"""
BIZ-110 端到端 mock：模拟后端鉴权 + 前端 token 注入验证。
- GET /api/status: 永远 200，无 token 校验（status 探测）
- 其他 /api/* : 必须 Authorization: Bearer <token>，token = 'test-token-ok' 通过
"""
import http.server, json, sys

VALID_TOKEN = 'test-token-ok'

class H(http.server.BaseHTTPRequestHandler):
    def log_message(self, fmt, *a): pass  # quiet

    def _send(self, code, payload):
        body = json.dumps(payload).encode()
        self.send_response(code)
        self.send_header('Content-Type', 'application/json')
        self.send_header('Content-Length', str(len(body)))
        self.end_headers()
        self.wfile.write(body)

    def _check_auth(self):
        h = self.headers.get('Authorization', '')
        if not h.startswith('Bearer '):
            return False
        return h[7:] == VALID_TOKEN

    def do_GET(self):
        if self.path.startswith('/api/status'):
            return self._send(200, {'success': True, 'data': {'ok': True}})
        if self.path.startswith('/api/records'):
            if not self._check_auth():
                return self._send(401, {'success': False, 'error': '未授权访问'})
            return self._send(200, {'success': True, 'data': {'records': [], 'total': 0, 'page': 1}})
        return self._send(404, {'success': False, 'error': 'not found'})

    def do_POST(self):
        if self.path.startswith('/api/records') and 'fake-id' in self.path:
            return self._send(404, {'success': False, 'error': 'not found'})
        return self._send(404, {'success': False, 'error': 'not found'})

    def do_DELETE(self):
        if not self._check_auth():
            return self._send(401, {'success': False, 'error': '未授权访问'})
        return self._send(200, {'success': True, 'data': {}})


if __name__ == '__main__':
    port = int(sys.argv[1]) if len(sys.argv) > 1 else 18085
    srv = http.server.HTTPServer(('127.0.0.1', port), H)
    print(f'mock listening on {port}')
    srv.serve_forever()