using Dpz.Core.Service.Mediator.Features.Account.Internal;

namespace Dpz.Core.Service.Mediator.Features.Security.Commands;

/// <summary>
/// 处理当前账号修改密码请求
/// </summary>
public class ChangeAccountPasswordHandler(
    IRepository<User> userRepository,
    IRepository<UserHistory> userHistoryRepository
) : IRequestHandler<ChangeAccountPasswordRequest, ResponseResult>
{
    /// <summary>
    /// 验证旧密码，更新新密码并刷新 SecurityStamp
    /// </summary>
    public async ValueTask<ResponseResult> Handle(
        ChangeAccountPasswordRequest request,
        CancellationToken cancellationToken
    )
    {
        if (request.Password == request.NewPassword)
        {
            return ResponseResult.Fail("新密码不能与旧密码一致");
        }

        var user = await AccountRepositoryHelper.GetUserAsync(
            userRepository,
            request.Account,
            cancellationToken
        );
        if (user == null)
        {
            return ResponseResult.Fail("用户不存在");
        }

        if (!AccountSecurityHelper.VerifyPassword(request.Password, user.Password))
        {
            return ResponseResult.Fail("当前密码不正确");
        }

        var newHashedPassword = AccountSecurityHelper.CreatePasswordHash(request.NewPassword);
        var newSecurityStamp = AccountSecurityHelper.GenerateSecurityStamp();

        await AccountRepositoryHelper.SaveUserHistoryAsync(
            userHistoryRepository,
            user.Id,
            [
                AccountRepositoryHelper.Change(nameof(user.Key), user.Key, newSecurityStamp),
                AccountRepositoryHelper.Change(
                    nameof(user.Password),
                    user.Password,
                    newHashedPassword
                ),
            ],
            cancellationToken
        );

        var update = Builders<User>
            .Update.Set(x => x.Password, newHashedPassword)
            .Set(x => x.Key, newSecurityStamp)
            .Set(x => x.LastUpdateTime, DateTime.Now);
        await userRepository.UpdateAsync(x => x.Id == user.Id, update, cancellationToken);

        return ResponseResult.Ok();
    }
}