/*
 *      Copyright (c) 2018-2028, Chill Zhuang All rights reserved.
 *
 *  Redistribution and use in source and binary forms, with or without
 *  modification, are permitted provided that the following conditions are met:
 *
 *  Redistributions of source code must retain the above copyright notice,
 *  this list of conditions and the following disclaimer.
 *  Redistributions in binary form must reproduce the above copyright
 *  notice, this list of conditions and the following disclaimer in the
 *  documentation and/or other materials provided with the distribution.
 *  Neither the name of the dreamlu.net developer nor the names of its
 *  contributors may be used to endorse or promote products derived from
 *  this software without specific prior written permission.
 *  Author: Chill 庄骞 (smallchill@163.com)
 */
package org.springblade.modules.system.controller;


import com.alibaba.fastjson.JSON;
import com.alibaba.fastjson.JSONObject;
import com.aliyun.oss.ServiceException;
import com.baomidou.mybatisplus.core.conditions.query.QueryWrapper;
import com.baomidou.mybatisplus.core.metadata.IPage;
import com.github.xiaoymin.knife4j.annotations.ApiOperationSupport;
import com.pinecone.utils.EncryptionUtils;
import io.swagger.annotations.ApiImplicitParam;
import io.swagger.annotations.ApiImplicitParams;
import io.swagger.annotations.ApiOperation;
import io.swagger.annotations.ApiParam;
import lombok.AllArgsConstructor;
import org.springblade.common.config.FtpConfig;
import org.springblade.core.cache.utils.CacheUtil;
import org.springblade.core.excel.util.ExcelUtil;
import org.springblade.core.http.util.HttpUtil;
import org.springblade.core.launch.constant.AppConstant;
import org.springblade.core.mp.support.Condition;
import org.springblade.core.mp.support.Query;
import org.springblade.core.secure.BladeUser;
import org.springblade.core.secure.annotation.PreAuth;
import org.springblade.core.secure.utils.AuthUtil;
import org.springblade.core.tenant.annotation.NonDS;
import org.springblade.core.tool.api.R;
import org.springblade.core.tool.constant.BladeConstant;
import org.springblade.core.tool.constant.RoleConstant;
import org.springblade.core.tool.utils.*;
import org.springblade.modules.FTP.FtpUtil;
import org.springblade.modules.system.dto.UserDTO;
import org.springblade.modules.system.entity.Role;
import org.springblade.modules.system.entity.User;
import org.springblade.modules.system.excel.UserExcel;
import org.springblade.modules.system.excel.UserExcels;
import org.springblade.modules.system.excel.UserImporter;
import org.springblade.modules.system.excel.UserImporters;
import org.springblade.modules.system.service.IRoleService;
import org.springblade.modules.system.service.IUserService;
import org.springblade.modules.system.vo.UserVO;
import org.springblade.modules.system.vo.UsersVo;
import org.springblade.modules.system.wrapper.UserWrapper;
import org.springframework.transaction.annotation.Transactional;
import org.springframework.web.bind.annotation.*;
import org.springframework.web.multipart.MultipartFile;
import springfox.documentation.annotations.ApiIgnore;
import sun.misc.BASE64Encoder;

import javax.servlet.http.HttpServletResponse;
import javax.validation.Valid;
import java.io.IOException;
import java.text.SimpleDateFormat;
import java.util.*;

import static org.springblade.core.cache.constant.CacheConstant.USER_CACHE;

/**
 * 控制器
 *
 * @author Chill
 */
@NonDS
@ApiIgnore
@RestController
@RequestMapping(AppConstant.APPLICATION_USER_NAME)
@AllArgsConstructor
public class UserController {

	private final IUserService userService;

	private final IRoleService roleService;

	static BASE64Encoder encoder = new BASE64Encoder();

	private final String sm4Key = "cd888d57e21a4ffc9be7ed601ab3ccd6";

	private final String clientCode = "369947";

	private final String url = "http://218.87.21.104:59944/uias/verifyFace";

