using Dpz.Core.Service.Mediator.Features.Account.Internal;

namespace Dpz.Core.Service.Mediator.Features.Account.Commands;

/// <summary>
/// 处理管理员重置密码请求
/// </summary>
public class ResetAccountPasswordHandler(
    IRepository<User> userRepository,
    IRepository<UserHistory> userHistoryRepository
) : IRequestHandler<ResetAccountPasswordRequest, ResponseResult>
{
    /// <summary>
    /// 重置密码并刷新 SecurityStamp
    /// </summary>
    public async ValueTask<ResponseResult> Handle(
        ResetAccountPasswordRequest request,
        CancellationToken cancellationToken
    )
    {
        var user = await AccountRepositoryHelper.GetUserAsync(
            userRepository,
            request.Account,
            cancellationToken
        );
        if (user == null)
        {
            return ResponseResult.Fail($"账号【{request.Account}】不存在");
        }

        if (AccountRepositoryHelper.IsSystemAccount(user))
        {
            return ResponseResult.Fail("含有System权限的账号不能操作");
        }

        var newHashedPassword = AccountSecurityHelper.CreatePasswordHash(request.Password);
        if (AccountSecurityHelper.VerifyPassword(request.Password, user.Password))
        {
            return ResponseResult.Fail("新密码不能与旧密码一致");
        }

        var newSecurityStamp = AccountSecurityHelper.GenerateSecurityStamp();
        await AccountRepositoryHelper.SaveUserHistoryAsync(
            userHistoryRepository,
            user.Id,
            [
                AccountRepositoryHelper.Change(nameof(user.Key), user.Key, newSecurityStamp),
                AccountRepositoryHelper.Change(
                    nameof(user.Password),
                    user.Password,
                    newHashedPassword
                ),
            ],
            cancellationToken
        );

        var update = Builders<User>
            .Update.Set(x => x.Password, newHashedPassword)
            .Set(x => x.Key, newSecurityStamp)
            .Set(x => x.LastUpdateTime, DateTime.Now);
        await userRepository.UpdateAsync(x => x.Id == user.Id, update, cancellationToken);

        return ResponseResult.Ok();
    }
}