package project.web.api;

import java.io.IOException;
import java.security.MessageDigest;
import java.security.NoSuchAlgorithmException;
import java.util.ArrayList;
import java.util.Arrays;
import java.util.HashMap;
import java.util.List;
import java.util.Map;

import javax.servlet.http.HttpServletRequest;

import org.apache.commons.lang3.ObjectUtils;
import org.slf4j.Logger;
import org.slf4j.LoggerFactory;
import org.springframework.beans.factory.annotation.Autowired;
import org.springframework.security.providers.encoding.PasswordEncoder;
import org.springframework.web.bind.annotation.CrossOrigin;
import org.springframework.web.bind.annotation.RequestMapping;
import org.springframework.web.bind.annotation.RestController;

import com.alibaba.fastjson.JSON;
import com.alibaba.fastjson.JSONObject;
import kernel.exception.BusinessException;
import kernel.util.Arith;
import kernel.util.StringUtils;
import kernel.web.BaseAction;
import kernel.web.ResultObject;
import project.Constants;
import project.ddos.IpMenuService;
import project.hobi.http.HttpHelper;
import project.hobi.http.HttpMethodType;
import project.log.Log;
import project.log.LogService;
import project.party.PartyService;
import project.party.model.Party;
import project.syspara.SysparaService;
import project.user.UserSafewordApply;
import project.user.UserSafewordApplyService;
import project.user.UserService;
import project.user.googleauth.GoogleAuthService;
import project.user.idcode.IdentifyingCodeTimeWindowService;
import project.user.kyc.Kyc;
import project.user.token.TokenService;
import kernel.web.ApplicationUtil;
import security.SaltSigureUtils;
import security.SecUser;
import security.internal.SecUserService;
import util.IpUtil;
import org.springframework.jdbc.core.JdbcTemplate;

/**
 * API用户相关
 *
 */
@RestController
@CrossOrigin
public class UserController extends BaseAction {

	private Logger logger=LoggerFactory.getLogger(UserController.class);

	@Autowired
	private SecUserService secUserService;
	@Autowired
	private UserService userService;
	@Autowired
	private PartyService partyService;
	@Autowired
	private IdentifyingCodeTimeWindowService identifyingCodeTimeWindowService;
	@Autowired
	private LogService logService;
	@Autowired
	private UserSafewordApplyService userSafewordApplyService;
	@Autowired
	private GoogleAuthService googleAuthService;
	@Autowired
	private IpMenuService ipMenuService;
	@Autowired
	private SysparaService sysparaService;
	@Autowired
	private PasswordEncoder passwordEncoder;
	@Autowired
	private TokenService tokenService;


	private final String action = "/api/user!";


	/**
	 * 用户名登录接口
	 *
	 */
	@RequestMapping(action + "login.action")
	public Object login(HttpServletRequest request) {
		ResultObject resultObject = new ResultObject();
		try {

			String username = request.getParameter("username");
			String password = request.getParameter("password");

			if (StringUtils.isEmptyString(username)) {
				throw new BusinessException("用户名不能为空");
			}

			if (StringUtils.isEmptyString(password)) {
				throw new BusinessException("登录密码不能为空");
			}

			if (password.length() < 6 || password.length() > 12) {
				throw new BusinessException("登录密码必须6-12位");
			}

			String ip = this.getIp();
			if (!IpUtil.isCorrectIpRegular(ip)) {
				logger.error("校验IP不合法,参数{}", ip);
				throw new BusinessException("校验IP不合法");
			}

			SecUser secUser = this.userService.login(username, password);

			String token = tokenService.savePut(secUser.getPartyId(),secUser.getUsername());
			userService.online(secUser.getPartyId());
			ipMenuService.saveIpMenuWhite(this.getIp());
			Party party = this.partyService.cachePartyBy(secUser.getPartyId(), false);
			Map<String, Object> data = new HashMap<String, Object>();
			data.put("token", token);
			data.put("username", secUser.getUsername());
			data.put("usercode", party.getUsercode());

			Log log = new Log();
			log.setCategory(Constants.LOG_CATEGORY_SECURITY);
			log.setLog("用户登录,ip[" + this.getIp(getRequest()) + "]");
			log.setPartyId(secUser.getPartyId());
			log.setUsername(username);
			logService.saveAsyn(log);

