package private

import (
	"context"
	"strings"
	"time"

	pb "bsm/full/module/base/cloud/pb"
	"git.apinb.com/bsm-sdk/core/errcode"
	"git.apinb.com/bsm-sdk/core/printer"
	"git.apinb.com/bsm-sdk/core/service"
)

// 加密数据（使用服务端密钥，客户端传入的 Key 不再作为服务端密钥）
func EncryptData(ctx context.Context, in *pb.DataRequest) (reply *pb.StatusReply, err error) {
	// parse authorization meta.
	_, err = service.ParseMetaCtx(ctx, nil)
	if err != nil {
		return nil, err
	}

	// validate request
	if strings.TrimSpace(in.Data) == "" {
		return nil, errcode.ErrInvalidArgument
	}

	// logic code
	encryptedData, err := encryptPrivateData(in.Data)
	if err != nil {
		printer.Error("Encrypt data error: %v", err)
		return nil, errcode.ErrInternal
	}

	return &pb.StatusReply{
		Details: encryptedData,
		Timeseq: time.Now().UnixMilli(),
	}, nil
}