package com.fastbee.iot.service.impl;

import com.fastbee.common.constant.Constants;
import com.fastbee.common.constant.HttpStatus;
import com.fastbee.common.core.domain.AjaxResult;
import com.fastbee.common.core.domain.entity.SysUser;
import com.fastbee.common.core.domain.model.BindLoginBody;
import com.fastbee.common.core.domain.model.BindRegisterBody;
import com.fastbee.common.core.domain.model.LoginUser;
import com.fastbee.common.core.redis.RedisCache;
import com.fastbee.common.exception.ServiceException;
import com.fastbee.common.utils.DateUtils;
import com.fastbee.common.utils.SecurityUtils;
import com.fastbee.common.utils.StringUtils;
import com.fastbee.common.utils.sign.Md5Utils;
import com.fastbee.framework.web.service.SysLoginService;
import com.fastbee.framework.web.service.SysRegisterService;
import com.fastbee.framework.web.service.TokenService;
import com.fastbee.iot.domain.SocialPlatform;
import com.fastbee.iot.domain.SocialUser;
import com.fastbee.iot.model.RegisterUserInput;
import com.fastbee.iot.model.login.AuthRequestWrap;
import com.fastbee.iot.model.login.BindIdValue;
import com.fastbee.iot.model.login.LoginIdValue;
import com.fastbee.iot.service.IAuthRequestFactory;
import com.fastbee.iot.service.ISocialLoginService;
import com.fastbee.iot.service.ISocialUserService;
import com.fastbee.iot.service.IToolService;
import com.fastbee.system.service.ISysConfigService;
import com.fastbee.system.service.ISysUserService;
import me.zhyd.oauth.exception.AuthException;
import me.zhyd.oauth.model.AuthCallback;
import me.zhyd.oauth.model.AuthResponse;
import me.zhyd.oauth.model.AuthUser;
import me.zhyd.oauth.utils.AuthStateUtils;
import me.zhyd.oauth.utils.RandomUtil;
import org.apache.commons.collections4.CollectionUtils;
import org.slf4j.Logger;
import org.slf4j.LoggerFactory;
import org.springframework.beans.BeanUtils;
import org.springframework.beans.factory.annotation.Autowired;
import org.springframework.stereotype.Service;

import javax.annotation.Resource;
import javax.servlet.http.HttpServletRequest;
import java.util.List;
import java.util.concurrent.TimeUnit;

import static com.fastbee.common.constant.HttpStatus.NO_MESSAGE_ALERT;
import static com.fastbee.common.core.domain.AjaxResult.error;

/**
 * 第三方登录Service业务层处理
 *
 * @author json
 * @date 2022-04-12
 */
@Service
public class SocialLoginServiceImpl implements ISocialLoginService {

    public static final Integer BIND_EXPIRE_TIME = 60 * 60;
    public static final Integer LOGIN_SOCIAL_EXPIRE_TIME = 60;
    public static final String ONLINE_STATUS = "0"; //1 offline
    public static final String DEL_FLAG = "0"; //1 offline
    public static final Integer WX_BIND_EXPIRE_TIME = 5;

    //redis key: uuid+source
    public static final String BIND_REDIS_KEY = "login:bind:user:";
    //redis key : userId+random 32
    public static final String LOGIN_SOCIAL_REDIS_KEY = "login:social:user:";
    //redis key : msg+ code+currentTime
    public static final String LOGIN_ERROR_MSG_REDIS_KEY = "login:error:msg:";
    //redis key : userId+random 32
    public static final String WX_BIND_REDIS_KEY = "wx:bind:user:";

    public static final String HTTPS = "https://";

    private static final Logger log = LoggerFactory.getLogger(SocialLoginServiceImpl.class);

    @Autowired
    private RedisCache redisCache;

    @Autowired
    private ISysConfigService iSysConfigService;

    @Autowired
    private TokenService tokenService;

    @Autowired
    private SysRegisterService sysRegisterService;

    @Autowired
    private SysLoginService sysLoginService;

    @Autowired
    private ISysUserService iSysUserService;

    @Autowired
    private IAuthRequestFactory iAuthRequestFactory;

    @Autowired
    private ISocialUserService iSocialUserService;

    @Resource
    private IToolService toolService;


    @Override
    public String renderAuth(String source, HttpServletRequest httpServletRequest) {
        AuthRequestWrap authRequestWrap = null;
        try {
            authRequestWrap = iAuthRequestFactory.getAuthRequest(source);
            checkSocialPlatform(authRequestWrap.getSocialPlatform());
            return authRequestWrap.getAuthRequest().authorize(AuthStateUtils.createState());
        } catch (AuthException authException) {
            //返回错误信息
            log.error("", authException);
            if (authRequestWrap != null) {
                String errorId = genErrorId(authException.getMessage());
                return authRequestWrap.getSocialPlatform().getErrorMsgUri() + errorId;
            } else {
                return httpServletRequest.getProtocol() + httpServletRequest.getServerName() + httpServletRequest.getServerPort();
            }
        } catch (Exception exception) {
            //这类错误 直接不返回，重定向到主页
            log.error("", exception);
            return HTTPS + httpServletRequest.getServerName();
        }

