<?php
declare(strict_types=1);

require __DIR__ . '/bootstrap.php';

if ($_SERVER['REQUEST_METHOD'] !== 'POST') {
    jsonError('方法不允许', 405);
}

$body = getRequestBody();
$user = trim((string) ($body['user'] ?? ''));
$password = trim((string) ($body['password'] ?? ''));

$config = loadAppConfig();
$adminUser = (string) ($config['adminUser'] ?? 'frankfrank');
$adminPassword = (string) ($config['adminPassword'] ?? 'frankfrank');

if ($user !== $adminUser || $password !== $adminPassword) {
    jsonError('账号或密码错误', 401);
}

$_SESSION['admin'] = true;
jsonResponse(['ok' => true, 'message' => '登录成功']);