// routes/protected-page.tsx
import { FreshContext } from "fresh";
import { getAuthContext } from "@utils/middleware.ts";
import type { AppUser } from "@utils/auth.ts";

interface ProtectedPageProps {
  user: AppUser;
}

export const handler = {
  async GET(ctx: FreshContext): Promise<Response> {
    const req = ctx.req;
    const authContext = await getAuthContext(req);

    if (!authContext.isAuthenticated) {
      // 未登录，重定向到登录页面
      const loginUrl = `/api/auth/github?redirect=${
        encodeURIComponent(req.url)
      }`;
      return new Response(null, {
        status: 302,
        headers: { "Location": loginUrl },
      });
    }

    return new Response(null, { status: 200 });
  },
};

export default function ProtectedPage({ data }: PageProps<ProtectedPageProps>) {
  return (
    <div>
      <h1>欢迎, {data.user.name}!</h1>
      <p>这是一个受保护的页面</p>
    </div>
  );
}

// routes/api/protected-endpoint.ts
import { FreshContext } from "fresh";
import { getAuthContext } from "@utils/middleware.ts";

export const handler = {
  async GET(ctx: FreshContext): Promise<Response> {
    const req = ctx.req;
    const authContext = await getAuthContext(req);

    if (!authContext.isAuthenticated) {
      return new Response(
        JSON.stringify({ error: "Authentication required" }),
        {
          status: 401,
          headers: { "Content-Type": "application/json" }
        }
      );
    }

    // 处理已认证的请求
    return new Response(
      JSON.stringify({
        message: "Hello, " + authContext.user?.name,
        data: "sensitive data"
      }),
      {
        status: 200,
        headers: { "Content-Type": "application/json" }
      }
    );
  },
};