<?php

namespace App\Http\Controllers\API\Admin;

use App\Http\Controllers\Controller;
use Illuminate\Http\Request;
use App\Lib\Rs;
use Illuminate\Support\Facades\DB;
use Illuminate\Validation\Rule;

class SysUserController extends Controller
{
    /**
     * 获取用户列表
     * @param Request $request
     * @return \Illuminate\Http\JsonResponse
     */
    public function list(Request $request)
    {
        // 获取查询参数
        $username = $request->input('username', '');
        $nickname = $request->input('nickname', '');
        $status = $request->input('status', null);
        $page = $request->input('page', 1);
        $pageSize = $request->input('page_size', 10);

        // 构建查询
        $query = DB::table('sys_user')
            ->where('deleted', 0);

        // 添加查询条件
        if (!empty($username)) {
            $query->where('username', 'like', '%' . $username . '%');
        }

        if (!empty($nickname)) {
            $query->where('nickname', 'like', '%' . $nickname . '%');
        }

        if ($status !== null) {
            $query->where('status', $status);
        }

        // 计算总数
        $total = $query->count();

        // 分页查询
        $users = $query->orderBy('id', 'asc')
            ->skip(($page - 1) * $pageSize)
            ->take($pageSize)
            ->get();

        // 获取用户角色信息
        $users = $users->map(function($user) {
            // 获取用户角色ID
            $roleIds = DB::table('sys_user_role')
                ->where('user_id', $user->id)
                ->pluck('role_id')
                ->toArray();

            // 获取角色名称
            $roles = [];
            if (!empty($roleIds)) {
                $roles = DB::table('sys_role')
                    ->whereIn('id', $roleIds)
                    ->pluck('role_name')
                    ->toArray();
            }

            // 添加角色信息到用户对象
            $user->roles = $roles;
            $user->role_names = implode(', ', $roles);

            // 获取用户所属科室名称
            $deptName = null;
            if (!empty($user->dept_id)) {
                $dept = DB::table('department')->where('id', $user->dept_id)->where('deleted', 0)->first();
                if ($dept) {
                    $deptName = $dept->name;
                }
            }
            $user->dept_name = $deptName;

            return $user;
        });

        // 构造返回数据
        $data = [
            'list' => $users,
            'total' => $total,
            'page' => $page,
            'page_size' => $pageSize,
            'total_pages' => ceil($total / $pageSize)
        ];

        return Rs::success($data);
    }

    /**
     * 保存用户信息
     * @param Request $request
     * @return \Illuminate\Http\JsonResponse
     */
    public function Save(Request $request)
    {
        $data = $request->validate([
            'id' => 'required|integer',
            'username' => [
                'required',
                'string',
                'max:50',
                Rule::unique('sys_user', 'username')->ignore($request->id, 'id'),
            ],
            'password' => 'sometimes|string|min:6',
            'nickname' => 'required|string|max:50',
            'email' => 'sometimes|string|email|max:100',
            'phone' => 'sometimes|string|max:20',
            'status' => 'required|integer|in:0,1',
            'dept_id' => 'nullable|integer',
            'his_code' => 'nullable|string|max:50',
        ]);

        $conditions = ['id' => $data['id']];
        $values = [
            'username' => $data['username'],
            'nickname' => $data['nickname'],
            'email' => $data['email'] ?? '',
            'phone' => $data['phone'] ?? '',
            'status' => $data['status'],
            'dept_id' => $data['dept_id'] ?? null,
            'his_code' => $data['his_code'] ?? null,
        ];

        // 如果提供了密码，进行哈希处理
        if (isset($data['password']) && !empty($data['password'])) {
            $values['password'] = bcrypt($data['password']);
        }

        $updated = DB::table('sys_user')->updateOrInsert($conditions, $values);

        if ($updated) {
            return Rs::success();
        }

        return Rs::error('操作失败');
    }

    /**
     * 删除用户
     * @param Request $request
     * @return \Illuminate\Http\JsonResponse
     */
    public function Delete(Request $request)
    {
        $data = $request->validate([
            'id' => 'required|integer',
        ]);

        // 不能删除admin用户
        $user = DB::table('sys_user')->where('id', $data['id'])->first();
        if ($user && $user->username === 'admin') {
            return Rs::error('不能删除超级管理员');
        }

