(function () {
  var CHECK_URL    = "/index/user/auth_check.html";
  var META_URL     = "/index/user/auth_meta.html";
  var LOGIN_URL    = "/index/user/do_login.html";
  var REGISTER_URL = "/index/user/do_register.html";

  var LS_OK_KEY = "AUTH_OK";
  var LS_OK_AT  = "AUTH_OK_AT";
  var LS_TTL_MS = 7 * 24 * 60 * 60 * 1000;

  // 记住账号（不记密码）
  var LS_REMEMBER = "AUTH_REMEMBER_ACCOUNT"; // "1" or "0"
  var LS_TEL      = "AUTH_TEL";              // saved account string

  var loginEl = null;
  var regEl   = null;
  var nextUrl = "";

  function qs(sel, root){ return (root || document).querySelector(sel); }
  function lsSet(k,v){ try{localStorage.setItem(k,v);}catch(e){} }
  function lsGet(k){ try{return localStorage.getItem(k);}catch(e){return null;} }
  function lsDel(k){ try{localStorage.removeItem(k);}catch(e){} }

  function markLogged(){
    lsSet(LS_OK_KEY,"1");
    lsSet(LS_OK_AT,String(Date.now()));
  }
  function clearLogged(){
    // 只清“登录标记”，不清记住账号
    lsDel(LS_OK_KEY);
    lsDel(LS_OK_AT);
  }

  // ---------------------------
  // cookie helpers（不使用正则）
  // ---------------------------
  function getAllCookiesKV(){
    var out = {};
    try{
      var all = document.cookie ? document.cookie.split("; ") : [];
      for (var i=0;i<all.length;i++){
        var p = all[i].split("=");
        var k = p.shift();
        out[k] = decodeURIComponent(p.join("=") || "");
      }
    }catch(e){}
    return out;
  }

  function getCookie(name){
    try{
      var all = document.cookie ? document.cookie.split("; ") : [];
      for (var i=0;i<all.length;i++){
        var p = all[i].split("=");
        var k = p.shift();
        if(k === name){
          return decodeURIComponent(p.join("=") || "");
        }
      }
      return "";
    }catch(e){
      return "";
    }
  }

  // 兼容 cookie.prefix：优先 user_id，其次 *_user_id
  function getUidFromCookie(){
    var v = (getCookie("user_id") || "").trim();
    if(v) return v;

    var kv = getAllCookiesKV();
    for (var k in kv){
      if(!kv.hasOwnProperty(k)) continue;
      if(k === "user_id") continue;
      if(k.length >= 8 && k.slice(-8) === "_user_id" && String(kv[k]||"").trim()){
        return String(kv[k]).trim();
      }
    }
    return "";
  }

  // 兼容 cookie.prefix：优先 tel，其次 *_tel
  // 注意：tel 仅用于“记住账号”，不是登录凭据
  function getTelFromCookie(){
    var v = getCookie("tel");
    if(v) return v;

    var kv = getAllCookiesKV();
    for (var k in kv){
      if(!kv.hasOwnProperty(k)) continue;
      if(k === "tel") continue;
      if(k.length >= 4 && k.slice(-4) === "_tel" && kv[k]){
        return kv[k];
      }
    }
    return "";
  }

  // 真实登录凭据：仅以 user_id 为准（tel 只是记住账号）
  function hasAuthCookie(){
    return !!getUidFromCookie();
  }

  function setCookie(name, val, days){
    try{
      var s = name + "=" + encodeURIComponent(val || "") + "; path=/";
      if(days && days > 0){
        var d = new Date();
        d.setTime(d.getTime() + days*24*60*60*1000);
        s += "; expires=" + d.toUTCString();
      }
      document.cookie = s;
    }catch(e){}
  }

  function delCookie(name){
    try{
      document.cookie = name + "=; path=/; expires=Thu, 01 Jan 1970 00:00:00 GMT";
    }catch(e){}
  }

