import type { NextAuthConfig } from "next-auth"

export const authConfig = {
  pages: {
    signIn: "/login",
    error: "/login",
  },
  callbacks: {
    authorized({ auth, request: { nextUrl } }) {
      const isLoggedIn = !!auth?.user
      const pathname = nextUrl.pathname
      const publicPaths = ["/login", "/register", "/api/auth"]
      const isPublic = publicPaths.some(
        (path) => pathname === path || pathname.startsWith("/api/auth/")
      )

      // 已登录用户在登录/注册页时重定向到首页
      if (isLoggedIn && (pathname === "/login" || pathname === "/register")) {
        return Response.redirect(new URL("/", nextUrl))
      }

      // 访问受保护页面必须已登录
      if (!isLoggedIn && !isPublic) {
        return false
      }

      return true
    },
    jwt({ token, user }) {
      if (user?.id) {
        token.id = user.id
      }
      return token
    },
    session({ session, token }) {
      if (session.user && token.id) {
        session.user.id = token.id as string
      }
      return session
    },
  },
  providers: [],
} satisfies NextAuthConfig