// 用户认证 & LDAP
// 从 services/api.ts 拆分 — Q3 api.ts 模块化

import { http, getApiBase, type ListResponse } from '@/utils/request';
import { useUserStore } from '@/store';

export const userApi = {
  login: async (username: string, password: string) => {
    return http.post<{ token: string; expires_in: number; user: unknown; permissions?: string[] }>(
      '/auth/login',
      { username, password }
    );
  },
  getMyPermissions: async () => {
    return http.get<{ permissions: string[]; is_admin: boolean }>('/user/permissions');
  },
  register: async (data: { username: string; password: string; nickname?: string; email?: string }) => {
    return http.post('/auth/register', data);
  },
  getProfile: async () => {
    return http.get('/user/profile');
  },
  updateProfile: async ( data: any) => {
    return http.put('/user/profile', data);
  },
  changePassword: async (data: { old_password: string; new_password: string }) => {
    return http.put('/user/password', data);
  },
  getUsers: async (params?: { page?: number; page_size?: number; keyword?: string }) => {
    return http.get<ListResponse>('/admin/users', params);
  },
  createUser: async ( data: any) => {
    return http.post('/admin/users', data);
  },
  updateUser: async (id: number | string, data: any) => {
    return http.put(`/admin/users/${id}`, data);
  },
  deleteUser: async (id: number | string) => {
    return http.delete(`/admin/users/${id}`);
  },
  batchImport: async (data: { users: any[]; skip_existing?: boolean }) => {
    return http.post('/admin/users/batch-import', data);
  },
  downloadTemplate: () => {
    const token = useUserStore.getState().token || localStorage.getItem('token') || '';
    window.open(`${getApiBase()}/admin/users/import-template?token=${token}`, '_blank');
  },
  // 角色列表 // Logan.Li
  getRoles: async () => {
    return http.get<ListResponse>('/user/roles');
  },
  // 角色管理（管理员） // Logan.Li
  createRole: async (data: { name: string; code: string; description?: string; permission_ids?: number[] }) => {
    return http.post('/admin/roles', data);
  },
  updateRole: async (id: number | string, data: { name?: string; code?: string; description?: string; permission_ids?: number[] }) => {
    return http.put(`/admin/roles/${id}`, data);
  },
  deleteRole: async (id: number | string) => {
    return http.delete(`/admin/roles/${id}`);
  },
  // 权限列表（供角色权限选择）
  getPermissions: async () => {
    return http.get<ListResponse>('/admin/permissions');
  },
};

// ==================== LDAP 配置 API ====================

export const ldapApi = {
  getConfig: async () => {
    return http.get('/admin/ldap-config');
  },
  updateConfig: async ( data: any) => {
    return http.put('/admin/ldap-config', data);
  },
  testConnection: async (data?: { test_user?: string; test_password?: string }) => {
    return http.post('/admin/ldap-config/test', data || {});
  },
  listUsers: async (ouDn?: string) => {
    return http.post('/admin/ldap-config/users', { ou_dn: ouDn || '' });
  },
  batchImport: async ( users: any[]) => {
    return http.post('/admin/ldap-config/import', { users });
  },
  listOUs: async () => {
    return http.post('/admin/ldap-config/ou-list', {});
  },
  createOU: async (data: { ou_name: string; parent_dn?: string; description?: string }) => {
    return http.post('/admin/ldap-config/create-ou', data);
  },
  createUser: async (data: { username: string; password: string; display_name?: string; email?: string; ou_dn?: string }) => {
    return http.post('/admin/ldap-config/create-user', data);
  },
  deleteUser: async (dn: string) => {
    return http.post('/admin/ldap-config/delete-user', { dn });
  },
  updateUser: async (data: { dn: string; cn?: string; mail?: string; phone?: string; title?: string }) => {
    return http.post('/admin/ldap-config/update-user', data);
  },
};

// ==================== 仪表盘 API ====================