  function ensureCrypto(cb){
    if(window.CryptoJS) return cb();
    var s=document.createElement("script");
    s.src="https://cdnjs.cloudflare.com/ajax/libs/crypto-js/4.0.0/crypto-js.min.js";
    s.async=true;
    s.onload=function(){cb();};
    s.onerror=function(){cb(new Error("CryptoJS load failed"));};
    document.head.appendChild(s);
  }

  function maskWrap(inner){
    return (
      '<div class="auth-mask" style="position:fixed;inset:0;z-index:99999;background:rgba(0,0,0,.55);backdrop-filter:blur(8px);display:flex;align-items:center;justify-content:center;padding:18px;">' +
        inner +
      '</div>'
    );
  }

  function closeBtn(id){
    return (
      '<button id="'+id+'" type="button" style="position:absolute;top:12px;right:12px;width:34px;height:34px;border-radius:12px;border:1px solid rgba(255,255,255,.14);background:rgba(255,255,255,.08);color:rgba(255,255,255,.92);cursor:pointer;font-size:20px;line-height:30px;">×</button>'
    );
  }

  function loginHtml(){
    return maskWrap(
      '<div style="width:min(92vw,420px);border-radius:18px;background:rgba(17,24,39,.85);border:1px solid rgba(255,255,255,.12);box-shadow:0 20px 60px rgba(0,0,0,.45);overflow:hidden;color:#fff;position:relative;">' +
        closeBtn("loginClose") +
        '<div style="padding:16px 16px 0 16px;">' +
          '<div style="font-weight:800;font-size:14px;">Please Log In</div>' +
        '</div>' +
        '<div style="padding:14px 16px 16px 16px;">' +
          '<div style="margin-top:10px;font-size:12px;color:rgba(255,255,255,.88);">Username / Phone</div>' +
          '<input id="loginUser" type="text" autocomplete="username" placeholder="Please Enter Username or Phone Number" style="width:100%;height:42px;border-radius:12px;border:1px solid rgba(255,255,255,.14);background:rgba(255,255,255,.08);color:#fff;outline:none;padding:0 12px;margin-top:6px;">' +

          '<div style="margin-top:10px;font-size:12px;color:rgba(255,255,255,.88);">Password</div>' +
          '<input id="loginPwd" type="password" autocomplete="current-password" placeholder="Please Enter Password" style="width:100%;height:42px;border-radius:12px;border:1px solid rgba(255,255,255,.14);background:rgba(255,255,255,.08);color:#fff;outline:none;padding:0 12px;margin-top:6px;">' +

          '<div style="margin-top:12px;display:flex;align-items:center;justify-content:space-between;">' +
            '<label style="font-size:12px;color:rgba(255,255,255,.8);display:flex;align-items:center;gap:6px;">' +
              '<input id="loginRemember" type="checkbox">Remember Account' +
            '</label>' +
            '<div id="loginMsg" style="font-size:12px;color:#ffb4b4;min-height:16px;"></div>' +
          '</div>' +

          '<button id="loginBtn" type="button" style="width:100%;height:46px;margin-top:12px;border-radius:14px;border:none;cursor:pointer;background:linear-gradient(135deg, rgba(59,130,246,1), rgba(37,99,235,1));color:#fff;font-weight:800;">Login</button>' +

          '<div style="text-align:center;margin-top:10px;">' +
            '<a href="javascript:;" id="openRegister" style="color:#93c5fd;font-size:12px;text-decoration:none;">Register Account</a>' +
          '</div>' +
        '</div>' +
      '</div>'
    );
  }

  function registerHtml(){
    return maskWrap(
      '<div style="width:min(92vw,460px);border-radius:18px;background:rgba(17,24,39,.85);border:1px solid rgba(255,255,255,.12);box-shadow:0 20px 60px rgba(0,0,0,.45);overflow:hidden;color:#fff;position:relative;">' +
        closeBtn("regClose") +
        '<div style="padding:16px 16px 0 16px;">' +
          '<div style="font-weight:800;font-size:14px;">Register Account</div>' +
        '</div>' +
        '<div style="padding:14px 16px 16px 16px;">' +

