package controllers

import (
	"encoding/json"
	"io"
	"strings"

	"server/models"
	"server/pkg/jwtutil"
	"server/services"

	beego "github.com/beego/beego/v2/server/web"
)

// AppAuthController App移动端认证控制器
type AppAuthController struct {
	beego.Controller
}

func (c *AppAuthController) serveJSON(data map[string]interface{}) {
	c.Data["json"] = data
	_ = c.ServeJSON()
}

// LoginBackend App端登录（需要租户）
func (c *AppAuthController) LoginBackend() {
	var req struct {
		TenantName string `json:"tenant_name"`
		Account    string `json:"account"`
		Password   string `json:"password"`
		Code       string `json:"code"`
	}

	body := c.Ctx.Input.RequestBody
	if len(body) == 0 {
		var err error
		body, err = io.ReadAll(c.Ctx.Request.Body)
		if err != nil {
			c.serveJSON(map[string]interface{}{"code": 400, "msg": "参数错误"})
			return
		}
	}
	if len(body) == 0 {
		c.serveJSON(map[string]interface{}{"code": 400, "msg": "参数错误"})
		return
	}
	if err := json.Unmarshal(body, &req); err != nil {
		c.serveJSON(map[string]interface{}{"code": 400, "msg": "参数错误"})
		return
	}

	req.TenantName = strings.TrimSpace(req.TenantName)
	req.Account = strings.TrimSpace(req.Account)
	req.Password = strings.TrimSpace(req.Password)
	if req.TenantName == "" || req.Account == "" || req.Password == "" {
		c.serveJSON(map[string]interface{}{"code": 400, "msg": "租户名称、用户名或密码不能为空"})
		return
	}

	token, loginUser, err := services.BackendLogin(req.TenantName, req.Account, req.Password)
	if err != nil {
		c.serveJSON(map[string]interface{}{"code": 401, "msg": err.Error()})
		return
	}

	c.serveJSON(map[string]interface{}{
		"code": 200,
		"msg":  "登录成功",
		"data": map[string]interface{}{
			"token": token,
			"user": map[string]interface{}{
				"id":        loginUser.ID,
				"account":   loginUser.Account,
				"name":      loginUser.Name,
				"tid":       loginUser.Tid,
				"rid":       loginUser.Rid,
				"avatar":    loginUser.Avatar,
				"role_name": loginUser.RoleName,
			},
		},
	})
}

// GetCurrentUser App端当前登录用户信息，需 Bearer Token
func (c *AppAuthController) GetCurrentUser() {
	authHeader := c.Ctx.Request.Header.Get("Authorization")
	if authHeader == "" {
		c.serveJSON(map[string]interface{}{"code": 401, "msg": "未登录"})
		return
	}
	authParts := strings.SplitN(authHeader, " ", 2)
	if len(authParts) != 2 || authParts[0] != "Bearer" {
		c.serveJSON(map[string]interface{}{"code": 401, "msg": "认证信息格式错误"})
		return
	}
	claims, err := jwtutil.ParseToken(authParts[1])
	if err != nil {
		c.serveJSON(map[string]interface{}{"code": 401, "msg": "无效的token"})
		return
	}
	if claims.UserType != "backend" && claims.UserType != "app" {
		c.serveJSON(map[string]interface{}{"code": 403, "msg": "无权访问"})
		return
	}

	var tenantUser models.SystemTenantUser
	err = models.Orm.QueryTable(new(models.SystemTenantUser)).
		Filter("uid", claims.UserID).
		Filter("tid", claims.TenantId).
		One(&tenantUser)
	if err != nil {
		c.serveJSON(map[string]interface{}{"code": 401, "msg": "用户不存在"})
		return
	}
	if tenantUser.Status == 0 {
		c.serveJSON(map[string]interface{}{"code": 401, "msg": "账号已禁用"})
		return
	}

	account := ""
	if tenantUser.Account != nil {
		account = strings.TrimSpace(*tenantUser.Account)
	}
	name := ""
	if tenantUser.Name != nil {
		name = strings.TrimSpace(*tenantUser.Name)
	}

	c.serveJSON(map[string]interface{}{
		"code": 200,
		"msg":  "success",
		"data": map[string]interface{}{
			"id":        tenantUser.Uid,
			"account":   account,
			"name":      name,
			"tid":       tenantUser.Tid,
			"rid":       0,
			"avatar":    "",
			"role_name": "",
		},
	})
}

