from django.shortcuts import redirect
from django.views import View
from rest_framework import status
from rest_framework.views import APIView
from rest_framework.response import Response
from rest_framework.permissions import AllowAny
from rest_framework_simplejwt.tokens import RefreshToken
from social_django.utils import load_strategy, load_backend
from social_core.backends.oauth import BaseOAuth2
from social_core.exceptions import AuthException, AuthForbidden
from .serializers import SocialLoginSerializer, CustomUserSerializer
import json


class SocialLoginView(APIView):
    """
    Social authentication endpoint.
    Accepts access_token from social provider and returns JWT tokens.
    
    POST /api/v1/auth/social/<provider>/
    Body: { "access_token": "..." }
    
    Supported providers: google-oauth2, github, facebook
    """
    permission_classes = [AllowAny]
    serializer_class = SocialLoginSerializer
    
    def post(self, request, provider):
        """
        Authenticate user with social provider token.
        """
        # Validate provider
        valid_providers = ['google-oauth2', 'github', 'facebook']
        if provider not in valid_providers:
            return Response(
                {'error': f'Invalid provider. Must be one of: {", ".join(valid_providers)}'},
                status=status.HTTP_400_BAD_REQUEST
            )
        
        # Get access_token from request
        access_token = request.data.get('access_token')
        id_token = request.data.get('id_token', None)
        
        if not access_token:
            return Response(
                {'error': 'access_token is required'},
                status=status.HTTP_400_BAD_REQUEST
            )
        
        try:
            # Load social auth strategy and backend
            strategy = load_strategy(request)
            backend = load_backend(
                strategy=strategy,
                name=provider,
                redirect_uri=None
            )
            
            # Verify token and get user
            if isinstance(backend, BaseOAuth2):
                # For OAuth2 providers, use access_token to get user info
                user = backend.do_auth(access_token)
            else:
                return Response(
                    {'error': 'Unsupported authentication backend'},
                    status=status.HTTP_400_BAD_REQUEST
                )
            
            if not user:
                return Response(
                    {'error': 'Authentication failed. Invalid token.'},
                    status=status.HTTP_401_UNAUTHORIZED
                )
            
            # Check if user is active
            if not user.is_active:
                # This shouldn't happen for social auth users, but just in case
                user.is_active = True
                user.save(update_fields=['is_active'])
            
            # Generate JWT tokens
            refresh = RefreshToken.for_user(user)
            
            # Serialize user data
            user_serializer = CustomUserSerializer(user)
            
            return Response({
                'access': str(refresh.access_token),
                'refresh': str(refresh),
                'user': user_serializer.data
            }, status=status.HTTP_200_OK)
            
        except AuthForbidden:
            return Response(
                {'error': 'Authentication forbidden. Email not provided by provider or permission denied.'},
                status=status.HTTP_403_FORBIDDEN
            )
        except AuthException as e:
            return Response(
                {'error': f'Authentication error: {str(e)}'},
                status=status.HTTP_400_BAD_REQUEST
            )
        except Exception as e:
            return Response(
                {'error': f'An error occurred during authentication: {str(e)}'},
                status=status.HTTP_500_INTERNAL_SERVER_ERROR
            )


class SocialAuthCallbackView(View):
    """
    Callback view for OAuth flow completion.
    After successful authentication, redirects to frontend with tokens.
    """
    permission_classes = [AllowAny]
    authentication_classes = []  # No authentication required for callback
    
    def get(self, request):
        """Handle OAuth callback and redirect to frontend with JWT tokens."""
        from django.http import HttpResponseRedirect
        
        # Get the authenticated user from the session
        user = request.user
        
        if user and user.is_authenticated:
            # Generate JWT tokens
            refresh = RefreshToken.for_user(user)
            
