using System.IdentityModel.Tokens.Jwt;
using System.Security.Claims;
using System.Text;
using Microsoft.AspNetCore.Authorization;
using Microsoft.AspNetCore.Cors;
using Microsoft.AspNetCore.Mvc;
using Microsoft.IdentityModel.Tokens;

namespace server.Controllers;

/// <summary>
/// 数据控制器
/// </summary>
[ApiController]
[Route("api/[controller]")]
public class DataController : ControllerBase
{
    private static NLog.Logger logger = NLog.LogManager.GetCurrentClassLogger();

    /// <summary>
    /// [TODO:description]
    /// </summary>
    public class UserInfo
    {
        /// <summary>
        /// 用户的唯一标识符
        /// </summary>
        public Guid ID { get; set; }

        /// <summary>
        /// 用户的名称
        /// </summary>
        public required string Name { get; set; }

        /// <summary>
        /// 用户的电子邮箱
        /// </summary>
        public required string EMail { get; set; }

        /// <summary>
        /// 用户关联的板卡ID
        /// </summary>
        public Guid BoardID { get; set; }

        /// <summary>
        /// 用户绑定板子的过期时间
        /// </summary>
        public DateTime? BoardExpireTime { get; set; }
    }

    /// <summary>
    /// 用户登录，获取 JWT 令牌
    /// </summary>
    /// <param name="name">用户名</param>
    /// <param name="password">用户密码</param>
    /// <returns>JWT 令牌字符串</returns>
    [HttpPost("Login")]
    [EnableCors("Users")]
    [ProducesResponseType(typeof(string), StatusCodes.Status200OK)]
    [ProducesResponseType(StatusCodes.Status400BadRequest)]
    [ProducesResponseType(StatusCodes.Status500InternalServerError)]
    public IActionResult Login(string name, string password)
    {
        // 验证用户密码
        using var db = new Database.AppDataConnection();
        var ret = db.CheckUserPassword(name, password);
        if (!ret.IsSuccessful) return StatusCode(StatusCodes.Status500InternalServerError, "数据库操作失败");
        if (!ret.Value.HasValue) return BadRequest("用户名或密码错误");
        var user = ret.Value.Value;

        // 生成 JWT
        var tokenHandler = new JwtSecurityTokenHandler();
        var key = Encoding.ASCII.GetBytes("my secret key 1234567890my secret key 1234567890");
        var tokenDescriptor = new SecurityTokenDescriptor
        {
            Subject = new ClaimsIdentity(new Claim[]
            {
                new Claim(ClaimTypes.Name, user.Name),
                new Claim(ClaimTypes.Email, user.EMail),
                new Claim(ClaimTypes.Role, user.Permission.ToString())
            }),
            Expires = DateTime.UtcNow.AddHours(1),
            SigningCredentials = new SigningCredentials(
                new SymmetricSecurityKey(key), SecurityAlgorithms.HmacSha256Signature),
            Audience = "dlut.edu.cn",
            Issuer = "dlut.edu.cn",
        };
        var token = tokenHandler.CreateToken(tokenDescriptor);
        var jwt = tokenHandler.WriteToken(token);

        return Ok(jwt);
    }

    /// <summary>
    /// 测试用户认证，需携带有效 JWT
    /// </summary>
    /// <returns>认证成功信息</returns>
    [Authorize]
    [HttpGet("TestAuth")]
    [EnableCors("Users")]
    [ProducesResponseType(typeof(string), StatusCodes.Status200OK)]
    [ProducesResponseType(StatusCodes.Status401Unauthorized)]
    public IActionResult TestAuth()
    {
        return Ok("认证成功！");
    }

    /// <summary>
    /// 测试管理员用户认证，需携带有效 JWT
    /// </summary>
    /// <returns>认证成功信息</returns>
    [Authorize("Admin")]
    [HttpGet("TestAdminAuth")]
    [EnableCors("Users")]
    [ProducesResponseType(typeof(string), StatusCodes.Status200OK)]
    [ProducesResponseType(StatusCodes.Status401Unauthorized)]
    public IActionResult TestAdminAuth()
    {
        return Ok("认证成功！");
    }

