#!/bin/bash
cd /var/www/onebot
JAR=/tmp/onebot_cookies.txt
rm -f "$JAR"

echo "=== 登录页品牌 ==="
BODY=$(curl -s -c "$JAR" http://127.0.0.1:8081/auth/login)
echo "$BODY" | grep -oE "<title>[^<]*</title>" | head -1
echo "$BODY" | grep -qi "OneBot" && echo "✅ 登录页含 OneBot" || echo "⚠️ 登录页无 OneBot 文案（可能是标题/翻译）"
echo "$BODY" | grep -qi "leantime" && echo "⚠️ 登录页仍含 leantime" || echo "✅ 登录页无 leantime 残留"

echo ""
echo "=== 提取 CSRF token ==="
CSRF=$(echo "$BODY" | grep -oE 'name="csrf-token" content="[^"]*"' | sed 's/.*content="//;s/"//')
echo "CSRF: ${CSRF:0:20}..."

echo ""
echo "=== 尝试登录 ==="
LOGIN=$(curl -s -i -b "$JAR" -c "$JAR" -X POST http://127.0.0.1:8081/auth/login \
  -d "username=admin@onebot.local" \
  -d "password=OneBot@2026" \
  -d "_token=$CSRF" \
  -H "X-CSRF-TOKEN: $CSRF" \
  -H "X-Requested-With: XMLHttpRequest")
echo "$LOGIN" | head -10

echo ""
echo "=== 登录后访问首页 ==="
curl -s -b "$JAR" -o /dev/null -w "dashboard HTTP=%{http_code}\n" http://127.0.0.1:8081/dashboard/show

echo ""
echo "=== 访问 BOM 页面 ==="
curl -s -b "$JAR" -o /dev/null -w "bom/show HTTP=%{http_code}\n" http://127.0.0.1:8081/bom/show