            # Redirect to SPA with tokens (for testing)
            redirect_url = f"/api/v1/spa/?access={str(refresh.access_token)}&refresh={str(refresh)}"
            
            print(f"[OAuth Callback] Redirecting to: {redirect_url}")
            
            return HttpResponseRedirect(redirect_url)
        else:
            # Authentication failed
            return HttpResponseRedirect("/api/v1/auth/social/error/?error=authentication_failed")


class SocialAuthSuccessView(APIView):
    """
    Success page after social authentication.
    Displays tokens for testing purposes.
    """
    permission_classes = [AllowAny]
    authentication_classes = []  # No authentication required
    
    def get(self, request):
        """Display success page with tokens."""
        access_token = request.GET.get('access', '')
        refresh_token = request.GET.get('refresh', '')
        
        # Also check if user is in session
        if not access_token and request.user.is_authenticated:
            refresh = RefreshToken.for_user(request.user)
            access_token = str(refresh.access_token)
            refresh_token = str(refresh)
        
        html_content = f"""
        <!DOCTYPE html>
        <html>
        <head>
            <title>Authentication Successful</title>
            <style>
                body {{
                    font-family: 'Segoe UI', Tahoma, Geneva, Verdana, sans-serif;
                    background: linear-gradient(135deg, #667eea 0%, #764ba2 100%);
                    min-height: 100vh;
                    display: flex;
                    justify-content: center;
                    align-items: center;
                    padding: 20px;
                }}
                .container {{
                    background: white;
                    border-radius: 20px;
                    box-shadow: 0 20px 60px rgba(0,0,0,0.3);
                    padding: 40px;
                    max-width: 600px;
                    width: 100%;
                }}
                h1 {{
                    color: #28a745;
                    text-align: center;
                    margin-bottom: 20px;
                }}
                .success-icon {{
                    text-align: center;
                    font-size: 64px;
                    margin-bottom: 20px;
                }}
                .token-box {{
                    background: #f8f9fa;
                    border: 2px solid #e1e4e8;
                    border-radius: 8px;
                    padding: 15px;
                    margin: 15px 0;
                    word-break: break-all;
                }}
                .token-label {{
                    font-weight: bold;
                    color: #333;
                    margin-bottom: 5px;
                }}
                .token-value {{
                    font-family: 'Courier New', monospace;
                    font-size: 12px;
                    color: #666;
                    background: white;
                    padding: 10px;
                    border-radius: 4px;
                    overflow-x: auto;
                }}
                .btn {{
                    display: block;
                    width: 100%;
                    padding: 12px;
                    margin-top: 20px;
                    background: #667eea;
                    color: white;
                    border: none;
                    border-radius: 8px;
                    font-size: 16px;
                    cursor: pointer;
                    transition: background 0.3s;
                }}
                .btn:hover {{
                    background: #5568d3;
                }}
            </style>
        </head>
        <body>
            <div class="container">
                <div class="success-icon">✅</div>
                <h1>Authentication Successful!</h1>
                <p style="text-align: center; color: #666; margin-bottom: 30px;">
                    You have successfully authenticated with your social account.
                </p>
                
                <div class="token-box">
                    <div class="token-label">Access Token:</div>
                    <div class="token-value" id="accessToken">{access_token}</div>
                </div>
                
                <div class="token-box">
                    <div class="token-label">Refresh Token:</div>
                    <div class="token-value" id="refreshToken">{refresh_token}</div>
                </div>
                
                <button class="btn" onclick="copyTokens()">Copy Tokens to Clipboard</button>
                <button class="btn" onclick="window.close()" style="background: #6c757d;">Close Window</button>
            </div>
            
            <script>
                function copyTokens() {{
                    const tokens = {{
                        access: "{access_token}",
                        refresh: "{refresh_token}"
                    }};
                    
                    navigator.clipboard.writeText(JSON.stringify(tokens, null, 2))
                        .then(() => alert('Tokens copied to clipboard!'))
                        .catch(err => alert('Failed to copy: ' + err));
                }}
            </script>
        </body>
        </html>
        """
        
        from django.http import HttpResponse
        return HttpResponse(html_content)