	@PostMapping("/faceCompare")
	public R upload(@RequestParam("name")String name,@RequestParam("idCardNo")String idCardNo,@RequestParam("file") MultipartFile file){
		Map<String, Object> resultData = new HashMap<>();
		try {
			String encode = encoder.encode(file.getBytes());
			JSONObject source = new JSONObject();
			source.put("nameText",name);
			source.put("numberText",idCardNo);
			source.put("idPhoto",encode);
			// 加密数据,请先引入外部jar到工程中
			String encryptString = EncryptionUtils.encryptSM4(sm4Key,source.toString());
			Map<String, Object> map = new HashMap<>(2);
			map.put("clientCode",clientCode);
			map.put("encryptString",encryptString);
			String result= HttpUtil.postJson(url, new JSONObject(map).toJSONString());
			resultData = (Map<String, Object>)JSONObject.parse(result);
		} catch (IOException e) {
			e.printStackTrace();
		}
		return R.data(resultData);
	}

	/**
	 * 查询单条
	 */
	@ApiOperationSupport(order = 1)
	@ApiOperation(value = "查看详情", notes = "传入id")
	@GetMapping("/detail")
	//@PreAuth(RoleConstant.HAS_ROLE_ADMIN)
	public R<UserVO> detail(User user) {
		User detail = userService.getOne(Condition.getQueryWrapper(user));
		return R.data(UserWrapper.build().entityVO(detail));
	}

	/**
	 * 查询单条
	 */
	@ApiOperationSupport(order = 2)
	@ApiOperation(value = "查看详情", notes = "传入id")
	@GetMapping("/info")
	public R<UserVO> info(BladeUser user) {
		User detail = userService.getById(user.getUserId());
		return R.data(UserWrapper.build().entityVO(detail));
	}

	/**
	 * 用户列表
	 */
	@GetMapping("/list")
	@ApiImplicitParams({
		@ApiImplicitParam(name = "account", value = "账号名", paramType = "query", dataType = "string"),
		@ApiImplicitParam(name = "realName", value = "姓名", paramType = "query", dataType = "string")
	})
	@ApiOperationSupport(order = 3)
	@ApiOperation(value = "列表", notes = "传入account和realName")
	//@PreAuth(RoleConstant.HAS_ROLE_ADMIN)
	public R<IPage<UserVO>> list(@ApiIgnore @RequestParam Map<String, Object> user, Query query, BladeUser bladeUser) {
		QueryWrapper<User> queryWrapper = Condition.getQueryWrapper(user, User.class);
		IPage<User> pages = userService.page(Condition.getPage(query), (!bladeUser.getTenantId().equals(BladeConstant.ADMIN_TENANT_ID)) ? queryWrapper.lambda().eq(User::getTenantId, bladeUser.getTenantId()) : queryWrapper);
		return R.data(UserWrapper.build().pageVO(pages));
	}

	/**
	 * 自定义用户列表
	 */
	@GetMapping("/page")
	@ApiImplicitParams({
		@ApiImplicitParam(name = "account", value = "账号名", paramType = "query", dataType = "string"),
		@ApiImplicitParam(name = "realName", value = "姓名", paramType = "query", dataType = "string")
	})
	@ApiOperationSupport(order = 3)
	@ApiOperation(value = "列表", notes = "传入account和realName")
	//@PreAuth(RoleConstant.HAS_ROLE_ADMIN)
	public R<IPage<UserVO>> page(@ApiIgnore User user, Query query, Long deptId, BladeUser bladeUser) {
		IPage<User> pages = userService.selectUserPage(Condition.getPage(query), user, deptId, (bladeUser.getTenantId().equals(BladeConstant.ADMIN_TENANT_ID) ? StringPool.EMPTY : bladeUser.getTenantId()));
		return R.data(UserWrapper.build().pageVO(pages));
	}
	/**
	 * 自定义用户列表(带坐标)
	 */
	@GetMapping("/pages")
	@ApiImplicitParams({
		@ApiImplicitParam(name = "account", value = "账号名", paramType = "query", dataType = "string"),
		@ApiImplicitParam(name = "realName", value = "姓名", paramType = "query", dataType = "string")
	})
	@ApiOperationSupport(order = 3)
	@ApiOperation(value = "列表", notes = "传入account和realName")
	//@PreAuth(RoleConstant.HAS_ROLE_ADMIN)
	public R<IPage<UserVO>> pages(@ApiIgnore User user, Query query, String deptId, BladeUser bladeUser) {
		IPage<User> pages = userService.selectUserPages(Condition.getPage(query), user, deptId);
		return R.data(UserWrapper.build().pageVO(pages));
	}

