import { Router, Request, Response } from 'express';
import bcrypt from 'bcryptjs';
import jwt from 'jsonwebtoken';
import { getDb } from '../db';
import { JWT_SECRET, JWT_EXPIRES_IN } from '../config';
import { authMiddleware, AuthRequest } from '../middleware/auth';

const router = Router();

router.post('/login', (req: Request, res: Response) => {
  const { username, password } = req.body || {};
  if (!username || !password) {
    return res.status(400).json({ error: '请输入用户名和密码' });
  }
  const db = getDb();
  const admin = db.prepareCompat('SELECT * FROM admins WHERE username = ?').get(username) as any;
  if (!admin) return res.status(401).json({ error: '用户名或密码错误' });
  const ok = bcrypt.compareSync(password, admin.password_hash);
  if (!ok) return res.status(401).json({ error: '用户名或密码错误' });
  const token = jwt.sign({ id: admin.id, username: admin.username }, JWT_SECRET, { expiresIn: JWT_EXPIRES_IN });
  res.json({ token, username: admin.username });
});

router.post('/change-password', authMiddleware, (req: AuthRequest, res: Response) => {
  const { oldPassword, newPassword } = req.body || {};
  if (!oldPassword || !newPassword) {
    return res.status(400).json({ error: '缺少参数' });
  }
  if (newPassword.length < 6) {
    return res.status(400).json({ error: '新密码至少 6 位' });
  }
  const db = getDb();
  const admin = db.prepareCompat('SELECT * FROM admins WHERE id = ?').get(req.adminId) as any;
  const ok = bcrypt.compareSync(oldPassword, admin.password_hash);
  if (!ok) return res.status(400).json({ error: '原密码错误' });
  const hash = bcrypt.hashSync(newPassword, 10);
  db.prepareCompat('UPDATE admins SET password_hash = ? WHERE id = ?').run(hash, req.adminId);
  db.save();
  res.json({ ok: true });
});

export default router;