/**
 * Proxy login events to platform-service.
 * GET /api/auth/login-events?suspicious=true&limit=50
 */

import { NextRequest, NextResponse } from 'next/server';

const PLATFORM_API = process.env.PLATFORM_SERVICE_URL || 'http://localhost:4003';

export async function GET(req: NextRequest) {
  try {
    const auth = req.headers.get('authorization') || '';
    const qs = req.nextUrl.searchParams.toString();
    const res = await fetch(`${PLATFORM_API}/api/auth/login-events${qs ? `?${qs}` : ''}`, {
      headers: { Authorization: auth },
    });
    const data = await res.json();
    if (!res.ok) {
      return NextResponse.json({ error: data.error || 'Failed' }, { status: res.status });
    }
    return NextResponse.json(data);
  } catch {
    return NextResponse.json({ error: 'Platform service unavailable' }, { status: 502 });
  }
}
