package com.lf.server.config;

import com.alibaba.druid.pool.DruidDataSource;
import com.lf.server.entity.sys.MyRealm;
import org.apache.shiro.authc.credential.HashedCredentialsMatcher;
import org.apache.shiro.codec.Base64;
import org.apache.shiro.spring.security.interceptor.AuthorizationAttributeSourceAdvisor;
import org.apache.shiro.spring.web.ShiroFilterFactoryBean;
import org.apache.shiro.web.mgt.CookieRememberMeManager;
import org.apache.shiro.web.mgt.DefaultWebSecurityManager;
import org.apache.shiro.web.servlet.SimpleCookie;
import org.apache.shiro.web.session.mgt.DefaultWebSessionManager;
import org.springframework.aop.framework.autoproxy.DefaultAdvisorAutoProxyCreator;
import org.springframework.beans.factory.annotation.Qualifier;
import org.springframework.boot.context.properties.ConfigurationProperties;
import org.springframework.context.annotation.Bean;

import java.util.HashMap;
import java.util.Map;

/**
 * ShiroConfig
 * @author WWW
 */
@SuppressWarnings("ALL")
//@Configuration
public class ShiroConfig {
    @ConfigurationProperties(prefix = "spring.datasource")
    @Bean
    public DruidDataSource druidDataSource() {
        return new DruidDataSource();
    }

    /*@Bean(name = "securityManager")
    public DefaultWebSecurityManager securityManager(@Qualifier("myRealm") MyRealm myRealm){
        DefaultWebSecurityManager securityManager = new DefaultWebSecurityManager();
        securityManager.setRealm(myRealm);

        return securityManager;
    }*/

    @Bean(name = "securityManager")
    public DefaultWebSecurityManager securityManager(@Qualifier("myRealm") MyRealm myRealm,
                                                     @Qualifier("rememberMeManager") CookieRememberMeManager rememberMeManager,
                                                     @Qualifier("mySessionManager") DefaultWebSessionManager webSessionManager) {
        DefaultWebSecurityManager securityManager = new DefaultWebSecurityManager();
        securityManager.setRealm(myRealm);
        securityManager.setRememberMeManager(rememberMeManager);
        securityManager.setSessionManager(webSessionManager);

        return securityManager;
    }

    @Bean
    public MyRealm myRealm() {
        MyRealm myShiroRealm = new MyRealm();

        return myShiroRealm;
    }

    @Bean(name = "rememberMeManager")
    public CookieRememberMeManager rememberMeManager() {
        // cookie管理器
        CookieRememberMeManager cookieRememberMeManager = new CookieRememberMeManager();

        // cookie的名字
        SimpleCookie simpleCookie = new SimpleCookie("rememberMe");

        // 设置有效期时间30天，秒
        simpleCookie.setMaxAge(259200);

        cookieRememberMeManager.setCookie(simpleCookie);

        // rememberMe cookie加密的密钥 建议每个项目都不一样 默认AES算法 密钥长度(128 256 512 位)
        cookieRememberMeManager.setCipherKey(Base64.decode("6ZmI6I2j5Y+R5aSn5ZOlAA=="));

        return cookieRememberMeManager;
    }

    /**
     * 创建DefaultWebSessionManager类
     *
     * @return
     */
    @Bean(name = "mySessionManager")
    public DefaultWebSessionManager mySessionManager() {
        DefaultWebSessionManager defaultSessionManager = new DefaultWebSessionManager();

        // 将sessionIdUrlRewritingEnabled属性设置成false
        defaultSessionManager.setSessionIdUrlRewritingEnabled(false);

        defaultSessionManager.setGlobalSessionTimeout(8 * 60 * 60 * 1000);
        defaultSessionManager.setSessionValidationSchedulerEnabled(true);
        defaultSessionManager.setSessionIdCookieEnabled(true);

        return defaultSessionManager;
    }

    @Bean
    public ShiroFilterFactoryBean bean(@Qualifier("securityManager") DefaultWebSecurityManager securityManager) {
        ShiroFilterFactoryBean bean = new ShiroFilterFactoryBean();
        bean.setSecurityManager(securityManager);

