Untitled

"use client";

import { useEffect, useState } from "react";
import { useRouter } from "next/navigation";
import Input from "@/components/UI/Input";
import { API, setToken } from "@/components/lib/auth";
import { useUserStore } from "@/store/userStore";

type JwtPayload = {
  sub?: string | number;
  id?: number;
  user_id?: number;
  name?: string;
  username?: string;
  role?: string;
};

const normalizeRole = (r: any) =>
  (r ?? "user").toString().trim().toLowerCase();

const pickName = (o: any) =>
  o?.username ?? o?.name ?? o?.email ?? "User";

function safeDecodeJwt(token: string): Partial<JwtPayload> | null {
  try {
    const [, payload] = token.split(".");
    if (!payload) return null;
    const json = JSON.parse(
      decodeURIComponent(
        atob(payload.replace(/-/g, "+").replace(/_/g, "/"))
          .split("")
          .map((c) => "%" + ("00" + c.charCodeAt(0).toString(16)).slice(-2))
          .join("")
      )
    );
    return json;
  } catch {
    return null;
  }
}

export default function LoginPage() {
  const router = useRouter();
  const { setUser } = useUserStore();

  const [email, setEmail] = useState("");
  const [password, setPassword] = useState("");
  const [rememberMe, setRememberMe] = useState(false);
  const [submitting, setSubmitting] = useState(false);
  const [error, setError] = useState<string | null>(null);

  // Daha önce hatırlanan e-posta
  useEffect(() => {
    try {
      const saved = localStorage.getItem("rememberedEmail");
      if (saved) {
        setEmail(saved);
        setRememberMe(true);
      }
    } catch {}
  }, []);

  const canSubmit = email.trim() !== "" && password.trim() !== "" && !submitting;

  const handleSubmit = async (e: React.FormEvent) => {
    e.preventDefault();
    if (!canSubmit) return;

    setSubmitting(true);
    setError(null);

    try {
      // ---- 1) LOGIN ----
      const res = await fetch(`${API}/auth/login`, {
        method: "POST",
        headers: { "Content-Type": "application/json" },
        body: JSON.stringify({ email, password }),
      });

      const data = await res.json().catch(() => ({}));
      if (!res.ok) {
        throw new Error(data?.detail || "Giriş başarısız");
      }

      // ---- 2) TOKEN ----
      const token: string | undefined = data?.access_token;
      if (!token) throw new Error("Token alınamadı");
      setToken(token);

      // ---- 3) USER -> 3 olası kaynaktan sırayla al ----
      // 3a) login response içinde user varsa direkt kullan
      if (data?.user) {
        setUser({
          id: Number(data.user.id ?? data.user.user_id ?? data.user.sub ?? 0),
          name: pickName(data.user),
          role: normalizeRole(data.user.role),
        });
      } else {
        // 3b) JWT decode ile dene
        let prof:
          | { id: number; name: string; role: string }
          | null = null;

        const decoded = safeDecodeJwt(token);
        if (decoded) {
          const idRaw =
            (decoded.id as number) ??
            (decoded.user_id as number) ??
            (typeof decoded.sub === "string" ? parseInt(decoded.sub) : decoded.sub);
          const role = normalizeRole(decoded.role);
          const name = pickName(decoded);
          if (idRaw && role) {
            prof = { id: Number(idRaw), name, role };
          }
        }

        // 3c) Hâlâ yoksa /auth/me çağır
        if (!prof) {
          try {
            const meRes = await fetch(`${API}/auth/me`, {
              headers: { Authorization: `Bearer ${token}` },
            });
            if (meRes.ok) {
              const me = await meRes.json();
              prof = {
                id: Number(me.id ?? me.user_id ?? me.sub ?? 0),
                name: pickName(me),
                role: normalizeRole(me.role),
              };
            }
          } catch {}
        }

        // Son çare: login cevabındaki "role" alanı
        setUser(
          prof ?? {
            id: 0,
            name: "User",
            role: normalizeRole(data?.role),
          }
        );
      }

      // ---- 4) UI SİNYAL / HATIRLA / NAV ----
      try {
        localStorage.setItem("isAuthenticated", "true");
      } catch {}
      window.dispatchEvent(new Event("auth-changed"));

      try {
        if (rememberMe) localStorage.setItem("rememberedEmail", email);
        else localStorage.removeItem("rememberedEmail");
      } catch {}

      router.replace("/dashboard");
    } catch (err: any) {
      setError(err?.message || "Bir hata oluştu");
    } finally {
      setSubmitting(false);
    }
  };

  return (
    <div className="min-h-screen flex items-center justify-center bg-[var(--surface-0)] px-4 py-12 font-sans text-[var(--foreground)]">
      <div className="w-full max-w-md card elevated rounded-2xl p-8">
        <h1 className="text-2xl font-semibold text-center mb-6 text-[var(--text-primary)]">
          Giriş Yap
        </h1>

        <form onSubmit={handleSubmit} className="space-y-5" noValidate>
          <div>
            <label htmlFor="email" className="block text-sm font-medium text-[var(--text-secondary)]">
              E-posta
            </label>
            <Input
              type="email"
              id="email"
              value={email}
              onChange={(e) => setEmail(e.target.value)}
              required
              placeholder="[email protected]"
              autoComplete="email"
              className="mt-1 w-full rounded-full h-11 px-4"
            />
          </div>

          <div>
            <label htmlFor="password" className="block text-sm font-medium text-[var(--text-secondary)]">
              Şifre
            </label>
            <Input
              type="password"
              id="password"
              value={password}
              onChange={(e) => setPassword(e.target.value)}
              required
              placeholder="••••••••"
              autoComplete="current-password"
              className="mt-1 w-full rounded-full h-11 px-4"
            />
          </div>

          <div className="flex items-center gap-2">
            <input
              type="checkbox"
              id="remember"
              checked={rememberMe}
              onChange={(e) => setRememberMe(e.target.checked)}
              className="h-4 w-4"
            />
            <label htmlFor="remember" className="text-sm text-[var(--text-secondary)]">
              Beni Hatırla
            </label>
          </div>

          {error && <p className="text-sm text-red-600">{error}</p>}

          <button
            type="submit"
            disabled={!canSubmit}
            aria-busy={submitting}
            className="btn btn-accent w-full rounded-full h-11 justify-center disabled:cursor-not-allowed"
          >
            {submitting ? "Gönderiliyor..." : "Giriş Yap"}
          </button>
        </form>

        <div className="mt-6 flex justify-between text-sm">
          <a href="/reset-password" className="text-[var(--accent)] hover:underline">
            Şifremi Unuttum
          </a>
        </div>
      </div>
    </div>
  );
}