from datetime import timedelta
from typing import Annotated

from fastapi import APIRouter, Depends, HTTPException, status
from fastapi.security import OAuth2PasswordRequestForm

from app.config import settings
from app.logic.user_logic import (
    authenticate_user,
    create_access_token,
    get_current_user,
    get_user_by_id,
    get_users,
    save_user,
)
from app.models.token import Token
from app.models.user import User, UserIn

router = APIRouter(prefix="/users", tags=["users"])


@router.get("/")
def fetch_users():
    users = get_users()
    if not users:
        return None
    return [User.model_validate(user) for user in users]


@router.post("/")
async def create_user(user_in: UserIn):
    user = save_user(user_in)
    access_token_expires = timedelta(minutes=settings.access_token_expire_minutes)
    access_token = create_access_token(
        data={"sub": user.username},
        expires_delta=access_token_expires,
    )
    return Token(access_token=access_token, token_type="bearer")


@router.get("/user")
async def fetch_current_user(current_user: Annotated[User, Depends(get_current_user)]):
    return current_user


@router.get("/user/id/{user_id}")
async def fetch_user_by_id(user_id: int):
    return User.model_validate(get_user_by_id(user_id))


@router.get("/user/name/{user_name}")
async def fetch_user_by_name(user_id: int):
    return User.model_validate(get_user_by_id(user_id))


@router.post("/auth")
async def login_for_access_token(
    form_data: Annotated[OAuth2PasswordRequestForm, Depends()],
) -> Token:
    user = authenticate_user(form_data.username, form_data.password)
    if not user:
        raise HTTPException(
            status_code=status.HTTP_401_UNAUTHORIZED,
            detail="Incorrect username or password",
            headers={"WWW-Authenticate": "Bearer"},
        )
    access_token_expires = timedelta(minutes=settings.access_token_expire_minutes)
    access_token = create_access_token(
        data={"sub": user.username},
        expires_delta=access_token_expires,
    )
    return Token(access_token=access_token, token_type="bearer")