	/**
	 * 自定义用户列表(带坐标)
	 */
	@GetMapping("/pagetxl")
	@ApiImplicitParams({
		@ApiImplicitParam(name = "account", value = "账号名", paramType = "query", dataType = "string"),
		@ApiImplicitParam(name = "realName", value = "姓名", paramType = "query", dataType = "string")
	})
	@ApiOperationSupport(order = 3)
	@ApiOperation(value = "列表", notes = "传入account和realName")
	//@PreAuth(RoleConstant.HAS_ROLE_ADMIN)
	public R<IPage<UserVO>> pagetxl(@ApiIgnore User user, Query query, String deptId, BladeUser bladeUser) {
		IPage<User> pages = userService.selectUserPagetxl(Condition.getPage(query), user, deptId);
		return R.data(UserWrapper.build().pageVO(pages));
	}

	/**
	 * 新增或修改
	 */
	@PostMapping("/submit")
	@ApiOperationSupport(order = 4)
	@ApiOperation(value = "新增或修改", notes = "传入User")
	//@PreAuth(RoleConstant.HAS_ROLE_ADMIN)
	public R submit(@Valid @RequestBody User user) {
		CacheUtil.clear(USER_CACHE);

		if (user.getExamination_type() == null || user.getExamination_type().equals("")){
			user.setExamination_type("0");
		}

		if (user.getExamination_mx() == null || user.getExamination_mx().equals("")){
			user.setExamination_mx("正常");
		}

		return R.status(userService.submit(user));
	}

	/**
	 * 修改
	 */
	@PostMapping("/update")
	@ApiOperationSupport(order = 5)
	@ApiOperation(value = "修改", notes = "传入User")
	public R update(@Valid @RequestBody User user) {
		CacheUtil.clear(USER_CACHE);

		if (user.getExamination_type() == null || user.getExamination_type().equals("")){
			user.setExamination_type("0");
		}

		if (user.getExamination_mx() == null || user.getExamination_mx().equals("")){
			user.setExamination_mx("正常");
		}

		return R.status(userService.updateUser(user));
	}

	/**
	 * 删除
	 */
	@PostMapping("/remove")
	@ApiOperationSupport(order = 6)
	@ApiOperation(value = "删除", notes = "传入id集合")
	//@PreAuth(RoleConstant.HAS_ROLE_ADMIN)
	public R remove(@RequestParam String ids) {
		CacheUtil.clear(USER_CACHE);
		return R.status(userService.removeUser(ids));
	}

	/**
	 * 设置菜单权限
	 */
	@PostMapping("/grant")
	@ApiOperationSupport(order = 7)
	@ApiOperation(value = "权限设置", notes = "传入roleId集合以及menuId集合")
	//@PreAuth(RoleConstant.HAS_ROLE_ADMIN)
	public R grant(@ApiParam(value = "userId集合", required = true) @RequestParam String userIds,
				   @ApiParam(value = "roleId集合", required = true) @RequestParam String roleIds) {
		boolean temp = userService.grant(userIds, roleIds);
		return R.status(temp);
	}

	/**
	 * 重置密码
	 */
	@PostMapping("/reset-password")
	@ApiOperationSupport(order = 8)
	@ApiOperation(value = "初始化密码", notes = "传入userId集合")
	//@PreAuth(RoleConstant.HAS_ROLE_ADMIN)
	public R resetPassword(@ApiParam(value = "userId集合", required = true) @RequestParam String userIds) {
		boolean temp = userService.resetPassword(userIds);
		return R.status(temp);
	}

	/**
	 * 修改密码
	 */
	@PostMapping("/update-password")
	@ApiOperationSupport(order = 9)
	@ApiOperation(value = "修改密码", notes = "传入密码")
	public R updatePassword(BladeUser user, @ApiParam(value = "旧密码", required = true) @RequestParam String oldPassword,
							@ApiParam(value = "新密码", required = true) @RequestParam String newPassword,
							@ApiParam(value = "新密码", required = true) @RequestParam String newPassword1) {
		boolean temp = userService.updatePassword(user.getUserId(), oldPassword, newPassword, newPassword1);
		return R.status(temp);
	}

