import os
from datetime import datetime, timezone

from fastapi import Request, Depends
import aiosqlite

from app.database import get_db

ADMIN_EMAIL = os.getenv("ADMIN_EMAIL", "")
SESSION_COOKIE = "session"


class NeedsLogin(Exception):
    pass


class NeedsOnboarding(Exception):
    pass


class NeedsAdmin(Exception):
    pass


async def get_current_user(request: Request, db: aiosqlite.Connection = Depends(get_db)):
    token = request.cookies.get(SESSION_COOKIE)
    if not token:
        raise NeedsLogin()

    async with db.execute(
        """
        SELECT u.id, u.email, u.name, u.handicap, u.avatar, u.is_onboarded
        FROM sessions s
        JOIN users u ON s.user_id = u.id
        WHERE s.token = ? AND s.expires_at > ?
        """,
        (token, datetime.now(timezone.utc).isoformat()),
    ) as cursor:
        row = await cursor.fetchone()

    if row is None:
        raise NeedsLogin()

    user = dict(row)

    if not user["is_onboarded"] and request.url.path not in ("/onboarding", "/logout"):
        raise NeedsOnboarding()

    return user


async def require_admin(user: dict = Depends(get_current_user)):
    if user["email"] != ADMIN_EMAIL:
        raise NeedsAdmin()
    return user