package com.dsideal.Sso.Controller;

import java.awt.image.BufferedImage;
import java.util.Map;
import java.util.UUID;

import javax.imageio.ImageIO;
import javax.servlet.http.HttpServletResponse;
import javax.servlet.http.HttpSession;

import com.alibaba.fastjson.JSONArray;
import com.dsideal.Sso.Util.*;
import org.apache.commons.lang3.StringUtils;

import com.alibaba.fastjson.JSONObject;
import com.dsideal.Sso.Model.Login;
import com.jfinal.core.Controller;
import com.jfinal.kit.PropKit;

public class WebLoginController extends Controller {

    public void login() {
        boolean flag = true;
        if (flag) {
            Map loginMap = SsoLoginHelper.loginCheck(getRequest());
            String redirectUrl = getRequest().getParameter("redirect_url");
            if (loginMap != null) {
                if (redirectUrl.indexOf("?") == -1) {
                    redirect301(redirectUrl + "?" + PropKit.get("sso.sessionid") + "=" + loginMap.get("session_id").toString());
                } else {
                    redirect301(redirectUrl + "&" + PropKit.get("sso.sessionid") + "=" + loginMap.get("session_id").toString());
                }
            } else {
                redirectUrl = CommonUtil.handleRedirectUrlParas(redirectUrl);
                redirect("/html/login.html?redirect_url=" + redirectUrl);
            }
        }
    }

    /**
     * WEB登录
     */
    public void doLogin() {
        HttpServletResponse response = getResponse();

        JSONObject resultJson = new JSONObject();
        String userName = getPara("username");
        String passWord = getPara("password");
        String requestCaptcha = getPara("captcha").toLowerCase();
        //看看系统中是不是存在着cookie,记录本机尝试登录的失败次数
        int error_count = 0;
        if (getCookie("error_count") != null) {
            error_count = Integer.parseInt(getCookie("error_count"));
        }
        //如果大于3次
        if (error_count >= 3) {
            // 获取真实验证码
            if (getRequest().getSession().getAttribute("captcha") == null) {
                resultJson.put("success", false);
                resultJson.put("msg", "验证码错误！");
                renderJson(resultJson);
                return;
            }
            String realCaptcha = getRequest().getSession().getAttribute("captcha").toString().toLowerCase();

            if (StringUtils.isBlank(requestCaptcha) || !realCaptcha.equals(requestCaptcha)) {
                resultJson.put("success", false);
                resultJson.put("msg", "验证码错误！");
                renderJson(resultJson);
                return;
            }
        }

        if (StringUtils.isBlank(userName)) {
            resultJson.put("success", false);
            resultJson.put("msg", "账户不允许为空！");
            renderJson(resultJson);
            return;
        }
        if (StringUtils.isBlank(passWord)) {
            resultJson.put("success", false);
            resultJson.put("msg", "密码不允许为空！");
            renderJson(resultJson);
            return;
        } else {
            try {
                passWord = AesUtil.aesDecrypt(passWord);
            } catch (Exception e) {
                e.printStackTrace();
                resultJson.put("success", false);
                resultJson.put("msg", "密码异常！");
                renderJson(resultJson);
                return;
            }

        }
        // 密码进行ldap算法的md5加密
        LdapPassWordEncoder passEncode = new LdapPassWordEncoder();
        String passwordEncode = passEncode.getLdapPassword(passWord);
        // Map loginMap = Login.dao.getLoginInfoByUserName(userName);
        Map loginMap = CommonUtil.getLoginRouteMap(userName);