	/**
	 * 修改基本信息
	 */
	@PostMapping("/update-info")
	@ApiOperationSupport(order = 10)
	@ApiOperation(value = "修改基本信息", notes = "传入User")
	public R updateInfo(@Valid @RequestBody User user) {
		CacheUtil.clear(USER_CACHE);
//		if (null!= user.getAvatar() && user.getAvatar()!="") {
//			String avatar = user.getAvatar();
//			String substring = avatar.substring(25, avatar.length());
//			String url = "https://web.byisf.com/minio" + substring;
//			user.setAvatar(url);
//		}
		return R.status(userService.updateUserInfo(user));
	}

	/**
	 * 修改用户基本信息,不修改用户密码
	 * @param user 用户信息
	 * @autor zhongrj
	 * @time 2021-06-16
	 */
	@PostMapping("/updateUserInfo")
	public R updateUserInfo(@Valid @RequestBody User user) {
		CacheUtil.clear(USER_CACHE);
		return R.status(userService.updateUserInfos(user));
	}

	/**
	 * 用户列表
	 */
	@GetMapping("/user-list")
	@ApiOperationSupport(order = 11)
	@ApiOperation(value = "用户列表", notes = "传入user")
	public R<List<User>> userList(User user, BladeUser bladeUser) {
		QueryWrapper<User> queryWrapper = Condition.getQueryWrapper(user);
		List<User> list = userService.list((!AuthUtil.isAdministrator()) ? queryWrapper.lambda().eq(User::getTenantId, bladeUser.getTenantId()) : queryWrapper);
		return R.data(list);
	}

	/**
	 * 导入用户
	 */
	@PostMapping("import-user")
	@ApiOperationSupport(order = 12)
	@ApiOperation(value = "导入用户", notes = "传入excel")
	public R importUser(MultipartFile file, Integer isCovered) {
		UserImporter userImporter = new UserImporter(userService, isCovered == 1);
		ExcelUtil.save(file, userImporter, UserExcel.class);
		return R.success("操作成功");
	}

	/**
	 * 导入用户(保安员)
	 */
	@PostMapping("import-users")
	@ApiOperation(value = "导入用户", notes = "传入excel")
	public R importUsers(MultipartFile file, Integer isCovered) {
		UserImporters userImporter = new UserImporters(userService, isCovered == 1);
		ExcelUtil.save(file, userImporter, UserExcels.class);
		return R.success("操作成功");
	}

	/**
	 * 导出用户
	 */
	@GetMapping("export-user")
	@ApiOperationSupport(order = 13)
	@ApiOperation(value = "导出用户", notes = "传入user")
	public void exportUser(@ApiIgnore @RequestParam Map<String, Object> user, BladeUser bladeUser, HttpServletResponse response) {
		QueryWrapper<User> queryWrapper = Condition.getQueryWrapper(user, User.class);
		if (!AuthUtil.isAdministrator()) {
			queryWrapper.lambda().eq(User::getTenantId, bladeUser.getTenantId());
		}
		queryWrapper.lambda().eq(User::getIsDeleted, BladeConstant.DB_NOT_DELETED);
		List<UserExcel> list = userService.exportUser(queryWrapper);
		ExcelUtil.export(response, "用户数据" + DateUtil.time(), "用户数据表", list, UserExcel.class);
	}

	/**
	 * 导出模板
	 */
	@GetMapping("export-template")
	@ApiOperationSupport(order = 14)
	@ApiOperation(value = "导出模板")
	public void exportUser(HttpServletResponse response) {
		List<UserExcel> list = new ArrayList<>();
		ExcelUtil.export(response, "用户数据模板", "用户数据表", list, UserExcel.class);
	}


	/**
	 * 第三方注册用户
	 */
	@PostMapping("/register-guest")
	@ApiOperationSupport(order = 15)
	@ApiOperation(value = "第三方注册用户", notes = "传入user")
	public R registerGuest(User user, Long oauthId) {
		return R.status(userService.registerGuest(user, oauthId));
	}