//			JdbcTemplate jdbcTemplate=ApplicationUtil.getBean(JdbcTemplate.class);
//			Integer countusdt = jdbcTemplate.queryForObject("SELECT count(USER_NAME) FROM T_PARTY_BLOCKCHAIN WHERE USER_NAME=? AND COIN_SYMBOL='USDT'", Integer.class,party.getUsername());
//			logger.info("----------注册地址T_PARTY_BLOCKCHAIN-------"+countusdt);
//			if(countusdt == 0){
//				logger.info("----------注册地址进来了-------");
//				//注册地址trc
//				String addresstrc = registerAddress(party.getUsercode(),"trc","1");
//				logger.info("----------地址注册方法返回参数------"+addresstrc);
//				if (addresstrc == null || "" == addresstrc) {
//					logger.info("地址注册失败");
//					logger.info("----------地址注册失败-------");
//				}else {
//					jdbcTemplate.update("INSERT INTO T_PARTY_BLOCKCHAIN(USER_NAME,CHAIN_NAME,COIN_SYMBOL,QR_IMAGE,ADDRESS,AUTO) VALUES(?,?,?,?,?,?)"
//							,party.getUsername(),"TRC20","USDT","/trc01.png",addresstrc,"Y");
//				}
//				// 			//注册地址erc
//				// 			String addresserc = registerAddress(party.getUsercode(),"erc","1");
//				// 			if (addresserc == null || "" == addresserc) {
//				// 				logger.info("地址注册失败");
//				// 			}else {
//				// 				jdbcTemplate.update("INSERT INTO T_PARTY_BLOCKCHAIN(USER_NAME,CHAIN_NAME,COIN_SYMBOL,QR_IMAGE,ADDRESS,AUTO) VALUES(?,?,?,?,?,?)"
//				// 						,party.getUsername(),"ERC20","USDT","/e102.png",addresserc,"Y");
//				// 			}
//			}
// 			Integer counteth = jdbcTemplate.queryForObject("SELECT count(USER_NAME) FROM T_PARTY_BLOCKCHAIN WHERE USER_NAME=? AND COIN_SYMBOL='ETH'", Integer.class,party.getUsername());
// 			if(counteth == 0){
// 			    //注册地址trc
//     			String addresseth = registerAddress(party.getUsercode(),"eth","3");
//     			if (addresseth == null || "" == addresseth) {
//     				logger.info("地址注册失败");
//     			}else {
//     				jdbcTemplate.update("INSERT INTO T_PARTY_BLOCKCHAIN(USER_NAME,CHAIN_NAME,COIN_SYMBOL,QR_IMAGE,ADDRESS,AUTO) VALUES(?,?,?,?,?,?)"
//     						,party.getUsername(),"ETH","ETH","/eth01.png",addresseth,"Y");
//     			}
// 			}
// 			Integer countbtc = jdbcTemplate.queryForObject("SELECT count(USER_NAME) FROM T_PARTY_BLOCKCHAIN WHERE USER_NAME=? AND COIN_SYMBOL='BTC'", Integer.class,party.getUsername());
// 			if(countbtc == 0){
// 			    //注册地址trc
//     			String addressbtc = registerAddress(party.getUsercode(),"btc","4");
//     			if (addressbtc == null || "" == addressbtc) {
//     				logger.info("地址注册失败");
//     			}else {
//     				jdbcTemplate.update("INSERT INTO T_PARTY_BLOCKCHAIN(USER_NAME,CHAIN_NAME,COIN_SYMBOL,QR_IMAGE,ADDRESS,AUTO) VALUES(?,?,?,?,?,?)"
//     						,party.getUsername(),"BTC","BTC","/b103.png",addressbtc,"Y");
//     			}
// 			}
			party.setLogin_ip(this.getIp(getRequest()));
			this.partyService.update(party);

			resultObject.setData(data);
		} catch (BusinessException e) {
			resultObject.setCode("1");
			resultObject.setMsg(e.getMessage());
			logger.info("----------地址注册程序错误-------"+e.getMessage());
		} catch (Throwable t) {
			logger.info("----------地址注册程序错误-------");
			resultObject.setCode("1");
			resultObject.setMsg("程序错误");
			logger.info("登录爆仓");
			t.printStackTrace();
			logger.error("error:", t);
		}
		logger.info("----------地址注册33333333-------");
		return resultObject;
	}

	public String registerAddress(String userId,String coin,String itemId){
		try{
			//先生成备用地址
			Map<String,Object> generateMap = new HashMap<String, Object>();
			generateMap.put("num", "1");
			if("btc".equals(coin)){
				generateMap.put("item_id", itemId);
			}
			logger.info(coin+"生成备用地址提交字符串为："+ JsonUtils.toJson(generateMap));
			HttpsTransport httpsTransport = new HttpsTransport();
			httpsTransport.setSendEncoding("UTF-8");
			httpsTransport.setUrl("http://54.254.173.163:80/"+coin+"/generate_address");
			String response = (String) httpsTransport.submit(generateMap);
			logger.info(coin+"生成备用地址提响应字符串为："+ JsonUtils.toJson(response));
			//注册地址
			Map<String,Object> reqMap = new HashMap<String, Object>();
			reqMap.put("user_id", userId);
			reqMap.put("item_id", itemId);
			logger.info(coin+"注册地址提交字符串为："+ JsonUtils.toJson(reqMap));
			HttpsTransport reqhttpsTransport = new HttpsTransport();
			reqhttpsTransport.setSendEncoding("UTF-8");
			reqhttpsTransport.setUrl("http://54.254.173.163:80/"+coin+"/address");
			String reqresponse = (String) reqhttpsTransport.query(reqMap);
			logger.info(coin+"注册地址响应字符串为：18.163.120.125"+ JsonUtils.toJson(reqresponse));
			//8，返回参数转map
			Map<String,Object> responseMap = JsonUtils.jsonToMap(reqresponse);
			if(responseMap.get("status").toString().trim().equals("1")){
				Map<String,Object> addressMap = (Map)responseMap.get("result");
				return addressMap.get("address").toString();
			}
		}catch (Exception e){
			e.printStackTrace();
		}
		return null;
	}

	private static String generateSign(String prefix, long timestamp) throws NoSuchAlgorithmException {
		String data = prefix + timestamp;
		MessageDigest md = MessageDigest.getInstance("MD5");
		md.update(data.getBytes());
		byte[] digest = md.digest();
		StringBuilder sb = new StringBuilder();
		for (byte b : digest) {
			sb.append(String.format("%02x", b & 0xff));
		}
		return sb.toString();
	}

	public Object online() {

		ResultObject resultObject = new ResultObject();
		try {
			userService.online(this.getLoginPartyId());
		} catch (BusinessException e) {
			resultObject.setCode("1");
			resultObject.setMsg(e.getMessage());
		} catch (Throwable t) {
			resultObject.setCode("1");
			resultObject.setMsg("程序错误");
			logger.error("error:", t);
		}

		return resultObject;
	}

	/**
	 * 退出登录
	 */
	@RequestMapping(action + "logout.action")
	public Object logout(HttpServletRequest request) {
		ResultObject resultObject = new ResultObject();
		String token = request.getParameter("token");
		try {
			this.userService.logout(this.getLoginPartyId());
			this.tokenService.delete(token);

