const TOKEN_KEY = 'bv_local_token';
const NAME_KEY = 'bv_local_name';

export function getLocalToken(): string | null {
  return sessionStorage.getItem(TOKEN_KEY);
}

export function getLocalUser(): string | null {
  return sessionStorage.getItem(NAME_KEY);
}

export async function localLogin(username: string, password: string): Promise<string> {
  const res = await fetch('/api/auth/login', {
    method: 'POST',
    headers: { 'Content-Type': 'application/json' },
    body: JSON.stringify({ username, password })
  });
  if (!res.ok) {
    const body = await res.json().catch(() => ({}));
    throw new Error(body.error || 'Anmeldung fehlgeschlagen.');
  }
  const data = await res.json();
  sessionStorage.setItem(TOKEN_KEY, data.token);
  sessionStorage.setItem(NAME_KEY, data.name);
  return data.name as string;
}

export function clearLocalAuth() {
  sessionStorage.removeItem(TOKEN_KEY);
  sessionStorage.removeItem(NAME_KEY);
}