package com.javaweb.platform.controller;


import java.io.IOException;
import java.util.Date;
import java.util.List;

import javax.servlet.http.HttpServletRequest;
import javax.servlet.http.HttpServletResponse;

import org.apache.shiro.crypto.hash.Md5Hash;
import org.springframework.beans.factory.annotation.Autowired;
import org.springframework.stereotype.Controller;
import org.springframework.web.bind.annotation.PostMapping;
import org.springframework.web.bind.annotation.RequestBody;
import org.springframework.web.bind.annotation.RequestMapping;
import org.springframework.web.bind.annotation.ResponseBody;
import org.springframework.web.multipart.MultipartFile;

import com.javaweb.cms.domain.Pv;
import com.javaweb.cms.service.PVQueueService;
import com.javaweb.common.annotation.UserAuth;
import com.javaweb.common.config.Global;
import com.javaweb.common.config.ServerConfig;
import com.javaweb.common.constant.RSAKey;
import com.javaweb.common.core.controller.BaseController;
import com.javaweb.common.core.domain.AjaxResult;
import com.javaweb.common.utils.IdGenerate;
import com.javaweb.common.utils.IpUtils;
import com.javaweb.common.utils.StringUtils;
import com.javaweb.common.utils.file.FileUploadUtils;
import com.javaweb.framework.util.ShiroUtils;
import com.javaweb.platform.constant.FrontUserStatus;
import com.javaweb.platform.domain.FrontUser;
import com.javaweb.platform.domain.UserLoginCount;
import com.javaweb.platform.domain.UserMsg;
import com.javaweb.platform.domain.FrontUserCaptcode;
import com.javaweb.platform.mapper.FrontUserMapper;
import com.javaweb.platform.mapper.UserLoginCountMapper;
import com.javaweb.platform.mapper.UserMsgMapper;
import com.javaweb.platform.mapper.ValidcodeMapper;
import com.javaweb.platform.utils.CaptCodeUtils;
import com.javaweb.platform.utils.UserAuthCacheUtils;
import com.javaweb.platform.utils.ValidcodeUtils;

import cn.hutool.crypto.asymmetric.KeyType;
import cn.hutool.crypto.asymmetric.RSA;


@Controller
@RequestMapping("/webgis")
public class FrontUserAuthController extends  BaseController{
	
	private static final String status_common = "1";//正常状态

	private static final String status_apply = "2";//审核中
	
    @Autowired
    private ServerConfig serverConfig;
	
	
	@Autowired
	private FrontUserMapper frontUserMapper;
	
	@Autowired
	private ValidcodeMapper validcodeMapper;
	@Autowired
	private ValidcodeUtils validcodeUtils;
    @Autowired
    private UserLoginCountMapper userLoginCountMapper;
    
    @Autowired
    private UserMsgMapper userMsgMapper;
	
	/**
	 * 生成验证码
	 * @param request
	 * @return
	 */
	@PostMapping("/user/captcode")
	@ResponseBody
	public AjaxResult captcode(HttpServletRequest request) {
		
	
		String code = CaptCodeUtils.verifyCode();
		return AjaxResult.success(code);
	}

	/**
	 * 注册
	 * @param points
	 * @return
	 */
	@PostMapping("/user/regist")
	@ResponseBody
	public AjaxResult regist(@RequestBody FrontUserCaptcode frontUser,HttpServletRequest request) {
				
		RSA  rsa = new RSA(RSAKey.privatekey, null); 
	    	