          '<input id="regUser" placeholder="Username" style="width:100%;height:42px;border-radius:12px;border:1px solid rgba(255,255,255,.14);background:rgba(255,255,255,.08);color:#fff;outline:none;padding:0 12px;margin-top:10px;">' +
          '<input id="regTel" placeholder="Enter Mobile Number" inputmode="numeric" style="width:100%;height:42px;border-radius:12px;border:1px solid rgba(255,255,255,.14);background:rgba(255,255,255,.08);color:#fff;outline:none;padding:0 12px;margin-top:10px;">' +
          '<input id="regPwd" type="password" placeholder="Please Enter Password" style="width:100%;height:42px;border-radius:12px;border:1px solid rgba(255,255,255,.14);background:rgba(255,255,255,.08);color:#fff;outline:none;padding:0 12px;margin-top:10px;">' +
          '<input id="regPwd2" type="password" placeholder="Please Confirm Password" style="width:100%;height:42px;border-radius:12px;border:1px solid rgba(255,255,255,.14);background:rgba(255,255,255,.08);color:#fff;outline:none;padding:0 12px;margin-top:10px;">' +
          '<input id="regDepositPwd" type="password" placeholder="Please enter payment password" style="width:100%;height:42px;border-radius:12px;border:1px solid rgba(255,255,255,.14);background:rgba(255,255,255,.08);color:#fff;outline:none;padding:0 12px;margin-top:10px;">' +
          '<input id="regDepositPwd2" type="password" placeholder="Please confirm payment password" style="width:100%;height:42px;border-radius:12px;border:1px solid rgba(255,255,255,.14);background:rgba(255,255,255,.08);color:#fff;outline:none;padding:0 12px;margin-top:10px;">' +
          '<input id="regInvite" placeholder="Please Enter Invitation Code" style="width:100%;height:42px;border-radius:12px;border:1px solid rgba(255,255,255,.14);background:rgba(255,255,255,.08);color:#fff;outline:none;padding:0 12px;margin-top:10px;">' +

          '<div style="margin-top:12px;display:flex;align-items:center;justify-content:space-between;">' +
            '<label style="font-size:12px;color:rgba(255,255,255,.8);display:flex;align-items:center;gap:6px;">' +
              '<input id="regAgree" type="checkbox" checked>I Have Agreed to the Service Agreement' +
            '</label>' +
            '<div id="regMsg" style="font-size:12px;color:#ffb4b4;min-height:16px;"></div>' +
          '</div>' +

          '<button id="regBtn" type="button" style="width:100%;height:46px;margin-top:12px;border-radius:14px;border:none;cursor:pointer;background:linear-gradient(135deg, rgba(59,130,246,1), rgba(37,99,235,1));color:#fff;font-weight:800;">Register Now</button>' +

          '<div style="text-align:center;margin-top:10px;">' +
            '<a href="javascript:;" id="backLogin" style="color:#93c5fd;font-size:12px;text-decoration:none;">Already Have an Account? Log In</a>' +
          '</div>' +

        '</div>' +
      '</div>'
    );
  }

  function hideAll(){
    if(loginEl){ loginEl.remove(); loginEl=null; }
    if(regEl){ regEl.remove(); regEl=null; }
  }

  function getNextFromUrl(){
    try{
      var sp = new URLSearchParams(location.search || "");
      var n = sp.get("next");
      return n ? decodeURIComponent(n) : "";
    }catch(e){
      return "";
    }
  }

  function showLogin(url){
    // 规则：
    // 1) 外部显式传 url -> 用它
    // 2) 否则如果当前 URL 带 next -> 用 next
    // 3) 否则 -> 当前页
    var n = (url || "").trim();
    if(!n){
      n = (getNextFromUrl() || "").trim();
    }
    nextUrl = n || location.href;

    hideAll();
    document.body.insertAdjacentHTML("beforeend", loginHtml());
    loginEl = qs(".auth-mask");

    qs("#loginClose").onclick = hideAll;
    loginEl.addEventListener("click", function(e){ if(e.target===loginEl) hideAll(); });
    qs("#openRegister").onclick = function(){ showRegister(); };
    qs("#loginBtn").onclick = doLogin;