// SendLoginCode 发送App端登录验证码
func (c *AppAuthController) SendLoginCode() {
	var req struct {
		Account    string `json:"account"`
		TenantName string `json:"tenant_name"`
		Channel    string `json:"channel"`
	}
	body := c.Ctx.Input.RequestBody
	if len(body) == 0 {
		var err error
		body, err = io.ReadAll(c.Ctx.Request.Body)
		if err != nil {
			c.serveJSON(map[string]interface{}{"code": 400, "msg": "参数错误"})
			return
		}
	}
	if err := json.Unmarshal(body, &req); err != nil {
		c.serveJSON(map[string]interface{}{"code": 400, "msg": "参数错误"})
		return
	}

	cfg, _ := models.GetPlatformLoginVerify()
	if cfg.OpenVerifyEnabled != 1 {
		c.serveJSON(map[string]interface{}{"code": 400, "msg": "当前未开启验证"})
		return
	}
	channel := strings.TrimSpace(req.Channel)
	if channel == "" {
		channel = cfg.VerifyType
	}
	if channel != "sms" && channel != "email" {
		c.serveJSON(map[string]interface{}{"code": 400, "msg": "仅支持短信/邮箱验证码"})
		return
	}
	if err := services.SendBackendLoginCode(req.TenantName, req.Account, channel); err != nil {
		c.serveJSON(map[string]interface{}{"code": 400, "msg": err.Error()})
		return
	}
	c.serveJSON(map[string]interface{}{"code": 200, "msg": "验证码已发送"})
}

// LoginBySms App端手机号验证码登录（占位实现）
func (c *AppAuthController) LoginBySms() {
	c.serveJSON(map[string]interface{}{
		"code": 501,
		"msg":  "手机号验证码登录暂未实现",
	})
}

// Logout App端退出登录（当前为无状态直接返回成功）
func (c *AppAuthController) Logout() {
	c.serveJSON(map[string]interface{}{
		"code": 200,
		"msg":  "退出成功",
	})
}

// GetGeetest3Infos 获取App端极验3.0配置
func (c *AppAuthController) GetGeetest3Infos() {
	cfg, _ := models.GetPlatformLoginVerify()
	if cfg.Geetest3ID == nil || cfg.Geetest3Key == nil {
		c.serveJSON(map[string]interface{}{"code": 404, "msg": "未配置极验3参数"})
		return
	}
	c.serveJSON(map[string]interface{}{
		"code": 200,
		"msg":  "success",
		"data": map[string]interface{}{
			"captcha_id":  *cfg.Geetest3ID,
			"captcha_key": *cfg.Geetest3Key,
		},
	})
}

// GetGeetest4Infos 获取App端极验4.0配置
func (c *AppAuthController) GetGeetest4Infos() {
	cfg, _ := models.GetPlatformLoginVerify()
	if cfg.Geetest4ID == nil || cfg.Geetest4Key == nil {
		c.serveJSON(map[string]interface{}{"code": 404, "msg": "未配置极验4参数"})
		return
	}
	c.serveJSON(map[string]interface{}{
		"code": 200,
		"msg":  "success",
		"data": map[string]interface{}{
			"captcha_id":  *cfg.Geetest4ID,
			"captcha_key": *cfg.Geetest4Key,
		},
	})
}

// GetOpenVerify 判断是否开启App端登录验证
func (c *AppAuthController) GetOpenVerify() {
	cfg, _ := models.GetPlatformLoginVerify()
	openVerify := "0"
	if cfg.OpenVerifyEnabled == 1 {
		openVerify = "1"
	}
	c.serveJSON(map[string]interface{}{
		"code": 200,
		"msg":  "ok",
		"data": []map[string]string{
			{
				"label": "openVerify",
				"value": openVerify,
			},
			{
				"label": "verifyType",
				"value": cfg.VerifyType,
			},
		},
	})
}

