using Dpz.Core.Public.Entity.Auth;

namespace Dpz.Core.Service.Mediator.Features.Auth.Commands;

public class GrantApplicationAccessCommandHandler(
    IRepository<AllowedClient> allowedClientRepository,
    IRepository<DpzApplication> applicationRepository,
    IRepository<User> userRepository
) : IRequestHandler<GrantApplicationAccessCommand, ResponseResult>
{
    public async ValueTask<ResponseResult> Handle(
        GrantApplicationAccessCommand request,
        CancellationToken cancellationToken
    )
    {
        if (string.IsNullOrWhiteSpace(request.Account) || string.IsNullOrWhiteSpace(request.AppId))
        {
            return ResponseResult.Fail("参数不能为空");
        }

        var userExists = await userRepository
            .SearchFor(x => x.Id == request.Account)
            .AnyAsync(cancellationToken);
        if (!userExists)
        {
            return ResponseResult.Fail("用户不存在");
        }

        var application = await applicationRepository
            .SearchFor(x => x.ClientId == request.AppId)
            .FirstOrDefaultAsync(cancellationToken);
        if (application == null)
        {
            return ResponseResult.Fail("应用不存在");
        }

        var exists = await allowedClientRepository
            .SearchFor(x => x.Account == request.Account && x.ApplicationId == request.AppId)
            .AnyAsync(cancellationToken);
        if (exists)
        {
            return ResponseResult.Fail("该用户已拥有此应用权限");
        }

        await allowedClientRepository.InsertAsync(
            new AllowedClient
            {
                Account = request.Account,
                ApplicationId = request.AppId,
                ApplicationName = application.DisplayName ?? request.AppId,
                AllowedTime = DateTime.Now,
            },
            cancellationToken
        );

        return ResponseResult.Ok("授权成功");
    }
}