# app/db/repositories/password_reset.py
import hashlib
from typing import Optional, Dict, Any
from datetime import datetime, timedelta, timezone

from asyncpg import Connection
from app.db.queries.queries import queries


class PasswordResetRepository:
    def __init__(self, conn: Connection) -> None:
        self.connection = conn

    @staticmethod
    def _hash(token: str) -> str:
        return hashlib.sha256(token.encode("utf-8")).hexdigest()

    async def create(
        self,
        *,
        user_id: int,
        token: str,
        ttl_minutes: int,
        request_ip: Optional[str],
        user_agent: Optional[str],
    ) -> Dict[str, Any]:
        """
        创建一次性重置令牌（仅存 token 的哈希）。
        返回数据库返回的行（dict/record 兼容为 Dict[str, Any]）。
        """
        return await queries.create_password_reset_token(
            self.connection,
            user_id=user_id,
            token_hash=self._hash(token),
            expires_at=datetime.now(timezone.utc) + timedelta(minutes=ttl_minutes),
            request_ip=request_ip,
            user_agent=user_agent,
        )

    async def get_valid(self, *, token: str) -> Optional[Dict[str, Any]]:
        """
        根据明文 token 查找并校验是否可用：
        - 存在
        - 未使用
        - 未过期
        返回行 dict；无效则返回 None。
        """
        row = await queries.get_password_reset_token_by_hash(
            self.connection, token_hash=self._hash(token)
        )
        if not row:
            return None
        if row["used_at"] is not None:
            return None
        if row["expires_at"] <= datetime.now(timezone.utc):
            return None
        return row

    async def mark_used(self, *, token_id: int) -> None:
        """将重置令牌标记为已使用。"""
        await queries.mark_password_reset_token_used(self.connection, id=token_id)