        /**
         * 添加shiro的内置过滤器
         *  anon: 无需认证即可访问
         *  authc: 必须认证才能用
         *  user: 必须拥有 “记住我” 功能才能用
         *  perms: 拥有对某个资源的权限才能用
         *  role: 拥有某个角色权限才能访问
         */
        Map<String, String> filterMap = new HashMap<>(5);

        // 登陆后授权，正常情况下没有授权会跳转到未授权页面
        //filterMap.put("/toAdd", "perms[user:add]");
        //filterMap.put("/toUpdate", "perms[user:update]");

        // 登出，设置注销过滤器
        //filterMap.put("/logout", "logout");

        /**
         *    /** 匹配所有的路径
         *   通过Map集合组成了一个拦截器链 ，自顶向下过滤，一旦匹配，则不再执行下面的过滤
         *   如果下面的定义与上面冲突，那按照了谁先定义谁说了算
         *   所以/** 一定要配置在最后
         *   这里是否要对所有路径进行认证视情况而定，因为一些路由跳转可能在没登陆出现导致出错，所以这里考虑清楚
         **/
        //filterMap.put("/**", "authc");

        // 将拦截器链设置到shiro中
        bean.setFilterChainDefinitionMap(filterMap);

        // 设置登录页面
        bean.setLoginUrl("/toLogin");

        // 登录成功后要跳转的链接
        //bean.setSuccessUrl("/toIndex");

        // 设置未授权页面
        bean.setUnauthorizedUrl("/noauth");

        return bean;
    }

    /**
     * 密码匹配凭证管理器
     *
     * 密码校验规则HashedCredentialsMatcher
     * 这个类是为了对密码进行编码的 ,
     * 防止密码在数据库里明码保存 , 当然在登陆认证的时候 ,
     * 这个类也负责对form里输入的密码进行编码
     * 处理认证匹配处理器：如果自定义需要实现继承HashedCredentialsMatcher
     */
    @Bean(name = "hashedCredentialsMatcher")
    public HashedCredentialsMatcher hashedCredentialsMatcher() {
        HashedCredentialsMatcher hashedCredentialsMatcher = new HashedCredentialsMatcher();

        // 散列算法:这里使用MD5算法;
        hashedCredentialsMatcher.setHashAlgorithmName("MD5");

        // 散列的次数，比如散列两次，相当于md5(md5(""));
        hashedCredentialsMatcher.setHashIterations(1024);
        hashedCredentialsMatcher.setStoredCredentialsHexEncoded(true);

        return hashedCredentialsMatcher;
    }

    /**
     * 开启shiro aop注解支持
     * 使用代理方式;所以需要开启代码支持
     * @param securityManager
     */
    @Bean
    public DefaultAdvisorAutoProxyCreator advisorAutoProxyCreator(){
        DefaultAdvisorAutoProxyCreator advisorAutoProxyCreator = new DefaultAdvisorAutoProxyCreator();
        advisorAutoProxyCreator.setProxyTargetClass(true);

        return advisorAutoProxyCreator;
    }

    @Bean
    public AuthorizationAttributeSourceAdvisor authorizationAttributeSourceAdvisor(DefaultWebSecurityManager securityManager){
        AuthorizationAttributeSourceAdvisor authorizationAttributeSourceAdvisor = new AuthorizationAttributeSourceAdvisor();
        authorizationAttributeSourceAdvisor.setSecurityManager(securityManager);

        return authorizationAttributeSourceAdvisor;
    }

    /**
     * 开启cglib代理
     */
    @Bean
    public DefaultAdvisorAutoProxyCreator defaultAdvisorAutoProxyCreator() {
        DefaultAdvisorAutoProxyCreator creator = new DefaultAdvisorAutoProxyCreator();
        creator.setProxyTargetClass(true);

        return creator;
    }
}