package models

import (
	"github.com/TeaOSLab/EdgeAPI/internal/errors"
	_ "github.com/go-sql-driver/mysql"
	"github.com/iwind/TeaGo/Tea"
	"github.com/iwind/TeaGo/dbs"
	"github.com/iwind/TeaGo/maps"
)

const (
	LoginStateEnabled  = 1 // 已启用
	LoginStateDisabled = 0 // 已禁用
)

type LoginType = string

const (
	LoginTypeOTP LoginType = "otp"
)

type LoginDAO dbs.DAO

func NewLoginDAO() *LoginDAO {
	return dbs.NewDAO(&LoginDAO{
		DAOObject: dbs.DAOObject{
			DB:     Tea.Env,
			Table:  "edgeLogins",
			Model:  new(Login),
			PkName: "id",
		},
	}).(*LoginDAO)
}

var SharedLoginDAO *LoginDAO

func init() {
	dbs.OnReady(func() {
		SharedLoginDAO = NewLoginDAO()
	})
}

// EnableLogin 启用条目
func (this *LoginDAO) EnableLogin(tx *dbs.Tx, id int64) error {
	_, err := this.Query(tx).
		Pk(id).
		Set("state", LoginStateEnabled).
		Update()
	return err
}

// DisableLogin 禁用条目
func (this *LoginDAO) DisableLogin(tx *dbs.Tx, id int64) error {
	_, err := this.Query(tx).
		Pk(id).
		Set("state", LoginStateDisabled).
		Update()
	return err
}

// FindEnabledLogin 查找启用中的条目
func (this *LoginDAO) FindEnabledLogin(tx *dbs.Tx, id int64) (*Login, error) {
	result, err := this.Query(tx).
		Pk(id).
		Attr("state", LoginStateEnabled).
		Find()
	if result == nil {
		return nil, err
	}
	return result.(*Login), err
}

// CreateLogin 创建认证
func (this *LoginDAO) CreateLogin(tx *dbs.Tx, Id int64, loginType LoginType, params maps.Map) (int64, error) {
	if Id <= 0 {
		return 0, errors.New("invalid Id")
	}
	if params == nil {
		params = maps.Map{}
	}
	var op = NewLoginOperator()
	op.Id = Id
	op.Type = loginType
	op.Params = params.AsJSON()
	op.State = LoginStateEnabled
	op.IsOn = true
	return this.SaveInt64(tx, op)
}

// UpdateLogin 修改认证
func (this *LoginDAO) UpdateLogin(tx *dbs.Tx, adminId int64, userId int64, loginType LoginType, params maps.Map, isOn bool) error {
	if adminId <= 0 && userId <= 0 {
		return errors.New("invalid adminId and userId")
	}

	// 是否已经存在
	var query = this.Query(tx).
		Attr("type", loginType).
		State(LoginStateEnabled).
		ResultPk()

	if adminId > 0 {
		query.Attr("adminId", adminId)
	} else if userId > 0 {
		query.Attr("userId", userId)
	}

	loginId, err := query.FindInt64Col(0)
	if err != nil {
		return err
	}
	var op = NewLoginOperator()
	if loginId > 0 {
		op.Id = loginId
	} else {
		op.AdminId = adminId
		op.UserId = userId
		op.Type = loginType
		op.State = LoginStateEnabled
	}

	if params == nil {
		params = maps.Map{}
	}

	op.IsOn = isOn
	op.Params = params.AsJSON()
	return this.Save(tx, op)
}

// DisableLoginWithType 禁用相关认证
func (this *LoginDAO) DisableLoginWithType(tx *dbs.Tx, adminId int64, userId int64, loginType LoginType) error {
	var query = this.Query(tx).
		Attr("type", loginType).
		Set("isOn", false)

	if adminId > 0 {
		query.Attr("adminId", adminId)
	} else if userId > 0 {
		query.Attr("userId", userId)
	}

	_, err := query.
		Update()
	return err
}

// FindEnabledLoginWithType 查找管理员和用户相关的认证
func (this *LoginDAO) FindEnabledLoginWithType(tx *dbs.Tx, adminId int64, userId int64, loginType LoginType) (*Login, error) {
	var query = this.Query(tx).
		Attr("type", loginType).
		State(LoginStateEnabled)

	if adminId > 0 {
		query.Attr("adminId", adminId)
	} else if userId > 0 {
		query.Attr("userId", userId)
	}

	one, err := query.Find()
	if err != nil || one == nil {
		return nil, err
	}
	return one.(*Login), nil
}

// CheckLoginIsOn 检查某个认证是否启用
func (this *LoginDAO) CheckLoginIsOn(tx *dbs.Tx, adminId int64, userId int64, loginType LoginType) (bool, error) {
	var query = this.Query(tx).
		Attr("type", loginType).
		State(LoginStateEnabled).
		Attr("isOn", true)

	if adminId > 0 {
		query.Attr("adminId", adminId)
	} else if userId > 0 {
		query.Attr("userId", userId)
	}

	return query.Exist()
}