@page "/account/login"
@layout AuthenticationLayout
@using Indotalent.Shared.Consts
@using Microsoft.JSInterop
@using Indotalent.Infrastructure.Authentication.Identity
@using Microsoft.Extensions.Options
@inject IJSRuntime JSRuntime
@inject IOptions<IdentitySettingsModel> IdentityOptions
@inject NavigationManager Navigation
@inject ISnackbar Snackbar

<PageTitle>Sign In - @GlobalConsts.AppInitial</PageTitle>

<style>
    .page-header {
        text-align: center;
        margin-bottom: 1.5rem;
    }
    .page-header h2 {
        font-size: 1.5rem;
        font-weight: 700;
        color: #1e293b;
        margin: 0 0 0.25rem 0;
    }
    .page-header p {
        font-size: 0.875rem;
        color: #64748b;
        margin: 0;
    }
    .form-label {
        font-size: 0.8125rem;
        font-weight: 600;
        color: #475569;
        margin-bottom: 0.375rem;
        margin-left: 0.25rem;
    }
    .form-label-row {
        display: flex;
        align-items: center;
        justify-content: space-between;
        margin-bottom: 0.25rem;
    }
    .forgot-link {
        font-size: 0.75rem;
        font-weight: 600;
        color: #594AE2;
        text-decoration: none;
        cursor: pointer;
    }
    .forgot-link:hover {
        color: #4235B8;
        text-decoration: underline;
    }
    .remember-row {
        display: flex;
        align-items: center;
        gap: 0.5rem;
    }
    .divider-or {
        display: flex;
        align-items: center;
        gap: 1rem;
        margin: 1.25rem 0;
    }
    .divider-or::before,
    .divider-or::after {
        content: '';
        flex: 1;
        height: 1px;
        background: #e2e8f0;
    }
    .divider-or span {
        font-size: 0.75rem;
        color: #94a3b8;
        font-weight: 500;
        text-transform: uppercase;
        letter-spacing: 0.05em;
    }
    .auth-link {
        color: #594AE2;
        font-weight: 600;
        text-decoration: none;
        cursor: pointer;
    }
    .auth-link:hover {
        color: #4235B8;
        text-decoration: underline;
    }
    .btn-google {
        display: inline-flex;
        align-items: center;
        justify-content: center;
        gap: 0.5rem;
        padding: 0.625rem 1rem;
        width: 100%;
        background: white;
        color: #475569;
        font-size: 0.875rem;
        font-weight: 500;
        border-radius: 0.5rem;
        border: 1.5px solid #e2e8f0;
        transition: all 0.2s;
        cursor: pointer;
        text-transform: none;
    }
    .btn-google:hover {
        border-color: #cbd5e1;
        background: #f8fafc;
    }
    .btn-submit {
        text-transform: none;
        border-radius: 0.5rem;
        height: 48px;
        font-weight: 600;
        font-size: 0.875rem;
        letter-spacing: 0;
    }
</style>

<div class="page-header">
    <h2>Sign In</h2>
    <p>Enter your credentials to access your account</p>
</div>

<MudForm @ref="form" @bind-IsValid="@success" Validation="@(new Func<EditContext, Task<bool>>(ValidateForm))" Class="w-100 px-2">

    <div class="mb-3">
        <div class="form-label">Email Address</div>
        <MudTextField T="string"
                      @bind-Value="model.Email"
                      Variant="Variant.Outlined"
                      Placeholder="you@company.com"
                      Margin="Margin.Dense"
                      Adornment="Adornment.Start"
                      AdornmentIcon="@Icons.Material.Filled.Email"
                      Required="true"
                      For="@(() => model.Email)"
                      Style="border-radius: 0.5rem;" />
    </div>

    <div class="mb-3">
        <div class="form-label-row">
            <span class="form-label" style="margin-bottom:0;">Password</span>
            <a class="forgot-link" href="/account/forgot-password">Forgot password?</a>
        </div>
        <MudTextField T="string"
                      @bind-Value="model.Password"
                      Variant="Variant.Outlined"
                      Placeholder="Enter your password"
                      Margin="Margin.Dense"
                      Adornment="Adornment.Start"
                      AdornmentIcon="@Icons.Material.Filled.Lock"
                      InputType="@(showPassword ? InputType.Text : InputType.Password)"
                      AdornmentEndIcon="@(showPassword? Icons.Material.Filled.Visibility : Icons.Material.Filled.VisibilityOff)"
                      OnAdornmentEndClick="() => showPassword = !showPassword"
                      Required="true"
                      For="@(() => model.Password)"
                      Style="border-radius: 0.5rem;" />
    </div>

    <div class="remember-row mb-4">
        <MudCheckBox T="bool"
                     @bind-Value="rememberMe"
                     Label="Remember me"
                     Color="Color.Primary"
                     Dense="true" />
    </div>

    <MudButton Variant="Variant.Filled"
               Color="Color.Primary"
               Size="Size.Large"
               FullWidth="true"
               Disabled="!success || isProcessing"
               OnClick="HandleLogin"
               Class="btn-submit">
        @if (isProcessing)
        {
            <MudProgressCircular Class="ms-n1" Size="Size.Small" Indeterminate="true" />
            <span class="ms-2">Signing in...</span>
        }
        else
        {
            <span>Sign In</span>
        }
    </MudButton>

    @if (IdentityOptions.Value.SsoFirebase.IsUsed)
    {
        <div class="divider-or"><span>Or continue with</span></div>