    }

    @Override
    public String callback(String source, AuthCallback authCallback, HttpServletRequest httpServletRequest) {
        AuthRequestWrap authRequestWrap = null;
        try {
            authRequestWrap = iAuthRequestFactory.getAuthRequest(source);
            checkSocialPlatform(authRequestWrap.getSocialPlatform());
            AuthResponse<AuthUser> authResponse = authRequestWrap.getAuthRequest().login(authCallback);
            String bindId = null;
            String loginId = null;
            if (authResponse.ok()) {

                SocialUser socialUser = findSocialUser(authResponse.getData().getUuid(), authResponse.getData().getSource());
                // 同一开放平台下(unionid唯一)如果有其他应用已经微信登录绑定了账号，则直接绑定该账号登录
                Long bindSysUserId = null;
                String unionId = (String) authResponse.getData().getRawUserInfo().get("unionid");
                if ((socialUser == null || socialUser.getSysUserId() == null) && StringUtils.isNotEmpty(unionId)) {
                    bindSysUserId = iSocialUserService.selectSysUserIdByUnionId(unionId);
                }
                createOrUpdateSocialUser(socialUser, authResponse.getData(), source, bindSysUserId);
                if (bindSysUserId != null) {
                    socialUser = new SocialUser();
                    socialUser.setSysUserId(bindSysUserId);
                }
                if (socialUser == null) {
                    //第一次登录
                    bindId = genBindId(authResponse.getData());
                } else if (socialUser.getSysUserId() == null || socialUser.getSysUserId() <= 0) {
                    //初次绑定
                    bindId = genBindId(authResponse.getData());
                } else {
                    //查看是否已经绑定
                    SysUser sysUser = iSysUserService.selectUserById(socialUser.getSysUserId());
                    if (sysUser == null) {
                        bindId = genBindId(authResponse.getData());
                    } else {
                        //直接登录跳转
                        loginId = genLoginId(sysUser);
                    }
                }
                if (StringUtils.isNotEmpty(bindId)) {
                    return authRequestWrap.getSocialPlatform().getBindUri() + bindId;
                } else {
                    return authRequestWrap.getSocialPlatform().getRedirectLoginUri() + loginId;
                }
            } else {
                log.error("登录授权异常,code:{}, msg:{}", authResponse.getCode(), authResponse.getMsg());
                String errorId = genErrorId(authResponse.getMsg());
                return authRequestWrap.getSocialPlatform().getErrorMsgUri() + errorId;
            }
        } catch (AuthException authException) {
            //返回错误信息
            log.error("", authException);
            if (authRequestWrap != null) {
                String errorId = genErrorId(authException.getMessage());
                return authRequestWrap.getSocialPlatform().getErrorMsgUri() + errorId;
            } else {
                return httpServletRequest.getServerName() + httpServletRequest.getServerPort();
            }
        } catch (Exception exception) {
            log.error("", exception);
            return HTTPS + httpServletRequest.getServerName();
        }

    }

    @Override
    public AjaxResult checkBindId(String bindId) {
        AjaxResult ajax = AjaxResult.success();
        ajax.put("bindAccount", false);
        if (StringUtils.isEmpty(bindId)) {
            return ajax;
        }
        BindIdValue bindValue = redisCache.getCacheObject(BIND_REDIS_KEY + bindId);
        if (bindValue == null) {
            return ajax;
        }
        ajax.put("bindAccount", true);
        return AjaxResult.success(bindId);
    }

    @Override
    public AjaxResult getErrorMsg(String errorId) {
        String errorMsg = redisCache.getCacheObject(LOGIN_ERROR_MSG_REDIS_KEY + errorId);
        if (StringUtils.isEmpty(errorMsg)) {
            return error(NO_MESSAGE_ALERT, "");
        } else {
            return error(errorMsg);
        }
    }

    @Override
    public AjaxResult socialLogin(String loginId) {
        AjaxResult ajax = AjaxResult.success();
        String loginKey = LOGIN_SOCIAL_REDIS_KEY + loginId;
        LoginIdValue loginIdValue = redisCache.getCacheObject(loginKey);
        if (loginIdValue != null) {
            //login
            String token = sysLoginService.redirectLogin(loginIdValue.getUsername(), loginIdValue.getPassword());
            ajax.put(Constants.TOKEN, token);
        } else {
            log.info("loginId:{} ", loginId);
            return error(NO_MESSAGE_ALERT, "数据错误");
        }
        return ajax;
    }

