package security.interceptor;

import common.model.User;
import common.repository.UserRepository;
import org.slf4j.Logger;
import org.slf4j.LoggerFactory;
import org.springframework.beans.factory.annotation.Autowired;
import org.springframework.web.servlet.handler.HandlerInterceptorAdapter;
import security.RedisLoginStatusManager;
import security.TokenManager;
import util.Constant;
import util.StringUtil;

import javax.servlet.http.Cookie;
import javax.servlet.http.HttpServletRequest;
import javax.servlet.http.HttpServletResponse;

public class AuthorizationInterceptor extends HandlerInterceptorAdapter {
    private static final Logger logger = LoggerFactory.getLogger(AuthorizationInterceptor.class);
    //存放鉴权信息的Header名称，默认是Authorization
    public static String httpHeaderName = "Authorization";
    @Autowired
    private UserRepository userRepository;

    @Autowired
    private TokenManager manager;
    @Autowired
    private RedisLoginStatusManager redisLoginStatusManager;

    //鉴权信息的无用前缀，默认为空
    private String httpHeaderPrefix = "";
    public void setHttpHeaderName(String httpHeaderName) {
        this.httpHeaderName = httpHeaderName;
    }

    public void setHttpHeaderPrefix(String httpHeaderPrefix) {
        this.httpHeaderPrefix = httpHeaderPrefix;
    }

    public boolean preHandle(HttpServletRequest request, HttpServletResponse response, Object handler) {
        //放开登录
        if (request.getRequestURL().indexOf("login/login") != -1){
            return true;
        }
        //从header中得到token
        String token = request.getHeader(httpHeaderName);
        token = StringUtil.isEmpty(token) ? getCookieToken(request.getCookies(), "TOKEN") : token;
        token = token.substring(httpHeaderPrefix.length());
        //验证token
        String key = manager.getKeyFromToken(token);
        //登陆状态
        boolean loginStatus = redisLoginStatusManager.getLoginStatusByKey(token);

        if (!StringUtil.isEmpty(key)) {
            String id = getCookieToken(request.getCookies(), "TOKEN");
            User one = userRepository.findOne(Long.parseLong(key));

            User sessionAct = (User) request.getSession().getAttribute(Constant.CURRENT_ACCOUNT);
            if (sessionAct == null) {
                request.getSession().setAttribute(Constant.CURRENT_ACCOUNT,one);
            }
            return true;
        }
        return false;
    }

    private String getCookieToken(Cookie[] cookies, String name){

        String token = null;

        if (null != cookies) {
            for (Cookie cookie : cookies) {
                if (cookie.getName().equals(name)) {
                    token = cookie.getValue();
                }
            }
        }

        return token;
    }
}