/**
 * Authentication management for web interface
 */

// Use relative path for API
const AUTH_API_BASE = '/api';

// Check if user is authenticated
async function checkAuth() {
    const token = localStorage.getItem('auth_token');
    const userStr = localStorage.getItem('user');

    if (!token) {
        // Redirect to login page instead of just showing prompt
        redirectToLogin();
        return false;
    }

    // Verify token with server
    try {
        const response = await fetch(`${AUTH_API_BASE}/auth/me`, {
            headers: {
                'Authorization': `Bearer ${token}`
            }
        });

        if (response.ok) {
            const data = await response.json();
            showUserInfo(data.user);
            showMainContent();
            return true;
        } else {
            // Token invalid, remove it and redirect
            localStorage.removeItem('auth_token');
            localStorage.removeItem('user');
            redirectToLogin();
            return false;
        }
    } catch (error) {
        console.error('Auth check error:', error);
        // On error, redirect to login
        redirectToLogin();
        return false;
    }
}

// Redirect to login page
function redirectToLogin() {
    // Only redirect if not already on login page
    if (!window.location.pathname.includes('/login')) {
        window.location.href = '/login';
    }
}

// Show user info when authenticated
function showUserInfo(user) {
    const userInfo = document.getElementById('userInfo');
    const loginPrompt = document.getElementById('loginPrompt');
    const mainTabs = document.getElementById('mainTabs');
    const currentUser = document.getElementById('currentUser');

    if (userInfo) userInfo.style.display = 'flex';
    if (loginPrompt) loginPrompt.style.display = 'none';
    if (mainTabs) mainTabs.style.visibility = 'visible';
    if (currentUser) currentUser.textContent = user.full_name || user.username;
}

// Show main content (only when authenticated)
function showMainContent() {
    const mainContent = document.getElementById('main-content');
    if (mainContent) mainContent.style.display = 'block';
}

// Hide main content (when not authenticated)
function hideMainContent() {
    const mainContent = document.getElementById('main-content');
    if (mainContent) mainContent.style.display = 'none';
}

// Show login prompt when not authenticated (not used anymore - we redirect instead)
function showLoginPrompt() {
    const userInfo = document.getElementById('userInfo');
    const loginPrompt = document.getElementById('loginPrompt');
    const mainTabs = document.getElementById('mainTabs');

    if (userInfo) userInfo.style.display = 'none';
    if (loginPrompt) loginPrompt.style.display = 'block';
    if (mainTabs) mainTabs.style.visibility = 'hidden';

    // Hide main content
    hideMainContent();
}

// Handle logout
async function handleLogout() {
    if (!confirm('Êtes-vous sûr de vouloir vous déconnecter?')) {
        return;
    }

    // Remove token from localStorage
    localStorage.removeItem('auth_token');
    localStorage.removeItem('user');

    // Call logout endpoint
    try {
        await fetch(`${AUTH_API_BASE}/auth/logout`, { method: 'POST' });
    } catch (error) {
        console.error('Logout error:', error);
    }

    // Redirect to login page
    window.location.href = '/login';
}

// Add authorization header to all fetch requests
function addAuthHeader(options = {}) {
    const token = localStorage.getItem('auth_token');
    if (token) {
        options.headers = options.headers || {};
        options.headers['Authorization'] = `Bearer ${token}`;
    }
    return options;
}

// Wrapper for fetch with auth
async function authFetch(url, options = {}) {
    options = addAuthHeader(options);
    return fetch(url, options);
}

// Make functions available globally
window.checkAuth = checkAuth;
window.showUserInfo = showUserInfo;
window.showLoginPrompt = showLoginPrompt;
window.handleLogout = handleLogout;
window.authFetch = authFetch;
window.addAuthHeader = addAuthHeader;

// Check authentication on page load
document.addEventListener('DOMContentLoaded', () => {
    checkAuth();
});