from flask import Flask, request, jsonify
from flask_cors import CORS
import requests
import random
import time
import os

app = Flask(__name__)
CORS(app)

otp_store = {}

GMAIL_USER = os.environ.get('GMAIL_USER')
BREVO_API_KEY = os.environ.get('BREVO_API_KEY')


def send_email(to_email, otp):
    url = "https://api.brevo.com/v3/smtp/email"
    headers = {
        "api-key": BREVO_API_KEY,
        "Content-Type": "application/json"
    }
    payload = {
        "sender": {"name": "StepToDeen", "email": GMAIL_USER},
        "to": [{"email": to_email}],
        "subject": "Your StepToDeen Verification Code",
        "htmlContent": f"""
        <div style="font-family: Arial, sans-serif; max-width: 480px; margin: auto; padding: 24px; border: 1px solid #e2e8f0; border-radius: 12px;">
            <h2 style="color: #047857; text-align: center;">StepToDeen</h2>
            <p style="font-size: 15px; color: #333;">Hello,</p>
            <p style="font-size: 15px; color: #333;">Use the verification code below to continue:</p>
            <div style="text-align: center; margin: 24px 0;">
                <span style="font-size: 32px; font-weight: bold; letter-spacing: 6px; color: #047857; background: #f0fdf4; padding: 12px 24px; border-radius: 8px; display: inline-block;">{otp}</span>
            </div>
            <p style="font-size: 14px; color: #666;">This code will expire in <b>5 minutes</b>.</p>
            <p style="font-size: 14px; color: #666;">If you didn't request this code, please ignore this email.</p>
            <hr style="border: none; border-top: 1px solid #e2e8f0; margin: 20px 0;">
            <p style="font-size: 12px; color: #999; text-align: center;">© StepToDeen — Do not share this code with anyone.</p>
        </div>
        """
    }
    response = requests.post(url, json=payload, headers=headers)
    if response.status_code not in (200, 201):
        raise Exception(response.text)


@app.route('/send-otp', methods=['POST'])
def send_otp():
    data = request.json
    email = data.get('email', '').strip().lower()

    if not email:
        return jsonify({"success": False, "message": "Email is required"}), 400

    otp = str(random.randint(100000, 999999))
    otp_store[email] = {"otp": otp, "expires": time.time() + 300}

    try:
        send_email(email, otp)
        return jsonify({"success": True, "message": "Verification code sent to your email"})
    except Exception as e:
        return jsonify({"success": False, "message": f"Error: {str(e)}"}), 500


@app.route('/verify-otp', methods=['POST'])
def verify_otp():
    data = request.json
    email = data.get('email', '').strip().lower()
    code = data.get('otp', '').strip()

    record = otp_store.get(email)

    if not record:
        return jsonify({"success": False, "message": "Request a code first"}), 400

    if time.time() > record['expires']:
        del otp_store[email]
        return jsonify({"success": False, "message": "Code expired, request a new one"}), 400

    if record['otp'] == code:
        del otp_store[email]
        return jsonify({"success": True, "message": "Verification successful"})

    return jsonify({"success": False, "message": "Invalid code"}), 400


@app.route('/')
def home():
    return "OTP Server is running ✅"


if __name__ == '__main__':
    app.run(host='0.0.0.0', port=7860)