	/**
	 * 配置用户平台信息
	 */
	@PostMapping("/update-platform")
	@ApiOperationSupport(order = 16)
	@ApiOperation(value = "配置用户平台信息", notes = "传入user")
	public R updatePlatform(Long userId, Integer userType, String userExt) {
		return R.status(userService.updatePlatform(userId, userType, userExt));
	}

	/**
	 * 查看平台详情
	 */
	@ApiOperationSupport(order = 17)
	@ApiOperation(value = "查看平台详情", notes = "传入id")
	@GetMapping("/platform-detail")
	//@PreAuth(RoleConstant.HAS_ROLE_ADMIN)
	public R<UserVO> platformDetail(User user) {
		return R.data(userService.platformDetail(user));
	}


	/**
	 * 用户列表查询
	 */
	@ApiImplicitParams({
		@ApiImplicitParam(name = "name", value = "人员姓名", paramType = "query", dataType = "string"),
		@ApiImplicitParam(name = "deptName", value = "部门名称", paramType = "query", dataType = "string"),
		@ApiImplicitParam(name = "postName", value = "职位名称", paramType = "query", dataType = "string"),
		@ApiImplicitParam(name = "current", value = "当前页数", paramType = "query", dataType = "int"),
		@ApiImplicitParam(name = "size", value = "每页数量", paramType = "query", dataType = "int")
	})
	@ApiOperationSupport(order = 18)
	@ApiOperation(value = "用户列表查询", notes = "用户列表查询")
	@GetMapping("/user-search")
	public R<IPage<UserVO>> userSearch(@ApiIgnore UserVO user, @ApiIgnore Query query) {
		return R.data(userService.selectUserSearch(user, query));
	}
	/**
	 * 查询处警人员列表
	 * @param user  用户对象
	 * @param query  分页
	 * @param response 返回
	 */
	@GetMapping("/security-list")
	public R<IPage<UsersVo>> page(@ApiIgnore User user, Query query, HttpServletResponse response) {
		response.setHeader("Access-Control-Allow-Origin", "*");
		response.setHeader("Access-Control-Allow-Methods", "POST, GET, OPTIONS, DELETE");
		response.setHeader("Access-Control-Allow-Credentials", "true");
		return R.data(userService.selectSecurityUserList(Condition.getPage(query),user));
	}

	/**
	 * 查询单条
	 */
	@PostMapping("/details")
	public R<UserVO> details(User user) {
		User detail = userService.getOne(Condition.getQueryWrapper(user));
		return R.data(UserWrapper.build().entityVO(detail));
	}

	@GetMapping("/selectUser")
	public R selectUser() {
		return R.data(userService.selectUser());
	}

	/**
	 * 统计用户注册数据
	 * @return
	 */
	@GetMapping("/getUserRegisterStatisticsData")
	public R getUserRegisterStatisticsData() {
		return R.data(userService.getUserRegisterStatisticsData());
	}

	/**
	 * 统计六大队伍
	 */
	@GetMapping("/getUserTypeCount")
	public R getUserTypeCount() {
		return R.data(userService.getUserTypeCount());
	}


	/**
	 * 按行政区统计六大队伍
	 */
	@GetMapping("/getUserDistrictTypeCount")
	public R getUserDistrictTypeCount() {
		return R.data(userService.getUserDistrictTypeCount());
	}

	/**
	 * 保安员新增
	 */
	@PostMapping("/securitySave")
	@Transactional(rollbackFor = Exception.class)
	public R securitySave(@Valid @RequestBody Map<String, Object> userMap) {
		//获取user
		User user = JSON.parseObject(JSON.toJSONString(userMap.get("user")), User.class);

		Integer userCount = userService.selectCount(user.getAccount());
		if (userCount > 0 && Func.isEmpty(user.getId())) {
			throw new ServiceException(StringUtil.format("当前用户 [{}] 已存在!", user.getAccount()));
		}

		//密码加密
		if (Func.isNotEmpty(user.getPassword())) {
			user.setPassword(DigestUtil.encrypt(user.getPassword()));
		}
		user.setTenantId("000000");
		//用户新增
		boolean status = userService.save(user);

