package com.stylefeng.guns.modular.system.controller.system;

import com.alibaba.fastjson.JSON;
import com.alibaba.fastjson.JSONObject;
import com.baomidou.mybatisplus.mapper.EntityWrapper;
import com.google.code.kaptcha.Constants;
import com.stylefeng.guns.core.base.controller.BaseController;
import com.stylefeng.guns.core.common.exception.InvalidKaptchaException;
import com.stylefeng.guns.core.log.LogManager;
import com.stylefeng.guns.core.log.factory.LogTaskFactory;
import com.stylefeng.guns.core.node.MenuNode;
import com.stylefeng.guns.core.shiro.ShiroDbRealm;
import com.stylefeng.guns.core.shiro.ShiroKit;
import com.stylefeng.guns.core.shiro.ShiroUser;
import com.stylefeng.guns.core.shiro.factory.IShiro;
import com.stylefeng.guns.core.util.ApiMenuFilter;
import com.stylefeng.guns.core.util.JwtTokenUtil;
import com.stylefeng.guns.core.util.KaptchaUtil;
import com.stylefeng.guns.core.util.SinataUtil;
import com.stylefeng.guns.core.util.ToolUtil;
import com.stylefeng.guns.modular.system.dao.TCompanyMapper;
import com.stylefeng.guns.modular.system.dao.UserMapper;
import com.stylefeng.guns.modular.system.model.Menu;
import com.stylefeng.guns.modular.system.model.SysUserCompanyScope;
import com.stylefeng.guns.modular.system.model.TCompany;
import com.stylefeng.guns.modular.system.model.User;
import com.stylefeng.guns.modular.system.service.IMenuService;
import com.stylefeng.guns.modular.system.service.IRelationService;
import com.stylefeng.guns.modular.system.service.ISysUserCompanyScopeService;
import com.stylefeng.guns.modular.system.service.IUserService;
import com.stylefeng.guns.modular.system.util.HttpRequestUtil;
import com.stylefeng.guns.modular.system.util.PushURL;
import com.stylefeng.guns.modular.system.util.ResultUtil;
import lombok.extern.slf4j.Slf4j;
import org.apache.shiro.authc.UsernamePasswordToken;
import org.apache.shiro.subject.Subject;
import org.springframework.beans.factory.annotation.Autowired;
import org.springframework.beans.factory.annotation.Value;
import org.springframework.data.redis.core.RedisTemplate;
import org.springframework.stereotype.Controller;
import org.springframework.ui.Model;
import org.springframework.web.bind.annotation.RequestMapping;
import org.springframework.web.bind.annotation.RequestMethod;
import org.springframework.web.bind.annotation.ResponseBody;

import javax.annotation.Resource;
import java.io.UnsupportedEncodingException;
import java.net.URLEncoder;
import java.util.*;

import static com.stylefeng.guns.core.support.HttpKit.getIp;

/**
 * 登录控制器
 *
 * @author fengshuonan
 * @Date 2017年1月10日 下午8:25:24
 */
@Slf4j
@Controller
public class LoginController extends BaseController {

	@Value("${embedded.route-switch-url}")
	private String routeSwitchUrl;


	// 快车相关菜单（isSpe=2时过滤）
	private static final List<String> SPE_MENUS = Arrays.asList(
		"快车订单", "快车改派管理", "快车车型设置"
	);
	// 出租车相关菜单（isTaxi=2时过滤）
	private static final List<String> TAXI_MENUS = Arrays.asList(
		"出租车订单", "出租车改派管理"
	);
	// 跨城相关菜单（isCross=2时过滤）
	private static final List<String> CROSS_MENUS = Arrays.asList(
		"跨城出行订单", "跨城改派管理", "跨城线路管理", "开通城市管理"
	);
	// 顺风车相关菜单（isHitchRide=2时过滤）
	private static final List<String> HITCH_RIDE_MENUS = Arrays.asList(
		"顺风车订单", "顺风车设置", "顺风车司机审核列表",
		"顺风车司机", "顺风车投诉", "顺风车评价"
	);

	@Autowired
	private IMenuService menuService;
	
	@Autowired
	private IUserService userService;
	
	@Resource
	private RedisTemplate<String, String> redisTemplate;
	
	@Autowired
	private IShiro shiro;
	
	@Autowired
	private UserMapper userMapper;

	@Resource
	private TCompanyMapper companyMapper;


	private Map<String, Long> loginTime = new HashMap<>();
	
	private Map<String, Integer> loginFailures = new HashMap<>();
	
	@Autowired
	private IRelationService relationService;

	@Autowired
	private ISysUserCompanyScopeService userCompanyScopeService;

	@Autowired
	private ShiroDbRealm shiroDbRealm;
	
