package com.xzx.gc.filter;

import cn.hutool.core.util.StrUtil;
import com.xzx.gc.common.constant.Constants;
import com.xzx.gc.common.request.HeaderMapRequestWrapper;
import com.xzx.gc.common.utils.BusinessUtil;
import com.xzx.gc.common.utils.SecurityUtil;
import com.xzx.gc.common.utils.SpringUtil;
import lombok.extern.slf4j.Slf4j;
import org.springframework.beans.factory.annotation.Autowired;

import javax.servlet.*;
import javax.servlet.http.HttpServletRequest;
import java.io.IOException;
import java.util.List;

/**
 * created with IntelliJ IDEA.
 * author: fxbin
 * date: 2018/9/9
 * time: 14:22
 * description:
 */
@Slf4j
public class GlobalFilter implements Filter {



    @Autowired
    private BusinessUtil businessUtil;

    @Override
    public void init(FilterConfig filterConfig) {
        log.trace("GlobalFilter init...");
    }

    @Override
    public void doFilter(ServletRequest servletRequest, ServletResponse servletResponse, FilterChain filterChain) throws IOException, ServletException {
        HttpServletRequest request = (HttpServletRequest) servletRequest;

        if(!businessUtil.isAuthUrl(request.getRequestURI())||(SpringUtil.isDev()&&"true".equals(request.getHeader("swagger")))){
            filterChain.doFilter(request, servletResponse);
        }else {
            String version = request.getHeader("version");
            String authkey = request.getHeader("authkey");

            if (businessUtil.isAuth(version) && !request.getRequestURI().contains("/admin")) {
                HeaderMapRequestWrapper requestWrapper = new HeaderMapRequestWrapper(request);
                //解密 头部的用户ID和签名和token
                String userId = request.getHeader("userId");
                //rsa解密
                authkey = SecurityUtil.decrypt(authkey);

                if (StrUtil.isNotBlank(userId)) {
                    String decrypt = SecurityUtil.decrypt(authkey, userId);
                    requestWrapper.addHeader("userId", decrypt);
                }
                String sign = request.getHeader("sign");
                if (StrUtil.isNotBlank(sign)) {
                    String decrypt = SecurityUtil.decrypt(authkey, sign);
                    requestWrapper.addHeader("sign", decrypt);
                }
                String token = request.getHeader("token");
                if (StrUtil.isNotBlank(token)) {
                    String decrypt = SecurityUtil.decrypt(authkey, token);
                    requestWrapper.addHeader("token", decrypt);
                }
                filterChain.doFilter(requestWrapper, servletResponse);
            } else {

                filterChain.doFilter(request, servletResponse);
            }
        }
    }

    @Override
    public void destroy() {
        log.trace("GlobalFilter destroy...");
    }
}