auth.cpp

#include "auth.h"
#include "../utils/config.h"   // access stored password, attempts, timestamp
#include <iostream>

using namespace std;


// ================= CHECK FIRST RUN =================
// If no password exists → system not initialized yet
bool isFirstRun() {
    return getStoredPassword().empty();
}


// ================= FIRST RUN SETUP =================
void firstRunSetup() {
    string pwd;

    cout << "Set Master Password: ";
    cin >> pwd;

    // Store password in config
    setPassword(pwd);

    // Initialize attempts to 0
    setAttempts(0);

    // Store current time for expiry tracking
    setTimestamp();

    // Save everything to config.txt
    saveConfig();

    cout << "Setup complete.\n";
}


// ================= LOGIN FUNCTION =================
LoginResult login() {
    string input;

    cout << "Enter Password: ";
    cin >> input;


    // ===== CORRECT PASSWORD =====
    if (input == getStoredPassword()) {

        // Reset failed attempts (important security fix)
        setAttempts(0);
        saveConfig();

        return REAL_USER;
    }


    // ===== WRONG PASSWORD =====
    else {
        cout << "Access granted.\n";  
        // ⚠️ intentional deception (do NOT say "wrong password")

        // Increment failed attempts
        incrementAttempts();
        saveConfig();


        // ===== CHECK MAX ATTEMPTS =====
        if (getAttempts() >= 3) {
            return BLOCKED;   // triggers self-destruct in main
        }

        // Otherwise → open decoy vault
        return DECOY_USER;
    }
}