"""认证 API — 对接 MOM sys_user + 双 Token 刷新"""
from fastapi import APIRouter, Depends
from app.schemas.user import (
    LoginRequest,
    LoginResponse,
    RefreshRequest,
    RefreshResponse,
    UserResponse,
)
from app.services.auth_service import login, refresh_access_token, get_current_user

router = APIRouter(prefix="/auth", tags=["认证"])


@router.post("/login", response_model=LoginResponse)
def login_endpoint(data: LoginRequest):
    """登录 — 验证 MOM sys_user 表，返回 Access + Refresh 双 Token"""
    return login(data.username, data.password)


@router.post("/refresh", response_model=RefreshResponse)
def refresh_endpoint(data: RefreshRequest):
    """刷新 Access Token — 使用 Refresh Token 换取新的 Access Token"""
    return refresh_access_token(data.refresh_token)


@router.get("/me", response_model=UserResponse)
def get_me(current_user: dict = Depends(get_current_user)):
    """获取当前用户信息（从 Access Token 解析）"""
    return UserResponse(
        id=current_user["sub"],
        username=current_user.get("username", ""),
        display_name=current_user.get("display_name", ""),
        role=current_user.get("role", "operator"),
    )