from pydantic import BaseModel
from fastapi import Depends, FastAPI, APIRouter, HTTPException, status
from fastapi.security import OAuth2PasswordBearer, OAuth2PasswordRequestForm
from passlib.context import CryptContext
from jose import JWTError, jwt
from datetime import datetime, timedelta
from src.services.users.users import *
from fastapi import Cookie, FastAPI
from src.security.security import *
from fastapi_jwt_auth import AuthJWT
from fastapi_jwt_auth.exceptions import AuthJWTException

oauth2_scheme = OAuth2PasswordBearer(tokenUrl="/api/auth/login")

#### JWT Auth ####################################################
class Settings(BaseModel):
    authjwt_secret_key: str = "secret"
    authjwt_token_location = {"cookies"}
    authjwt_cookie_csrf_protect = False
    authjwt_access_token_expires = False # (pre-alpha only) # TODO: set to 1 hour 
    authjwt_cookie_samesite = "none"
    authjwt_cookie_secure = True
    
    
@AuthJWT.load_config # type: ignore
def get_config():
    return Settings()



#### JWT Auth ####################################################



#### Classes ####################################################


class Token(BaseModel):
    access_token: str
    token_type: str


class TokenData(BaseModel):
    username: str | None = None

#### Classes ####################################################


async def authenticate_user(request: Request,email: str, password: str):
    user = await security_get_user(request, email)
    if not user:
        return False
    if not await security_verify_password(password, user.password):
        return False
    return user


def create_access_token(data: dict, expires_delta: timedelta | None = None):
    to_encode = data.copy()
    if expires_delta:
        expire = datetime.utcnow() + expires_delta
    else:
        expire = datetime.utcnow() + timedelta(minutes=15)
    to_encode.update({"exp": expire})
    encoded_jwt = jwt.encode(to_encode, SECRET_KEY, algorithm=ALGORITHM)
    return encoded_jwt




async def get_current_user(request: Request, Authorize: AuthJWT = Depends()):
    credentials_exception = HTTPException(
        status_code=status.HTTP_401_UNAUTHORIZED,
        detail="Could not validate credentials",
        headers={"WWW-Authenticate": "Bearer"},
    )
    
    try:
        Authorize.jwt_required()
        username = Authorize.get_jwt_subject()
        token_data = TokenData(username=username)  # type: ignore
    except JWTError:
        raise credentials_exception
    user = await security_get_user(request, email=token_data.username) # type: ignore # treated as an email 
    if user is None:
        raise credentials_exception
    return PublicUser(**user.dict())