/**
 * Copyright &copy; 2012-2014 <a href="https://github.com/thinkgem/jeesite">JeeSite</a> All rights reserved.
 */
package com.ejweb.modules.sys.web;

import com.alibaba.fastjson.JSON;
import com.ejweb.conf.GConstants;
import com.ejweb.conf.LDAPUtil;
import com.ejweb.core.base.BaseController;
import com.ejweb.core.security.shiro.session.SessionDAO;
import com.ejweb.core.servlet.ValidateCodeServlet;
import com.ejweb.core.utils.*;
import com.ejweb.modules.sys.entity.Role;
import com.ejweb.modules.sys.entity.User;
import com.ejweb.modules.sys.security.FormAuthenticationFilter;
import com.ejweb.modules.sys.security.SystemAuthorizingRealm.Principal;
import com.ejweb.modules.sys.security.UsernamePasswordToken;
import com.ejweb.modules.sys.service.OfficeService;
import com.ejweb.modules.sys.service.SystemService;
import com.ejweb.modules.sys.utils.UserUtils;
import com.google.common.collect.Maps;
import com.kingdee.eas.cp.eip.sso.ltpa.LtpaToken;
import com.kingdee.eas.cp.eip.sso.ltpa.LtpaTokenManager;
import org.apache.commons.codec.digest.DigestUtils;
import org.apache.shiro.authc.AuthenticationException;
import org.apache.shiro.authz.UnauthorizedException;
import org.apache.shiro.authz.annotation.RequiresPermissions;
import org.apache.shiro.web.util.WebUtils;
import org.springframework.beans.factory.annotation.Autowired;
import org.springframework.core.io.DefaultResourceLoader;
import org.springframework.core.io.Resource;
import org.springframework.stereotype.Controller;
import org.springframework.ui.Model;
import org.springframework.web.bind.annotation.PathVariable;
import org.springframework.web.bind.annotation.RequestMapping;
import org.springframework.web.bind.annotation.RequestMethod;

import javax.servlet.http.HttpServletRequest;
import javax.servlet.http.HttpServletResponse;
import java.io.IOException;
import java.net.URLDecoder;
import java.util.ArrayList;
import java.util.Date;
import java.util.List;
import java.util.Map;

import static org.activiti.engine.impl.util.json.XMLTokener.entity;

/**
 * 登录Controller
 * @author ThinkGem
 * @version 2013-5-31
 */
@Controller
public class LoginController extends BaseController{

    @Autowired
    private SessionDAO sessionDAO;
    @Autowired
    private SystemService systemService;
    @Autowired
    private OfficeService officeService;
    /**
     * 管理登录
     */
    @RequestMapping(value = "${adminPath}/login", method = RequestMethod.GET)
    public String login(HttpServletRequest request, HttpServletResponse response, Model model) throws IOException {
        Principal principal = UserUtils.getPrincipal();
        String token=request.getParameter("token");

        // 单点登录
        if(StringUtils.isNoneBlank(token)){
            logger.info(".....................token:" + token);
            DefaultResourceLoader resourceLoader = new DefaultResourceLoader();
            Resource resource = resourceLoader.getResource("LtpaToken.properties");
          //  String filePath =getClass().getResource("/LtpaToken.properties").getPath();
            String filePath =resource.getURL().getPath();
            LtpaTokenManager.loadConfig(URLDecoder.decode(URLDecoder.decode(filePath)));
            logger.debug(".................原始token：\t\t" + token);
            token = URLDecoder.decode(token);
            logger.debug(".................解码一次token：\t\t" + token);
//            token = URLDecoder.decode(token);
//            logger.debug(".................解码两次token：\t\t" + token);
            if (LtpaTokenManager.isValid(token)) {//验证Token是否合法有效
                logger.info("..................token合法");
                LtpaToken ltpaToken = new LtpaToken(token);
                String  userName = ltpaToken.getUsername();