        <MudButton Variant="Variant.Outlined"
                   FullWidth="true"
                   Size="Size.Large"
                   Disabled="isProcessing"
                   OnClick="HandleFirebaseGoogleLogin"
                   StartIcon="@Icons.Custom.Brands.Google"
                   Class="btn-google">
            Sign in with Google
        </MudButton>
    }
</MudForm>

<div style="text-align: center; margin-top: 1.5rem;">
    <MudText Typo="Typo.body2">
        Don't have an account?
        <a class="auth-link ms-1" href="/account/register">Create one</a>
    </MudText>
</div>

@code {
    private MudForm form = default!;
    private bool success;
    private bool isProcessing;
    private bool showPassword;
    private bool rememberMe;
    private LoginModel model = new();

    private async Task<bool> ValidateForm(EditContext context) => await Task.FromResult(true);

    private async Task HandleLogin()
    {
        await form.Validate();
        if (!success) return;
        isProcessing = true;
        StateHasChanged();

        var result = await JSRuntime.InvokeAsync<ApiJSRuntimeResponse>("apiAccountSignIn", model.Email, model.Password, rememberMe);
        ProcessLoginResult(result);
    }

    private async Task HandleFirebaseGoogleLogin()
    {
        isProcessing = true;
        StateHasChanged();

        var firebaseUser = await JSRuntime.InvokeAsync<FirebaseUserResponse>("signInWithGoogle");

        if (firebaseUser == null || string.IsNullOrEmpty(firebaseUser.Email))
        {
            Snackbar.Add("Google Sign-In failed or cancelled.", Severity.Error);
            isProcessing = false;
            return;
        }

        var checkResult = await JSRuntime.InvokeAsync<ActiveCheckResponse>("apiCheckActiveUser", firebaseUser.Email);
        bool openForPublic = IdentityOptions.Value.SsoFirebase.OpenForPublic;

        if (checkResult.Exists)
        {
            if (checkResult.IsActive)
            {
                await ExecuteSsoSignIn(firebaseUser.Email);
            }
            else
            {
                Snackbar.Add("Account is registered but not active.", Severity.Warning);
                isProcessing = false;
            }
        }
        else
        {
            var registerResult = await JSRuntime.InvokeAsync<ApiJSRuntimeResponse>(
                "apiAccountSignUpSso",
                firebaseUser.Email,
                firebaseUser.Email,
                openForPublic
            );

            if (registerResult.Status == 200)
            {
                if (openForPublic)
                {
                    await ExecuteSsoSignIn(firebaseUser.Email);
                }
                else
                {
                    Snackbar.Add("Registration successful. Please wait for admin approval.", Severity.Info);
                    isProcessing = false;
                }
            }
            else
            {
                Snackbar.Add("Failed to auto-register account.", Severity.Error);
                isProcessing = false;
            }
        }
    }

    private async Task ExecuteSsoSignIn(string email)
    {
        var result = await JSRuntime.InvokeAsync<ApiJSRuntimeResponse>("apiAccountSsoSignIn", email);
        ProcessLoginResult(result);
    }

    private void ProcessLoginResult(ApiJSRuntimeResponse result)
    {
        if (result.Status == 200)
        {
            Snackbar.Add(result.Title ?? "Login successful!", Severity.Success);
            Task.Run(async () =>
            {
                await Task.Delay(500);
                Navigation.NavigateTo("/account/tenant-selection", forceLoad: true);
            });
        }
        else
        {
            Snackbar.Add(result.Title ?? "Sign in failed.", Severity.Error);
            isProcessing = false;
        }
        StateHasChanged();
    }

    private class ApiJSRuntimeResponse { public int? Status { get; set; } public string? Title { get; set; } public string? Message { get; set; } }
    private class FirebaseUserResponse { public string? Email { get; set; } }
    private class ActiveCheckResponse { public bool Exists { get; set; } public bool IsActive { get; set; } }
    private class LoginModel { public string Email { get; set; } = ""; public string Password { get; set; } = ""; }
}

<script>
    window.apiAccountSignIn = async (email, password, rememberMe) => {
        try {
            const response = await fetch('/api/account/signin', {
                method: 'POST',
                headers: { 'Content-Type': 'application/json' },
                body: JSON.stringify({ email, password, rememberMe }),
                credentials: 'include'
            });
            const result = await response.json();
            return { status: response.status, title: result.title };
        } catch (error) {
            return { status: 500, title: 'Network error' };
        }
    };

    window.apiCheckActiveUser = async (email) => {
        try {
            const response = await fetch(`/api/account/active-user-exists?email=${encodeURIComponent(email)}`);
            return await response.json();
        } catch (error) {
            return { exists: false, isActive: false };
        }
    };

    window.apiAccountSignUpSso = async (email, fullName, isOpenForPublic) => {
        try {
            const response = await fetch('/api/account/signup', {
                method: 'POST',
                headers: { 'Content-Type': 'application/json' },
                body: JSON.stringify({
                    email: email,
                    fullName: fullName,
                    password: 'SSO_AUTO_GENERATED_PASSWORD_123!',
                    isActive: isOpenForPublic,
                    emailConfirmed: isOpenForPublic
                })
            });
            const result = await response.json();
            return { status: response.status, message: result.message };
        } catch (error) {
            return { status: 500 };
        }
    };

    window.apiAccountSsoSignIn = async (email) => {
        try {
            const response = await fetch(`/api/account/signin-sso?email=${encodeURIComponent(email)}`, {
                method: 'POST',
                headers: { 'Content-Type': 'application/json' },
                credentials: 'include'
            });
            const result = await response.json();
            return { status: response.status, title: result.title };
        } catch (error) {
            return { status: 500, title: 'SSO Network error' };
        }
    };
</script>