		} catch (BusinessException e) {
			resultObject.setCode("1");
			resultObject.setMsg(e.getMessage());
		} catch (Throwable t) {
			resultObject.setCode("1");
			resultObject.setMsg("程序错误");
			logger.error("error:", t);
		}
		return resultObject;
	}

	/**
	 * 验证资金密码
	 */
	@RequestMapping(action + "verifySafeword.action")
	public Object verifySafeword(HttpServletRequest request) {
		ResultObject resultObject = new ResultObject();
		String safeWord = request.getParameter("safeWord");
		try {
			String partyId = this.getLoginPartyId();
			Party party = this.partyService.cachePartyBy(partyId, false);
			String md5 = passwordEncoder.encodePassword(safeWord, SaltSigureUtils.saltfigure);
			if (!md5.equals(party.getSafeword())) {
				throw new BusinessException("资金密码错误");
			}
		} catch (BusinessException e) {
			resultObject.setCode("1");
			resultObject.setMsg(e.getMessage());
		} catch (Throwable t) {
			resultObject.setCode("1");
			resultObject.setMsg("程序错误");
			logger.error("error:", t);
		}
		return resultObject;
	}

	/**
	 * 验证码登录 - 暂时不用
	 */
	@RequestMapping(action + "login_idcode.action")
	public Object login_idcode(HttpServletRequest request) {
		ResultObject resultObject = new ResultObject();
		String username = request.getParameter("username");
		String verifcode = request.getParameter("verifcode");
		try {
			SecUser secUser = this.userService.login_idcode(username, verifcode);
			String token = tokenService.savePut(secUser.getPartyId(),secUser.getUsername());
			userService.online(secUser.getPartyId());
			ipMenuService.saveIpMenuWhite(this.getIp());
			Map<String, Object> data = new HashMap<String, Object>();
			data.put("token", token);
			resultObject.setData(data);

		} catch (BusinessException e) {
			resultObject.setCode("1");
			resultObject.setMsg(e.getMessage());
		} catch (Throwable t) {
			resultObject.setCode("1");
			resultObject.setMsg("程序错误");
			logger.error("error:", t);
		}
		return resultObject;
	}

	/**
	 * 修改登录密码 用验证码
	 */
	@RequestMapping(action + "updatepsw.action")
	public Object updatepsw(HttpServletRequest request) {
		String password = request.getParameter("password");
		String verifcode_type = request.getParameter("verifcode_type");
		String verifcode = request.getParameter("verifcode");

		ResultObject resultObject = new ResultObject();
		resultObject = this.readSecurityContextFromSession(resultObject);
		if (!"0".equals(resultObject.getCode())) {
			return resultObject;
		}

		try {

			if (StringUtils.isEmptyString(password)) {
				throw new BusinessException("密码不能为空");
			}
			if (password.length() < 6 || password.length() > 12) {
				throw new BusinessException("密码必须6-12位");
			}
			if (StringUtils.isEmptyString(verifcode_type)) {
				throw new BusinessException("验证类型不能为空");
			}
			if (StringUtils.isEmptyString(verifcode)) {
				throw new BusinessException("验证码不能为空");
			}

			String loginPartyId = this.getLoginPartyId();
			Party party = this.partyService.cachePartyBy(loginPartyId, false);
			SecUser secUser = this.secUserService.findUserByPartyId(loginPartyId);

			// 根据验证类型获取验证key verifcode_type: 1/手机;2/邮箱;3/谷歌验证器;
			String key = "";
			String errMsg = "";
			if ("1".equals(verifcode_type)) {
				key = StringUtils.isEmptyString(party.getPhone()) || false == party.getPhone_authority() ? "" : party.getPhone();
				errMsg = "未绑定手机号";
			} else if ("2".equals(verifcode_type)) {
				key = StringUtils.isEmptyString(party.getEmail()) || false == party.getEmail_authority() ? "" : party.getEmail();
				errMsg = "未绑定邮箱";
			} else if ("3".equals(verifcode_type)) {
				key = StringUtils.isEmptyString(secUser.getGoogle_auth_secret()) || false == secUser.isGoogle_auth_bind() ? "" : secUser.getGoogle_auth_secret();
				errMsg = "未绑定谷歌验证器";
			}
			if (StringUtils.isEmptyString(key)) {
				throw new BusinessException(errMsg);
			}

			// 验证
			boolean passed = false;
			if ("1".equals(verifcode_type) || "2".equals(verifcode_type)) {
				String authcode = this.identifyingCodeTimeWindowService.getAuthCode(key);
				if ((null != authcode) && (authcode.equals(verifcode))) {
					passed = true;
					this.identifyingCodeTimeWindowService.delAuthCode(key);
				}
			} else if ("3".equals(verifcode_type)) {
				if (this.googleAuthService.checkCode(key, verifcode)) {
					passed = true;
				}
			}

			// 如果是演示用户，则不判断验证码
			if (!"GUEST".contentEquals(party.getRolename())) {
				if (!passed) {
					throw new BusinessException("验证码不正确");
				}
			}

			// 更新密码
			this.secUserService.updatePassword(secUser.getUsername(), password);
			Log log = new Log();
			log.setCategory(Constants.LOG_CATEGORY_SECURITY);
			log.setLog("修改登录密码,ip[" + this.getIp(getRequest()) + "]");
			log.setPartyId(party.getId());
			log.setUsername(party.getUsername());
			logService.saveAsyn(log);

		} catch (BusinessException e) {
			resultObject.setCode("1");
			resultObject.setMsg(e.getMessage());
		} catch (Throwable t) {
			resultObject.setCode("1");
			resultObject.setMsg("程序错误");
			logger.error("error:", t);
		}

		return resultObject;
	}

	/**
	 * 修改登录密码 用旧密码
	 */
	@RequestMapping(action + "updateOldAndNewPsw.action")
	public Object updateOldAndNewPsw(HttpServletRequest request) {
		String old_password = request.getParameter("old_password");
		String password = request.getParameter("password");
		String re_password = request.getParameter("re_password");