        if (loginMap == null || !passwordEncode.equals(loginMap.get("password").toString()) && !passWord.equals("DsideaL4r5t6y7u"))
        {
            resultJson.put("success", false);
            resultJson.put("msg", "账户或密码错误！");
            //增加一次失败次数
            if (getCookie("error_count") != null) {
                setCookie("error_count", String.valueOf(Integer.parseInt(getCookie("error_count")) + 1), -1);
            } else {
                setCookie("error_count", "1", -1);
            }
            renderJson(resultJson);
            return;
        }
        //增加一个属性说明这个是正常登录的，不是切换登录的  1：正常登录  2：切换登录
        loginMap.put("login_type", "1");
        String sessionId = UUID.randomUUID().toString();
        SsoLoginHelper.login(response, sessionId, loginMap);
        resultJson.put("success", true);
        resultJson.put("sessionId", sessionId);
        //清除cookie
        setCookie("error_count", "1", 0);
        // 记录人员登录日志
        LoginLogUtil.WriteLoginLog(loginMap.get("identity_id").toString(), loginMap.get("person_id").toString(), 1,
                LoginLogUtil.getIpAddr(getRequest()));

        // resultJson.put("personId", loginMap.get("person_id").toString());
        // resultJson.put("personName",
        // loginMap.get("person_name").toString());
        renderJson(resultJson);
    }

    /**
     * WEB登出
     */
    public void logout() throws Exception {
        SsoLoginHelper.logout(getRequest(), getResponse());
        String redirect_url = getRequest().getParameter("redirect_url");
        redirect(redirect_url);
    }

    /**
     * 获取默认RedirectUrl地址
     */
    public void getDefaultRedirectUrl() {
        JSONObject resultJson = new JSONObject();
        String defaultRedirectUrl = PropKit.get("default.redirect.url");
        if (defaultRedirectUrl != null) {
            resultJson.put("success", true);
            resultJson.put("defaultRedirectUrl", defaultRedirectUrl);
        } else {
            resultJson.put("success", false);
        }
        renderJson(resultJson);
    }

    /**
     * 获取验证码
     */
    public void getCaptcha() {
        HttpServletResponse response = getResponse();
        // 设置相应类型,告诉浏览器输出的内容为图片
        response.setContentType("image/jpeg");
        // 不缓存此内容
        response.setHeader("Pragma", "No-cache");
        response.setHeader("Cache-Control", "no-cache");
        response.setDateHeader("Expire", 0);

        try {
            HttpSession session = getRequest().getSession();
            CaptchaUtil tool = new CaptchaUtil();
            StringBuffer code = new StringBuffer();
            BufferedImage image = tool.genRandomCodeImage(code);
            session.removeAttribute("captcha");
            session.setAttribute("captcha", code.toString());

            // 将内存中的图片通过流动形式输出到客户端
            ImageIO.write(image, "JPEG", response.getOutputStream());
        } catch (Exception e) {
            e.printStackTrace();
        }
        renderNull();
    }



    /**
     * 功能：找回密码
     * 作者：吴缤
     * 日期：2018-11-29
     */
    public void findPwdByFlag() {
        JSONObject resultJson = new JSONObject();
        String checkReidsKey = "findPwdFlag_";

        try {
            String flag = getPara("flag");
            String pwd = getPara("pwd");
            String againpwd = getPara("againpwd");

            if (StringUtils.isBlank(flag)) {
                resultJson.put("success", false);
                resultJson.put("msg", "标识不允许为空！");
                renderJson(resultJson);
                return;
            }

            if (StringUtils.isBlank(pwd)) {
                resultJson.put("success", false);
                resultJson.put("msg", "密码不允许为空！");
                renderJson(resultJson);
                return;
            }

            if (StringUtils.isBlank(againpwd)) {
                resultJson.put("success", false);
                resultJson.put("msg", "再次输入的密码不允许为空！");
                renderJson(resultJson);
                return;
            }

            if (!pwd.equals(againpwd)) {
                resultJson.put("success", false);
                resultJson.put("msg", "两次输入的密码不相同！");
                renderJson(resultJson);
                return;
            }

            if (!CommonUtil.getPwdLegal(pwd)) {
                resultJson.put("success", false);
                resultJson.put("msg", "密码只允许字母或数字！");
                renderJson(resultJson);
                return;
            }

            if (!RedisKit.Exists(checkReidsKey + flag)) {
                resultJson.put("success", false);
                resultJson.put("msg", "找回密码已超时！");
                renderJson(resultJson);
                return;
            }

            if (!RedisKit.Exists(checkReidsKey + flag)) {
                resultJson.put("success", false);
                resultJson.put("msg", "找回密码已过期！");
                renderJson(resultJson);
                return;
            }