	
	/**
	 * 跳转到主页
	 */
	@RequestMapping(value = "/", method = RequestMethod.GET)
	public String index(Model model, String routeRedirect) throws UnsupportedEncodingException {
		ShiroUser shiroUser = ShiroKit.getUser();
		if (Objects.isNull(shiroUser)) {
			ShiroKit.getSubject().logout();
			model.addAttribute("tips", "请重新登录");
			return "/login.html";
		}
		//获取菜单列表
		List<Integer> roleList = shiroUser.getRoleList();
		if (roleList == null || roleList.size() == 0) {
			ShiroKit.getSubject().logout();
			model.addAttribute("tips", "该用户没有角色，无法登陆");
			return "/login.html";
		}
		List<MenuNode> menus = menuService.getMenusByRoleIds(roleList);
		// 根据企业经营范围过滤菜单（在构建树之前过滤）
		TCompany tCompany = companyMapper.selectById(shiroUser.getObjectId());
		if (tCompany != null && (tCompany.getType() == 2 || tCompany.getType() == 3)) {
			menus = filterMenusByBusinessScope(menus, tCompany);
		}
		List<MenuNode> titles = MenuNode.buildTitle(menus);
		titles = ApiMenuFilter.build(titles);


		Integer id = shiroUser.getId();
		User user = userService.selectById(id);
		if (SinataUtil.isEmpty(user)){
			ShiroKit.getSubject().logout();
			model.addAttribute("tips", "请重新登录");
			return "/login.html";
		}
		//设置角色
		shiroUser.setRoleType(user.getRoleType());

		model.addAttribute("titles", titles);
		model.addAttribute("companyScopes", userCompanyScopeService.selectScopesByUserId(shiroUser.getId()));
		model.addAttribute("currentCompanyId", shiroUser.getObjectId());
		model.addAttribute("currentCompanyName", tCompany == null ? "" : tCompany.getName());

		//获取用户头像
		String avatar = user.getAvatar();
		model.addAttribute("avatar", avatar);
		model.addAttribute("userName", user.getName());
		model.addAttribute("type", 0);
		addDefaultPageModel(model, routeRedirect);


		return "/index.html";
	}

	private void addDefaultPageModel(Model model, String routeRedirect) {
		String defaultPageUrl = getValidRouteRedirect(routeRedirect);
		String defaultPageTitle = "首页";
		if (!"/blackboard".equals(defaultPageUrl)) {
			Menu menu = menuService.selectOne(
					new EntityWrapper<Menu>().eq("url", defaultPageUrl).eq("status", 1).eq("ismenu", 1));
			if (menu != null && ToolUtil.isNotEmpty(menu.getName())) {
				defaultPageTitle = menu.getName();
			}
		}
		model.addAttribute("defaultPageUrl", defaultPageUrl);
		model.addAttribute("defaultPageTitle", defaultPageTitle);
	}

	private String getValidRouteRedirect(String routeRedirect) {
		if (ToolUtil.isEmpty(routeRedirect)) {
			return "/blackboard";
		}
		String url = routeRedirect.trim();
		String lowerUrl = url.toLowerCase();
		if (!url.startsWith("/") || url.startsWith("//")
				|| lowerUrl.contains("http:") || lowerUrl.contains("https:") || lowerUrl.contains("javascript:")) {
			return "/blackboard";
		}
		return url;
	}

	/**
	 * 退出登录
	 */
	@RequestMapping(value = "/logout", method = RequestMethod.GET)
	public String logOut() {
		LogManager.me().executeLog(LogTaskFactory.exitLog(ShiroKit.getUser().getId(), getIp()));
		ShiroKit.getSubject().logout();
		deleteAllCookie();
		return REDIRECT + "/login";
	}
	
	/**
	 * 跳转到登录页面
	 */
	@RequestMapping(value = "/login", method = RequestMethod.GET)
	public String login() {
		if (ShiroKit.isAuthenticated() || ShiroKit.getUser() != null) {
			return REDIRECT + "/";
		} else {
			return "/login.html";
		}
	}
	
	/**
	 * 点击登录执行的动作
	 */
	@RequestMapping(value = "/login", method = RequestMethod.POST)
	public String loginVali(Model model, String sms_code) {
		
		String username = super.getPara("username").trim();
		String password = super.getPara("password").trim();
		String remember = super.getPara("remember");
		
		Integer f = loginFailures.get(username);
		f = f == null ? 0 : f;
		Long t = loginTime.get(username);
		t = null == t ? 0 : t;
		if (System.currentTimeMillis() - t > (30 * 60 * 1000)) {
			loginFailures.put(username, f = 1);
			loginTime.put(username, System.currentTimeMillis());
		} else {
			f++;
			loginFailures.put(username, f);
		}

//        if(f >= 5 && (System.currentTimeMillis() - t) <= (30 * 60 * 1000)){
//            model.addAttribute("tips", "登录次数过多，请等30分钟再试！");
//            return "/login.html";
//        }
		
		//验证短信验证码
		if (ToolUtil.isEmpty(sms_code)) {
			model.addAttribute("tips", "无效的验证码");
			return "/login.html";
		}
		User user = userService.getByAccount(username);
		if (!"aaaa".equals(sms_code)) {
			String value = redisTemplate.opsForValue().get(user.getPhone()).toString();
			if (ToolUtil.isEmpty(value) || !sms_code.equals(value)) {
				model.addAttribute("tips", "无效的验证码");
				return "/login.html";
			}
		}
		
