package controllers

import (
	"fmt"
	"strings"
	"time"

	"github.com/astaxie/beego"
	"github.com/astaxie/beego/logs"
	"github.com/phachon/mm-wiki/app/models"
	"github.com/phachon/mm-wiki/app/services"
	"github.com/phachon/mm-wiki/app/utils"
)

type AuthorController struct {
	BaseController
}

// login index
func (this *AuthorController) Index() {

	// is open auth login
	ssoOpen := models.ConfigModel.GetConfigValueByKey(models.ConfigKeyAuthLogin, "0")
	this.Data["sso_open"] = ssoOpen
	this.viewLayout("author/login", "author")
}

// login
func (this *AuthorController) Login() {

	if !this.IsPost() {
		this.ViewError("请求方式有误！")
	}
	username := strings.TrimSpace(this.GetString("username"))
	password := strings.TrimSpace(this.GetString("password"))

	if username == "" {
		this.jsonError("系统用户名不能为空！")
	}
	if strings.Contains(username, "_") {
		this.jsonError("系统用户名不合法！")
	}
	if password == "" {
		this.jsonError("密码不能为空！")
	}

	user, err := models.UserModel.GetUserByUsername(username)
	if err != nil {
		this.jsonError("登录出错")
	}
	if len(user) == 0 || username != user["username"] {
		this.jsonError("用户名或密码错误!")
	}
	if user["is_forbidden"] == fmt.Sprintf("%d", models.User_Forbidden_True) {
		this.jsonError("用户已被禁用!")
	}

	password = utils.Encrypt.Md5Encode(password)

	if user["password"] != password {
		this.jsonError("用户名或密码错误!")
	}

	// update last_ip and last_login_time
	updateValue := map[string]interface{}{
		"last_time": time.Now().Unix(),
		"last_ip":   this.GetClientIp(),
	}
	_, err = models.UserModel.Update(user["user_id"], updateValue)
	if err != nil {
		this.jsonError("登录出错")
	}

	// save session
	this.SetSession("author", user)
	// save cookie
	identify := utils.Encrypt.Md5Encode(this.Ctx.Request.UserAgent() + this.GetClientIp() + password)
	passportValue := utils.Encrypt.Base64Encode(username + "@" + identify)
	passport := beego.AppConfig.String("author::passport")
	cookieExpired, _ := beego.AppConfig.Int64("author::cookie_expired")
	this.Ctx.SetCookie(passport, passportValue, cookieExpired)

	this.Ctx.Request.PostForm.Del("password")

	this.InfoLog("登录成功")
	this.jsonSuccess("登录成功！", nil, "/main/index")
}

// auth login
func (this *AuthorController) AuthLogin() {

	if !this.IsPost() {
		this.ViewError("请求方式有误！")
	}

	// is open auth login
	authLoginConf := models.ConfigModel.GetConfigValueByKey(models.ConfigKeyAuthLogin, "0")
	if authLoginConf != "1" {
		this.jsonError("系统未开启统一登录功能！")
	}
	// get auth login config
	authLogin, err := models.AuthModel.GetUsedAuth()
	if err != nil || len(authLogin) == 0 {
		this.jsonError("统一登录认证配置不可用！")
	}

	username := strings.TrimSpace(this.GetString("username"))
	password := strings.TrimSpace(this.GetString("password"))
	if username == "" {
		this.jsonError("统一登录用户名不能为空！")
	}
	if password == "" {
		this.jsonError("统一登录密码不能为空！")
	}
	authLoginRes, err := services.AuthLogin.AuthLogin(username, password)
	if err != nil {
		logs.Error("统一登录失败：", err.Error())
		this.jsonError("统一登录失败！")
		return
	}
	if authLoginRes == nil {
		this.jsonError("统一登录失败！")
		return
	}
	realUsername := authLogin["username_prefix"] + "_" + username
	passwordEncode := models.UserModel.EncodePassword(password)
	userValue := map[string]interface{}{
		"username":   realUsername,
		"given_name": authLoginRes.GivenName,
		"password":   passwordEncode,
		"email":      authLoginRes.Email,
		"mobile":     authLoginRes.Mobile,
		"phone":      authLoginRes.Phone,
		"department": authLoginRes.Department,
		"position":   authLoginRes.Position,
		"location":   authLoginRes.Location,
		"im":         authLoginRes.Im,
		"last_time":  time.Now().Unix(),
		"last_ip":    this.GetClientIp(),
	}
	ok, err := models.UserModel.HasUsername(realUsername)
	if err != nil {
		this.jsonError("登录失败!")
	}
	if ok {
		// update user info
		_, err = models.UserModel.UpdateUserByUsername(userValue)
	} else {
		// insert user info
		userValue["role_id"] = models.Role_Default_Id
		_, err = models.UserModel.Insert(userValue)
	}
	if err != nil {
		this.jsonError("登录失败！" + err.Error())
	}

	// get user by username
	user, err := models.UserModel.GetUserByUsername(realUsername)
	if err != nil {
		this.jsonError("登录失败：" + err.Error())
	}
	if len(user) == 0 {
		this.jsonError("登录失败!")
	}

	// save session
	this.SetSession("author", user)
	// save cookie
	identify := utils.Encrypt.Md5Encode(this.Ctx.Request.UserAgent() + this.GetClientIp() + passwordEncode)
	passportValue := utils.Encrypt.Base64Encode(user["username"] + "@" + identify)
	passport := beego.AppConfig.String("author::passport")
	cookieExpired, _ := beego.AppConfig.Int64("author::cookie_expired")
	this.Ctx.SetCookie(passport, passportValue, cookieExpired)

	this.Ctx.Request.PostForm.Del("password")

	this.InfoLog("登录成功")
	this.jsonSuccess("登录成功！", nil, "/main/index")
}

//logout
func (this *AuthorController) Logout() {
	this.InfoLog("退出成功")
	passport := beego.AppConfig.String("author::passport")
	this.Ctx.SetCookie(passport, "")
	this.SetSession("author", nil)
	this.DelSession("author")

	this.Redirect("/", 302)
}