using Dpz.Core.EnumLibrary;
using Dpz.Core.Service.RepositoryService;
using Microsoft.AspNetCore.Authorization;
using Microsoft.AspNetCore.Mvc;

namespace Dpz.Core.Auth.Controllers;

/// <summary>
/// SecurityStamp迁移控制器
/// 用于将现有用户的SecurityStamp更新为新的安全格式
/// </summary>
[Authorize(nameof(Permissions.System))]
public class SecurityStampMigrationController(
    IUserSecurityService userSecurityService,
    IAccountService accountService,
    ILogger<SecurityStampMigrationController> logger
) : Controller
{
    /// <summary>
    /// 显示迁移页面
    /// </summary>
    [HttpGet]
    [Route("security-stamp-migration")]
    public IActionResult Index()
    {
        return View();
    }

    /// <summary>
    /// 执行SecurityStamp迁移
    /// 将所有用户的SecurityStamp更新为新的安全格式
    /// </summary>
    [HttpPost]
    [Route("migrate-security-stamps")]
    public async Task<IActionResult> MigrateSecurityStamps()
    {
        try
        {
            logger.LogInformation("开始执行SecurityStamp迁移操作");

            // 获取所有用户ID
            var allUsers = await accountService.GetPageAsync(1, 10000);
            var userIds = allUsers.Select(u => u.Id).ToList();

            if (!userIds.Any())
            {
                TempData["Message"] = "没有找到需要迁移的用户";
                return RedirectToAction("Index");
            }

            // 批量更新SecurityStamp
            var successCount = await userSecurityService.BatchUpdateSecurityStampsAsync(
                userIds,
                "系统升级：SecurityStamp格式迁移"
            );

            var message = $"SecurityStamp迁移完成！成功更新 {successCount}/{userIds.Count} 个用户";
            TempData["Message"] = message;

            logger.LogInformation(
                "SecurityStamp迁移完成，成功更新 {SuccessCount}/{TotalCount} 个用户",
                successCount,
                userIds.Count
            );

            return RedirectToAction("Index");
        }
        catch (Exception ex)
        {
            logger.LogError(ex, "执行SecurityStamp迁移时发生错误");
            TempData["Error"] = "迁移过程中发生错误，请查看日志获取详细信息";
            return RedirectToAction("Index");
        }
    }

    /// <summary>
    /// 验证单个用户的SecurityStamp
    /// </summary>
    [HttpPost]
    [Route("validate-user-security-stamp")]
    public async Task<IActionResult> ValidateUserSecurityStamp(string userId)
    {
        if (string.IsNullOrWhiteSpace(userId))
        {
            return Json(new { success = false, message = "用户ID不能为空" });
        }

        try
        {
            var user = await accountService.GetOneUserAsync(userId);
            if (user == null)
            {
                return Json(new { success = false, message = "用户不存在" });
            }

            var isValid = await userSecurityService.ValidateUserSecurityStampAsync(
                userId,
                user.Key
            );

            return Json(
                new
                {
                    success = true,
                    isValid,
                    currentKey = user.Key,
                    message = isValid ? "SecurityStamp格式有效" : "SecurityStamp格式无效，建议更新",
                }
            );
        }
        catch (Exception ex)
        {
            logger.LogError(ex, "验证用户 {UserId} 的SecurityStamp时发生错误", userId);
            return Json(new { success = false, message = "验证过程中发生错误" });
        }
    }

    /// <summary>
    /// 强制单个用户重新登录
    /// </summary>
    [HttpPost]
    [Route("force-user-reauth")]
    public async Task<IActionResult> ForceUserReauthentication(
        string userId,
        string reason = "管理员操作"
    )
    {
        if (string.IsNullOrWhiteSpace(userId))
        {
            return Json(new { success = false, message = "用户ID不能为空" });
        }

        try
        {
            var success = await userSecurityService.ForceUserReauthenticationAsync(userId, reason);

            return Json(new { success, message = success ? "已强制用户重新登录" : "操作失败" });
        }
        catch (Exception ex)
        {
            logger.LogError(ex, "强制用户 {UserId} 重新登录时发生错误", userId);
            return Json(new { success = false, message = "操作过程中发生错误" });
        }
    }
}