package com.ld.igds.sys.service;

import com.bstek.bdf2.core.model.DefaultUser;
import com.bstek.bdf2.core.orm.hibernate.HibernateDao;
import com.bstek.dorado.data.provider.Page;
import com.ld.igds.data.BaseParam;
import com.ld.igds.sys.data.SysUserData;
import com.ld.igds.sys.mapper.SysUserMapper;
import com.ld.igds.util.ContextUtil;
import org.apache.commons.lang.math.RandomUtils;
import org.apache.commons.lang3.StringUtils;
import org.hibernate.Query;
import org.hibernate.Session;
import org.springframework.security.authentication.encoding.PasswordEncoder;
import org.springframework.stereotype.Repository;

import javax.annotation.Resource;
import java.util.Date;
import java.util.HashMap;
import java.util.List;
import java.util.Map;

@SuppressWarnings("deprecation")
@Repository
public class SysUserService extends HibernateDao {

    @Resource
    private SysUserMapper sysUserMapper;

    @Resource(name = "bdf2.passwordEncoder")
    private PasswordEncoder passwordEncoder;

    public void pageUser(Page<DefaultUser> page, Map<String, Object> param)
            throws Exception {

        String hql = " from " + DefaultUser.class.getName()
                + " where companyId=:companyId ";

        String countHql = " select count(*) " + hql;

        hql += " order by enabled desc,username";

        Map<String, Object> args = new HashMap<String, Object>();
        args.put("companyId", ContextUtil.getCompanyId());

        this.pagingQuery(page, hql, countHql, args);
    }

    public String addUser(DefaultUser user) {
        // 判断是否重复
        boolean b = this.userIsExists(user.getUsername());
        if (b) {
            return "当前用户已经存在，不支持相同帐号录入！！";
        }
        Session session = this.getSessionFactory().openSession();
        try {
            if (null == user.getCreateDate()) {
                user.setCreateDate(new Date());
            }
            String salt = String.valueOf(RandomUtils.nextInt(100));
            String password = passwordEncoder.encodePassword(
                    user.getPassword(), salt);
            user.setPassword(password);
            user.setSalt(salt);

            session.save(user);

        } catch (Exception e) {
            return "系统异常：" + e.getMessage();
        } finally {
            session.flush();
            session.close();
        }
        return null;
    }

    public String updateUser(DefaultUser user) {
        Session session = this.getSessionFactory().openSession();
        try {
            if (null == user.getCreateDate()) {
                user.setCreateDate(new Date());
            }
            session.update(user);
        } catch (Exception e) {
            return "系统异常：" + e.getMessage();
        } finally {
            session.flush();
            session.close();
        }
        return null;
    }

    public String resetPwd(String companyId, String username, String newPassword) {

        if (username.equals(companyId) && null == newPassword)
            return "系统管理员用户密码不允许被重置！";

        if (null == newPassword)
            newPassword = "abc123";

        String salt = String.valueOf(RandomUtils.nextInt(100));
        String newPwd = passwordEncoder.encodePassword(newPassword, salt);
        String hql = " update " + DefaultUser.class.getName()
                + " set password=:newPwd,salt=:salt "
                + "where companyId=:companyId and username=:username";

        Session session = this.getSessionFactory().openSession();
        try {
            Query query = session.createQuery(hql);
            query.setString("newPwd", newPwd);
            query.setString("salt", salt);
            query.setString("companyId", companyId);
            query.setString("username", username);
            query.executeUpdate();

        } catch (Exception e) {
            return "系统异常：" + e.getMessage();
        } finally {
            session.flush();
            session.close();
        }
        return "新密码为：" + newPassword;
    }

    public boolean userIsExists(String username) {
        String hql = " from " + DefaultUser.class.getName()
                + " where username=:username ";

        Map<String, Object> args = new HashMap<String, Object>();
        args.put("username", username);
        List<DefaultUser> list = this.query(hql, args);

        if (null == list || list.isEmpty()) {
            return false;
        }
        return true;
    }

    /**
     * 获取的用户必须是在职的
     *
     * @param username
     * @return
     */
    public DefaultUser loadUser(String username) {
        String hql = " from " + DefaultUser.class.getName()
                + " where username=:username";
        Map<String, Object> args = new HashMap<>();
        args.put("username", username);
        List<DefaultUser> list = this.query(hql, args);
        if (null == list || list.isEmpty())
            return null;
        return list.get(0);
    }

    /**
     * @param username 登陆帐号
     * @param inputPwd 输入的密码
     * @param user     登陆的用户
     * @return
     */
    public boolean checkPassword(String username, String inputPwd, DefaultUser user) {
        return passwordEncoder.isPasswordValid(user.getPassword(), inputPwd,
                user.getSalt());
    }

    public String updatePwd(Map<String, Object> param) {
        String username = (String) param.get("username");
        String password = (String) param.get("password");
        String newPassword = (String) param.get("newPassword");
        String confirmPassword = (String) param.get("confirmPassword");

        if (!newPassword.equals(confirmPassword)) {
            return "两次输入的新密码不一致，请确认！";
        }

        if (password.equals(newPassword)) {
            return "新密码与旧密码一致，请修改！";
        }

        DefaultUser user = loadUser(username);
        if (null == user) {
            return "系统检测到当前用户已不存在，无法执行修改！";
        }

        boolean check = checkPassword(username, password, user);
        if (!check) {
            return "你输入的旧密码不正确，无法执行修改！";
        }

        return resetPwd(user.getCompanyId(), username, newPassword);
    }

    public List<DefaultUser> loadUsers(Map<String, Object> param) {

        String hql = " from " + DefaultUser.class.getName()
                + " where companyId=:companyId ";

        Map<String, Object> args = new HashMap<String, Object>();
        args.put("companyId", ContextUtil.getCompanyId());

        String key = (String) param.get("key");
        if (StringUtils.isNotEmpty(key)) {
            hql += "and (username like :key1 or cname like :key2)";
            args.put("key1", "%" + key + "%");
            args.put("key2", "%" + key + "%");
        }

        List<DefaultUser> list = this.query(hql, args);

        if (null == list || list.isEmpty())
            return null;
        return list;
    }

    public List<SysUserData> queryUserList(BaseParam param) {
        return sysUserMapper.queryUserList(param);
    }
}