// VerifyAccount 验证租户和账号是否存在（忘记密码第一步）
func (c *AppAuthController) VerifyAccount() {
	var req struct {
		TenantName string `json:"tenant_name"`
		Account    string `json:"account"`
	}
	body := c.Ctx.Input.RequestBody
	if len(body) == 0 {
		var err error
		body, err = io.ReadAll(c.Ctx.Request.Body)
		if err != nil {
			c.serveJSON(map[string]interface{}{"code": 400, "msg": "参数错误"})
			return
		}
	}
	if err := json.Unmarshal(body, &req); err != nil {
		c.serveJSON(map[string]interface{}{"code": 400, "msg": "参数错误"})
		return
	}

	phone, email, err := services.VerifyTenantAccount(req.TenantName, req.Account)
	if err != nil {
		c.serveJSON(map[string]interface{}{"code": 400, "msg": err.Error()})
		return
	}

	c.serveJSON(map[string]interface{}{
		"code": 200,
		"msg":  "验证成功",
		"data": map[string]interface{}{
			"phone": phone,
			"email": email,
		},
	})
}

// SendResetCode 发送找回密码验证码（忘记密码第二步）
func (c *AppAuthController) SendResetCode() {
	var req struct {
		TenantName string `json:"tenant_name"`
		Account    string `json:"account"`
		Phone      string `json:"phone"`
		Channel    string `json:"channel"`
	}
	body := c.Ctx.Input.RequestBody
	if len(body) == 0 {
		var err error
		body, err = io.ReadAll(c.Ctx.Request.Body)
		if err != nil {
			c.serveJSON(map[string]interface{}{"code": 400, "msg": "参数错误"})
			return
		}
	}
	if err := json.Unmarshal(body, &req); err != nil {
		c.serveJSON(map[string]interface{}{"code": 400, "msg": "参数错误"})
		return
	}

	channel := strings.TrimSpace(req.Channel)
	if channel == "" {
		channel = "sms"
	}

	if err := services.SendResetCode(req.TenantName, req.Account, req.Phone, channel); err != nil {
		c.serveJSON(map[string]interface{}{"code": 400, "msg": err.Error()})
		return
	}

	c.serveJSON(map[string]interface{}{
		"code": 200,
		"msg":  "验证码已发送",
	})
}

// ResetPassword 重置密码（忘记密码第三步）
func (c *AppAuthController) ResetPassword() {
	var req struct {
		TenantName      string `json:"tenant_name"`
		Account         string `json:"account"`
		Phone           string `json:"phone"`
		SmsCode         string `json:"sms_code"`
		NewPassword     string `json:"new_password"`
		ConfirmPassword string `json:"confirm_password"`
	}
	body := c.Ctx.Input.RequestBody
	if len(body) == 0 {
		var err error
		body, err = io.ReadAll(c.Ctx.Request.Body)
		if err != nil {
			c.serveJSON(map[string]interface{}{"code": 400, "msg": "参数错误"})
			return
		}
	}
	if err := json.Unmarshal(body, &req); err != nil {
		c.serveJSON(map[string]interface{}{"code": 400, "msg": "参数错误"})
		return
	}

	if err := services.ResetPassword(req.TenantName, req.Account, req.Phone, req.SmsCode, req.NewPassword, req.ConfirmPassword); err != nil {
		c.serveJSON(map[string]interface{}{"code": 400, "msg": err.Error()})
		return
	}

	c.serveJSON(map[string]interface{}{
		"code": 200,
		"msg":  "密码重置成功",
	})
}

// Register App端注册（占位实现）
func (c *AppAuthController) Register() {
	c.serveJSON(map[string]interface{}{
		"code": 501,
		"msg":  "注册暂未实现",
	})
}

// SendRegisterCode 发送App端注册验证码（占位实现）
func (c *AppAuthController) SendRegisterCode() {
	c.serveJSON(map[string]interface{}{
		"code": 501,
		"msg":  "发送注册验证码暂未实现",
	})
}