package security.web;

import java.util.Arrays;
import java.util.Iterator;
import java.util.List;
import java.util.Set;

import javax.servlet.http.HttpServletRequest;
import javax.servlet.http.HttpSession;

import org.springframework.util.ObjectUtils;
import org.springframework.web.context.ContextLoader;
import org.springframework.web.context.WebApplicationContext;
import kernel.util.StringUtils;
import kernel.web.BaseAction;
import kernel.web.ResultObject;
import project.syspara.Syspara;
import project.syspara.SysparaService;
import security.Role;
import security.SecUser;
import security.SecurityContext;
import security.internal.SecurityResourceProcessor;
import systemuser.CustomerService;
import systemuser.model.Customer;

public class BaseSecurityAction extends BaseAction {
	private static final long serialVersionUID = 5393029010679461944L;
	protected String username_login;
	
	WebApplicationContext wac = ContextLoader.getCurrentWebApplicationContext();
	
	// false: dapp+交易所；true: 交易所；
	public boolean isDappOrExchange() {		
		SysparaService sysparaService = (SysparaService) wac.getBean("sysparaService");		
		Syspara syspara = sysparaService.find("project_type");
		if (null == syspara) {
			return false;
		} else {
			// 项目类型：DAPP_EXCHANGE(DAPP+交易所)；EXCHANGE(交易所)；(后面可以拼接项目编号，例如：EXCHANGE_TD1)
			String projectType = syspara.getValue();			
			if (projectType.contains("DAPP_EXCHANGE")) {
				return false;				
			} else {
				return true;				
			}
		}
	}
	
	// 获取系统参数
	public String getSystemPara(String sysparaName) {
		SysparaService sysparaService = (SysparaService) wac.getBean("sysparaService");
		Syspara syspara = sysparaService.find(sysparaName);
		if (null == syspara) {
			return "";
		} else {
			return syspara.getValue();
		}
	}
	
	public boolean isResourceListAccessible(String resourceList) {
		if (StringUtils.isNullOrEmpty(resourceList)) {
			return false;
		}		
		String[] array = resourceList.split(",");
		for (int i = 0; i < array.length; i++) {			
			if (this.isResourceAccessible(array[i])) {
				return true;
			}
		}		
		return false;
	}

	public boolean isResourceAccessible(String resource) {
		
		if ("OP_ADMIN_USER_RECORD".equals(resource) && !"root".equals(this.getUsername_login())) {// 假分权限，单独用户处理
			WebApplicationContext wac = ContextLoader.getCurrentWebApplicationContext();
			SysparaService sysparaService = (SysparaService) wac.getBean("sysparaService");
			Syspara syspara = sysparaService.find("user_record_names");
			if (syspara == null) {
				return false;
			} else {
				String userRecordNames = syspara.getValue();
				List<String> userRecordNamesList = Arrays.asList(userRecordNames.split(","));
				if (ObjectUtils.isEmpty(userRecordNamesList)|| !userRecordNamesList.contains(this.getUsername_login())) {
					return false;
				}
			}
		}
		SecurityContext securityContext = readSecurityContextFromSession();
		if (securityContext == null) {
			return false;
		}
		List<String> roles = securityContext.getRoles();
		WebApplicationContext wac = ContextLoader.getCurrentWebApplicationContext();
		SecurityResourceProcessor securityResourceProcessor = (SecurityResourceProcessor) wac.getBean("securityResourceProcessor");

		boolean resourceAccessible = securityResourceProcessor.isResourceAccessible(resource, "OPERATION",roles);
		return resourceAccessible;
//		return securityResourceProcessor.isResourceAccessible(resource, "OPERATION",roles);
	}

	public boolean isRolesAccessible(String verifyroles) {
		SecurityContext securityContext = readSecurityContextFromSession();
		if (securityContext == null) {
			return false;
		}
		List<String> roles = securityContext.getRoles();
		SecurityResourceProcessor securityResourceProcessor = (SecurityResourceProcessor) wac.getBean("securityResourceProcessor");
		return securityResourceProcessor.isRolesAccessible(verifyroles, roles);
	}

	public ResultObject readSecurityContextFromSession(ResultObject resultObject) {
		HttpServletRequest request = this.getRequest();
		HttpSession session = request.getSession();
		Object contextFromSessionObject = session.getAttribute("SPRING_SECURITY_CONTEXT");
		if (contextFromSessionObject == null) {
			resultObject.setCode("403");
			resultObject.setMsg("请重新登录");
		}
		return resultObject;
	}

	public String getUsername_login() {
		HttpServletRequest request = this.getRequest();

		HttpSession session = request.getSession();
		Object object = session.getAttribute("SPRING_SECURITY_CONTEXT");
		if (object != null) {
			return ((SecurityContext) object).getUsername();
		}
		return null;
	}

	public SecurityContext readSecurityContextFromSession() {
		HttpServletRequest request = this.getRequest();
		HttpSession session = request.getSession();
		Object contextFromSessionObject = session.getAttribute("SPRING_SECURITY_CONTEXT");

		if (contextFromSessionObject == null) {
			return null;
		}

		if (!(contextFromSessionObject instanceof SecurityContext)) {
			return null;
		}

		return (SecurityContext) contextFromSessionObject;
	}

	public String getLoginPartyId() {
		SecurityContext contextFromSessionObject = readSecurityContextFromSession();
		if (contextFromSessionObject != null) {
			return contextFromSessionObject.getPartyId();
		}
		return null;
	}

	public String telephonHiding(String telephon) {
		SecurityContext securityContext = readSecurityContextFromSession();
		if (securityContext == null) {
			return null;
		}
		String[] rolesArrty = { "ADMIN", "ROOT" };
		SecUser secUser = (SecUser) securityContext.getPrincipal();
		Set roles = secUser.getRoles();
		boolean find = false;
		int i = 0;
		Iterator<Role> it = roles.iterator();
		while (it.hasNext()) {
			Role role = (Role) it.next();
			for (int j = 0; j < rolesArrty.length; j++) {
				if (role.getRoleName().equals(rolesArrty[j])) {
					find = true;
				}
			}
		}

		if (find) {
			return telephon;
		}

		if ((!StringUtils.isNullOrEmpty(telephon)) && (telephon.length() == 11)) {
			return telephon.substring(0, 3) + "****" + telephon.substring(7, 11);
		}
		return "****";
	}

	public Integer customerOnlineState() {
		CustomerService customerService = (CustomerService) wac.getBean("customerService");
		Customer customer = customerService.cacheByUsername(this.getUsername_login());
		if (null == customer) {
			return null;
		}
		return customer.getOnline_state();
	}

	/*
	 * public void setCustomerService(CustomerService customerService) {
	 * this.customerService = customerService; }
	 */

}