yaoyao/src/client/api/auth.ts

import { serverIdentityValue } from './serverIdentity'
import type { BootstrapResponse, CurrentUser, JsonValue, Profile } from '@shared/types'
import { apiRequest, setApiCsrfToken, unwrapData } from './client'
import { bool, normalizeProfile, normalizeUser, record, string, values } from '@/utils/normalize'
import { getProfileIdentities } from './profiles'

function normalizeBootstrap(payload: unknown): BootstrapResponse {
  const root = record(unwrapData(payload as never))
  const status = record(root.status)
  const authRequired = bool(root.authRequired ?? root.auth_required ?? status.authRequired ?? status.auth_required)
  const rawUser = root.user ?? root.identity
  const profiles = values(root.profiles).map(normalizeProfile)
  const csrfToken = string(root.csrfToken ?? root.csrf_token ?? root.csrf)
  const response: BootstrapResponse = {
    status: string(status.state ?? root.state) || undefined,
    authRequired,
    registrationAvailable: bool(root.registrationAvailable),
    setupRequired: bool(root.setupRequired ?? root.setup_required),
    profiles,
    csrfToken,
    insecureLan: bool(root.insecureLan ?? root.insecure_lan),
    groupUploadsEnabled: bool(root.groupUploadsEnabled ?? root.group_uploads_enabled),
    upstreamReady: bool(root.upstreamReady ?? root.upstream_ready),
    upstreamError: string(root.upstreamError ?? root.upstream_error) || undefined,
    serverKind: string(root.serverKind ?? root.server_kind) || undefined,
    serverIdentity: serverIdentityValue(root.serverIdentity),
  }
  if (rawUser) response.user = normalizeUser(rawUser)
  setApiCsrfToken(csrfToken, response.user?.id ?? (authRequired ? null : 'local'))
  return response
}

export async function bootstrap(): Promise<BootstrapResponse> {
  return normalizeBootstrap(await apiRequest<unknown>('/api/app/bootstrap', { csrf: false }))
}

export interface LoginInput {
  username: string
  password: string
  provider?: string
}

export async function login(input: LoginInput): Promise<BootstrapResponse> {
  const payload = await apiRequest<unknown>('/api/app/login', {
    method: 'POST',
    body: { ...input, next: '/' } as JsonValue,
    notifyUnauthorized: false,
  })
  const response = normalizeBootstrap(payload)
  if (!response.user && response.authRequired) return bootstrap()
  return response
}

export async function setup(input: LoginInput): Promise<BootstrapResponse> {
  return normalizeBootstrap(await apiRequest<unknown>('/api/app/setup', {
    method: 'POST',
    body: input as unknown as JsonValue,
    notifyUnauthorized: false,
  }))
}

export async function logout(): Promise<void> {
  await apiRequest('/api/app/logout', { method: 'POST', body: {}, notifyUnauthorized: false })
  setApiCsrfToken('')
}

export async function fetchProfiles(): Promise<Profile[]> {
  const payload = record(unwrapData(await apiRequest<unknown>('/api/app/profiles')))
  return values(payload.profiles ?? payload.items ?? payload).map(normalizeProfile)
}

export async function fetchProfileIdentities(profiles: Profile[]): Promise<Record<string, { displayName: string; avatar: string }>> {
  return getProfileIdentities(profiles)
}

export async function fetchCurrentUser(): Promise<CurrentUser | undefined> {
  const response = await bootstrap()
  return response.user
}

export async function changeCredentials(input: {
  currentPassword: string
  newPassword: string
  username?: string
}): Promise<CurrentUser> {
  const payload = record(unwrapData(await apiRequest<unknown>('/api/app/account/credentials', {
    method: 'PUT', body: input as unknown as JsonValue, notifyUnauthorized: false,
  })))
  return normalizeUser(payload.user ?? payload)
}

export async function updateAccountAvatar(avatar: string | null): Promise<CurrentUser> {
  const payload = record(unwrapData(await apiRequest<unknown>('/api/app/account/avatar', {
    method: 'PUT', body: { avatar } as unknown as JsonValue,
  })))
  return normalizeUser(payload.user ?? payload)
}

export async function register(input: LoginInput): Promise<void> {
  await bootstrap()
  await apiRequest('/api/app/register', { method: 'POST', body: { username: input.username, password: input.password }, notifyUnauthorized: false })
}