"""鉴权路由。"""
from __future__ import annotations

import secrets

from fastapi import APIRouter, HTTPException

from config import get_settings
from core.security import create_access_token
from schemas.auth import LoginRequest, LoginResponse

router = APIRouter(prefix="/api/auth", tags=["auth"])


@router.post("/login", response_model=LoginResponse)
async def login(body: LoginRequest) -> LoginResponse:
    settings = get_settings()
    if not settings.app_token:
        raise HTTPException(status_code=500, detail="服务端未配置 APP_TOKEN")
    if not secrets.compare_digest(body.token, settings.app_token):
        raise HTTPException(status_code=401, detail="Token 不正确")
    token, expires_at = create_access_token("app")
    return LoginResponse(access_token=token, expires_at=expires_at)