		//头像
//		if (null!=user.getAvatar() && !user.getAvatar().equals("")) {
//			user.setAvatar(FtpConfig.ip + user.getAvatar().substring(26));
//		}
//
//		String s = "insert into blade_user(id,tenant_id,account,password,name,real_name,avatar,email,phone,sex,role_id,dept_id,cardid," +
//			"jurisdiction,examination_type,status,is_deleted) " +
//			"values(" + "'" + user.getId() + "'" + "," + "'" + user.getTenantId() + "'" + "," + "'" + user.getAccount() + "'" + "," +
//			"'" + user.getPassword() + "'" + "," + "'" + user.getName() + "'" + "," + "'" + user.getRealName() + "'" + "," + "'" + user.getAvatar() + "'" + "," +
//			"'" + user.getEmail() + "'" + "," + "'" + user.getPhone() + "'" + "," + "'" + user.getSex() + "'" + "," + "'" + user.getRoleId() + "'" +
//			"," + "'" + user.getDeptId() + "'" +
//			"," + "'" + user.getCardid() + "'" +
//			"," + "'" + user.getJurisdiction() + "'" +
//			"," + "'" + user.getExamination_type() + "'" +
//			"," + "'" + user.getStatus() + "'" +
//			"," + "'" + user.getIsDeleted() + "'" + ")";
//		System.out.println(s);
//		FtpUtil.sqlFileUpload(s);
		return R.status(status);
	}


	/**
	 * 保安员新增(数据同步调用)
	 */
	@PostMapping("/securitySaves")
	@Transactional(rollbackFor = Exception.class)
	public R securitySaves(@RequestBody User user) {
		Integer userCount = userService.selectCount(user.getAccount());
		//判断用户是否存在
		if (userCount > 0) {
			throw new ServiceException(StringUtil.format("当前用户 [{}] 已存在!", user.getAccount()));
		}
		user.setRoleId("1372092102682521602");
		user.setDeptId("1424615972718895106");
		user.setStype("1");
		user.setId(null);
		//用户新增
		boolean status = userService.save(user);
//		System.out.println("user = " + user);
		//返回
		return R.status(status);
	}

	/**
	 * 保安员新增(数据同步调用)
	 */
	@PostMapping("/updateBySecurtiy")
	@Transactional(rollbackFor = Exception.class)
	public R updateBySecurtiy(@RequestBody User user) {
		User user1 = new User();
		user1.setIsDeleted(0);
		user1.setStatus(1);
		user1.setCardid(user.getCardid());
		User one = userService.getOne(Condition.getQueryWrapper(user1));
		boolean status = false;
		if (null!=one){
			one.setRealName(user.getRealName());
			one.setAvatar(user.getAvatar());
			one.setPhone(user.getPhone());
			one.setExamination_type(user.getExamination_type());
			one.setStatus(user.getStatus());
			one.setUpdateTime(new Date());
			//修改
			status = userService.updateById(one);
		}
		//返回
		return R.status(status);
	}

	/**
	 * 保安员信息修改(账号,身份证,密码 修改)
	 */
	@PostMapping("/updateUserByAccount")
	@Transactional(rollbackFor = Exception.class)
	public R updateUserByAccount(@RequestBody UserDTO user) {
		User user1 = new User();
		user1.setIsDeleted(0);
		user1.setStatus(1);
		user1.setCardid(user.getOldCardid());
		User one = userService.getOne(Condition.getQueryWrapper(user1));
		boolean status = false;
		if (null!=one){
			//修改
			one.setAccount(user.getCardid());
			one.setCardid(user.getCardid());
			one.setPassword(user.getPassword());
			one.setAvatar(user.getAvatar());
			one.setPhone(user.getPhone());
			one.setRealName(user.getRealName());
			one.setUpdateTime(new Date());
			//用户修改
		    status = userService.updateById(one);
		}
		//返回
		return R.status(status);
	}

	/**
	 * 同步删除
	 */
	@PostMapping("/removeSecurity")
	@Transactional(rollbackFor = Exception.class)
	public R removeSecurity(@RequestBody User user) {
		User user1 = new User();
		user1.setIsDeleted(0);
		user1.setStatus(1);
		user1.setCardid(user.getCardid());
		User one = userService.getOne(Condition.getQueryWrapper(user1));
		boolean status = false;
		if (null!=one){
			//修改
			one.setIsDeleted(1);
			//用户修改
			status = userService.removeById(one.getId());
		}
		//返回
		return R.status(status);
	}

}