using FakeXiecheng.API.Dtos;
using FakeXiecheng.API.Models;
using FakeXiecheng.API.Services;
using Microsoft.AspNetCore.Authorization;
using Microsoft.AspNetCore.Identity;
using Microsoft.AspNetCore.Mvc;
using Microsoft.Extensions.Configuration;
using Microsoft.IdentityModel.Tokens;
using System;
using System.Collections.Generic;
using System.IdentityModel.Tokens.Jwt;
using System.Linq;
using System.Security.Claims;
using System.Text;
using System.Threading.Tasks;

namespace FakeXiecheng.API.Controllers
{
    [ApiController]
    [Route("auth")]  //新建空的class ，命名為AuthenticateController ，繼承ControllerBase这溅， 配置一級路由
    public class AuthenticateController : ControllerBase
    {
        private readonly IConfiguration _configuration; //加載配置文件
        private readonly UserManager<ApplicationUser> _userManager;
        private readonly SignInManager<ApplicationUser> _signInManager;
        private readonly ITouristRouteRepository _touristRouteRepository;

        public AuthenticateController(
            IConfiguration configuration,
            UserManager<ApplicationUser> userManager,
            SignInManager<ApplicationUser> signInManager,
            ITouristRouteRepository touristRouteRepository
        )
        {//通過構(gòu)造方法加載數(shù)據(jù)
            _configuration = configuration;
            _userManager = userManager;
            _signInManager = signInManager;
            _touristRouteRepository = touristRouteRepository;
        }

        [AllowAnonymous]
        [HttpPost("login")]  //設(shè)置post方法的登錄路由
        public async Task<IActionResult> login([FromBody] LoginDto loginDto)
        {//使用異步的方法登錄纬朝，內(nèi)部請求必須要用await 
            // 1 驗(yàn)證用戶名密碼
            var loginResult = await _signInManager.PasswordSignInAsync( //使用jwt自帶的方法驗(yàn)證賬號密碼傲茄，不需要寫任何業(yè)務(wù)
                loginDto.Email,
                loginDto.Password,
                false,
                false
            );
            if(!loginResult.Succeeded) //如果登錄狀態(tài)不成功困乒，返回錯(cuò)誤請求
            {
                return BadRequest();
            }

            var user = await _userManager.FindByNameAsync(loginDto.Email);
            //jwt 用戶管理器獲取用戶
            // 2 創(chuàng)建jwt
            // header
            var signingAlgorithm = SecurityAlgorithms.HmacSha256;//驗(yàn)簽算法
            // payload
            var claims = new List<Claim>
            {
                // sub
                new Claim(JwtRegisteredClaimNames.Sub, user.Id),
                //new Claim(ClaimTypes.Role, "Admin")
            };
            var roleNames = await _userManager.GetRolesAsync(user);//使用jwt用戶管理器獲取用戶權(quán)限列表
            foreach(var roleName in roleNames)
            {
                var roleClaim = new Claim(ClaimTypes.Role, roleName);
                claims.Add(roleClaim); //遍歷權(quán)限依次添加到內(nèi)容主體
            }
            // signiture
            var secretByte = Encoding.UTF8.GetBytes(_configuration["Authentication:SecretKey"]);
          //讀取配置文件中的SecretKey迷捧，編碼
            var signingKey = new SymmetricSecurityKey(secretByte);
          //進(jìn)行對稱加密算法加密
            var signingCredentials = new SigningCredentials(signingKey, signingAlgorithm);
          //生成簽名證書（1.加密key 2.指定簽名算法）
            var token = new JwtSecurityToken(
                issuer: _configuration["Authentication:Issuer"],
                audience: _configuration["Authentication:Audience"],
                claims,
                notBefore: DateTime.UtcNow,
                expires: DateTime.UtcNow.AddDays(1),
                signingCredentials   //激光防偽標(biāo)志
            ) ;

            var tokenStr = new JwtSecurityTokenHandler().WriteToken(token); //將token對象轉(zhuǎn)成亂碼

            // 3 return 200 ok + jwt
            return Ok(tokenStr);
        }

        [AllowAnonymous]
        [HttpPost("register")] //設(shè)置注冊接口路由
        public async Task<IActionResult> Register([FromBody] RegisterDto registerDto)
        {
            // 1 使用用戶名創(chuàng)建用戶對象
            var user = new ApplicationUser()
            {
                UserName = registerDto.Email,
                Email = registerDto.Email
            };

            // 2 hash密碼军拟，保存用戶
            var result = await _userManager.CreateAsync(user, registerDto.Password);
            if(!result.Succeeded)
            {
                return BadRequest();
            }

            // 3 初始化購物車
            var shoppingCart = new ShoppingCart()
            {
                Id = Guid.NewGuid(),
                UserId = user.Id
            };
            await _touristRouteRepository.CreateShoppingCart(shoppingCart);
            await _touristRouteRepository.SaveAsync();

            // 4 return
            return Ok();
        }
    }
}