// Copyright © 2026 Olaf Kolkman
// SPDX-License-Identifier: GPL-3.0-or-later

const DEFAULT_BACKEND = 'http://localhost:8000';

const statusEl = document.getElementById('status');
const form = document.getElementById('settings-form');
const backendUrlInput = document.getElementById('backend-url');
const usernameInput = document.getElementById('username');
const passwordInput = document.getElementById('password');
const session = document.getElementById('logged-in');
const sessionSummary = document.getElementById('session-summary');
const signOutButton = document.getElementById('sign-out');

function setStatus(message, isError = false) {
  statusEl.textContent = message;
  statusEl.classList.remove('hidden');
  statusEl.classList.toggle('error', isError);
  statusEl.classList.toggle('success', !isError);
}

async function loadSettings() {
  const settings = await browser.storage.local.get(['backendUrl', 'username', 'accessToken']);
  backendUrlInput.value = settings.backendUrl || DEFAULT_BACKEND;
  usernameInput.value = settings.username || '';

  if (settings.accessToken && settings.backendUrl) {
    try {
      const response = await fetch(
        `${settings.backendUrl}/api/auth/me?token=${encodeURIComponent(settings.accessToken)}`
      );
      if (response.ok) {
        const user = await response.json();
        showLoggedIn(user.username || settings.username, settings.backendUrl);
        return;
      }
    } catch (error) {
      // Show the login form when the backend cannot validate the stored token.
    }
    await clearSession();
  }
  showLoggedOut();
}

function showLoggedIn(username, backendUrl) {
  sessionSummary.textContent = `${username} logged in at ${backendUrl}`;
  session.classList.remove('hidden');
  form.classList.add('hidden');
}

function showLoggedOut() {
  session.classList.add('hidden');
  form.classList.remove('hidden');
}

async function clearSession() {
  await browser.storage.local.remove(['accessToken', 'tokenType', 'tokenExpiresAt', 'refreshToken']);
}

async function saveSettingsAndLogin(event) {
  event.preventDefault();
  const backendUrl = backendUrlInput.value.trim();
  const username = usernameInput.value.trim();
  const password = passwordInput.value;

  if (!backendUrl || !username || !password) {
    setStatus('Please fill in all fields', true);
    return;
  }

  try {
    const response = await fetch(`${backendUrl}/api/auth/login`, {
      method: 'POST',
      headers: { 'Content-Type': 'application/json' },
      body: JSON.stringify({ username, password })
    });

    if (!response.ok) {
      throw new Error('Login failed');
    }

    const data = await response.json();
    await browser.storage.local.set({
      backendUrl,
      username,
      accessToken: data.access_token,
      tokenType: data.token_type,
      tokenExpiresAt: data.expires_at,
      refreshToken: data.refresh_token,
    });

    showLoggedIn(data.user?.username || username, backendUrl);
    passwordInput.value = '';
    setStatus('Logged in successfully');
  } catch (error) {
    setStatus('Unable to log in. Check backend URL and credentials.', true);
  }
}

async function signOut() {
  const settings = await browser.storage.local.get(['accessToken']);
  if (settings.accessToken) {
    await fetch(`${backendUrlInput.value.trim()}/api/auth/logout`, {
      method: 'POST',
      headers: { 'Content-Type': 'application/json' },
      body: JSON.stringify({ token: settings.accessToken }),
    }).catch(() => undefined);
  }
  await clearSession();
  showLoggedOut();
  setStatus('Signed out');
}

form.addEventListener('submit', saveSettingsAndLogin);
signOutButton.addEventListener('click', signOut);
loadSettings();