		ResultObject resultObject = new ResultObject();
		resultObject = this.readSecurityContextFromSession(resultObject);
		if (!"0".equals(resultObject.getCode())) {
			return resultObject;
		}

		try {

			if (StringUtils.isEmptyString(old_password)) {
				throw new BusinessException("旧密码不能为空");
			}
			if (StringUtils.isEmptyString(password)) {
				throw new BusinessException("新密码不能为空");
			}
			if (StringUtils.isEmptyString(re_password)) {
				throw new BusinessException("新密码确认不能为空");
			}

			if (old_password.length() < 6 || old_password.length() > 12 || password.length() < 6 || password.length() > 12) {
				throw new BusinessException("密码必须6-12位");
			}

			SecUser secUser = this.secUserService.findUserByPartyId(this.getLoginPartyId());

			if (!this.passwordEncoder.encodePassword(old_password, secUser.getUsername()).equals(secUser.getPassword())) {
				throw new BusinessException("旧密码不正确");
			}

			if (!password.equals(re_password)) {
				throw new BusinessException("新密码不一致");
			}

			this.secUserService.updatePassword(secUser.getUsername(), password);
			Log log = new Log();

			log.setCategory(Constants.LOG_CATEGORY_SECURITY);
			log.setLog("用户修改登录密码,ip[" + this.getIp(getRequest()) + "]");
			log.setPartyId(secUser.getPartyId());
			log.setUsername(secUser.getName());
			logService.saveAsyn(log);
		} catch (BusinessException e) {
			resultObject.setCode("1");
			resultObject.setMsg(e.getMessage());
		} catch (Throwable t) {
			resultObject.setCode("1");
			resultObject.setMsg("程序错误");
			logger.error("error:", t);
		}

		return resultObject;
	}

	/**
	 * 重置登录密码
	 */
	@RequestMapping(action + "resetpsw.action")
	public Object resetpsw(HttpServletRequest request) {
		String username = request.getParameter("username");
		String password = request.getParameter("password");
		String verifcode_type = request.getParameter("verifcode_type");
		String verifcode = request.getParameter("verifcode");

		ResultObject resultObject = new ResultObject();

		try {

			if (StringUtils.isEmptyString(username)) {
				throw new BusinessException("用户名不能为空");
			}
			if (StringUtils.isEmptyString(password)) {
				throw new BusinessException("密码不能为空");
			}
			if (password.length() < 6 || password.length() > 12) {
				throw new BusinessException("密码必须6-12位");
			}
			if (StringUtils.isEmptyString(verifcode_type)) {
				throw new BusinessException("验证类型不能为空");
			}
			if (StringUtils.isEmptyString(verifcode)) {
				throw new BusinessException("验证码不能为空");
			}

			Party party = this.partyService.findPartyByUsername(username);
			if (null == party) {
				throw new BusinessException("用户名不存在");
			}
			SecUser secUser = this.secUserService.findUserByPartyId(party.getId().toString());

			// 根据验证类型获取验证key verifcode_type: 1/手机;2/邮箱;3/谷歌验证器;
			String key = "";
			String errMsg = "";
			if ("1".equals(verifcode_type)) {
				key = StringUtils.isEmptyString(party.getUsername()) ? "" : party.getUsername();
				errMsg = "未绑定手机号";
			} else if ("2".equals(verifcode_type)) {
				key = StringUtils.isEmptyString(party.getUsername()) ? "" : party.getUsername();
				errMsg = "未绑定邮箱";
			}
			if (StringUtils.isEmptyString(key)) {
				throw new BusinessException(errMsg);
			}

			// 验证
			boolean passed = false;
			if ("1".equals(verifcode_type) || "2".equals(verifcode_type)) {
				String authcode = this.identifyingCodeTimeWindowService.getAuthCode(key);
				if ((null != authcode) && (authcode.equals(verifcode))) {
					passed = true;
					this.identifyingCodeTimeWindowService.delAuthCode(key);
				}
			} else if ("3".equals(verifcode_type)) {
				if (this.googleAuthService.checkCode(key, verifcode)) {
					passed = true;
				}
			}

			// 如果是演示用户，则不判断验证码
			if (!"GUEST".contentEquals(party.getRolename())) {
				if (!passed) {
					throw new BusinessException("验证码不正确");
				}
			}

			// 更新密码
			this.secUserService.updatePassword(username, password);

		} catch (BusinessException e) {
			resultObject.setCode("1");
			resultObject.setMsg(e.getMessage());
		} catch (Throwable t) {
			resultObject.setCode("1");
			resultObject.setMsg("程序错误");
			logger.error("error:", t);
		}

		return resultObject;
	}

//	/**
//	 * 三方接口重置登录密码
//	 */
//	@RequestMapping(action + "api_updatepassword.action")
//	public Object api_updatepassword(HttpServletRequest request) {
//		String username = request.getParameter("username");
//		String password = request.getParameter("password");
//		String sign = request.getParameter("sign");
//
//		ResultObject resultObject = new ResultObject();
//
//		try {
//
//			String key = this.sysparaService.find("api_rechargedeposit_key").getValue();
//
//			if (StringUtils.isNullOrEmpty(key)) {
//				throw new BusinessException("三方接口未开放");
//			}
//			if (StringUtils.isEmptyString(username)) {
//				throw new BusinessException("用户名不能为空");
//			}
//			if (StringUtils.isEmptyString(password)) {
//				throw new BusinessException("登录密码不能为空");
//			}
//			if (StringUtils.isEmptyString(sign)) {
//				throw new BusinessException("加密串不能为空");
//			}
//
//			String _sign = project.blockchain.MD5.sign("username=" + username + "&password=" + password + "&key=" + key);
//
//			if (!_sign.equals(sign)) {
//				resultObject.setCode("1");
//				resultObject.setMsg("加密串校验失败");
//				return resultObject;
//			}
//
//			SecUser secUser = this.secUserService.findUserByLoginName(username);
//			if (null == secUser) {
//				throw new BusinessException("用户名不存在");
//			}
//
//			this.secUserService.updatePassword(username, password);
//
//		} catch (BusinessException e) {
//			resultObject.setCode("1");
//			resultObject.setMsg(e.getMessage());
//		} catch (Throwable t) {
//			resultObject.setCode("1");
//			resultObject.setMsg("程序错误");
//			logger.error("error:", t);
//		}
//
//		return resultObject;
//	}

