package com.app.config.interceptor;

import java.lang.reflect.Method;
import java.util.Date;
import java.util.Map;

import javax.servlet.http.HttpServletRequest;
import javax.servlet.http.HttpServletResponse;

import org.springframework.beans.factory.annotation.Autowired;
import org.springframework.web.context.request.RequestAttributes;
import org.springframework.web.context.request.RequestContextHolder;
import org.springframework.web.context.request.ServletRequestAttributes;
import org.springframework.web.method.HandlerMethod;
import org.springframework.web.servlet.HandlerInterceptor;
import org.springframework.web.servlet.ModelAndView;

import com.alibaba.fastjson.JSON;
import com.app.aspect.IpUtil;
import com.app.config.annotation.PassToken;
import com.app.config.annotation.UserLoginToken;
import com.auth0.jwt.JWT;
import com.auth0.jwt.JWTVerifier;
import com.auth0.jwt.algorithms.Algorithm;
import com.auth0.jwt.exceptions.JWTDecodeException;
import com.auth0.jwt.exceptions.JWTVerificationException;
import com.system.log.entity.SysLog;
import com.system.log.service.SysLogService;
import com.system.user.dao.SysUserDao;
import com.system.user.entity.SysUser;


/**
 * @author jinbin
 * @date 2018-07-08 20:41
 */
public class AuthenticationInterceptor implements HandlerInterceptor {
	@Autowired
    private SysUserDao sysUserDao;

    @Override
    public boolean preHandle(HttpServletRequest httpServletRequest, HttpServletResponse httpServletResponse, Object object) throws Exception {
       try{
    	   String token = httpServletRequest.getHeader("X-Token");// 从 http 请求头中取出 token
           // 如果不是映射到方法直接通过
           if(!(object instanceof HandlerMethod)){
               return true;
           }
           HandlerMethod handlerMethod=(HandlerMethod)object;
           Method method=handlerMethod.getMethod();
           //检查是否有passtoken注释，有则跳过认证
           if (method.isAnnotationPresent(PassToken.class)) {
               PassToken passToken = method.getAnnotation(PassToken.class);
               if (passToken.required()) {
                   return true;
               }
           }
           //检查有没有需要用户权限的注解
           if (method.isAnnotationPresent(UserLoginToken.class)) {
               UserLoginToken userLoginToken = method.getAnnotation(UserLoginToken.class);
               if (userLoginToken.required()) {
                   // 执行认证
                   if (token == null) {
                       throw new RuntimeException("无token，请重新登录");
                   }
                   // 获取 token 中的 user id
                   String userCode;
                   try {
                   	userCode = JWT.decode(token).getAudience().get(0);
                   } catch (JWTDecodeException j) {
                       throw new RuntimeException("401");
                   }
//                   SysUser user = sysUserDao.findByIsDelAndUserCode(0, userCode);
                   SysUser user = sysUserDao.findByFcode(userCode);
                   if (user == null) {
                       throw new RuntimeException("用户不存在，请重新登录");
                   }
                   // 验证 token
//                   JWTVerifier jwtVerifier = JWT.require(Algorithm.HMAC256(user.getUserPassword())).build();
                   JWTVerifier jwtVerifier = JWT.require(Algorithm.HMAC256(user.getFpassword())).build();
                   try {
                       jwtVerifier.verify(token);
                   } catch (JWTVerificationException e) {
                       throw new RuntimeException("401");
                   }
   /*                
                   //开始保存请求日志
                   //保存日志
                   SysLog sysLog = new SysLog();
                   //获取请求的类名
                  // String className = joinPoint.getTarget().getClass().getName();

                   //获取请求的方法名
                   String methodName = method.getName();
                   sysLog.setMethod( methodName);

                   //请求的参数
                  // Object[] args = joinPoint.getArgs();
                   Map<String,String[]> args = httpServletRequest.getParameterMap();
                   //将参数所在的数组转换成json
                   String params = JSON.toJSONString(args);
                   sysLog.setParams(params);

                   sysLog.setCreatedTime(new Date());
                   
                   //获取用户名
                   sysLog.setUsername(userCode);
                   //获取用户ip地址
                   sysLog.setIp(IpUtil.getIpAddr(httpServletRequest));

                   //调用service保存SysLog实体类到数据库
                   try {
           			sysLogService.add(sysLog);
           		} catch (Exception e) {
           			// TODO Auto-generated catch block
           			e.printStackTrace();
           			System.out.println(e.toString());
           		}
                   //--end
   */                return true;
               }
           }
           return true;
       }catch(Exception e){
    	   return true;
       }
    	
    }

    @Override
    public void postHandle(HttpServletRequest httpServletRequest, HttpServletResponse httpServletResponse, Object o, ModelAndView modelAndView) throws Exception {

    }
    @Override
    public void afterCompletion(HttpServletRequest httpServletRequest, HttpServletResponse httpServletResponse, Object o, Exception e) throws Exception {

    }
}