    return RemoveNoneResponse(await service.signup(req))


@router.post(
    path="/google",
    response_model=Res_Login,
    summary="구글 로그인",
    description="구글 ID 토큰(GIS credential)을 검증하고 JWT 토큰을 발급한다. 처음 온 계정은 그 자리에서 만든다.",
)
async def google_login(req: Req_GoogleLogin, service: AuthService = Depends()):
    return RemoveNoneResponse(await service.google_login(req))


@router.post(
    path="/refresh_token",
    dependencies=[Depends(IsValidRefreshToken)],
    response_model=Res_RefreshToken,
    summary="액세스 토큰 갱신",
    description="refresh 토큰으로 access 토큰을 재발급한다.",
)
async def refresh_token(service: AuthService = Depends(), credentials: HTTPAuthorizationCredentials = Depends(security)):
    return RemoveNoneResponse(await service.refresh_token(credentials.credentials))


@router.get(
    path="/me",
    response_model=Res_Me,
    summary="내 정보",
    description="유효한 access 토큰이 있어야 호출 가능. 토큰의 유저+회사 정보를 반환한다.",
)
async def me(service: AuthService = Depends(), user_info: UserInfo = Depends(IsValidAccessToken)):
    return RemoveNoneResponse(await service.get_me(user_info))


@router.patch(
    path="/me",
    response_model=Res_Me,
    summary="내 정보 수정",
    description="본인 이름/이메일/연락처/비밀번호를 수정한다(권한·소속·ID 변경 불가).",
)
async def update_me(req: Req_UpdateMe, service: AuthService = Depends(), user_info: UserInfo = Depends(IsValidAccessToken)):
    return RemoveNoneResponse(await service.update_me(user_info, req))