import { NextResponse } from "next/server";
import { auth } from "@/app/(auth)/auth";
import { revokeSingleActiveSession } from "@/lib/auth/session-control";

export async function POST() {
  const isSecure = process.env.AUTH_URL?.startsWith("https://") ?? false;
  const domain = process.env.AUTH_URL
    ? new URL(process.env.AUTH_URL).hostname
    : undefined;
  const session = await auth().catch(() => null);

  // 创建清除 cookie 的响应
  const response = NextResponse.json({ success: true });

  if (session?.user?.id && session.user.type !== "guest") {
    await revokeSingleActiveSession({
      userId: session.user.id,
      sessionKey: session.user.sessionKey,
    }).catch((error) => {
      console.error("[Logout API] Failed to revoke active session:", error);
    });
  }
  
  // 清除所有认证相关的 cookie
  const cookiesToClear = [
    "__Secure-authjs.session-token",
    "__Secure-authjs.callback-url",
    "__Host-authjs.csrf-token",
    "authjs.session-token",
    "authjs.callback-url",
    "authjs.csrf-token",
  ];
  
  for (const cookieName of cookiesToClear) {
    // 清除不带 domain 的 cookie
    response.cookies.set(cookieName, "", {
      expires: new Date(0),
      path: "/",
      secure: isSecure,
      httpOnly: cookieName.includes("session-token") || cookieName.includes("csrf-token"),
      sameSite: "lax",
    });
    
    // 如果有 domain，也清除带 domain 的 cookie
    if (domain && domain !== "localhost" && !cookieName.startsWith("__Host-")) {
      response.cookies.set(cookieName, "", {
        expires: new Date(0),
        path: "/",
        domain,
        secure: isSecure,
        httpOnly:
          cookieName.includes("session-token") ||
          cookieName.includes("csrf-token"),
        sameSite: "lax",
      });
    }
  }

  console.log("[Logout API] Cleared all auth cookies");

  return response;
}