package com.zbkj.admin.acpect;

import cn.hutool.core.date.DateTime;
import com.alibaba.fastjson.JSON;
import com.alibaba.fastjson.JSONObject;
import com.baomidou.mybatisplus.core.conditions.query.LambdaQueryWrapper;
import com.zbkj.common.annotation.Loggable;
import com.zbkj.common.exception.CarException;
import com.zbkj.common.model.log.SystemLog;
import com.zbkj.common.model.system.SystemAdmin;
import com.zbkj.common.request.SystemAdminLoginRequest;
import com.zbkj.common.utils.RequestUtil;
import com.zbkj.common.utils.UserUtil;
import com.zbkj.service.service.SystemAdminService;
import com.zbkj.service.service.SystemLogService;
import org.aspectj.lang.ProceedingJoinPoint;
import org.aspectj.lang.annotation.Around;
import org.aspectj.lang.annotation.Aspect;
import org.springframework.beans.factory.annotation.Autowired;
import org.springframework.stereotype.Component;
import org.springframework.web.multipart.MultipartFile;

import javax.servlet.http.HttpServletRequest;
import javax.servlet.http.HttpServletResponse;
import javax.smartcardio.CardException;
import java.time.LocalDateTime;
import java.util.Arrays;
import java.util.List;
import java.util.stream.Collectors;

@Aspect
@Component
public class LogAspect {
    @Autowired
    private SystemLogService systemLogService;

    @Autowired
    private SystemAdminService systemAdminService;

    //    @Around("@annotation(apiOperation)")
//    public Object around(ProceedingJoinPoint joinPoint, ApiOperation apiOperation, Loggable loggable) throws Throwable {
    @Around("@annotation(loggable)")
    public Object around(ProceedingJoinPoint joinPoint, Loggable loggable) throws Throwable {
        HttpServletRequest request = RequestUtil.getRequest();

        String userName = "匿名用户";
        String requestParams = "";
        // 获取操作类型描述（优先使用Loggable注解）
//        String operationType = apiOperation.value();
        SystemLog log = new SystemLog();
        String operationType = loggable.value();
        if ("PC登录".equals(operationType)) {
            // 从请求参数中获取用户名
            Object[] args = joinPoint.getArgs();
            for (Object arg : args) {
                if (arg instanceof SystemAdminLoginRequest) {
                    SystemAdminLoginRequest systemAdminLoginRequest = (SystemAdminLoginRequest) arg;
                    SystemAdmin systemAdmin = systemAdminService.getOne(new LambdaQueryWrapper<SystemAdmin>().eq(SystemAdmin::getAccount, systemAdminLoginRequest.getAccount()));
                    if (systemAdmin != null) {
                        userName = systemAdmin.getRealName();
                    } else {
                        throw new CarException("账号或者密码不正确");
                    }
                    requestParams = maskSensitiveInfo(JSON.toJSONString(systemAdminLoginRequest));
                    break;
                }
            }
        } else {
            userName = UserUtil.getLoginUserName();
            requestParams = loggable.trackParams() ?
                    maskSensitiveInfo(getRequestParams(joinPoint)) : "参数追踪已禁用";
        }
        log.setUsername(userName)
                .setIp(RequestUtil.getIpAddress(request))
//                .setOperationType(apiOperation.value())
//                .setOperationContent(getRequestParams(joinPoint))
                .setOperationContent(requestParams)
                .setOperationType(operationType)
                .setOperationTime(DateTime.now());

        try {
            Object result = joinPoint.proceed();
            log.setResult("成功");
            return result;
        } catch (Exception e) {
            log.setResult("失败");
            throw e;
        } finally {
            systemLogService.save(log);
        }
    }

    // 新增敏感信息脱敏方法
    private String maskSensitiveInfo(String jsonStr) {
        try {
            JSONObject jsonObject = JSON.parseObject(jsonStr);
            if (jsonObject.containsKey("password")) {
                jsonObject.put("password", "***");
            }
            if (jsonObject.containsKey("pwd")) {
                jsonObject.put("pwd", "***");
            }
            if (jsonObject.containsKey("idCard")) {
                jsonObject.put("idCard", "***");
            }
            return jsonObject.toJSONString();
        } catch (Exception e) {
            return jsonStr; // 非JSON格式直接返回
        }
    }

    private String getRequestParams(ProceedingJoinPoint joinPoint) {
        Object[] args = joinPoint.getArgs();
        // 过滤掉不可序列化的请求参数
        List<Object> filteredArgs = Arrays.stream(args)
                .filter(arg -> !(arg instanceof HttpServletRequest))
                .filter(arg -> !(arg instanceof HttpServletResponse))
                .filter(arg -> !(arg instanceof MultipartFile))
                .collect(Collectors.toList());
        // 新增密码参数过滤（即使未脱敏也二次保障）
        filteredArgs.removeIf(arg -> {
            if (arg instanceof SystemAdminLoginRequest) {
                ((SystemAdminLoginRequest) arg).setPwd(null);
                return false;
            }
            return false;
        });
        return JSON.toJSONString(filteredArgs);
    }
}