portal/app/resources/js/api/auth.ts

import { apiClient, ensureCsrfCookie } from './client';

/**
 * API-вызовы для AuthController (см. app/Http/Controllers/Api/AuthController.php).
 *
 * Все методы делают `ensureCsrfCookie()` перед POST'ами — Sanctum SPA flow.
 */

export interface AuthUser {
    id: number;
    email: string;
    first_name: string | null;
    last_name: string | null;
    tenant_id: number;
    totp_enabled: boolean;
    last_login_at: string | null;
}

export interface LoginPayload {
    email: string;
    password: string;
    remember?: boolean;
}

export interface LoginResponse {
    user: AuthUser;
    requires_2fa: boolean;
}

export interface RegisterPayload {
    email: string;
    password: string;
    accept_offer: boolean;
    accept_pdn: boolean;
}

export async function login(payload: LoginPayload): Promise<LoginResponse> {
    await ensureCsrfCookie();
    const { data } = await apiClient.post<LoginResponse>('/api/auth/login', payload);
    return data;
}

export async function register(payload: RegisterPayload): Promise<LoginResponse> {
    await ensureCsrfCookie();
    const { data } = await apiClient.post<LoginResponse>('/api/auth/register', payload);
    return data;
}

export async function me(): Promise<AuthUser> {
    const { data } = await apiClient.get<{ user: AuthUser }>('/api/auth/me');
    return data.user;
}

export async function logout(): Promise<void> {
    await ensureCsrfCookie();
    await apiClient.post('/api/auth/logout');
}

export async function verifyTwoFactor(code: string): Promise<LoginResponse> {
    await ensureCsrfCookie();
    const { data } = await apiClient.post<LoginResponse>('/api/auth/2fa/verify', { code });
    return data;
}

export interface RecoveryCodeResponse extends LoginResponse {
    recovery_codes_remaining: number;
}

export async function useRecoveryCode(code: string): Promise<RecoveryCodeResponse> {
    await ensureCsrfCookie();
    const { data } = await apiClient.post<RecoveryCodeResponse>('/api/auth/2fa/recovery-use', { code });
    return data;
}

export interface TwoFactorInitResponse {
    secret: string;
    qr_url: string;
}

export async function twoFactorInit(): Promise<TwoFactorInitResponse> {
    await ensureCsrfCookie();
    const { data } = await apiClient.post<TwoFactorInitResponse>('/api/2fa/init');
    return data;
}

export async function twoFactorConfirm(code: string): Promise<{ recovery_codes: string[]; message: string }> {
    await ensureCsrfCookie();
    const { data } = await apiClient.post<{ recovery_codes: string[]; message: string }>('/api/2fa/confirm', { code });
    return data;
}

export async function twoFactorDisable(password: string): Promise<{ message: string }> {
    await ensureCsrfCookie();
    const { data } = await apiClient.post<{ message: string }>('/api/2fa/disable', { password });
    return data;
}

export async function twoFactorRegenerateRecoveryCodes(
    password: string,
): Promise<{ recovery_codes: string[]; message: string }> {
    await ensureCsrfCookie();
    const { data } = await apiClient.post<{ recovery_codes: string[]; message: string }>(
        '/api/2fa/regenerate-recovery-codes',
        { password },
    );
    return data;
}

export async function forgotPassword(email: string): Promise<{ message: string }> {
    await ensureCsrfCookie();
    const { data } = await apiClient.post<{ message: string }>('/api/auth/forgot', { email });
    return data;
}

export interface ResetPasswordPayload {
    token: string;
    email: string;
    password: string;
    password_confirmation: string;
}

export async function resetPassword(payload: ResetPasswordPayload): Promise<{ message: string }> {
    await ensureCsrfCookie();
    const { data } = await apiClient.post<{ message: string }>('/api/auth/reset-password', payload);
    return data;
}