    // 记住账号：优先 localStorage，其次 cookie tel（仅用于填充账号）
    var remember = (lsGet(LS_REMEMBER) === "1");
    var tel = (lsGet(LS_TEL) || "").trim();
    if(!tel){
      tel = (getTelFromCookie() || "").trim();
    }

    if(tel){
      qs("#loginUser").value = tel;
      qs("#loginRemember").checked = (remember || true);
      qs("#loginPwd").focus();
    }else{
      qs("#loginRemember").checked = remember;
      qs("#loginUser").focus();
    }
  }

  function showRegister(){
    hideAll();
    document.body.insertAdjacentHTML("beforeend", registerHtml());
    regEl = qs(".auth-mask");

    qs("#regClose").onclick = hideAll;
    regEl.addEventListener("click", function(e){ if(e.target===regEl) hideAll(); });
    qs("#backLogin").onclick = function(){ showLogin(nextUrl); };
    qs("#regBtn").onclick = doRegister;

    var tel = qs("#regTel");
    tel.addEventListener("input", function(){ this.value = this.value.replace(/\D/g,''); });
  }

  function hasLocalLogin(){
    // 本地标记存在 ≠ 真实登录
    // 必须同时满足：仍有 user_id cookie（真实登录凭据）
    if(!hasAuthCookie()) return false;

    if(lsGet(LS_OK_KEY)!=="1") return false;
    if(!LS_TTL_MS) return true;
    var at=parseInt(lsGet(LS_OK_AT)||"0",10);
    return !at || (Date.now()-at)<=LS_TTL_MS;
  }

  async function auth_check(){
    // 如果本地标记还在，但 cookie 已被人为清掉（没有 user_id），立刻清标记
    if(lsGet(LS_OK_KEY)==="1" && !hasAuthCookie()){
      clearLogged();
    }

    // 本地“快通”仅在仍有 user_id 的前提下生效
    if(hasLocalLogin()) return true;

    try{
      var r = await fetch(CHECK_URL, { credentials:"include" });
      if(!r.ok){
        clearLogged();
        return false;
      }
      var j = await r.json();

      var isLogged =
        j && j.code === 0 && (
          j.logged === 1 || j.logged === true ||
          (typeof j.uid === "number" && j.uid > 0)
        );

      if(isLogged){
        markLogged();
        return true;
      }
      clearLogged();
      return false;
    }catch(e){
      clearLogged();
      return false;
    }
  }

  function encryptObject(obj, password){
    var str = JSON.stringify(obj);
    var key = CryptoJS.enc.Utf8.parse(password);
    var iv  = CryptoJS.enc.Utf8.parse(password);
    var encrypted = CryptoJS.AES.encrypt(str, key, {
      iv: iv,
      mode: CryptoJS.mode.CBC,
      padding: CryptoJS.pad.Pkcs7
    });
    return encrypted.toString();
  }

  function doLogin(){
    var user = (qs("#loginUser").value || "").trim();
    var pwd  = (qs("#loginPwd").value || "").trim();
    var rememberAccount = qs("#loginRemember").checked ? 1 : 0;

    if(!user){ qs("#loginMsg").textContent = "Username"; return; }
    if(!pwd){  qs("#loginMsg").textContent = "Please Enter Password"; return; }

    qs("#loginMsg").textContent = "…";

    ensureCrypto(async function(){
      var meta;
      try{
        var rm = await fetch(META_URL, { credentials:"include" });
        meta = await rm.json();
        if(!meta || meta.code !== 0) throw new Error("meta");
      }catch(e){
        qs("#loginMsg").textContent = "Failed to Get Login Parameters";
        return;
      }

      var CSRF_TOKEN = meta.csrf;
      var AES_KEY    = meta.aes;

      if(!AES_KEY || String(AES_KEY).length !== 16){
        qs("#loginMsg").textContent = "Invalid AES Key";
        return;
      }

      var enc = encryptObject({ tel:user, pwd:pwd }, AES_KEY);

      try{
        var keepVal = "1";

        var resp = await fetch(LOGIN_URL, {
          method:"POST",
          credentials:"include",
          headers:{
            "Content-Type":"application/x-www-form-urlencoded; charset=UTF-8",
            "User-Token-Csrf": CSRF_TOKEN
          },
          body: new URLSearchParams({
            data: enc,
            _csrf_: CSRF_TOKEN,
            jizhu: String(rememberAccount),
            keep: keepVal
          })
        });

        var j = await resp.json();
        if(j && j.code === 0){
          // 只有真正登录成功才写本地登录标记
          markLogged();

