package staff

import (
	"context"
	"errors"
	"regexp"
	"time"

	"bsm/full/module/ec/mall/internal/excode"
	"bsm/full/module/ec/mall/internal/impl"
	"bsm/full/module/ec/mall/internal/models"
	"bsm/full/module/ec/mall/internal/password"
	pb "bsm/full/module/ec/mall/pb"

	"git.apinb.com/bsm-sdk/core/crypto/encipher"
	"git.apinb.com/bsm-sdk/core/errcode"
	"git.apinb.com/bsm-sdk/core/printer"
	"git.apinb.com/bsm-sdk/core/vars"
	"github.com/redis/go-redis/v9"
	"gorm.io/gorm"
)

// 短信验证码在 Redis 中的 key 前缀，与 sender 模块保持一致：前缀 + 手机号
const smsCodeKeyPrefix = "/SMS/Code/"

// Login 员工登录验证
func Login(ctx context.Context, in *pb.LoginRequest) (reply *pb.LoginReply, err error) {
	var record models.MallStaff

	// 根据登录类型进行不同的验证
	switch in.LoginGenre {
	case 1: // 账号密码登录
		if in.Account == "" || in.Password == "" {
			return nil, errcode.ErrInvalidArgument
		}
		err := impl.DBService.Where("account = ?", in.Account).First(&record).Error
		if err != nil {
			if errors.Is(err, gorm.ErrRecordNotFound) {
				return nil, errcode.ErrAccountNotFound
			}
			printer.Error(err.Error())
			return nil, errcode.ErrDB
		}
		// 密码校验 - 使用MD5加盐验证
		if !password.Verify(record.Password, in.Password) {
			return nil, errcode.ErrPassword
		}

	case 2: // 手机验证码登录
		if in.Phone == "" || in.VerifyCode == "" || ValidatePhone(in.Phone) != nil {
			return nil, errcode.ErrInvalidArgument
		}

		// 校验短信验证码，key 规则与 sender 模块一致：/SMS/Code/ + 手机号
		smsKey := smsCodeKeyPrefix + in.Phone
		storedCode, codeErr := impl.RedisService.Client.Get(impl.RedisService.Ctx, smsKey).Result()
		if codeErr != nil {
			if errors.Is(codeErr, redis.Nil) {
				printer.Error("验证码已过期或不存在: phone=%s", in.Phone)
				return nil, errcode.ErrInvalidArgument
			}
			printer.Error(codeErr.Error())
			return nil, errcode.ErrInternal
		}
		if storedCode != in.VerifyCode {
			printer.Error("验证码不正确: phone=%s", in.Phone)
			return nil, errcode.ErrInvalidArgument
		}
		// 校验成功后立即删除，避免同一验证码被重放
		if err := impl.RedisService.Client.Del(impl.RedisService.Ctx, smsKey).Err(); err != nil {
			printer.Error("清除验证码缓存异常: %v", err)
		}

		err = impl.DBService.Where("phone = ?", in.Phone).First(&record).Error
		if err != nil {
			if errors.Is(err, gorm.ErrRecordNotFound) {
				return nil, errcode.ErrAccountNotFound
			}
			printer.Error(err.Error())
			return nil, errcode.ErrDB
		}

	default:
		return nil, errcode.ErrUnimplemented
	}

	// 账号状态校验
	if record.Status == models.DisabledStatus {
		return nil, errcode.ErrAccountDisabled
	}

	// 检查店铺是否正常运营
	var storeData = models.MallStore{}
	err = impl.DBService.Model(&models.MallStore{}).Where("id = ? AND status = 1", record.Store_ID).First(&storeData).Error
	if err != nil {
		if errors.Is(err, gorm.ErrRecordNotFound) {
			return nil, excode.ErrStoreNotFound
		}
		printer.Error(err.Error())
		return nil, errcode.ErrDB
	}
	if storeData.Status == 0 {
		return nil, excode.ErrStoreDisabled
	}

	store := models.Std_Store{
		Store_ID:       record.Store_ID,
		Store_Identity: record.Store_Identity,
	}

	token, err := encipher.GenerateTokenAes(record.ID, record.Identity, "", record.Role, store, map[string]string{"role": record.Role})
	if err != nil {
		printer.Error(err.Error())
		return nil, err
	}

	// 更新登录时间
	record.LastLoginAt = time.Now()
	err = impl.DBService.Where("id = ?", record.ID).Select("last_login_at").Updates(record).Error
	if err != nil {
		printer.Error(err.Error())
		return nil, err
	}

	return &pb.LoginReply{
		Token:         token,
		Identity:      record.Identity,
		Name:          record.Name,
		Account:       record.Account,
		Role:          record.Role,
		StoreName:     storeData.Title,
		StoreIdentity: storeData.Identity,
		Status:        int32(record.Status),
		CreatedAt:     record.CreatedAt.Format(vars.YYYY_MM_DD_HH_MM_SS),
	}, nil
}

// ValidatePhone 验证手机号格式
func ValidatePhone(phone string) error {
	// 中国大陆手机号验证：1开头，第二位为3-9，总共11位数字
	matched, err := regexp.MatchString("^1[3-9]\\d{9}$", phone)
	if err != nil || !matched {
		return errcode.ErrInvalidArgument
	}
	return nil
}