package com.ruoyi.system.service.impl;

import com.ruoyi.common.core.domain.AjaxResult;
import com.ruoyi.system.domain.Employee;
import com.ruoyi.system.dto.CardVerifyRequest;
import com.ruoyi.system.enums.VerifyResultEnum;
import com.ruoyi.system.mapper.EmployeeMapper;
import com.ruoyi.system.service.EmployeeVerifyService;
import org.slf4j.Logger;
import org.slf4j.LoggerFactory;
import org.springframework.stereotype.Service;

import javax.annotation.Resource;

@Service
public class EmployeeVerifyServiceImpl implements EmployeeVerifyService {

    private static final Logger log = LoggerFactory.getLogger(EmployeeVerifyServiceImpl.class);

    @Resource
    private EmployeeMapper employeeMapper;

    @Override
    public AjaxResult verifyByCard(CardVerifyRequest request) {
        Employee employee = employeeMapper.selectEnabledByCardNo(request.getCardNo());

        if (employee == null) {
            return recordAndReturn(VerifyResultEnum.RECEPTIONIST_UNAVAILABLE);
        }

        String boundCardNo = employee.getCardNo();
        if (boundCardNo == null || boundCardNo.trim().isEmpty()) {
            return recordAndReturn(VerifyResultEnum.CARD_NOT_BOUND);
        }

        String inputCardNo = request.getCardNo() == null ? "" : request.getCardNo().trim();
        if (!boundCardNo.trim().equalsIgnoreCase(inputCardNo)) {
            return recordAndReturn(VerifyResultEnum.CARD_NOT_MATCH);
        }

        return recordAndReturn(VerifyResultEnum.SUCCESS);
    }

    /**
     * 统一出口：记录验证流水（成功/失败均记录）并返回结果。
     * TODO: 落库到 t_employee_verify_log（建表脚本见 sql/verify_log.sql），字段建议包含：
     *       employee_id, result_code, client_ip, device_no, create_time。
     * TODO: 结合 Redis 按 employeeId + 来源IP/设备号 做滑动窗口计数，连续失败N次后返回
     *       VERIFY_LOCKED 并锁定一段时间，防止对某个接待人反复试卡的暴力破解/撞库。
     */
    private AjaxResult recordAndReturn(VerifyResultEnum result) {
        if (VerifyResultEnum.SUCCESS.equals(result)) {
            log.info("接待人刷卡验证成功");
            return AjaxResult.success();
        }
        log.warn("接待人刷卡验证失败,  result={}", result.getMessage());
        return AjaxResult.error(result.getMessage());
    }
}