package logic

import (
	"context"
	"strconv"

	"lone-services/pkg/modelbase"
	"lone-services/pkg/utils"
	"lone-services/pkg/validate"
	user "lone-services/rpc/user/pb"
	"lone-services/services/user/internal/dao"
	"lone-services/services/user/internal/model"
	"lone-services/services/user/internal/svc"
	"lone-services/services/user/validator"

	"github.com/zeromicro/go-zero/core/logx"
)

type PasswordLogic struct {
	ctx    context.Context
	svcCtx *svc.ServiceContext
	logx.Logger
}

func NewPasswordLogic(ctx context.Context, svcCtx *svc.ServiceContext) *PasswordLogic {
	return &PasswordLogic{
		ctx:    ctx,
		svcCtx: svcCtx,
		Logger: logx.WithContext(ctx),
	}
}

func (l *PasswordLogic) Password(in *user.PasswordReq) (*user.Response, error) {
	var req validator.PasswordValidator
	if msg := validate.ValidateFromProto(in, &req); msg != utils.StringEmpty {
		return outResponse(utils.ErrorParams, msg), nil
	}

	loginUser := utils.GetUserFromCtx(l.ctx)
	if loginUser.ID < utils.NumberOne {
		return failResponse(utils.ErrorNoLoginInfo), nil
	}

	subjectType, subjectErr := l.resolveSubjectType(loginUser)
	if subjectErr != nil {
		l.Errorf("password resolve subject: %v", subjectErr)
		return failResponse(utils.Fail), nil
	}
	if subjectType == utils.StringEmpty {
		return outResponse(utils.ErrorParams, "无法识别用户主体类型"), nil
	}

	row, userErr := loadEnabledUser(loginUser.ID)
	if userErr != nil {
		l.Errorf("password load user: %v", userErr)
		return failResponse(utils.ErrorNotFund), nil
	}

	hashed, hashErr := utils.EncryptPassword(req.Password)
	if hashErr != nil {
		l.Errorf("password encrypt: %v", hashErr)
		return failResponse(utils.ErrorEncryptAesError), nil
	}

	cred, credErr := findPasswordCredentialByUser(loginUser.ID, subjectType)
	if credErr != nil {
		l.Errorf("password find credential: %v", credErr)
		return failResponse(utils.Fail), nil
	}

	credModel := model.UserCredentialModel{}.Init()
	if cred != nil {
		if cred.Status == dao.StatusDisabled {
			return outResponse(utils.Fail, "登录凭证已禁用"), nil
		}
		if utils.EqualsPassword(req.Password, cred.Secret) {
			return outResponse(utils.ErrorParams, "新密码不能与原密码相同"), nil
		}
		_, editErr := credModel.Edit(modelbase.Params{
			Eq: map[string]string{"id": strconv.FormatInt(cred.Id, utils.NumberTen)},
		}, map[string]interface{}{
			"secret": hashed,
		})
		if editErr != nil {
			l.Errorf("password update: %v", editErr)
			return failResponse(utils.Fail), nil
		}
		return okResponse(nil), nil
	}

	if row.Mobile == utils.StringEmpty {
		return outResponse(utils.ErrorParams, "未设置手机号不能修改密码"), nil
	}

	exist, existErr := findCredential(dao.CredentialTypePassword, row.Mobile, subjectType)
	if existErr != nil {
		l.Errorf("password find by mobile: %v", existErr)
		return failResponse(utils.Fail), nil
	}
	if exist != nil && exist.UserId != loginUser.ID {
		return outResponse(utils.Fail, "登录凭证已被其他用户占用"), nil
	}
	if exist != nil {
		_, editErr := credModel.Edit(modelbase.Params{
			Eq: map[string]string{"id": strconv.FormatInt(exist.Id, utils.NumberTen)},
		}, map[string]interface{}{
			"secret": hashed,
		})
		if editErr != nil {
			l.Errorf("password update occupied: %v", editErr)
			return failResponse(utils.Fail), nil
		}
		return okResponse(nil), nil
	}

	if createErr := credModel.Create(&dao.UserCredential{
		UserId:         loginUser.ID,
		CredentialType: dao.CredentialTypePassword,
		Identifier:     row.Mobile,
		Secret:         hashed,
		SubjectType:    subjectType,
		ExtraJson:      dao.ExtraJsonEmpty,
		Status:         dao.StatusEnabled,
	}); createErr != nil {
		l.Errorf("password create: %v", createErr)
		return failResponse(utils.Fail), nil
	}

	return okResponse(nil), nil
}

func findPasswordCredentialByUser(userId int64, subjectType string) (*dao.UserCredential, error) {
	var cred dao.UserCredential
	credModel := model.UserCredentialModel{}.Init()
	if err := credModel.GetOne(modelbase.Params{
		Eq: map[string]string{
			"user_id":         strconv.FormatInt(userId, utils.NumberTen),
			"credential_type": dao.CredentialTypePassword,
			"subject_type":    subjectType,
		},
	}, &cred); err != nil {
		return nil, err
	}
	if cred.Id < utils.NumberOne {
		return nil, nil
	}
	return &cred, nil
}

func (l *PasswordLogic) resolveSubjectType(loginUser utils.UserInfo) (string, error) {
	if loginUser.ClientCode != utils.StringEmpty {
		client, err := loadEnabledClient(loginUser.ClientCode)
		if err != nil {
			return utils.StringEmpty, err
		}
		if client.SubjectType != utils.StringEmpty {
			return client.SubjectType, nil
		}
	}

	switch loginUser.Type {
	case dao.TypeSale:
		return dao.SubjectTypeSale, nil
	case dao.TypeStore:
		return dao.SubjectTypeStore, nil
	case dao.TypeUser:
		return dao.SubjectTypeUser, nil
	default:
		return utils.StringEmpty, nil
	}
}