    @Override
    public AjaxResult bindLogin(BindLoginBody bindLoginBody) {
        BindIdValue bindValue = redisCache.getCacheObject(BIND_REDIS_KEY + bindLoginBody.getBindId());
        SocialUser socialUser = findSocialUser(bindValue.getUuid(), bindValue.getSource());
        AjaxResult checkAjax = checkSocialUser(socialUser, bindLoginBody.getBindId());
        if (checkAjax != null) {
            return checkAjax;
        }
        AjaxResult ajax = AjaxResult.success();
        // 检查账号是否已经绑定微信
        SysUser sysUser = iSysUserService.selectUserByUserName(bindLoginBody.getUsername());
        if (sysUser == null) {
            // 单独返回code用户不存在,给前端处理
            return AjaxResult.error(HttpStatus.USER_NO_EXIST, "用户不存在");
        }
        // 自定义一下密码错误的提示
        if(!SecurityUtils.matchesPassword(bindLoginBody.getPassword(), sysUser.getPassword())){
            throw new ServiceException("密码错误");
        }
        List<SocialUser> socialUserList = iSocialUserService.selectBySysUserId(sysUser.getUserId());
        if (CollectionUtils.isNotEmpty(socialUserList)) {
            throw new ServiceException("该账号已经绑定其他微信，请先解绑后重试！");
        }
        // 生成令牌
        String token = sysLoginService.login(bindLoginBody.getUsername(), bindLoginBody.getPassword(), bindLoginBody.getCode(),
                bindLoginBody.getUuid());
        LoginUser loginUser = tokenService.getLoginUserByToken(token);
        //绑定和更新
        SocialUser updateSocialUser = new SocialUser();
        updateSocialUser.setSysUserId(loginUser.getUserId());
        updateSocialUser.setStatus("1");
        updateSocialUser.setSocialUserId(socialUser.getSocialUserId());
        iSocialUserService.updateSocialUser(updateSocialUser);
        ajax.put(Constants.TOKEN, token);
        redisCache.deleteObject(BIND_REDIS_KEY + bindLoginBody.getBindId());
        return ajax;
    }

    @Override
    public AjaxResult bindRegister(BindRegisterBody bindRegisterBody) {
        if (!("true".equals(iSysConfigService.selectConfigByKey("sys.account.registerUser")))) {
            return error("当前系统没有开启注册功能！");
        }
        BindIdValue bindValue = redisCache.getCacheObject(BIND_REDIS_KEY + bindRegisterBody.getBindId());
        SocialUser socialUser = findSocialUser(bindValue.getUuid(), bindValue.getSource());
        AjaxResult checkAjax = checkSocialUser(socialUser, bindRegisterBody.getBindId());
        if (checkAjax != null) {
            return checkAjax;
        }

        AjaxResult ajax = AjaxResult.success();
        RegisterUserInput registerUserInput = new RegisterUserInput();
        BeanUtils.copyProperties(bindRegisterBody, registerUserInput);
        String msg = toolService.register(registerUserInput);
        if (StringUtils.isNotEmpty(msg)) {
            return error(msg);
        }
        SysUser sysUser = iSysUserService.selectUserByUserName(bindRegisterBody.getUsername());
        //绑定和更新
        SocialUser updateSocialUser = new SocialUser();
        updateSocialUser.setSysUserId(sysUser.getUserId());
        updateSocialUser.setStatus("1");
        updateSocialUser.setSocialUserId(socialUser.getSocialUserId());
        iSocialUserService.updateSocialUser(updateSocialUser);
        redisCache.deleteObject(BIND_REDIS_KEY + bindRegisterBody.getBindId());
        // 生成令牌
        String token = sysLoginService.redirectLogin(sysUser.getUserName(), sysUser.getPassword());
        ajax.put(Constants.TOKEN, token);
        return ajax;
    }

    private void checkSocialPlatform(SocialPlatform socialPlatform) {
        if (socialPlatform != null && (!socialPlatform.getStatus().equals(ONLINE_STATUS) || !socialPlatform.getDelFlag().equals(DEL_FLAG))) {
            throw new AuthException("当前第三方登录平台被禁用");
        }
    }

    @Override
    public SocialUser findSocialUser(String uuid, String source) {
        SocialUser socialUser = new SocialUser();
        socialUser.setSource(source);
        socialUser.setUuid(uuid);
        List<SocialUser> socialUserList = iSocialUserService.selectSocialUserList(socialUser);
        return socialUserList == null || socialUserList.isEmpty() ? null : socialUserList.get(0);

