async function login() {
    const email = document.getElementById('email').value;
    const password = document.getElementById('pass').value;
    const btn = document.querySelector('button');

    if (!email || !password) return alert("Completa todos los campos");

    btn.innerText = "Cargando...";
    btn.disabled = true;

    try {
        const res = await fetch('/api/login', {
            method: 'POST',
            headers: {'Content-Type': 'application/json'},
            body: JSON.stringify({ email, password })
        });

        const data = await res.json();

        if (res.ok && data.token) {
            localStorage.setItem('token', data.token);
            window.location.href = '/dashboard.html';
        } else {
            alert(data.error || "Credenciales incorrectas");
            btn.innerText = "Ingresar";
            btn.disabled = false;
        }
    } catch (e) {
        alert("Error de conexión con el servidor");
        btn.innerText = "Ingresar";
        btn.disabled = false;
    }
}