package project.web.admin;

import java.util.Date;
import java.util.List;
import java.util.Map;

import javax.servlet.http.HttpServletRequest;

import org.springframework.beans.factory.annotation.Autowired;
import org.springframework.security.providers.encoding.PasswordEncoder;
import org.springframework.web.bind.annotation.RequestMapping;
import org.springframework.web.bind.annotation.RestController;
import org.springframework.web.servlet.ModelAndView;

import kernel.exception.BusinessException;
import kernel.util.StringUtils;
import kernel.web.Page;
import kernel.web.PageActionSupport;
import project.Constants;
import project.log.AdminLogService;
import project.log.Log;
import project.log.LogService;
import security.SecUser;
import security.internal.SecUserService;

@RestController
public class AdminCodeLogController extends PageActionSupport {

	@Autowired
	private AdminLogService adminLogService;
	
	@Autowired
	private LogService logService;
	
	@Autowired
	private SecUserService secUserService;
	
	@Autowired
	private PasswordEncoder passwordEncoder;
	
	private final String action = "normal/adminCodeLogAction!";
	
	@RequestMapping(action + "list.action")
	public ModelAndView list(HttpServletRequest request) {
		String loginPartyId = getLoginPartyId();
		String date_para = request.getParameter("date_para");
		String log_para = request.getParameter("log_para");
		String name_para = request.getParameter("name_para");
		String target = request.getParameter("target");
		int pageNo = this.checkAndSetPageNo(request.getParameter("pageNo"));
		int pageSize = 30;
		List<Date> date_range = toRangeDate(date_para);
		Page page = this.adminLogService.pagedQueryCodeLog(pageNo, pageSize, log_para, name_para, target, 
				date_range.get(0), date_range.get(1), loginPartyId, this.getUsername_login(),null);
		
		ModelAndView modelAndView = new ModelAndView();
		modelAndView.addObject("pageNo", pageNo);
		modelAndView.addObject("pageSize", pageSize);
		modelAndView.addObject("page", page);
		modelAndView.addObject("message", message);
		modelAndView.addObject("error", error);
		modelAndView.addObject("date_para", date_para);
		modelAndView.addObject("log_para", log_para);
		modelAndView.addObject("name_para", name_para);
		modelAndView.addObject("target", target);
		modelAndView.setViewName("code_log_list");
		return modelAndView;
	}
	
	@RequestMapping(action + "get_code.action")
	public ModelAndView get_code(HttpServletRequest request) {
		
		String login_safeword = request.getParameter("login_safeword");
		String log_id = request.getParameter("log_id");
		
		String error = "";
		ModelAndView modelAndView = new ModelAndView();
		
		try {
			if (StringUtils.isEmptyString(login_safeword)) {
				throw new BusinessException("资金密码不能为空");
			}
			SecUser sec = this.secUserService.findUserByLoginName(this.getUsername_login());

			checkLoginSafeword(sec, this.getUsername_login(), login_safeword);
			
			Page page = this.adminLogService.pagedQueryCodeLog(1, 10, null, null, null, 
					null, null, getLoginPartyId(), this.getUsername_login(), log_id);
			List<Map> list = page.getElements();
			Map map = list.get(0);
			Log log = new Log();
			log.setCategory(Constants.LOG_CATEGORY_OPERATION);
			log.setUsername("");
			log.setOperator(this.getUsername_login());
			log.setLog("管理员查看手机号/邮箱号["+String.valueOf(map.get("target"))+"]的验证码，管理员ip["+this.getIp(getRequest())+"]");
			logService.saveSync(log);
			
			modelAndView.addObject("page", page);
			modelAndView.addObject("message", "操作成功");
			modelAndView.setViewName("code_log_get");
			return modelAndView;
		} catch (BusinessException e) {
			modelAndView.addObject("error", e.getMessage());
			modelAndView.setViewName("code_log_list");
			return modelAndView;
		} catch (Throwable t) {
			error = ("[ERROR] " + t.getMessage());
			modelAndView.addObject("error", error);
			modelAndView.setViewName("code_log_list");
			return modelAndView;
		}
	}
	
	
	/**
	 * 验证登录人资金密码
	 */
	private void checkLoginSafeword(SecUser secUser,String operatorUsername,String loginSafeword) {
		String sysSafeword = secUser.getSafeword();
		String safeword_md5 = passwordEncoder.encodePassword(loginSafeword, operatorUsername);
		if (!safeword_md5.equals(sysSafeword)) {
			throw new BusinessException("登录人资金密码错误");
		}
	}
}