    }

    public void createOrUpdateSocialUser(SocialUser socialUser, AuthUser authUser, String source, Long bindSysUserId) {
        if (socialUser != null) {
            //更新数据
            SocialUser updateSocialUser = new SocialUser();
            updateSocialUser.setSocialUserId(socialUser.getSocialUserId());
            replaceSocialUser(updateSocialUser, authUser);
            updateSocialUser.setUpdateBy("System");
            updateSocialUser.setUpdateTime(DateUtils.getNowDate());
            updateSocialUser.setSourceClient(source);
            if (socialUser.getSysUserId() == null && bindSysUserId != null) {
                updateSocialUser.setSysUserId(bindSysUserId);
                updateSocialUser.setStatus("1");
            }
            iSocialUserService.updateSocialUser(updateSocialUser);
        } else {
            //创建
            SocialUser saveSocialUser = new SocialUser();
            replaceSocialUser(saveSocialUser, authUser);
            saveSocialUser.setDelFlag("0");
            saveSocialUser.setCreateBy("System");
            saveSocialUser.setCreateTime(DateUtils.getNowDate());
            saveSocialUser.setSourceClient(source);
            if (bindSysUserId != null) {
                saveSocialUser.setSysUserId(bindSysUserId);
                saveSocialUser.setStatus("1");
            } else {
                saveSocialUser.setStatus("0");
            }
            iSocialUserService.insertSocialUser(saveSocialUser);
        }
    }

    private void replaceSocialUser(SocialUser socialUser, AuthUser authUser) {

        socialUser.setUuid(authUser.getUuid());
        socialUser.setSource(authUser.getSource());
        socialUser.setAccessToken(authUser.getToken().getAccessToken());
        //nullable
        socialUser.setExpireIn((long) authUser.getToken().getExpireIn());
        socialUser.setRefreshToken(authUser.getToken().getRefreshToken());
        socialUser.setOpenId(authUser.getToken().getOpenId());
        socialUser.setUid(authUser.getToken().getUid());
        socialUser.setAccessCode(authUser.getToken().getAccessCode());
        socialUser.setUnionId(authUser.getToken().getUnionId());
        socialUser.setCode(authUser.getToken().getCode());
        socialUser.setAvatar(authUser.getAvatar());
        socialUser.setUsername(authUser.getUsername());
        socialUser.setNickname(authUser.getNickname());
    }

    public String genBindId(AuthUser authUser) {
        String bindId = Md5Utils.hash(authUser.getUuid() + authUser.getSource());
        String key = BIND_REDIS_KEY + bindId;
        BindIdValue bindIdValue = new BindIdValue();
        bindIdValue.setSource(authUser.getSource());
        bindIdValue.setUuid(authUser.getUuid());
        redisCache.setCacheObject(key, bindIdValue, BIND_EXPIRE_TIME, TimeUnit.SECONDS);
        return bindId;
    }

    private String genLoginId(SysUser sysUser) {
        String loginId = Md5Utils.hash(sysUser.getUserId() + RandomUtil.randomString(32));
        String key = LOGIN_SOCIAL_REDIS_KEY + loginId;
        LoginIdValue loginIdValue = new LoginIdValue();
        loginIdValue.setPassword(sysUser.getPassword());
        loginIdValue.setUsername(sysUser.getUserName());
        redisCache.setCacheObject(key, loginIdValue, LOGIN_SOCIAL_EXPIRE_TIME, TimeUnit.SECONDS);
        return loginId;
    }

    public String genErrorId(String msg) {
        String errorId = Md5Utils.hash(msg + RandomUtil.randomString(32));
        String key = LOGIN_ERROR_MSG_REDIS_KEY + errorId;
        redisCache.setCacheObject(key, msg, LOGIN_SOCIAL_EXPIRE_TIME, TimeUnit.SECONDS);
        return errorId;
    }

    public String genWxBindId(Long userId) {
        String wxBindId = Md5Utils.hash(userId + RandomUtil.randomString(32));
        String key = WX_BIND_REDIS_KEY + wxBindId;
        redisCache.setCacheObject(key, userId, WX_BIND_EXPIRE_TIME, TimeUnit.MINUTES);
        return wxBindId;
    }

    @Override
    public AjaxResult checkSocialUser(SocialUser socialUser, String bindId) {
        if (socialUser == null) {
            log.info("bindId不存在, bindId: {}", bindId);
            return error("绑定账户不存在");
        } else {
            return null;
        }
    }

    private int createSocialUser(AuthUser authUser, String sourceClient, Long sysUserId) {
        //创建
        SocialUser saveSocialUser = new SocialUser();
        replaceSocialUser(saveSocialUser, authUser);
        saveSocialUser.setDelFlag("0");
        saveSocialUser.setCreateBy("System");
        saveSocialUser.setCreateTime(DateUtils.getNowDate());
        saveSocialUser.setSourceClient(sourceClient);
        saveSocialUser.setSysUserId(sysUserId);
        saveSocialUser.setStatus("1");
        return iSocialUserService.insertSocialUser(saveSocialUser);
    }

}