        $deleted = DB::table('sys_user')->where('id', $data['id'])->update(['deleted' => 1]);

        if ($deleted) {
            // 同时删除用户角色关联
            DB::table('sys_user_role')->where('user_id', $data['id'])->delete();
            return Rs::success();
        }

        return Rs::error('删除失败');
    }


    /**
     * 获取用户已绑定的角色
     * @param Request $request
     * @return \Illuminate\Http\JsonResponse
     */
    public function getUserRoles(Request $request)
    {
        $data = $request->validate([
            'user_id' => 'required|integer',
        ]);

        $roleIds = DB::table('sys_user_role')
            ->where('user_id', $data['user_id'])
            ->pluck('role_id')
            ->toArray();

        return Rs::success($roleIds);
    }

    /**
     * 绑定角色到用户
     * @param Request $request
     * @return \Illuminate\Http\JsonResponse
     */
    public function bindRoles(Request $request)
    {
        $data = $request->validate([
            'user_id' => 'required|integer',
            'role_ids' => 'required|array',
        ]);

        try {
            // 开启事务
            DB::beginTransaction();

            // 删除用户原有角色
            DB::table('sys_user_role')->where('user_id', $data['user_id'])->delete();

            // 添加新的角色关联
            $insertData = [];
            foreach ($data['role_ids'] as $roleId) {
                $insertData[] = [
                    'user_id' => $data['user_id'],
                    'role_id' => $roleId,
                    'create_time' => now(),
                ];
            }

            if (!empty($insertData)) {
                DB::table('sys_user_role')->insert($insertData);
            }

            // 提交事务
            DB::commit();

            return Rs::success();
        } catch (\Exception $e) {
            // 回滚事务
            DB::rollBack();
            return Rs::error('绑定角色失败：' . $e->getMessage());
        }
    }

    /**
     * 重置用户密码
     * @param Request $request
     * @return \Illuminate\Http\JsonResponse
     */
    public function resetPassword(Request $request)
    {
        $data = $request->validate([
            'id' => 'required|integer',
        ]);

        // 生成6位随机纯数字密码
        $newPassword = mt_rand(100000, 999999);

        // 哈希处理密码
        $hashedPassword = bcrypt($newPassword);

        // 更新用户密码
        $updated = DB::table('sys_user')
            ->where('id', $data['id'])
            ->update(['password' => $hashedPassword]);

        if ($updated) {
            // 返回重置后的原始密码
            return Rs::success($newPassword);
        } else {
            return Rs::error('密码重置失败');
        }
    }

    public function getUserAuth(Request $request)
    {
        // 从请求属性中获取CheckToken中间件传递的用户信息
        $user = $request->attributes->get('payload');

        if (!$user) {
            return Rs::error('用户信息获取失败');
        }

        // 获取用户ID
        $userId = $user['user_id'] ?? null;
        if (!$userId) {
            return Rs::error('用户ID获取失败');
        }

        // 查询用户信息
        $sysUser = DB::table('sys_user')
            ->where('id', $userId)
            ->where('deleted', 0)
            ->first();

        if (!$sysUser) {
            return Rs::error('用户不存在');
        }

        // 判断是否为超级管理员
        $isSuperAdmin = $sysUser->username === 'admin';

        // 查询权限
        $permissions = [];

        if ($isSuperAdmin) {
            // 超级管理员获取所有启用的菜单权限
            $permissions = DB::table('sys_permission')
                ->where('type', 1) // 1-菜单类型
                ->where('status', 1) // 1-启用
                ->where('deleted', 0) // 0-未删除
                ->orderBy('sort', 'asc')
                ->get();
        } else {
            // 其他用户根据角色获取权限，取角色权限的并集
            // 获取用户角色相关的所有权限ID
            $permissionIds = DB::table('sys_permission')
                ->join('sys_role_permission', 'sys_permission.id', '=', 'sys_role_permission.permission_id')
                ->join('sys_user_role', 'sys_role_permission.role_id', '=', 'sys_user_role.role_id')
                ->where('sys_user_role.user_id', $userId)
                ->where('sys_permission.type', 1) // 1-菜单类型
                ->where('sys_permission.status', 1) // 1-启用
                ->where('sys_permission.deleted', 0) // 0-未删除
                ->pluck('sys_permission.id')
                ->toArray();

            if (!empty($permissionIds)) {
                // 如果有子权限，获取其所有祖先权限
                $allPermissionIds = $permissionIds;