                UsernamePasswordToken upt = new UsernamePasswordToken();

                upt.setUsername(userName);
                upt.setPassword(token.toCharArray());
                upt.setRememberMe(false);
                String captcha=  DigestUtils.md5Hex(userName+token);
                logger.info(".............captcha:" + captcha);
                upt.setCaptcha(captcha);
//                LDAPUtil util = new LDAPUtil();
//                util.connectLdap();//链接IDM
                try {
//                    // 获取用户组织
//                    String orgDisplayName = util.GetUserInfo(userName, "ORGDISPLAYNAME");
//                    if(StringUtils.isNoneBlank(orgDisplayName) && !orgDisplayName.contains(GConstants.ORG_DISPLAY_NAME)) {
//                        logger.info("..................\"非\" + GConstants.ORG_DISPLAY_NAME + \"区域人员，不能登录系统！\"");
//                        throw new NullPointerException("非" + GConstants.ORG_DISPLAY_NAME + "区域人员，不能登录系统！");
//                    }
                    User user= systemService.getUserByLoginName(userName);
                    logger.info(".....................user:" + user);
//                    }
                }catch (Exception e){
                    throw new AuthenticationException(e.getMessage());
                }finally {
//                    util.closeLdap();
                }
                UserUtils.getSubject().login(upt);
              return   "redirect:" + adminPath;
            }
        }
//        // 默认页签模式
        String tabmode = CookieUtils.getCookie(request, "tabmode");
        if (tabmode == null){
            
            CookieUtils.setCookie(response, "tabmode", GConstants.getValue("tabMode", "0"));
        }
        
        if (logger.isDebugEnabled()){
            
            logger.debug("login, active session size: {}", sessionDAO.getActiveSessions(false).size());
        }
        
        // 如果已登录，再次访问主页，则退出原账号。
        if (GConstants.TRUE.equals(GConstants.getValue("notAllowRefreshIndex"))){
            CookieUtils.setCookie(response, "LOGINED", "false");
        }
        
        // 如果已经登录，则跳转到管理首页
        if(principal != null && !principal.isMobileLogin()){
            return "redirect:" + adminPath;
        }
//        String view;
//        view = "/WEB-INF/views/modules/sys/sysLogin.jsp";
//        view = "classpath:";
//        view += "jar:file:/D:/GitHub/jeesite/src/main/webapp/WEB-INF/lib/jeesite.jar!";
//        view += "/"+getClass().getName().replaceAll("\\.", "/").replace(getClass().getSimpleName(), "")+"view/sysLogin";
//        view += ".jsp";
        return "modules/sys/sysLogin";
    }

    /**
     * 登录失败，真正登录的POST请求由Filter完成
     */
    @RequestMapping(value = "${adminPath}/login", method = RequestMethod.POST)
    public String loginFail(HttpServletRequest request, HttpServletResponse response, Model model) {
        Principal principal = UserUtils.getPrincipal();
        
        // 如果已经登录，则跳转到管理首页
        if(principal != null){
            return "redirect:" + adminPath;
        }

        String username = WebUtils.getCleanParam(request, FormAuthenticationFilter.DEFAULT_USERNAME_PARAM);
        boolean rememberMe = WebUtils.isTrue(request, FormAuthenticationFilter.DEFAULT_REMEMBER_ME_PARAM);
        boolean mobile = WebUtils.isTrue(request, FormAuthenticationFilter.DEFAULT_MOBILE_PARAM);
        String exception = (String)request.getAttribute(FormAuthenticationFilter.DEFAULT_ERROR_KEY_ATTRIBUTE_NAME);
        String message = (String)request.getAttribute(FormAuthenticationFilter.DEFAULT_MESSAGE_PARAM);
        
        if (StringUtils.isBlank(message) || StringUtils.equals(message, "null")){
            message = "用户或密码错误, 请重试.";
        }

        model.addAttribute(FormAuthenticationFilter.DEFAULT_USERNAME_PARAM, username);
        model.addAttribute(FormAuthenticationFilter.DEFAULT_REMEMBER_ME_PARAM, rememberMe);
        model.addAttribute(FormAuthenticationFilter.DEFAULT_MOBILE_PARAM, mobile);
        model.addAttribute(FormAuthenticationFilter.DEFAULT_ERROR_KEY_ATTRIBUTE_NAME, exception);
        model.addAttribute(FormAuthenticationFilter.DEFAULT_MESSAGE_PARAM, message);
        
        if (logger.isDebugEnabled()){
            logger.debug("login fail, active session size: {}, message: {}, exception: {}", 
                    sessionDAO.getActiveSessions(false).size(), message, exception);
        }
        
