package com.monkeylessey.framework.security.filter;

import com.fasterxml.jackson.databind.ObjectMapper;
import com.monkeylessey.constant.RedisKeyPrefixConstants;
import com.monkeylessey.framework.service.XpUserDetailsService;
import com.monkeylessey.framework.utils.RedisUtil;
import org.apache.commons.lang3.StringUtils;
import org.springframework.beans.factory.annotation.Autowired;
import org.springframework.http.MediaType;
import org.springframework.security.authentication.AuthenticationServiceException;
import org.springframework.security.authentication.UsernamePasswordAuthenticationToken;
import org.springframework.security.core.Authentication;
import org.springframework.security.core.AuthenticationException;
import org.springframework.security.web.authentication.UsernamePasswordAuthenticationFilter;

import javax.servlet.http.HttpServletRequest;
import javax.servlet.http.HttpServletResponse;
import java.io.IOException;
import java.util.Map;

@Deprecated
public class MyUsernamePasswordFilter extends UsernamePasswordAuthenticationFilter {

    private static final String SPRING_SECURITY_FORM_Captcha_KEY = "captcha";
    private static final String SPRING_SECURITY_FORM_CaptchaID_KEY = "captchaId";

    private boolean postOnly;

    @Autowired
    private RedisUtil redisUtil;
    @Autowired
    private XpUserDetailsService userDetailsService;

    @Override
    public void setPostOnly(boolean postOnly) {
        this.postOnly = postOnly;
    }

    @Override
    public Authentication attemptAuthentication(HttpServletRequest request, HttpServletResponse response) throws AuthenticationException {
        // 首先判断登录请求必须是post
        if (this.postOnly && !request.getMethod().equalsIgnoreCase("post")) {
            throw new AuthenticationServiceException("Authentication method not supported: " + request.getMethod());
        }
        // 因为前后端分离，所以要求格式必须为application/json
        if (request.getContentType().equals(MediaType.APPLICATION_JSON_VALUE)) {
            try {
                Map<String, Object> map = new ObjectMapper().readValue(request.getInputStream(), Map.class);
                String username = (String) map.get(getUsernameParameter());
                String password = (String) map.get(getPasswordParameter());
                String captcha = (String) map.get(getCaptchaParameter());
                String captchaId = (String) map.get(getCaptchaIdParameter());

                if (StringUtils.isEmpty(captcha)) {
                    // 验证码错误异常
                    System.out.println("AAAAA");
                }
                String redisCaptcha = redisUtil.getValue(RedisKeyPrefixConstants.CAPTCHA + captchaId, String.class);
                if (StringUtils.isEmpty(redisCaptcha)) {
                    // 验证码过期异常
                    System.out.println("BBBBB");
                } else if (!redisCaptcha.equalsIgnoreCase(captcha)) {
                    // 验证码错误异常
                    System.out.println("CCCCCC");
                }
                // 验证码正确，删除redis中的验证码
                redisUtil.deleteKey(RedisKeyPrefixConstants.CAPTCHA + captchaId);
                username = username != null ? username : "";
                username = username.trim();
                password = password != null ? password : "";
                // 通过用户名查找出角色
                UsernamePasswordAuthenticationToken
                        authRequest = new UsernamePasswordAuthenticationToken(username,
                        password,
                        userDetailsService.getUserPermissions(username));
                this.setDetails(request, authRequest);
                return this.getAuthenticationManager().authenticate(authRequest);
            } catch (IOException e) {
                e.printStackTrace();
            }
        }
        // 如果不满足，执行父类的
        return super.attemptAuthentication(request, response);
    }

    private String getCaptchaIdParameter() {
        return SPRING_SECURITY_FORM_CaptchaID_KEY;
    }

    private String getCaptchaParameter() {
        return SPRING_SECURITY_FORM_Captcha_KEY;
    }
}