from fastapi import APIRouter, Depends, Response
from pydantic import BaseModel, ConfigDict, Field, field_validator

from ..auth import require_admin
from ..services.identity_review import confirm_identities, review_identities

router = APIRouter(prefix="/admin/identities", tags=["admin"], dependencies=[Depends(require_admin)])


class Confirmation(BaseModel):
    model_config = ConfigDict(extra="forbid")
    revision: str = Field(pattern=r"^[a-f0-9]{64}$")
    user_ids: list[int] = Field(min_length=1, max_length=3000)

    @field_validator("user_ids")
    @classmethod
    def unique_positive_ids(cls, value):
        if any(user_id <= 0 for user_id in value) or len(set(value)) != len(value):
            raise ValueError("Choose unique positive user IDs")
        return value


@router.get("")
async def review(response: Response):
    response.headers["Cache-Control"] = "no-store"
    report, _, _ = await review_identities()
    return report


@router.post("/confirm")
async def confirm(payload: Confirmation, response: Response, admin: dict = Depends(require_admin)):
    response.headers["Cache-Control"] = "no-store"
    return await confirm_identities(payload.revision, payload.user_ids, admin)