	/**
	 * 设置资金密码（注册时）
	 */
	@RequestMapping(action + "setSafewordReg.action")
	public Object setSafewordReg(HttpServletRequest request) {
		String safeword = request.getParameter("safeword");

		ResultObject resultObject = new ResultObject();
		resultObject = readSecurityContextFromSession(resultObject);
		if (!"0".equals(resultObject.getCode())) {
			return resultObject;
		}

		try {

			if (StringUtils.isEmptyString(safeword)) {
				throw new BusinessException("资金密码不能为空");
			}
//			if (safeword.length() != 6 || !Strings.isNumber(safeword)) {
//				throw new BusinessException("资金密码不符合设定");
//			}

			String loginPartyId = this.getLoginPartyId();
			Party party = this.partyService.cachePartyBy(loginPartyId, false);

			if (null == party) {
				throw new BusinessException("user unknown");
			}
			if(ObjectUtils.isNotEmpty(party.getSafeword())&&"307f540f22d9193b590915416636dc7f".equals(party.getSafeword())) {
				this.partyService.updateSafeword(party, safeword);
			}

		} catch (BusinessException e) {
			resultObject.setCode("1");
			resultObject.setMsg(e.getMessage());
		} catch (Throwable t) {
			resultObject.setCode("1");
			resultObject.setMsg("程序错误");
			logger.error("error:", t);
		}

		return resultObject;
	}

	/**
	 * 修改资金密码 用验证码
	 */
	@RequestMapping(action + "setSafeword.action")
	public Object setSafeword(HttpServletRequest request) {
		String safeword = request.getParameter("safeword");
		String verifcode_type = request.getParameter("verifcode_type");
		String verifcode = request.getParameter("verifcode");

		ResultObject resultObject = new ResultObject();
		resultObject = readSecurityContextFromSession(resultObject);
		if (!"0".equals(resultObject.getCode())) {
			return resultObject;
		}

		try {

			if (StringUtils.isEmptyString(safeword)) {
				throw new BusinessException("资金密码不能为空");
			}
//			if (safeword.length() != 6 || !Strings.isNumber(safeword)) {
//				throw new BusinessException("资金密码不符合设定");
//			}

			if (StringUtils.isEmptyString(verifcode_type)) {
				throw new BusinessException("验证类型不能为空");
			}
			if (StringUtils.isEmptyString(verifcode)) {
				throw new BusinessException("验证码不能为空");
			}

			String loginPartyId = this.getLoginPartyId();
			Party party = this.partyService.cachePartyBy(loginPartyId, false);
			SecUser secUser = this.secUserService.findUserByPartyId(loginPartyId);

			// 根据验证类型获取验证key verifcode_type: 1/手机;2/邮箱;3/谷歌验证器;
			String key = "";
			String errMsg = "";
			if ("1".equals(verifcode_type)) {
				key = StringUtils.isEmptyString(party.getPhone()) || false == party.getPhone_authority() ? "" : party.getPhone();
				errMsg = "未绑定手机号";
			} else if ("2".equals(verifcode_type)) {
				key = StringUtils.isEmptyString(party.getEmail()) || false == party.getEmail_authority() ? "" : party.getEmail();
				errMsg = "未绑定邮箱";
			} else if ("3".equals(verifcode_type)) {
				key = StringUtils.isEmptyString(secUser.getGoogle_auth_secret()) || false == secUser.isGoogle_auth_bind() ? "" : secUser.getGoogle_auth_secret();
				errMsg = "未绑定谷歌验证器";
			}
			if (StringUtils.isEmptyString(key)) {
				throw new BusinessException(errMsg);
			}

			// 验证
			boolean passed = false;
			if ("1".equals(verifcode_type) || "2".equals(verifcode_type)) {
				String authcode = this.identifyingCodeTimeWindowService.getAuthCode(key);
				if ((null != authcode) && (authcode.equals(verifcode))) {
					passed = true;
					this.identifyingCodeTimeWindowService.delAuthCode(key);
				}
			} else if ("3".equals(verifcode_type)) {
				if (this.googleAuthService.checkCode(key, verifcode)) {
					passed = true;
				}
			}

			// 如果是演示用户，则不判断验证码
			if (!"GUEST".contentEquals(party.getRolename())) {
				if (!passed) {
					throw new BusinessException("验证码不正确");
				}
			}

			// 更新密码
			this.partyService.updateSafeword(party, safeword);
			Log log = new Log();
			log.setCategory(Constants.LOG_CATEGORY_SECURITY);
			log.setLog("用户修改资金密码,ip[" + this.getIp(getRequest()) + "]");
			log.setPartyId(party.getId());
			log.setUsername(party.getUsername());
			logService.saveAsyn(log);
		} catch (BusinessException e) {
			resultObject.setCode("1");
			resultObject.setMsg(e.getMessage());
		} catch (Throwable t) {
			resultObject.setCode("1");
			resultObject.setMsg("程序错误");
			logger.error("error:", t);
		}

		return resultObject;
	}

	/**
	 * 修改资金密码 用旧密码
	 */
	@RequestMapping(action + "updateOldAndNewSafeword.action")
	public Object updateOldAndNewSafeword(HttpServletRequest request) {
		String old_safeword = request.getParameter("old_safeword");
		String safeword = request.getParameter("safeword");
		String re_safeword = request.getParameter("re_safeword");

