"""Auth routes - login, logout, password change"""

from flask import Blueprint, render_template, request, redirect, url_for, session, flash, jsonify
from web.auth import check_password, hash_password, load_credentials, save_credentials

auth_bp = Blueprint('auth', __name__)


# Login is disabled — AutarchOS is a single-user appliance. The endpoints
# below are kept so existing url_for('auth.*') calls and the companion app
# API still resolve; they auto-grant a session.

@auth_bp.route('/login', methods=['GET', 'POST'])
def login():
    session['user'] = 'admin'
    next_url = request.args.get('next') or url_for('dashboard.index')
    return redirect(next_url)


@auth_bp.route('/api/login', methods=['POST'])
def api_login():
    session['user'] = 'admin'
    return jsonify({'ok': True, 'user': 'admin'})


@auth_bp.route('/api/check', methods=['GET'])
def api_check():
    return jsonify({'ok': True, 'user': session.get('user', 'admin')})


@auth_bp.route('/logout')
def logout():
    # No-op: logout makes no sense without a login wall. Bounce home.
    return redirect(url_for('dashboard.index'))