package com.ibeetl.admin.core.conf;

import java.lang.reflect.Method;
import java.util.Date;

import org.apache.commons.lang3.StringUtils;
import org.apache.commons.logging.Log;
import org.apache.commons.logging.LogFactory;
import org.aspectj.lang.ProceedingJoinPoint;
import org.aspectj.lang.annotation.Aspect;
import org.aspectj.lang.reflect.MethodSignature;
import org.springframework.beans.factory.annotation.Autowired;
import org.springframework.core.env.Environment;
import org.springframework.stereotype.Component;

import com.fasterxml.jackson.databind.ObjectMapper;
import com.ibeetl.admin.core.annotation.Function;
import com.ibeetl.admin.core.entity.CoreAudit;
import com.ibeetl.admin.core.entity.CoreFunction;
import com.ibeetl.admin.core.entity.CoreUser;
import com.ibeetl.admin.core.service.CoreAuditService;
import com.ibeetl.admin.core.service.CorePlatformService;
import com.ibeetl.admin.core.util.FunctionLocal;
import com.ibeetl.admin.core.util.HttpRequestLocal;
import com.ibeetl.admin.core.util.PlatformException;

@Aspect
@Component
public class RbacAnnotationConfig {
	@Autowired
	CorePlatformService platformService;
	@Autowired
	CoreAuditService sysAuditService;
	@Autowired
	HttpRequestLocal httpRequestLocal;

	@Autowired
	Environment env;

	ObjectMapper jsonMapper = new ObjectMapper();
	private final Log log = LogFactory.getLog(this.getClass());

	@org.aspectj.lang.annotation.Around("within(@org.springframework.stereotype.Controller *) && @annotation(function)")
	public Object functionAccessCheck(final ProceedingJoinPoint pjp, Function function) throws Throwable {
		// debug
		String funCode = null;
		CoreUser user = null;
		Method m = null;
		try {
			
			if (function != null) {
				funCode = function.value();
				user = platformService.getCurrentUser();
				Long orgId = platformService.getCurrentOrgId();
				boolean access = platformService.canAcessFunction(user.getId(), orgId, funCode);
				if (!access) {
					log.warn(jsonMapper.writeValueAsString(user) + "试图访问未授权功能 " + funCode);
					throw new PlatformException("试图访问未授权功能");
				}
				FunctionLocal.set(funCode);
			}
			
			Object o = pjp.proceed();
			if (function != null) {
				MethodSignature ms = (MethodSignature)pjp.getSignature();
			    m = ms.getMethod();
				createAudit(funCode,function.name(), user, true, "",m);
			}
			return o;

		} catch (Throwable e) {
			if (function != null) {
				createAudit(funCode, function.name(),user, false, e.getMessage(),m);
			}
			throw e;
		}

	}

	private void createAudit(String functionCode, String functionName,CoreUser user, boolean success, String msg, Method m) {
		boolean enable = env.getProperty("audit.enable", Boolean.class, false);
		if (!enable) {
			return;
		}
		if(filter(m,functionCode)){
			return ;
		}
		
		CoreAudit audit = new CoreAudit();
		if(StringUtils.isEmpty(functionName)) {
		    CoreFunction fun = this.platformService.getFunction(functionCode);

	        if (fun == null) {
	            // 没有在数据库定义，但写在代码里了
	            log.warn(functionCode + " 未在数据库里定义");
	            functionName = "未定义";
	        } else {
	            functionName = fun.getName();
	        }
		}
		audit.setCreateTime(new Date());
		audit.setFunctionCode(functionCode);
		audit.setFunctionName(functionName);
		audit.setUserId(user.getId());
		audit.setSuccess(success ? 1 : 0);
		audit.setUserName(user.getName());
		audit.setMessage(msg);
		
		audit.setIp(httpRequestLocal.getRequestIP());
		sysAuditService.save(audit);
	}
	
	private boolean filter(Method m,String functionCode){
		if(functionCode.startsWith("audit.")){
			return true;
		}
		String uri = httpRequestLocal.getRequestURI();
		if(uri!=null&&uri.endsWith("/index/condition.json")){
			
			return true ;
		}else{
			return false;
		}
	}

}