		ResultObject resultObject = new ResultObject();
		resultObject = this.readSecurityContextFromSession(resultObject);
		if (!"0".equals(resultObject.getCode())) {
			return resultObject;
		}

		try {

			if (StringUtils.isEmptyString(old_safeword)) {
				throw new BusinessException("旧密码不能为空");
			}
			if (StringUtils.isEmptyString(safeword)) {
				throw new BusinessException("新密码不能为空");
			}

//			if (safeword.length() != 6 || !Strings.isNumber(safeword)) {
//				throw new BusinessException("资金密码不符合设定");
//			}

			if (StringUtils.isEmptyString(re_safeword)) {
				throw new BusinessException("新密码确认不能为空");
			}

			String loginPartyId = this.getLoginPartyId();

			if (!this.partyService.checkSafeword(old_safeword, loginPartyId)) {
				throw new BusinessException("旧密码不正确");
			}

			if (!safeword.equals(re_safeword)) {
				throw new BusinessException("新密码不一致");
			}

			Party party = this.partyService.cachePartyBy(loginPartyId, false);
			this.partyService.updateSafeword(party, safeword);

		} catch (BusinessException e) {
			resultObject.setCode("1");
			resultObject.setMsg(e.getMessage());
		} catch (Throwable t) {
			resultObject.setCode("1");
			resultObject.setMsg("程序错误");
			logger.error("error:", t);
		}

		return resultObject;
	}

//	/**
//	 * 三方接口重置资金密码
//	 */
//	@RequestMapping(action + "api_updatesafeword.action")
//	public Object api_updatesafeword(HttpServletRequest request) {
//		String username = request.getParameter("username");
//		String safeword = request.getParameter("safeword");
//		String sign = request.getParameter("sign");
//		String password = request.getParameter("password");
//
//		ResultObject resultObject = new ResultObject();
//
//		try {
//
//			String key = this.sysparaService.find("api_rechargedeposit_key").getValue();
//
//			if (StringUtils.isEmptyString(key)) {
//				throw new BusinessException("三方接口未开放");
//			}
//			if (StringUtils.isEmptyString(username)) {
//				throw new BusinessException("用户名不能为空");
//			}
//			if (StringUtils.isEmptyString(safeword)) {
//				throw new BusinessException("资金密码不能为空");
//			}
//			if (StringUtils.isEmptyString(sign)) {
//				throw new BusinessException("加密串不能为空");
//			}
//
//			String _sign = project.blockchain.MD5.sign("username=" + username + "&safeword=" + safeword + "&key=" + key);
//
//			if (!_sign.equals(sign)) {
//				resultObject.setCode("1");
//				resultObject.setMsg("加密串校验失败");
//				return resultObject;
//			}
//
//			SecUser secUser = this.secUserService.findUserByLoginName(username);
//			if (null == secUser) {
//				throw new BusinessException("用户名不存在");
//			}
//
//			this.secUserService.updatePassword(username, password);
//
//		} catch (BusinessException e) {
//			resultObject.setCode("1");
//			resultObject.setMsg(e.getMessage());
//		} catch (Throwable t) {
//			resultObject.setCode("1");
//			resultObject.setMsg("程序错误");
//			logger.error("error:", t);
//		}
//
//		return resultObject;
//	}

	/**
	 * 人工重置申请  操作类型 operate:	 0/修改资金密码；1/取消谷歌绑定；2/取消手机绑定；3/取消邮箱绑定；
	 */
	@RequestMapping(action + "set_safeword_apply.action")
	public Object set_safeword_apply(HttpServletRequest request) {
		String idcard_path_front = request.getParameter("idcard_path_front");
		String idcard_path_back = request.getParameter("idcard_path_back");
		String idcard_path_hold = request.getParameter("idcard_path_hold");
		String safeword = request.getParameter("safeword");
		String safeword_confirm = request.getParameter("safeword_confirm");
		String operate = request.getParameter("operate");
		String remark = request.getParameter("remark");

		ResultObject resultObject = new ResultObject();
		resultObject = this.readSecurityContextFromSession(resultObject);
		if (!"0".equals(resultObject.getCode())) {
			return resultObject;
		}

		try {

			if (StringUtils.isNullOrEmpty(operate)) {
				throw new BusinessException("操作类型为空");
			}
			if (!StringUtils.isInteger(operate)) {
				throw new BusinessException("操作类型不是整数");
			}
			if (Integer.valueOf(operate).intValue() < 0) {
				throw new BusinessException("操作类型不能小于0");
			}

			Integer operate_int = Integer.valueOf(operate);

			this.userSafewordApplyService.saveApply(this.getLoginPartyId(), idcard_path_front, idcard_path_back, idcard_path_hold, safeword, safeword_confirm, operate_int, remark);

		} catch (BusinessException e) {
			if (401 == e.getSign()) {
				resultObject.setCode("401");
			} else {
				resultObject.setCode("1");
			}
			resultObject.setMsg(e.getMessage());
		} catch (Throwable t) {
			resultObject.setCode("1");
			resultObject.setMsg("程序错误");
			logger.error("error:", t);
		}

		return resultObject;
	}

	/**
	 * 获取 人工重置 信息
	 */
	@RequestMapping(action + "get_safeword_apply.action")
	public Object get_safeword_apply() {

