package com.matrix.component.dingding;

import com.alibaba.fastjson.JSONObject;
import com.dingtalk.api.DefaultDingTalkClient;
import com.dingtalk.api.request.OapiGetJsapiTicketRequest;
import com.dingtalk.api.request.OapiGettokenRequest;
import com.dingtalk.api.response.OapiGetJsapiTicketResponse;
import com.dingtalk.api.response.OapiGettokenResponse;
import com.matrix.core.tools.StringUtils;
import com.taobao.api.ApiException;

import java.io.UnsupportedEncodingException;
import java.security.MessageDigest;
import java.security.NoSuchAlgorithmException;
import java.text.SimpleDateFormat;
import java.util.Formatter;
import java.util.HashMap;
import java.util.Map;


/**
 * @author jiangyouyao
 * @description 钉钉授权凭证工具
 */
public class AuthHelper {

	public static SimpleDateFormat df = new SimpleDateFormat("yyyy-MM-dd HH:mm:ss");

	/**
	 * 在此方法中，为了避免频繁获取access_token，
	 * 在距离上一次获取access_token时间在两个小时之内的情况，
	 * 将直接从持久化存储中读取access_token
	 * 
	 * 因为access_token和jsapi_ticket的过期时间都是7200秒
	 * 所以在获取access_token的同时也去获取了jsapi_ticket
	 * 注：jsapi_ticket是在前端页面JSAPI做权限验证配置的时候需要使用的
	 * 具体信息请查看开发者文档--权限验证配置
	 */
	public static String getAccessToken() throws OApiException {
		DefaultDingTalkClient client = new DefaultDingTalkClient("https://oapi.dingtalk.com/gettoken");
		OapiGettokenRequest request = new OapiGettokenRequest();
		request.setAppkey(DDEnvConfig.APPKEY);
		request.setAppsecret(DDEnvConfig.APPSECRET);
		request.setHttpMethod("GET");
		OapiGettokenResponse response=null;
		try {
			 response =	client.execute(request);
		} catch (ApiException e) {
			e.printStackTrace();
		}
		return response.getAccessToken();
	}

	/**
	 *正常的情况下，jsapi_ticket的有效期为7200秒，所以开发者需要在某个地方设计一个定时器，定期去更新jsapi_ticket
 	 */
	public static String getJsapiTicket(String accessToken) throws OApiException {
		
		String jsTicket = "";
		DefaultDingTalkClient client = new DefaultDingTalkClient("https://oapi.dingtalk.com/get_jsapi_ticket");
		OapiGetJsapiTicketRequest req = new OapiGetJsapiTicketRequest();
		req.setTopHttpMethod("GET");
		OapiGetJsapiTicketResponse execute=null;
		try {
			execute = client.execute(req, accessToken);
		} catch (ApiException e) {
			e.printStackTrace();
		}
		jsTicket= execute.getTicket();
		return jsTicket;
		
	}

	public static String sign(String ticket, String nonceStr, long timeStamp, String url) throws OApiException {
		String plain = "jsapi_ticket=" + ticket + "&noncestr=" + nonceStr + "&timestamp=" + String.valueOf(timeStamp)
				+ "&url=" + url;
		try {
			MessageDigest sha1 = MessageDigest.getInstance("SHA-1");
			sha1.reset();
			sha1.update(plain.getBytes("UTF-8"));
			return bytesToHex(sha1.digest());
		} catch (NoSuchAlgorithmException e) {
			throw new OApiResultException(e.getMessage());
		} catch (UnsupportedEncodingException e) {
			throw new OApiResultException(e.getMessage());
		}
	}

	private static String bytesToHex(byte[] hash) {
		Formatter formatter = new Formatter();
		for (byte b : hash) {
			formatter.format("%02x", b);
		}
		String result = formatter.toString();
		formatter.close();
		return result;
	}
	
	/**
	 * @Description: 得到页面验证参数
	 * @author:dingchuan
	 * @return
	 * 返回类型 String
	 * @date 2016年11月27日
	 */
	public static Map getConfig() {
		String url= DDEnvConfig.URL;
		String nonceStr = StringUtils.getRandomString(10);
		long timeStamp = System.currentTimeMillis();
		String signedUrl = url;
		String accessToken = null;
		String ticket = null;
		String signature = null;
		Long agentid = null;
		try {
			accessToken = AuthHelper.getAccessToken();	       
			ticket = AuthHelper.getJsapiTicket(accessToken);
			signature = AuthHelper.sign(ticket, nonceStr, timeStamp, signedUrl);
			agentid = DDEnvConfig.AGENT_ID;
		} catch (OApiException  e) {
			e.printStackTrace();
		}
		Map<String,String> map= new HashMap<>();

		map.put("jsticket",ticket);
		map.put("signature",signature);
		map.put("nonceStr",nonceStr);
		map.put("timeStamp",timeStamp+"");
		map.put("corpId", DDEnvConfig.CORP_ID);
		map.put("agentid",agentid+"");

		return map;
	}



	public static String getSsoToken() throws OApiException {
		String url = "https://oapi.dingtalk.com/sso/gettoken?corpid=" + DDEnvConfig.CORP_ID + "&corpsecret=" + DDEnvConfig.SSO_SECRET;
		JSONObject response = HttpHelper.httpGet(url);
		String ssoToken;
		if (response.containsKey("access_token")) {
			ssoToken = response.getString("access_token");
		} else {
			throw new OApiResultException("Sso_token");
		}
		return ssoToken;

	}

}