"""
routes/admin_users.py — User management CRUD routes.
"""

import logging
from flask import Blueprint, render_template, request, redirect, url_for, flash, session
from models import get_all_users, create_user, update_user, delete_user
from utils.decorators import admin_required

logger = logging.getLogger("routes.admin_users")
admin_users_bp = Blueprint("admin_users", __name__, url_prefix="/admin/users")


@admin_users_bp.route("/")
@admin_required
def users_list():
    users = get_all_users()
    return render_template("admin/users.html", users=users)


@admin_users_bp.route("/create", methods=["POST"])
@admin_required
def create():
    admin_id  = session["user"]["id"]
    username  = request.form.get("username", "").strip()
    password  = request.form.get("password", "")
    role      = request.form.get("role", "user")
    full_name = request.form.get("full_name", "").strip()
    email     = request.form.get("email", "").strip() or None

    if not username or not password:
        flash("Username and password are required.", "danger")
        return redirect(url_for("admin_users.users_list"))

    try:
        create_user(admin_id, username, password, role, full_name, email)
        flash(f"User '{username}' created successfully.", "success")
        logger.info(f"User '{username}' created by admin_id={admin_id}.")
    except Exception as e:
        logger.error(f"create_user error: {e}")
        flash(f"Error creating user: {e}", "danger")

    return redirect(url_for("admin_users.users_list"))


@admin_users_bp.route("/<int:user_id>/edit", methods=["POST"])
@admin_required
def edit(user_id):
    admin_id  = session["user"]["id"]
    username  = request.form.get("username", "").strip()
    role      = request.form.get("role", "user")
    full_name = request.form.get("full_name", "").strip()
    email     = request.form.get("email", "").strip() or None
    is_active = int(request.form.get("is_active", 1))
    password  = request.form.get("password", "").strip() or None

    try:
        update_user(admin_id, user_id, username, role, full_name, is_active, password, email)
        flash(f"User '{username}' updated successfully.", "success")
        logger.info(f"User id={user_id} updated by admin_id={admin_id}.")
    except ValueError as e:
        flash(str(e), "danger")
    except Exception as e:
        logger.error(f"update_user error: {e}")
        flash(f"Error updating user: {e}", "danger")

    return redirect(url_for("admin_users.users_list"))


@admin_users_bp.route("/<int:user_id>/delete", methods=["POST"])
@admin_required
def delete(user_id):
    admin_id = session["user"]["id"]
    try:
        delete_user(admin_id, user_id)
        flash("User deleted successfully.", "success")
        logger.info(f"User id={user_id} deleted by admin_id={admin_id}.")
    except ValueError as e:
        flash(str(e), "danger")
    except Exception as e:
        logger.error(f"delete_user error: {e}")
        flash(f"Error deleting user: {e}", "danger")

    return redirect(url_for("admin_users.users_list"))