	    String username = new String(rsa.decryptStr(frontUser.getUserName(), KeyType.PrivateKey));
	    String password = new String(rsa.decryptStr(frontUser.getPassword(), KeyType.PrivateKey));
	    
		frontUser.setUserName(username);
    	frontUser.setPassword(password);
		
		
		if(frontUserMapper.checkLoginNameUnique(frontUser)>0){
			return AjaxResult.error("用户名已经存在！");
		}
		if(frontUserMapper.checkEmailUnique(frontUser)>0){
			return AjaxResult.error("邮箱已经存在！");
		}
		if(frontUserMapper.checkPhoneUnique(frontUser)>0){
			return AjaxResult.error("注册电话已经存在！");
		}
		if(frontUser.getUserType().equals("2")){
			if(frontUserMapper.checkBusinessNoUnique(frontUser)>0){
				return AjaxResult.error("注册公司营业执照已经存在！");
			}
		}
		
		String captcode = frontUser.getCaptcode();

		boolean captok = CaptCodeUtils.isExistCode(captcode);
		if(!captok)
		{
			return AjaxResult.error("验证码不正确或过期");
		}
		else
		{
			CaptCodeUtils.remove(captcode);
		}
		if(frontUser.getUserType().equals("1")){
			frontUser.setStatus(status_common);  //正常状态
		}else{
			frontUser.setStatus(status_apply); //公司申请 审核中 
		}
		frontUser.setCreateTime(new Date());
		frontUser.setLoginIp(IpUtils.getIpAddr(request));
		frontUser.setSalt(ShiroUtils.randomSalt());
		frontUser.setPassword(encryptPassword(frontUser.getUserName(), frontUser.getPassword(), frontUser.getSalt()));
		frontUserMapper.insertFrontUser(frontUser);
		
		if(frontUser.getUserType().equals("1")){
			return AjaxResult.success("个人账号注册成功");
		}else{
			return AjaxResult.success("企业账号提交成功，信息审核中");
		}
		
	}
	
	/**
	 * 加密
	 * @param username
	 * @param password
	 * @param salt
	 * @return
	 */
	public String encryptPassword(String username, String password, String salt) {
		return new Md5Hash(username + password + salt).toHex().toString();
	}

	/**
	 * 
	 * @param user
	 * @param newPassword
	 * @return
	 */
	public boolean matches(FrontUser user, String newPassword) {
		return user.getPassword().equals(encryptPassword(user.getUserName(), newPassword, user.getSalt()));
	}
	
	/**
	 * 查找用户
	 * @param user
	 * @return
	 * @throws IOException 
	 */
	@UserAuth("frontUser")
	@PostMapping("/user/userInfo")
	@ResponseBody
	public FrontUser userInfo(String user,HttpServletRequest request,HttpServletResponse response) throws IOException {
		String token = request.getParameter("token");
		if(token==null || !UserAuthCacheUtils.userCaches.containsKey(token)){
			return null;
		}
		FrontUser f = (FrontUser) UserAuthCacheUtils.getCahce(token);
		if(!f.getUserName().equals(user)){
			return null;
		}
		
		FrontUser frontUser =new FrontUser();
		frontUser.setUserName(user);
		frontUser = frontUserMapper.selectFrontUserByLoginName(frontUser);
		frontUser.setPassword(null);
		frontUser.setSalt(null);

		return frontUser;
		
	}


	/**
	 * 登录
	 * @param frontUser
	 * @return
	 */
	@PostMapping("/user/login")
	@ResponseBody
	public AjaxResult login(@RequestBody FrontUser frontUser) {
				
	    RSA  rsa = new RSA(RSAKey.privatekey, null);
    	
    	String username = new String(rsa.decryptStr(frontUser.getUserName(), KeyType.PrivateKey));
    	String password = new String(rsa.decryptStr(frontUser.getPassword(), KeyType.PrivateKey));
    	frontUser.setUserName(username);
    	frontUser.setPassword(password);
		
