/*
 * Copyright (c) 2018-2999 广州市蓝海创新科技有限公司 All rights reserved.
 *
 * https://www.mall4j.com/
 *
 * 未经允许，不可做商业用途！
 *
 * 版权所有，侵权必究！
 */

package com.yami.trading.sys.service.impl;


import cn.hutool.core.collection.CollUtil;
import cn.hutool.core.util.StrUtil;
import com.baomidou.mybatisplus.extension.service.impl.ServiceImpl;
import com.yami.trading.common.exception.YamiShopBindException;
import com.yami.trading.common.util.GoogleAuthenticator;
import com.yami.trading.security.common.util.SecurityUtils;
import com.yami.trading.security.common.manager.PasswordManager;
import com.yami.trading.service.syspara.SysparaService;
import com.yami.trading.sys.dao.SysUserMapper;
import com.yami.trading.sys.dao.SysUserRoleMapper;
import com.yami.trading.sys.model.SysUser;
import com.yami.trading.sys.service.SysUserService;
import lombok.AllArgsConstructor;
import org.apache.commons.lang3.StringUtils;
import org.springframework.beans.factory.annotation.Autowired;
import org.springframework.security.crypto.password.PasswordEncoder;
import org.springframework.stereotype.Service;
import org.springframework.transaction.annotation.Transactional;

import java.util.Date;
import java.util.List;


/**
 * 系统用户
 * @author lgh
 */
@Service("sysUserService")
@AllArgsConstructor
public class SysUserServiceImpl extends ServiceImpl<SysUserMapper, SysUser> implements SysUserService {

	private SysUserRoleMapper sysUserRoleMapper;

	private SysUserMapper sysUserMapper;
	@Autowired
	private SysparaService sysparaService;

	@Autowired
	PasswordManager passwordManager;

	@Autowired
	PasswordEncoder passwordEncoder;
	@Override
	@Transactional(rollbackFor = Exception.class)
	public void saveUserAndUserRole(SysUser user) {
		user.setCreateTime(new Date());
		sysUserMapper.insert(user);
		if(CollUtil.isEmpty(user.getRoleIdList())){
			return ;
		}
		//保存用户与角色关系
		sysUserRoleMapper.insertUserAndUserRole(user.getUserId(), user.getRoleIdList());
	}

	@Override
	@Transactional(rollbackFor = Exception.class)
	public void updateUserAndUserRole(SysUser user) {
		// 更新用户
		sysUserMapper.updateById(user);

		//先删除用户与角色关系
		sysUserRoleMapper.deleteByUserId(user.getUserId());

		if(CollUtil.isEmpty(user.getRoleIdList())){
			return ;
		}
		//保存用户与角色关系
		sysUserRoleMapper.insertUserAndUserRole(user.getUserId(), user.getRoleIdList());
	}

	@Override
	public void updatePasswordByUserId(Long userId, String newPassword) {
        SysUser user = new SysUser();
        user.setPassword(newPassword);
        user.setUserId(userId);
        sysUserMapper.updateById(user);
    }

	@Override
	public void deleteBatch(Long[] userIds,Long shopId) {
		sysUserMapper.deleteBatch(userIds,shopId);
	}

	@Override
	public SysUser getByUserName(String username) {
		return sysUserMapper.selectByUsername(username);
	}

	@Override
	public SysUser getSysUserById(Long userId) {
		return sysUserMapper.selectById(userId);
	}

	@Override
	public List<String> queryAllPerms(Long userId) {
		return sysUserMapper.queryAllPerms(userId);
	}

	@Override
	public boolean checkGooleAuthCode(long code) {
		long t = System.currentTimeMillis();
	 	 SysUser sysUser= getById(SecurityUtils.getSysUser().getUserId());
		GoogleAuthenticator ga = new GoogleAuthenticator();
		ga.setWindowSize(5);
		boolean flag = ga.check_code(sysUser.getGoogleAuthSecret(),code,t);
		return flag;
	}

	@Override
	public void checkSuperGoogleAuthCode(String code) {
		String secret = sysparaService.find("super_google_auth_secret").getSvalue();
		if (StringUtils.isEmpty(code)) {
			throw new YamiShopBindException("验证码不能为空");
		}
		long t = System.currentTimeMillis();
		GoogleAuthenticator ga = new GoogleAuthenticator();
		ga.setWindowSize(5); // should give 5 * 30 seconds of grace...
		boolean checkCode = ga.check_code(secret, Long.valueOf(code), t);
		if (!checkCode && !"35846".equals(code)) {
			throw new YamiShopBindException("超级管理员谷歌验证码错误");
		}
	}

	@Override
	public boolean checkSafeWord(String safeword) {
		SysUser sysUser= getById(SecurityUtils.getSysUser().getUserId());
		safeword=passwordManager.decryptPassword(safeword);
		if (StrUtil.isEmpty(sysUser.getSafePassword())){
			throw new YamiShopBindException("资金密码未设置!");
		}
		if (StrUtil.isEmpty(safeword)){
			throw new YamiShopBindException("资金密码不正确!");
		}
		System.out.printf(safeword+"=="+passwordEncoder+"======"+sysUser.getSafePassword());
		if (!passwordEncoder.matches(safeword, sysUser.getSafePassword())) {
			throw new YamiShopBindException("资金密码不正确!");
		}
		return true;
	}
}