		ResultObject resultObject = new ResultObject();
		resultObject = readSecurityContextFromSession(resultObject);
		if (!"0".equals(resultObject.getCode())) {
			return resultObject;
		}

		try {

			List<Map<String, Object>> retList = new ArrayList<Map<String, Object>>();

			List<UserSafewordApply> list = this.userSafewordApplyService.findByPartyId(this.getLoginPartyId());
			for (int i = 0; i < list.size(); i++) {
				retList.add(this.userSafewordApplyService.bindOne(list.get(i)));
			}

			resultObject.setData(retList);

		} catch (BusinessException e) {
			resultObject.setCode("1");
			resultObject.setMsg(e.getMessage());
		} catch (Throwable t) {
			resultObject.setCode("1");
			resultObject.setMsg("程序错误");
			logger.error("error:", t);
		}

		return resultObject;
	}

	/**
	 * token获取验证方式
	 */
	@RequestMapping(action + "getVerifTarget.action")
	public Object getVerifTarget(HttpServletRequest request) {
		String verifcode_type = request.getParameter("verifcode_type");

		ResultObject resultObject = new ResultObject();
		resultObject = this.readSecurityContextFromSession(resultObject);
		if (!"0".equals(resultObject.getCode())) {
			return resultObject;
		}

		Map<String, Object> data = new HashMap<>();

		try {

			String loginPartyId = this.getLoginPartyId();
			Party party = this.partyService.cachePartyBy(loginPartyId, false);
			SecUser secUser = this.secUserService.findUserByPartyId(loginPartyId);

			// verifcode_type未明确指定，返回所有的方式
			if (StringUtils.isEmptyString(verifcode_type) || !Arrays.asList("1", "2", "3").contains(verifcode_type)) {
				data.put("phone", StringUtils.isEmptyString(party.getPhone()) || false == party.getPhone_authority() ? "" : party.getPhone());
				data.put("phone_filled", StringUtils.isEmptyString(party.getPhone()) ? "" : party.getPhone());
				data.put("phone_authority", party.getPhone_authority());
				data.put("email", party.getEmail());
				data.put("email_filled", StringUtils.isEmptyString(party.getEmail()) ? "" : party.getEmail());
				data.put("email_authority", true);
				data.put("google_auth_secret", StringUtils.isEmptyString(secUser.getGoogle_auth_secret()) || false == secUser.isGoogle_auth_bind() ? "" : secUser.getGoogle_auth_secret());
				data.put("google_auth_secret_filled", StringUtils.isEmptyString(secUser.getGoogle_auth_secret()) ? "" : secUser.getGoogle_auth_secret());
				data.put("google_auth_bind", secUser.isGoogle_auth_bind());
			} else {
				// verifcode_type: 1/手机;2/邮箱;3/谷歌验证器;
				if ("1".equals(verifcode_type)) {
					data.put("phone", StringUtils.isEmptyString(party.getPhone()) || false == party.getPhone_authority() ? "" : party.getPhone());
					data.put("phone_filled", StringUtils.isEmptyString(party.getPhone()) ? "" : party.getPhone());
					data.put("phone_authority", party.getPhone_authority());
				} else if ("2".equals(verifcode_type)) {
					data.put("email", StringUtils.isEmptyString(party.getEmail()) || false == party.getEmail_authority() ? "" : party.getEmail());
					data.put("email_filled", StringUtils.isEmptyString(party.getEmail()) ? "" : party.getEmail());
					data.put("email_authority", party.getEmail_authority());
				} else if ("3".equals(verifcode_type)) {
					data.put("google_auth_secret", StringUtils.isEmptyString(secUser.getGoogle_auth_secret()) || false == secUser.isGoogle_auth_bind() ? "" : secUser.getGoogle_auth_secret());
					data.put("google_auth_secret_filled", StringUtils.isEmptyString(secUser.getGoogle_auth_secret()) ? "" : secUser.getGoogle_auth_secret());
					data.put("google_auth_bind", secUser.isGoogle_auth_bind());
				}
			}

			resultObject.setData(data);

		} catch (BusinessException e) {
			resultObject.setCode("1");
			resultObject.setMsg(e.getMessage());
		} catch (Throwable t) {
			resultObject.setCode("1");
			resultObject.setMsg("程序错误");
			logger.error("error:", t);
		}

		return resultObject;
	}

	/**
	 * 用户名获取验证方式
	 */
	@RequestMapping(action + "getUserNameVerifTarget.action")
	public Object getUserNameVerifTarget(HttpServletRequest request) {
		String username = request.getParameter("username");
		String verifcode_type = request.getParameter("verifcode_type");

		ResultObject resultObject = new ResultObject();

		try {

			Map<String, Object> data = new HashMap<>();

			if (StringUtils.isEmptyString(username)) {
				throw new BusinessException("用户名参数为空");
			}

			Party party = this.partyService.findPartyByUsername(username);
			if (null == party) {
				throw new BusinessException("用户名不存在");
			}

			SecUser secUser = this.secUserService.findUserByPartyId(party.getId().toString());

