from flask import Blueprint, render_template, redirect, url_for, flash, request
from flask_login import login_user, logout_user, login_required, current_user

from app.extensions import limiter
from app.models.user import User
from app.services.activity_logger import log_action
from app.blueprints.auth.forms import LoginForm

bp = Blueprint("auth", __name__, url_prefix="")


@bp.route("/login", methods=["GET", "POST"])
@limiter.limit("10 per minute")
def login():
    if current_user.is_authenticated:
        return redirect(url_for("dashboard.index"))

    form = LoginForm()
    if form.validate_on_submit():
        username = form.username.data.strip()
        user = User.query.filter_by(username=username, is_active_flag=True).first()
        if user and user.check_password(form.password.data):
            login_user(user, remember=False)
            log_action(user, "login")
            next_url = request.args.get("next")
            return redirect(next_url or url_for("dashboard.index"))
        flash("نام کاربری یا رمز عبور اشتباه است", "error")

    return render_template("auth/login.html", form=form)


@bp.route("/logout")
@login_required
def logout():
    log_action(current_user, "logout")
    logout_user()
    return redirect(url_for("auth.login"))