import json
import os
from fastapi import APIRouter, HTTPException, Request

MENU_PERMISSIONS_PATH = os.path.join(os.path.dirname(os.path.dirname(__file__)), "menu_permissions.json")

router = APIRouter(tags=["Permisos"])


def load_permissions() -> dict:
    if not os.path.exists(MENU_PERMISSIONS_PATH):
        return {}
    with open(MENU_PERMISSIONS_PATH, "r") as f:
        return json.load(f)


@router.get("/api/user/menu")
async def get_user_menu(request: Request):
    webUser = str(getattr(request.state, "webUser", ""))
    if not webUser:
        raise HTTPException(status_code=401, detail="Usuario no autenticado")

    permissions = load_permissions()
    allowed_paths = permissions.get(webUser, [])

    return {"allowedPaths": allowed_paths}