"""Login y manejo de sesion del panel admin."""
from datetime import datetime

from flask import Blueprint, flash, jsonify, redirect, render_template, request, url_for
from flask_login import current_user, login_required, login_user, logout_user

from models import Usuario, db


bp = Blueprint('auth', __name__)


@bp.route('/login', methods=['GET', 'POST'])
def login_page():
    if current_user.is_authenticated:
        return redirect(url_for('pages.dashboard'))

    if request.method == 'POST':
        # Soporta tanto form-data como JSON
        if request.is_json:
            data = request.get_json(silent=True) or {}
        else:
            data = request.form
        username = (data.get('username') or '').strip()
        password = data.get('password') or ''

        user = Usuario.query.filter_by(Username=username, Activo=True).first()
        if user and user.check_password(password):
            user.UltimoAcceso = datetime.utcnow()
            db.session.commit()
            login_user(user, remember=True)
            if request.is_json:
                return jsonify(ok=True, user=user.to_dict())
            next_url = request.args.get('next') or url_for('pages.dashboard')
            return redirect(next_url)

        if request.is_json:
            return jsonify(ok=False, error='Credenciales invalidas'), 401
        flash('Usuario o contrasena incorrectos', 'danger')

    return render_template('login.html')


@bp.route('/logout', methods=['GET', 'POST'])
@login_required
def logout():
    logout_user()
    if request.method == 'POST' and request.is_json:
        return jsonify(ok=True)
    return redirect(url_for('auth.login_page'))


@bp.route('/api/v1/auth/check')
def check_auth():
    if current_user.is_authenticated:
        return jsonify(ok=True, user=current_user.to_dict())
    return jsonify(ok=False), 401


@bp.route('/api/v1/auth/profile')
@login_required
def profile():
    return jsonify(ok=True, user=current_user.to_dict())


@bp.route('/api/v1/auth/change-password', methods=['POST'])
@login_required
def change_password():
    data = request.get_json(silent=True) or {}
    actual = data.get('actual') or ''
    nueva  = data.get('nueva')  or ''
    if not current_user.check_password(actual):
        return jsonify(ok=False, error='Contrasena actual invalida'), 400
    if len(nueva) < 6:
        return jsonify(ok=False, error='La nueva contrasena debe tener al menos 6 caracteres'), 400
    current_user.set_password(nueva)
    db.session.commit()
    return jsonify(ok=True)