			// verifcode_type未明确指定，返回所有的方式
			if (StringUtils.isEmptyString(verifcode_type) || !Arrays.asList("1", "2", "3").contains(verifcode_type)) {
				data.put("phone", StringUtils.isEmptyString(party.getPhone()) || false == party.getPhone_authority() ? "" : party.getPhone());
				data.put("phone_filled", StringUtils.isEmptyString(party.getPhone()) ? "" : party.getPhone());
				data.put("phone_authority", party.getPhone_authority());
				data.put("email", StringUtils.isEmptyString(party.getEmail()) || false == party.getEmail_authority() ? "" : party.getEmail());
				data.put("email_filled", StringUtils.isEmptyString(party.getEmail()) ? "" : party.getEmail());
				data.put("email_authority", party.getEmail_authority());
				data.put("google_auth_secret", StringUtils.isEmptyString(secUser.getGoogle_auth_secret()) || false == secUser.isGoogle_auth_bind() ? "" : secUser.getGoogle_auth_secret());
				data.put("google_auth_secret_filled", StringUtils.isEmptyString(secUser.getGoogle_auth_secret()) ? "" : secUser.getGoogle_auth_secret());
				data.put("google_auth_bind", secUser.isGoogle_auth_bind());
			} else {
				// verifcode_type: 1/手机;2/邮箱;3/谷歌验证器;
				if ("1".equals(verifcode_type)) {
					data.put("phone", StringUtils.isEmptyString(party.getUsername())  ? "" : party.getUsername());
					data.put("phone_filled", StringUtils.isEmptyString(party.getUsername()) ? "" : party.getUsername());
					data.put("phone_authority", true);
				} else if ("2".equals(verifcode_type)) {
					data.put("email", StringUtils.isEmptyString(party.getUsername()) ? "" : party.getUsername());
					data.put("email_filled", StringUtils.isEmptyString(party.getUsername()) ? "" : party.getUsername());
					data.put("email_authority", true);
				} else if ("3".equals(verifcode_type)) {
					data.put("google_auth_secret", StringUtils.isEmptyString(secUser.getGoogle_auth_secret()) || false == secUser.isGoogle_auth_bind() ? "" : secUser.getGoogle_auth_secret());
					data.put("google_auth_secret_filled", StringUtils.isEmptyString(secUser.getGoogle_auth_secret()) ? "" : secUser.getGoogle_auth_secret());
					data.put("google_auth_bind", secUser.isGoogle_auth_bind());
				}
			}

			resultObject.setData(data);

		} catch (BusinessException e) {
			resultObject.setCode("1");
			resultObject.setMsg(e.getMessage());
		} catch (Throwable t) {
			resultObject.setCode("1");
			resultObject.setMsg("程序错误");
			logger.error("error:", t);
		}

		return resultObject;
	}

	@RequestMapping(action + "findNameByUid.action")
	public Object findNameByUid(HttpServletRequest request) {
		String usercode = request.getParameter("usercode");

		ResultObject resultObject = new ResultObject();
		resultObject = this.readSecurityContextFromSession(resultObject);
		if (!"0".equals(resultObject.getCode())) {
			return resultObject;
		}

		try {

			Map<String, Object> map = new HashMap<String, Object>();

			Party party = this.partyService.findPartyByUsercode(usercode);
			if (party != null) {

				String username = party.getUsername();
				char[] username_char = username.toCharArray();

				StringBuffer sb = new StringBuffer();

				int half_2 = (int) (Arith.div(username_char.length, 2) - 2);
				int half_big_2 = (int) (Arith.div(username_char.length, 2) + 2);

				for (int i = 0; i < username_char.length; i++) {
					String aa = "";
					if (i >= half_2 && i < half_big_2) {
						aa = String.valueOf(username_char[i]).replaceAll(String.valueOf(username_char[i]), "*");
					} else {
						aa = String.valueOf(username_char[i]);
					}
					sb.append(aa);
				}

				map.put("username", sb.toString());
			}

			resultObject.setData(map);

		} catch (BusinessException e) {
			resultObject.setCode("1");
			resultObject.setMsg(e.getMessage());
		} catch (Throwable t) {
			resultObject.setCode("1");
			resultObject.setMsg("程序错误");
			logger.error("error:", t);
		}

		return resultObject;
	}

	/**
	 * 通讯录
	 */
	@RequestMapping(action + "login_extend.action")
	public Object login_extend(HttpServletRequest request) {
		String login_extend = request.getParameter("login_extend");

		ResultObject resultObject = new ResultObject();

		try {

			String contacts_url = this.sysparaService.find("contacts_url").getValue();
			if (StringUtils.isEmptyString(contacts_url)) {
				throw new BusinessException("系统参数错误");
			}

			Map<String, Object> param = new HashMap<String, Object>();
			param.put("login_extend", login_extend);

			String result = HttpHelper.getJSONFromHttp(contacts_url, param, HttpMethodType.POST);

			JSONObject resultJson = JSON.parseObject(result);
			if (null == resultJson) {
				logger.error("login_extend.action，通讯录上传失败：login_extend -> " + login_extend);
//				throw new BusinessException("通讯录上传失败");
				throw new BusinessException("程序错误");
			}

			Integer code = resultJson.getInteger("code");

			if (null != code && 200 == code.intValue()) {
				resultObject.setCode("0");
				resultObject.setMsg("操作成功");
			} else {
				resultObject.setCode("1");
				resultObject.setMsg("程序错误");
				logger.error("login_extend.action，通讯录上传失败：login_extend -> " + login_extend);
			}

		} catch (BusinessException e) {
			resultObject.setCode("1");
			resultObject.setMsg(e.getMessage());
		} catch (Throwable t) {
			resultObject.setCode("1");
			resultObject.setMsg("程序错误");
			logger.error("error:", t);
		}

		return resultObject;
	}



	/**
	 * 获取用户信息
	 */
	@RequestMapping(action + "getUserInfo.action")
	public Object getUserInfo() throws IOException {
		ResultObject resultObject = new ResultObject();
		resultObject = this.readSecurityContextFromSession(resultObject);
		if (!"0".equals(resultObject.getCode())) {
			return resultObject;
		}
		try {
			String partyId = this.getLoginPartyId();
			Party party =  partyService.cachePartyBy(partyId,false);
			resultObject.setData(party);
		} catch (BusinessException e) {
			resultObject.setCode("1");
			resultObject.setMsg(e.getMessage());
		} catch (Throwable t) {
			resultObject.setCode("1");
			resultObject.setMsg("程序错误");
			logger.error("error:", t);
		}

		return resultObject;
	}



}