    /// <summary>
    /// 获取当前用户信息
    /// </summary>
    /// <returns>用户信息，包括ID、用户名、邮箱和板卡ID</returns>
    [Authorize]
    [HttpGet("GetUserInfo")]
    [EnableCors("Users")]
    [ProducesResponseType(typeof(UserInfo), StatusCodes.Status200OK)]
    [ProducesResponseType(StatusCodes.Status400BadRequest)]
    [ProducesResponseType(StatusCodes.Status500InternalServerError)]
    [ProducesResponseType(StatusCodes.Status401Unauthorized)]
    public IActionResult GetUserInfo()
    {
        // Get User Name
        var userName = User.Identity?.Name;
        if (string.IsNullOrEmpty(userName))
            return Unauthorized("未找到用户名信息");

        // Get User Info
        using var db = new Database.AppDataConnection();
        var ret = db.GetUserByName(userName);
        if (!ret.IsSuccessful)
            return StatusCode(StatusCodes.Status500InternalServerError, "数据库操作失败");

        if (!ret.Value.HasValue)
            return BadRequest("用户不存在");

        var user = ret.Value.Value;
        return Ok(new UserInfo
        {
            ID = user.ID,
            Name = user.Name,
            EMail = user.EMail,
            BoardID = user.BoardID,
            BoardExpireTime = user.BoardExpireTime,
        });
    }

    /// <summary>
    /// 注册新用户
    /// </summary>
    /// <param name="name">用户名（不超过255个字符）</param>
    /// <param name="email">邮箱地址</param>
    /// <param name="password">用户密码</param>
    /// <returns>操作结果，成功返回 true，失败返回错误信息</returns>
    [HttpPost("SignUpUser")]
    [EnableCors("Users")]
    [ProducesResponseType(typeof(bool), StatusCodes.Status200OK)]
    [ProducesResponseType(StatusCodes.Status400BadRequest)]
    [ProducesResponseType(StatusCodes.Status500InternalServerError)]
    public IActionResult SignUpUser(string name, string email, string password)
    {
        // 验证输入参数
        if (string.IsNullOrWhiteSpace(name))
            return BadRequest("用户名不能为空");

        if (name.Length > 255)
            return BadRequest("用户名不能超过255个字符");

        if (string.IsNullOrWhiteSpace(email))
            return BadRequest("邮箱不能为空");

        if (string.IsNullOrWhiteSpace(password))
            return BadRequest("密码不能为空");

        try
        {
            using var db = new Database.AppDataConnection();
            var ret = db.AddUser(name, email, password);
            return Ok(ret);
        }
        catch (Exception ex)
        {
            logger.Error(ex, "注册用户时发生异常");
            return StatusCode(StatusCodes.Status500InternalServerError, "注册失败，请稍后重试");
        }
    }

    /// <summary>
    /// 获取一个空闲的实验板（普通用户权限）
    /// </summary>
    /// <param name="durationHours">绑定持续时间（小时），默认为1小时</param>
    [Authorize]
    [HttpGet("GetAvailableBoard")]
    [EnableCors("Users")]
    [ProducesResponseType(typeof(Database.Board), StatusCodes.Status200OK)]
    [ProducesResponseType(StatusCodes.Status404NotFound)]
    [ProducesResponseType(StatusCodes.Status500InternalServerError)]
    public IActionResult GetAvailableBoard(int durationHours = 1)
    {
        try
        {
            var userName = User.Identity?.Name;
            if (string.IsNullOrEmpty(userName))
                return Unauthorized("未找到用户名信息");

            using var db = new Database.AppDataConnection();
            var userRet = db.GetUserByName(userName);
            if (!userRet.IsSuccessful || !userRet.Value.HasValue)
                return BadRequest("用户不存在");

            var user = userRet.Value.Value;
            var expireTime = DateTime.UtcNow.AddHours(durationHours);
            
            var boardOpt = db.GetAvailableBoard(user.ID, expireTime);
            if (!boardOpt.HasValue)
                return NotFound("没有可用的实验板");

            return Ok(boardOpt.Value);
        }
        catch (Exception ex)
        {
            logger.Error(ex, "获取空闲实验板时发生异常");
            return StatusCode(StatusCodes.Status500InternalServerError, "获取失败，请稍后重试");
        }
    }