                // 获取所有相关权限详情
                $permissionDetails = DB::table('sys_permission')
                    ->whereIn('id', $permissionIds)
                    ->get();

                // 查找所有祖先权限
                foreach ($permissionDetails as $permission) {
                    $parentId = $permission->parent_id;
                    while ($parentId != 0) {
                        $parentPermission = DB::table('sys_permission')
                            ->where('id', $parentId)
                            ->where('type', 1) // 1-菜单类型
                            ->where('status', 1) // 1-启用
                            ->where('deleted', 0) // 0-未删除
                            ->first();

                        if ($parentPermission && !in_array($parentPermission->id, $allPermissionIds)) {
                            $allPermissionIds[] = $parentPermission->id;
                            $parentId = $parentPermission->parent_id;
                        } else {
                            break;
                        }
                    }
                }

                // 获取所有权限详情
                $permissions = DB::table('sys_permission')
                    ->whereIn('id', $allPermissionIds)
                    ->where('type', 1) // 1-菜单类型
                    ->where('status', 1) // 1-启用
                    ->where('deleted', 0) // 0-未删除
                    ->select('sys_permission.*')
                    ->orderBy('sys_permission.sort', 'asc')
                    ->get();
            }
        }

        // 转换为树形结构
        $treePermissions = $this->buildPermissionTree($permissions);

        // 构造返回数据
        $result = [
            'user' => [
                'user_id' => $sysUser->id,
                'username' => $sysUser->username,
                'nickname' => $sysUser->nickname,
                'email' => $sysUser->email,
                'phone' => $sysUser->phone,
                'avatar' => $sysUser->avatar
                    ? config('app.url') . '/storage/' . $sysUser->avatar
                    : config('app.url') . '/user_logo.jpg',
                'is_super_admin' => $isSuperAdmin,
                'dept_id'=>$sysUser->dept_id
            ],
            'permissions' => $treePermissions
        ];

        return Rs::success($result);
    }

    /**
     * 构建权限树形结构
     * @param array|object $permissions 权限列表
     * @return array 树形结构权限
     */
    private function buildPermissionTree($permissions)
    {
        $tree = [];
        $permissionMap = [];

        // 转换为数组并构建映射
        $permissionArray = json_decode(json_encode($permissions), true);

        // 第一步：构建权限映射，初始化children数组
        foreach ($permissionArray as $permission) {
            $permission['children'] = [];
            $permissionMap[$permission['id']] = $permission;
        }

        // 第二步：构建树形结构
        foreach ($permissionMap as $permission) {
            if ($permission['parent_id'] == 0) {
                // 根节点直接添加到tree
                $tree[] = &$permissionMap[$permission['id']];
            } else {
                if (isset($permissionMap[$permission['parent_id']])) {
                    // 将子节点添加到父节点的children数组
                    $permissionMap[$permission['parent_id']]['children'][] = &$permissionMap[$permission['id']];
                }
            }
        }

        return $tree;
    }

    /**
     * 获取当前用户信息
     * @param Request $request
     */
    public function getInfo(Request $request)
    {
        // 从请求属性中获取CheckToken中间件传递的用户信息
        $user = $request->attributes->get('payload');

        if (!$user) {
            return Rs::error('用户信息获取失败');
        }

        // 获取用户ID
        $userId = $user['user_id'] ?? null;
        if (!$userId) {
            return Rs::error('用户ID获取失败');
        }

