"""Authentication endpoints: login, register, whoami."""
from fastapi import APIRouter, Depends, HTTPException, status

from .models import UserCreate, UserLogin, Token, UserOut
from .service import authenticate_user, create_access_token, create_user
from .dependencies import get_current_user

router = APIRouter(prefix="/api/auth", tags=["auth"])


@router.post("/login", response_model=Token)
async def login(body: UserLogin):
    if not authenticate_user(body.username, body.password):
        raise HTTPException(
            status_code=status.HTTP_401_UNAUTHORIZED,
            detail="Incorrect username or password",
        )
    token = create_access_token({"sub": body.username})
    return Token(access_token=token)


@router.post("/register", response_model=UserOut, status_code=status.HTTP_201_CREATED)
async def register(body: UserCreate):
    if not create_user(body.username, body.password):
        raise HTTPException(
            status_code=status.HTTP_409_CONFLICT,
            detail="Username already exists",
        )
    return UserOut(username=body.username)


@router.get("/me", response_model=UserOut)
async def me(username: str = Depends(get_current_user)):
    return UserOut(username=username)