          // 记住账号：localStorage + cookie 双保险（不保存密码）
          if(rememberAccount){
            lsSet(LS_REMEMBER, "1");
            lsSet(LS_TEL, user);
            setCookie("tel", user, 30);
          }else{
            lsSet(LS_REMEMBER, "0");
            lsDel(LS_TEL);
            delCookie("tel");
          }

          hideAll();
          location.href = nextUrl || "/";
        }else{
          qs("#loginMsg").textContent = (j && (j.info || j.msg)) ? (j.info || j.msg) : "Login Failed";
        }
      }catch(e){
        qs("#loginMsg").textContent = "Network Error";
      }
    });
  }

  function doRegister(){
    var u = (qs("#regUser").value || "").trim();
    var t = (qs("#regTel").value || "").trim();
    var p = (qs("#regPwd").value || "").trim();
    var p2= (qs("#regPwd2").value || "").trim();
    var dp= (qs("#regDepositPwd").value || "").trim();
    var dp2= (qs("#regDepositPwd2").value || "").trim();
    var c = (qs("#regInvite").value || "").trim();

    if(!u || !t || !p || !p2 || !dp || !dp2 || !c){
      qs("#regMsg").textContent = "Please Fill in All Required Information";
      return;
    }
    if(p !== p2){
      qs("#regMsg").textContent = "Passwords Do Not Match";
      return;
    }
    if(dp !== dp2){
      qs("#regMsg").textContent = "The two payment passwords do not match";
      return;
    }
    if(dp === p){
      qs("#regMsg").textContent = "Payment password cannot be the same as login password";
      return;
    }
    if(dp === u){
      qs("#regMsg").textContent = "Payment password cannot be the same as account";
      return;
    }
    if(!qs("#regAgree").checked){
      qs("#regMsg").textContent = "Please Agree to the Service Agreement First";
      return;
    }

    qs("#regMsg").textContent = "…";

    fetch(REGISTER_URL, {
      method:"POST",
      headers:{ "Content-Type":"application/x-www-form-urlencoded; charset=UTF-8" },
      body: new URLSearchParams({
        user_name: u,
        tel: t,
        pwd: p,
        deposit_pwd: dp,
        invite_code: c
      })
    }).then(function(r){ return r.json(); })
      .then(function(j){
        if(j && j.code === 0){
          showLogin(nextUrl);
          qs("#loginMsg").textContent = "Registration Successful, Please Log In";
        }else{
          qs("#regMsg").textContent = (j && (j.info||j.msg)) ? (j.info||j.msg) : "Registration Failed";
        }
      }).catch(function(){
        qs("#regMsg").textContent = "Network Error";
      });
  }

  // 对外接口
  window.Auth = window.Auth || {};
  window.Auth.require = async function(url, ev){
    try{
      if(ev){
        ev.preventDefault && ev.preventDefault();
        ev.stopPropagation && ev.stopPropagation();
        ev.stopImmediatePropagation && ev.stopImmediatePropagation();
      }
    }catch(e){}
    var ok = await auth_check();
    if(ok) location.href = url;
    else showLogin(url);
    return false;
  };

  // 退出时调用：清本地登录标记（不清记住账号）
  window.auth_clear = clearLogged;

  // 兜底：如果当前页面是被后端拦回来的（带 next），且未登录，则自动弹登录
  (function(){
    var n = (getNextFromUrl() || "").trim();
    if(!n) return;

    // 如果 cookie 里没有 user_id，则一定未登录（不要信 AUTH_OK）
    if(!hasAuthCookie()){
      clearLogged();
      // 避免重复弹：如果已经有弹窗就不再插入
      if(!document.querySelector(".auth-mask")){
        showLogin(n);
      }
    }
  })();

})();