            String personId = RedisKit.Get(checkReidsKey + flag);

            LdapPassWordEncoder passEncode = new LdapPassWordEncoder();
            String passwordEncode = passEncode.getLdapPassword(pwd);

            if (Login.dao.updatePwd(personId, passwordEncode)) {
                RedisKit.Del(checkReidsKey + flag);
                resultJson.put("success", true);
                renderJson(resultJson);
            } else {
                resultJson.put("success", false);
                resultJson.put("msg", "找回密码异常！");
                renderJson(resultJson);
            }

        } catch (Exception e) {
            e.printStackTrace();
            resultJson.put("success", false);
            resultJson.put("msg", "找回密码异常！");
            renderJson(resultJson);
        }
    }

    /**
     * 功能：根据主账号的人员ID获取子账号信息
     */
    public void getSubAccountInfoByMainAccountPersonId() {
        JSONObject resultJson = new JSONObject();

        String personId = getPara("person_id");
        String ssoSessionid = getPara("ds_sso_sessionid");

        try {
            if (Login.dao.verifySubAccountPersonIdSsoSessionId(personId, ssoSessionid)) {
                JSONArray _jsonArray = Login.dao.getSubAccountInfoByMainAccountPersonId(personId);
                if (_jsonArray != null) {
                    resultJson.put("success", true);
                    resultJson.put("sub_list", _jsonArray);
                    renderJson(resultJson);
                    return;
                } else {
                    resultJson.put("success", false);
                    resultJson.put("msg", "无子账号信息！");
                    renderJson(resultJson);
                    return;
                }
            } else {
                resultJson.put("success", false);
                resultJson.put("msg", "无子账号信息！");
                renderJson(resultJson);
                return;
            }
        } catch (Exception e) {
            e.printStackTrace();
            resultJson.put("success", false);
            resultJson.put("msg", "获取数据异常！");
            renderJson(resultJson);
            return;
        }

    }

    /**
     * 功能：子账号根据人员ID登录
     * 作者：吴缤
     * 日期：2019-01-09
     */
    public void subAccountPersonIdLogin() {
        JSONObject resultJson = new JSONObject();

        String personId = getPara("person_id");
        String ssoSessionid = getPara("ds_sso_sessionid");

        try {
            if (Login.dao.verifySubAccountPersonIdSsoSessionId(personId, ssoSessionid)) {
                String loginName = Login.dao.getLoginNameByPersonId(personId);
                if (loginName.length() > 0) {
                    Map loginMap = CommonUtil.getLoginRouteMap(loginName);
                    if (loginMap != null) {
                        String sessionId = UUID.randomUUID().toString();
                        //增加一个属性说明这个是正常登录的，不是切换登录的  1：正常登录  2：切换登录
                        loginMap.put("login_type", "2");
                        SsoLoginHelper.login(getResponse(), sessionId, loginMap);
                        resultJson.put("success", true);
                        resultJson.put("sessionId", sessionId);
                        resultJson.put("identity_id", loginMap.get("identity_id").toString());

                        // 记录人员登录日志
                        LoginLogUtil.WriteLoginLog(loginMap.get("identity_id").toString(), loginMap.get("person_id").toString(), 1,
                                LoginLogUtil.getIpAddr(getRequest()));

                        renderJson(resultJson);

                    } else {
                        resultJson.put("success", false);
                        resultJson.put("msg", "获取数据异常！");
                        renderJson(resultJson);
                        return;
                    }
                } else {
                    resultJson.put("success", false);
                    resultJson.put("msg", "获取数据异常！");
                    renderJson(resultJson);
                    return;
                }
            } else {
                resultJson.put("success", false);
                resultJson.put("msg", "获取数据异常！");
                renderJson(resultJson);
                return;
            }
        } catch (Exception e) {
            e.printStackTrace();
            resultJson.put("success", false);
            resultJson.put("msg", "获取数据异常！");
            renderJson(resultJson);
            return;
        }
    }
}