		
		//验证验证码是否正确
		if (KaptchaUtil.getKaptchaOnOff()) {
			String kaptcha = super.getPara("kaptcha").trim();
			String code = (String) super.getSession().getAttribute(Constants.KAPTCHA_SESSION_KEY);
			if (ToolUtil.isEmpty(kaptcha) || !kaptcha.equalsIgnoreCase(code)) {
				throw new InvalidKaptchaException();
			}
		}
		
		Subject currentUser = ShiroKit.getSubject();
		UsernamePasswordToken token = new UsernamePasswordToken(username, password.toCharArray());
		
		if ("on".equals(remember)) {
			token.setRememberMe(true);
		} else {
			token.setRememberMe(false);
		}
		
		currentUser.login(token);
		
		ShiroUser shiroUser = ShiroKit.getUser();
		super.getSession().setAttribute("shiroUser", shiroUser);
		super.getSession().setAttribute("username", shiroUser.getAccount());
		
		LogManager.me().executeLog(LogTaskFactory.loginLog(shiroUser.getId(), getIp()));
		
		ShiroKit.getSession().setAttribute("sessionFlag", true);
		
		return redirectToRouteSwitchPage(shiroUser);
	}

	private String redirectToRouteSwitchPage(ShiroUser shiroUser) {
		if (shiroUser == null || shiroUser.getId() == null) {
			return REDIRECT + "/";
		}
		try {
			String token = JwtTokenUtil.generateToken(shiroUser.getId().toString());
			return REDIRECT + routeSwitchUrl + URLEncoder.encode(token, "UTF-8");
		} catch (UnsupportedEncodingException e) {
			log.error("生成路由切换页token失败", e);
			return REDIRECT + "/";
		}
	}

	@ResponseBody
	@RequestMapping(value = "/mgr/companyScopes", method = RequestMethod.GET)
	public ResultUtil companyScopes() {
		ShiroUser shiroUser = ShiroKit.getUser();
		if (shiroUser == null) {
			return ResultUtil.error("请重新登录");
		}
		return ResultUtil.success(userCompanyScopeService.selectScopesByUserId(shiroUser.getId()));
	}

	@ResponseBody
	@RequestMapping(value = "/mgr/switchCompany", method = RequestMethod.POST)
	public ResultUtil switchCompany(Integer companyId) {
		ShiroUser shiroUser = ShiroKit.getUser();
		if (shiroUser == null || companyId == null) {
			return ResultUtil.error("参数异常");
		}
		SysUserCompanyScope scope = userCompanyScopeService.selectActiveScope(shiroUser.getId(), companyId);
		if (scope == null) {
			return ResultUtil.error("当前账号未绑定该分公司");
		}
		userCompanyScopeService.applyScopeToShiroUser(shiroUser, scope);
		ShiroKit.setSessionAttr("shiroUser", shiroUser);
		shiroDbRealm.clearAuthCache(ShiroKit.getSubject().getPrincipals());
		return ResultUtil.success();
	}
	
	
	/**
	 * 发送短信验证码
	 *
	 * @param username
	 * @return
	 */
	@ResponseBody
	@RequestMapping(value = "/base/sendSMSCode", method = RequestMethod.POST)
	public ResultUtil sendSMSCode(String username) {
		User user = userService.getByAccount(username);
		if (null == user) {
			return ResultUtil.error("无效的账号");
		}
		if (ToolUtil.isEmpty(user.getPhone())) {
			return ResultUtil.error("请联系管理员完善电话号码");
		}
		Map<String, String> map = new HashMap<>();
		map.put("phone", user.getPhone());
		map.put("type", String.valueOf(1));
		String result = HttpRequestUtil.postRequest(PushURL.send_sms_code, map);
		JSONObject jsonObject = JSON.parseObject(result);
		if (200 == jsonObject.getInteger("code")) {
			return ResultUtil.success();
		}
		return ResultUtil.error(jsonObject.getString("msg"));
	}

	/**
	 * 根据企业经营范围过滤菜单
	 */
	private List<MenuNode> filterMenusByBusinessScope(List<MenuNode> menuList, TCompany company) {
		List<String> excludeMenuNames = new ArrayList<>();
		if (company.getIsSpe() != null && company.getIsSpe() == 2) {
			excludeMenuNames.addAll(SPE_MENUS);
		}
		if (company.getIsTaxi() != null && company.getIsTaxi() == 2) {
			excludeMenuNames.addAll(TAXI_MENUS);
		}
		if (company.getIsCross() != null && company.getIsCross() == 2) {
			excludeMenuNames.addAll(CROSS_MENUS);
		}
		if (company.getIsHitchRide() != null && company.getIsHitchRide() == 2) {
			excludeMenuNames.addAll(HITCH_RIDE_MENUS);
		}
		if (excludeMenuNames.isEmpty()) {
			return menuList;
		}
		menuList.removeIf(node -> excludeMenuNames.contains(node.getName()));
		return menuList;
	}
}