OpenFlare/frontend/lib/services/auth/auth.service.ts

import type {InternalAxiosRequestConfig} from 'axios';
import {BaseService} from '@/lib/services/core';
import type {
  AuthSource,
  ChangePasswordRequest,
  ExternalAccountBinding,
  LoginRequest,
  OAuthAuthorizeResponse,
  OAuthCallbackRequest,
  OAuthCallbackResult,
  OAuthLoginUrlResponse,
  RegisterRequest,
  UpdateProfileRequest,
  User,
} from './types';

/**
 * 认证服务
 * 处理 OAuth 认证、用户信息获取、登出等
 */
export class AuthService extends BaseService {
  protected static readonly basePath = '/api/v1';

  /**
   * 获取 OAuth 登录 URL
   * @returns OAuth 授权 URL
   * @throws {ApiErrorBase} 当获取失败时
   *
   * @example
   * ```typescript
   * const url = await AuthService.getLoginUrl();
   * window.location.href = url; // 重定向到 OAuth 授权页面
   * ```
   */
  static async getLoginUrl(): Promise<OAuthLoginUrlResponse> {
    return this.get<OAuthLoginUrlResponse>('/oauth/login');
  }

  static async getAuthSources(): Promise<AuthSource[]> {
    return this.get<AuthSource[]>('/oauth/sources');
  }

  static async getAuthorizeUrl(source: string, purpose: 'login' | 'bind' = 'login'): Promise<OAuthAuthorizeResponse> {
    return this.get<OAuthAuthorizeResponse>(`/oauth/${encodeURIComponent(source)}/authorize?purpose=${purpose}`);
  }

  /**
   * 处理 OAuth 回调
   * @param request - OAuth 回调参数（state 和 code）
   * @throws {ApiErrorBase} 当回调处理失败时
   * @throws {ValidationError} 当 state 无效时
   *
   * @example
   * ```typescript
   * // 在回调页面获取 URL 参数
   * const params = new URLSearchParams(window.location.search);
   * const state = params.get('state');
   * const code = params.get('code');
   *
   * if (state && code) {
   *   await AuthService.handleCallback({ state, code });
   *   // 登录成功，跳转到首页
   *   router.push('/home');
   * }
   * ```
   */
  static async handleCallback(request: OAuthCallbackRequest): Promise<OAuthCallbackResult> {
    return this.post<OAuthCallbackResult>('/oauth/callback', request);
  }

  /**
   * 获取当前登录用户信息
   * @returns 用户信息
   * @throws {UnauthorizedError} 当未登录时
   *
   * @example
   * ```typescript
   * try {
   *   const user = await AuthService.getUserInfo();
   *   console.log('当前用户:', user.username);
   * } catch (error) {
   *   if (error instanceof UnauthorizedError) {
   *     // 跳转到登录页
   *     router.push('/login');
   *   }
   * }
   * ```
   */
  static async getUserInfo(): Promise<User> {
    return this.get<User>('/user-info');
  }

  /**
   * 用户登出
   * @throws {ApiErrorBase} 当登出失败时
   *
   * @example
   * ```typescript
   * await AuthService.logout();
   * // 清除本地状态
   * router.push('/login');
   * ```
   */
  static async logout(): Promise<void> {
    await this.get<void>('/oauth/logout');
  }

  static async login(request: LoginRequest, headers?: Record<string, string>): Promise<User> {
    return this.post<User>('/user/login', request, headers ? ({ headers } as unknown as InternalAxiosRequestConfig) : undefined);
  }

  static async register(request: RegisterRequest, headers?: Record<string, string>): Promise<User> {
    return this.post<User>('/user/register', request, headers ? ({ headers } as unknown as InternalAxiosRequestConfig) : undefined);
  }

  static async sendEmailCode(email: string, scene: 'register' | 'login', headers?: Record<string, string>): Promise<void> {
    return this.post<void>('/user/send-email-code', { email, scene }, headers ? ({ headers } as unknown as InternalAxiosRequestConfig) : undefined);
  }

  static async changePassword(request: ChangePasswordRequest): Promise<void> {
    return this.post<void>('/user/change-password', request);
  }

  static async updateProfile(request: UpdateProfileRequest): Promise<User> {
    return this.put<User>('/user/profile', request);
  }

  static async getExternalAccountBindings(): Promise<ExternalAccountBinding[]> {
    return this.get<ExternalAccountBinding[]>('/oauth/external-accounts');
  }

  static async deleteExternalAccountBinding(id: string): Promise<void> {
    return this.post<void>(`/oauth/external-accounts/${encodeURIComponent(id)}/delete`);
  }
}