import { $fetch } from 'ofetch'
import { createError, defineEventHandler, getHeader, getCookie } from 'h3'
import { useRuntimeConfig } from '#imports'
import { getTenantFromContext } from '../../utils/tenant'

/**
 * 退出登录
 * POST /api/tender/logout
 * 代理到 mp-api /api/hjc/auth/logout。
 *
 * 说明：后端不维护服务端会话与 token 黑名单（token 是无状态 JWT），
 * 调用本接口只为契约完整；<b>前端清本地凭据才是真正生效的退出</b>。
 */
export default defineEventHandler(async (event) => {
  const config = useRuntimeConfig()
  const ctx = getTenantFromContext(event, config)
  const cookieToken = getCookie(event, 'hjc_token')
  const auth = getHeader(event, 'authorization') || (cookieToken ? `Bearer ${cookieToken}` : null)

  try {
    return await $fetch('/hjc/auth/logout', {
      baseURL: config.public.modulesApiBase,
      method: 'POST',
      headers: {
        TenantId: ctx.tenantId,
        ...(auth ? { Authorization: auth } : {})
      },
      query: { TenantId: ctx.tenantId }
    })
  } catch (error: any) {
    throw createError({
      statusCode: error?.statusCode || error?.response?.status || 502,
      statusMessage: error?.data?.message || error?.statusMessage || 'Failed to logout'
    })
  }
})