		String newPassword= frontUser.getPassword();	
		frontUser=frontUserMapper.selectByUserName(frontUser);	
		if(frontUser==null){
			return AjaxResult.error("用户不存在");
		}
		//验证登录次数
		UserLoginCount userLoginCount = new UserLoginCount();
		userLoginCount.setType("1");
		userLoginCount.setUserName(frontUser.getUserName());
		userLoginCount.setLoginTime(new Date());
		List<UserLoginCount> list = userLoginCountMapper.selectUserLoginCountList(userLoginCount);
		if(list.size() > 0)
		{
			UserLoginCount r = list.get(0);
			if(r.getCount() >= 5)
			{
				return AjaxResult.error("今日错误次数已经达到5次");
			}
		}
		int errcount = 0;
		if(frontUser!=null && matches(frontUser,newPassword)){
			frontUser.setPassword(null);
			frontUser.setSalt(null);
		
			
			String uuid =IdGenerate.uuid();
			frontUser.setAccessToken(uuid);
			
			UserAuthCacheUtils.setCahce(uuid, frontUser,frontUser.getId().toString());//设置缓存列表
			
			frontUser.setId(null);
			
			UserMsg userMsg =new UserMsg(frontUser.getUserName(),"0");
			
			List<UserMsg> msgList=userMsgMapper.selectUserMsgList(userMsg);
			if(msgList!=null && msgList.size()>0){
				userMsg = new  UserMsg(frontUser.getUserName(),"1");
				userMsgMapper.updateUserMsgStatus(userMsg);
				frontUser.setNotify("1");//通知
			}			
			return AjaxResult.success("登录成功",frontUser);
		}else{
			//记录登录次数信息
			if(list.size() > 0)
			{
				UserLoginCount r = list.get(0);
				r.setCount(r.getCount()+1);
				errcount = r.getCount();
				userLoginCountMapper.updateUserLoginCount(r);
			}
			else
			{
				userLoginCount.setCount(1);
				userLoginCount.setId(IdGenerate.nextId());
				userLoginCount.setLoginTime(new Date());
				userLoginCount.setType("1");
				userLoginCountMapper.insertUserLoginCount(userLoginCount);
				errcount = 1;
			}
			
			return AjaxResult.error("密码验证失败 ，已经输错"+errcount+"次，每天最多输错5次");
		}
				
	}
	/**
	 * 获取短信验证码
	 * @param frontUser
	 * @return
	 */
	@PostMapping("/user/resetpassword/captcode")
	@ResponseBody
	public  AjaxResult captcode(@RequestBody FrontUser frontUser) {
		boolean paramok = true;
		if(frontUser.getPhone().length() > 20)
		{
			return AjaxResult.error("请检查手机号码");
		}
		FrontUser fuser = frontUserMapper.selectByUserName(frontUser);
		if(fuser == null)
		{
			paramok = false;
			return AjaxResult.error("登录名、注册电话、注册邮箱验证失败");
		}
		//进行错误次数验证
		UserLoginCount userLoginCount = new UserLoginCount();
		userLoginCount.setType("2");
		userLoginCount.setUserName(frontUser.getUserName());
		userLoginCount.setLoginTime(new Date());
		List<UserLoginCount> list = userLoginCountMapper.selectUserLoginCountList(userLoginCount);
		if(list.size() > 0)
		{
			UserLoginCount r = list.get(0);
			if(r.getCount() >= 5)
			{
				return AjaxResult.error("今日错误次数已经达到5次");
			}
		}
		
		if(!fuser.getEmail().equals(frontUser.getEmail())){
			paramok = false;
		}
		if(!fuser.getPhone().equals(frontUser.getPhone())){
			paramok = false;
		}
		if(!paramok)
		{
			int errcount = 0;
			//添加一条错误记录
			if(list.size() > 0)
			{
				UserLoginCount r = list.get(0);
				r.setCount(r.getCount()+1);
				errcount = r.getCount();
				userLoginCountMapper.updateUserLoginCount(r);
			}
			else
			{
				userLoginCount.setCount(1);
				userLoginCount.setId(IdGenerate.nextId());
				userLoginCount.setLoginTime(new Date());
				userLoginCount.setType("2");
				userLoginCountMapper.insertUserLoginCount(userLoginCount);
				errcount = 1;
			}
			return AjaxResult.error("输入信息有误，已经输错"+errcount+"次，每天最多输错5次");
		}
		