        // 非授权异常，登录失败，验证码加1。
        if (!UnauthorizedException.class.getName().equals(exception)){
            model.addAttribute("isValidateCodeLogin", isValidateCodeLogin(username, true, false));
        }
        
        // 验证失败清空验证码
        request.getSession().setAttribute(ValidateCodeServlet.VALIDATE_CODE, IdGen.uuid());
        
        // 如果是手机登录，则返回JSON字符串
        if (mobile){
            return renderString(response, model);
        }
        
        return "modules/sys/sysLogin";
    }

    /**
     * 登录成功，进入管理首页
     */
    @RequiresPermissions("user")
    @RequestMapping(value = "${adminPath}")
    public String index(HttpServletRequest request, HttpServletResponse response) {
        Principal principal = UserUtils.getPrincipal();

        // 登录成功后，验证码计算器清零
        isValidateCodeLogin(principal.getLoginName(), false, true);
        
        if (logger.isDebugEnabled()){
            logger.debug("show index, active session size: {}", sessionDAO.getActiveSessions(false).size());
        }
        
        // 如果已登录，再次访问主页，则退出原账号。
        if (GConstants.TRUE.equals(GConstants.getValue("notAllowRefreshIndex"))){
            String logined = CookieUtils.getCookie(request, "LOGINED");
            if (StringUtils.isBlank(logined) || "false".equals(logined)){
                CookieUtils.setCookie(response, "LOGINED", "true");
            }else if (StringUtils.equals(logined, "true")){
                UserUtils.getSubject().logout();
                return "redirect:" + adminPath + "/login";
            }
        }
        
        // 如果是手机登录，则返回JSON字符串
        if (principal.isMobileLogin()){
            if (request.getParameter("login") != null){
                return renderString(response, principal);
            }
            if (request.getParameter("index") != null){
                return "modules/sys/sysIndex";
            }
            return "redirect:" + adminPath + "/login";
        }
        
//        // 登录成功后，获取上次登录的当前站点ID
//        UserUtils.putCache("siteId", StringUtils.toLong(CookieUtils.getCookie(request, "siteId")));

//        System.out.println("==========================a");
//        try {
//            byte[] bytes = com.ejweb.core.utils.FileUtils.readFileToByteArray(
//                    com.ejweb.core.utils.FileUtils.getFile("c:\\sxt.dmp"));
//            UserUtils.getSession().setAttribute("kkk", bytes);
//            UserUtils.getSession().setAttribute("kkk2", bytes);
//        } catch (Exception e) {
//            e.printStackTrace();
//        }
////        for (int i=0; i<1000000; i++){
////            //UserUtils.getSession().setAttribute("a", "a");
////            request.getSession().setAttribute("aaa", "aa");
////        }
//        System.out.println("==========================b");
        return "modules/sys/sysIndex";
    }
    
    /**
     * 获取主题方案
     */
    @RequestMapping(value = "/theme/{theme}")
    public String getThemeInCookie(@PathVariable String theme, HttpServletRequest request, HttpServletResponse response){
        if (StringUtils.isNotBlank(theme)){
            CookieUtils.setCookie(response, "theme", theme);
        }else{
            theme = CookieUtils.getCookie(request, "theme");
        }
        return "redirect:"+request.getParameter("url");
    }
    
    /**
     * 是否是验证码登录
     * @param useruame 用户名
     * @param isFail 计数加1
     * @param clean 计数清零
     * @return
     */
    @SuppressWarnings("unchecked")
    public static boolean isValidateCodeLogin(String useruame, boolean isFail, boolean clean){
        Map<String, Integer> loginFailMap = (Map<String, Integer>)CacheUtils.get("loginFailMap");
        if (loginFailMap==null){
            loginFailMap = Maps.newHashMap();
            CacheUtils.put("loginFailMap", loginFailMap);
        }
        Integer loginFailNum = loginFailMap.get(useruame);
        if (loginFailNum==null){
            loginFailNum = 0;
        }
        if (isFail){
            loginFailNum++;
            loginFailMap.put(useruame, loginFailNum);
        }
        if (clean){
            loginFailMap.remove(useruame);
        }
        return loginFailNum >= 3;
    }
}
