'use client';

import { useEffect, useRef } from 'react';
import { logoutAction } from './actions';

export default function LogoutPage() {
  const hasStarted = useRef(false);

  useEffect(() => {
    if (hasStarted.current) return;
    hasStarted.current = true;

    const performLogout = async () => {
      // Set logout flag to prevent TokenSync/PresenceProvider from restoring tokens
      localStorage.setItem('isLoggingOut', 'true');

      // Invalidate refresh token on the backend (best-effort)
      const refreshToken = localStorage.getItem('refreshToken');
      const accessToken = localStorage.getItem('accessToken');
      if (refreshToken) {
        try {
          await fetch(
            `${process.env.NEXT_PUBLIC_API_URL || 'http://localhost:3001/api/v1'}/auth/logout`,
            {
              method: 'POST',
              headers: {
                'Content-Type': 'application/json',
                ...(accessToken ? { Authorization: `Bearer ${accessToken}` } : {}),
              },
              body: JSON.stringify({ refreshToken }),
            }
          );
        } catch {
          // Best-effort — don't block logout if backend call fails
        }
      }

      // Clear all localStorage auth data
      localStorage.removeItem('accessToken');
      localStorage.removeItem('refreshToken');
      localStorage.removeItem('user');

      // Manually clear next-auth cookies as fallback
      // next-auth v5 uses these cookie names:
      const cookieNames = [
        'authjs.session-token',
        'authjs.callback-url',
        'authjs.csrf-token',
        '__Secure-authjs.session-token',
        '__Secure-authjs.callback-url',
        '__Secure-authjs.csrf-token',
        'next-auth.session-token',
        'next-auth.callback-url',
        'next-auth.csrf-token',
        '__Secure-next-auth.session-token',
      ];
      cookieNames.forEach((name) => {
        document.cookie = `${name}=; Path=/; Expires=Thu, 01 Jan 1970 00:00:00 GMT`;
        document.cookie = `${name}=; Path=/; Expires=Thu, 01 Jan 1970 00:00:00 GMT; Secure`;
      });

      // Use server action to properly clear session (redirects to /login)
      try {
        await logoutAction();
      } catch {
        // Server action redirect throws in Next.js — this is expected.
        // If it truly fails, the manual cookie clearing above ensures logout.
        // Fallback redirect:
        window.location.href = '/login';
      }
    };

    performLogout();
  }, []);

  return (
    <div className="min-h-screen flex items-center justify-center bg-white">
      <div className="text-center">
        <div className="w-12 h-12 border-4 border-[#e58625] border-t-transparent rounded-full animate-spin mx-auto mb-6" />
        <h1 className="font-fractul font-bold text-[24px] text-[#00293D] mb-2">
          Signing Out
        </h1>
        <p className="font-serif text-[14px] text-[#00293D]/60">
          Please wait while we securely log you out...
        </p>
      </div>
    </div>
  );
}