"""
Browser-based Garmin login.

Garmin's SSO requires JS-set cookies that a plain HTTP client cannot replicate.
This script opens a real Chromium browser, logs in, extracts the CAS ticket,
and exchanges it for OAuth tokens via garth. Tokens are saved to
sources/garmin/tokens-{user}/ and reused automatically on future runs.

Usage:
    uv run python sources/garmin/playwright_login.py --user <user>
"""

import argparse
import json
import re
from pathlib import Path
from urllib.parse import urlencode

from playwright.sync_api import sync_playwright

_DIR = Path(__file__).parent

_SSO = "https://sso.garmin.com/sso"
_SSO_EMBED = f"{_SSO}/embed"
_SIGNIN_URL = f"{_SSO}/signin?" + urlencode({
    "id": "gauth-widget",
    "embedWidget": "true",
    "gauthHost": _SSO,
    "service": _SSO_EMBED,
    "source": _SSO_EMBED,
    "redirectAfterAccountLoginUrl": _SSO_EMBED,
    "redirectAfterAccountCreationUrl": _SSO_EMBED,
})


def login(user: str) -> None:
    creds = json.loads((_DIR / f"credentials-{user}.json").read_text())
    tokenstore = _DIR / f"tokens-{user}"
    tokenstore.mkdir(exist_ok=True)

    with sync_playwright() as p:
        browser = p.chromium.launch(headless=False)
        page = browser.new_context(user_agent=(
            "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) "
            "AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36"
        )).new_page()

        page.goto(_SIGNIN_URL)
        page.wait_for_load_state("networkidle")
        page.fill('input[name="username"]', creds["username"])
        page.fill('input[name="password"]', creds["password"])
        page.click("#login-btn-signin")
        page.wait_for_url("**/embed?ticket=**", timeout=60_000)
        ticket_url = page.url
        browser.close()

    m = re.search(r'[?&]ticket=(ST-[^&\s]+)', ticket_url)
    if not m:
        raise RuntimeError(f"No CAS ticket found in URL: {ticket_url}")
    ticket = m.group(1)

    from garth.http import Client
    from garth.sso import exchange, get_oauth1_token
    client = Client()
    oauth1 = get_oauth1_token(ticket, client)
    oauth2 = exchange(oauth1, client)
    client.configure(oauth1_token=oauth1, oauth2_token=oauth2)
    client.dump(str(tokenstore))
    print(f"Tokens saved to {tokenstore}/")


if __name__ == "__main__":
    parser = argparse.ArgumentParser()
    parser.add_argument("--user", required=True)
    login(parser.parse_args().user)

from pathlib import Path
from garth.exc import GarthHTTPError
from garminconnect import (
    Garmin,
    GarminConnectAuthenticationError,
    GarminConnectConnectionError,
)

_DIR = Path(__file__).parent


def auth(user: str) -> Garmin:
    """Authenticate with stored tokens.

    Tokens must be obtained first by running:
        uv run python sources/garmin/playwright_login.py --user <user>
    """
    tokenstore = str(_DIR / f"tokens-{user}/")
    try:
        garmin = Garmin()
        garmin.login(tokenstore)
        garmin.garth.dump(tokenstore)
        return garmin
    except (FileNotFoundError, GarthHTTPError, GarminConnectAuthenticationError, GarminConnectConnectionError) as e:
        raise RuntimeError(
            f"No valid tokens for user '{user}'. "
            f"Run: uv run python sources/garmin/playwright_login.py --user {user}"
        ) from e