    /// <summary>
    /// 解除当前用户绑定的实验板（普通用户权限）
    /// </summary>
    [Authorize]
    [HttpPost("UnbindBoard")]
    [EnableCors("Users")]
    [ProducesResponseType(typeof(bool), StatusCodes.Status200OK)]
    [ProducesResponseType(StatusCodes.Status400BadRequest)]
    [ProducesResponseType(StatusCodes.Status500InternalServerError)]
    public IActionResult UnbindBoard()
    {
        try
        {
            var userName = User.Identity?.Name;
            if (string.IsNullOrEmpty(userName))
                return Unauthorized("未找到用户名信息");

            using var db = new Database.AppDataConnection();
            var userRet = db.GetUserByName(userName);
            if (!userRet.IsSuccessful || !userRet.Value.HasValue)
                return BadRequest("用户不存在");

            var user = userRet.Value.Value;
            var result = db.UnbindUserFromBoard(user.ID);
            return Ok(result > 0);
        }
        catch (Exception ex)
        {
            logger.Error(ex, "解除实验板绑定时发生异常");
            return StatusCode(StatusCodes.Status500InternalServerError, "解除失败，请稍后重试");
        }
    }

    /// <summary>
    /// 用户根据实验板ID获取实验板信息（普通用户权限）
    /// </summary>
    [Authorize]
    [HttpGet("GetBoardByID")]
    [EnableCors("Users")]
    [ProducesResponseType(typeof(Database.Board), StatusCodes.Status200OK)]
    [ProducesResponseType(StatusCodes.Status404NotFound)]
    [ProducesResponseType(StatusCodes.Status500InternalServerError)]
    public IActionResult GetBoardByID(Guid id)
    {
        try
        {
            using var db = new Database.AppDataConnection();
            var ret = db.GetBoardByID(id);
            if (!ret.IsSuccessful)
                return StatusCode(StatusCodes.Status500InternalServerError, "数据库操作失败");
            if (!ret.Value.HasValue)
                return NotFound("未找到对应的实验板");
            return Ok(ret.Value.Value);
        }
        catch (Exception ex)
        {
            logger.Error(ex, "获取实验板信息时发生异常");
            return StatusCode(StatusCodes.Status500InternalServerError, "获取失败，请稍后重试");
        }
    }

    /// <summary>
    /// 新增板子（管理员权限）
    /// </summary>
    [Authorize("Admin")]
    [HttpPost("AddBoard")]
    [EnableCors("Users")]
    [ProducesResponseType(typeof(int), StatusCodes.Status200OK)]
    [ProducesResponseType(StatusCodes.Status400BadRequest)]
    [ProducesResponseType(StatusCodes.Status500InternalServerError)]
    public IActionResult AddBoard(string name, string ipAddr, int port)
    {
        if (string.IsNullOrWhiteSpace(name))
            return BadRequest("板子名称不能为空");
        if (string.IsNullOrWhiteSpace(ipAddr))
            return BadRequest("IP地址不能为空");
        if (port <= 0 || port > 65535)
            return BadRequest("端口号不合法");
        try
        {
            using var db = new Database.AppDataConnection();
            var ret = db.AddBoard(name, ipAddr, port);
            return Ok(ret);
        }
        catch (Exception ex)
        {
            logger.Error(ex, "新增板子时发生异常");
            return StatusCode(StatusCodes.Status500InternalServerError, "新增失败，请稍后重试");
        }
    }

    /// <summary>
    /// 删除板子（管理员权限）
    /// </summary>
    [Authorize("Admin")]
    [HttpDelete("DeleteBoard")]
    [EnableCors("Users")]
    [ProducesResponseType(typeof(int), StatusCodes.Status200OK)]
    [ProducesResponseType(StatusCodes.Status400BadRequest)]
    [ProducesResponseType(StatusCodes.Status500InternalServerError)]
    public IActionResult DeleteBoard(Guid id)
    {
        if (id == Guid.Empty)
            return BadRequest("板子Guid不能为空");

        try
        {
            using var db = new Database.AppDataConnection();
            var ret = db.DeleteBoardByID(id);
            return Ok(ret);
        }
        catch (Exception ex)
        {
            logger.Error(ex, "删除板子时发生异常");
            return StatusCode(StatusCodes.Status500InternalServerError, "删除失败，请稍后重试");
        }
    }

    /// <summary>
    /// 获取全部板子（管理员权限）
    /// </summary>
    [Authorize("Admin")]
    [HttpGet("GetAllBoards")]
    [EnableCors("Users")]
    [ProducesResponseType(typeof(Database.Board[]), StatusCodes.Status200OK)]
    [ProducesResponseType(StatusCodes.Status500InternalServerError)]
    public IActionResult GetAllBoards()
    {
        try
        {
            using var db = new Database.AppDataConnection();
            var boards = db.GetAllBoard();
            return Ok(boards);
        }
        catch (Exception ex)
        {
            logger.Error(ex, "获取全部板子时发生异常");
            return StatusCode(StatusCodes.Status500InternalServerError, "获取失败，请稍后重试");
        }
    }
}