		int retnum = 0;
		try {
			retnum = validcodeUtils.sendMesgToPhone("2", fuser.getPhone());
		} catch (Exception e) {
			// TODO Auto-generated catch block
			e.printStackTrace();
		}
		if(retnum == 0)
		{
			return AjaxResult.error("操作过于频繁！");
		}
		else
		{
			return AjaxResult.success("发送成功，验证码五分钟内有效");
		}
	}

	
	@PostMapping("/user/resetPassword")
	@ResponseBody
	public  AjaxResult resetpassword(@RequestBody FrontUserCaptcode suser) {
		
		//解密
	    RSA  rsa = new RSA(RSAKey.privatekey, null);
    	
    	String username = new String(rsa.decryptStr(suser.getUserName(), KeyType.PrivateKey));
    	String password = new String(rsa.decryptStr(suser.getPassword(), KeyType.PrivateKey));
    	suser.setUserName(username);
    	suser.setPassword(password);
		
		
		FrontUser fuser = frontUserMapper.selectByUserName(suser);
		if(fuser == null)
		{
			return AjaxResult.error("没有此用户名");
		}
		if(!fuser.getEmail().equals(suser.getEmail())){
			return AjaxResult.error("用户名和邮箱不匹配");
		}
		if(!fuser.getPhone().equals(suser.getPhone())){
			return AjaxResult.error("用户名和手机号码不匹配");
		}
		//验证码是否有效
		boolean valid = validcodeUtils.validCode(suser.getCaptcode(), suser.getPhone(), "2");
		if(valid)
		{
			//修改用户密码
			fuser.setPassword(encryptPassword(fuser.getUserName(), suser.getPassword(), fuser.getSalt()));
			frontUserMapper.updateFrontUser(fuser);
			return AjaxResult.success("密码修改成功");
		}
		else
		{
			return AjaxResult.error("验证码不正确或已经失效");
		}
	}
    @PostMapping("/common/upload")
    @ResponseBody
    public AjaxResult uploadFile(MultipartFile file) throws Exception
    {
        try
        {
            // 上传文件路径
            String filePath = Global.getUploadPath();
            // 上传并返回新文件名称
            String fileName = FileUploadUtils.upload(filePath, file);
            String url = serverConfig.getUrl() + fileName;
            AjaxResult ajax = AjaxResult.success();
            ajax.put("fileName", fileName);
            ajax.put("url", url);
            return ajax;
        }
        catch (Exception e)
        {
            return AjaxResult.error(e.getMessage());
        }
    }
    
	@UserAuth("frontUser")
    @PostMapping("/user/reAuthentication")
	@ResponseBody
	public AjaxResult reAuthentication(@RequestBody FrontUser frontUser,HttpServletRequest request) throws Exception {
		String token =request.getParameter("token");
		if(token==null || !UserAuthCacheUtils.userCaches.containsKey(token)){
			  return AjaxResult.error("登录验证失效");
		}
        FrontUser user =new FrontUser();
        user.setId(frontUser.getId());
        String license=frontUser.getApplyLicense();
        if(StringUtils.isEmpty(license)){
        	  return AjaxResult.error("上传材料失败");
        }
        user.setApplyLicense(license);
        user.setStatus(FrontUserStatus.REAPPLY.getCode());//二次申请

        frontUserMapper.updateFrontUser(user);
        
        return AjaxResult.success("重新上传成功");
      
    }

	@Autowired
	PVQueueService pvQueueService;

	@PostMapping("/page/view")
	@ResponseBody
	public AjaxResult pv(Pv pv, HttpServletRequest request) {
		pvQueueService.pushPvQueue(request, pv);
		return success();
	}
	
}