        // 查询用户信息
        $sysUser = DB::table('sys_user')
            ->where('id', $userId)
            ->where('deleted', 0)
            ->first();

        if (!$sysUser) {
            return Rs::error('用户不存在');
        }

        // 构造返回数据
        $result = [
            'id' => $sysUser->id,
            'username' => $sysUser->username,
            'nickname' => $sysUser->nickname,
            'email' => $sysUser->email,
            'phone' => $sysUser->phone,
            'avatar' => $sysUser->avatar
                ? config('app.url') . '/storage/' . $sysUser->avatar
                : config('app.url') . '/user_logo.jpg',
            'created_at' => $sysUser->create_time
        ];

        return Rs::success($result);
    }

    /**
     * 更新用户信息
     * @param Request $request
     */
    public function updateInfo(Request $request)
    {
        // 从请求属性中获取CheckToken中间件传递的用户信息
        $user = $request->attributes->get('payload');

        if (!$user) {
            return Rs::error('用户信息获取失败');
        }

        // 获取用户ID
        $userId = $user['user_id'] ?? null;
        if (!$userId) {
            return Rs::error('用户ID获取失败');
        }

        // 验证请求数据
        $data = $request->validate([
            'nickname' => 'required|string|max:50',
            'email' => 'sometimes|string|email|max:100',
            'phone' => 'sometimes|string|max:20',
        ]);

        // 更新用户信息
        $updated = DB::table('sys_user')
            ->where('id', $userId)
            ->where('deleted', 0)
            ->update([
                'nickname' => $data['nickname'],
                'email' => $data['email'] ?? '',
                'phone' => $data['phone'] ?? '',
                'update_time' => now()
            ]);

        if ($updated) {
            return Rs::success();
        } else {
            return Rs::error('用户信息更新失败');
        }
    }

    /**
     * 更新用户密码
     * @param Request $request

     */
    public function updatePassword(Request $request)
    {
        // 从请求属性中获取CheckToken中间件传递的用户信息
        $user = $request->attributes->get('payload');

        if (!$user) {
            return Rs::error('用户信息获取失败');
        }

        // 获取用户ID
        $userId = $user['user_id'] ?? null;
        if (!$userId) {
            return Rs::error('用户ID获取失败');
        }

        // 验证请求数据
        $data = $request->validate([
            'oldPassword' => 'required|string',
            'newPassword' => 'required|string|min:6',
        ]);

        // 查询用户信息
        $sysUser = DB::table('sys_user')
            ->where('id', $userId)
            ->where('deleted', 0)
            ->first();

        if (!$sysUser) {
            return Rs::error('用户不存在');
        }

        // 验证旧密码
        if (!password_verify($data['oldPassword'], $sysUser->password)) {
            return Rs::error('原密码错误');
        }

        // 哈希处理新密码
        $hashedPassword = bcrypt($data['newPassword']);

        // 更新用户密码
        $updated = DB::table('sys_user')
            ->where('id', $userId)
            ->update(['password' => $hashedPassword]);

        if ($updated) {
            return Rs::success();
        } else {
            return Rs::error('密码更新失败');
        }
    }

    /**
     * 上传用户头像
     * @param Request $request
     * @return IlluminateHttpJsonResponse
     */
    public function uploadAvatar(Request $request)
    {
        // 从请求属性中获取CheckToken中间件传递的用户信息
        $user = $request->attributes->get('payload');

        if (!$user) {
            return Rs::error('用户信息获取失败');
        }

        // 获取用户ID
        $userId = $user['user_id'] ?? null;
        if (!$userId) {
            return Rs::error('用户ID获取失败');
        }

        // 验证请求数据
        if (!$request->hasFile('avatar')) {
            return Rs::error('请选择要上传的头像');
        }

        $file = $request->file('avatar');

        // 验证文件类型
        $allowedTypes = ['image/jpeg', 'image/png'];
        if (!in_array($file->getMimeType(), $allowedTypes)) {
            return Rs::error('只允许上传JPG/PNG格式的图片');
        }

        // 验证文件大小（2MB）
        $maxSize = 2 * 1024 * 1024;
        if ($file->getSize() > $maxSize) {
            return Rs::error('图片大小不能超过2MB');
        }

        // 生成唯一文件名
        $filename = 'avatar_' . $userId . '_' . time() . '.' . $file->getClientOriginalExtension();
        $path = $file->storeAs('avatars', $filename, 'public');

        // 更新用户头像
        $updated = DB::table('sys_user')
            ->where('id', $userId)
            ->update(['avatar' => $path]);

        if ($updated) {
            // 构造完整的头像URL
            $avatarUrl = asset('storage/' . $path);
            return Rs::success(['avatar' => $avatarUrl]);
        } else {
            return Rs::error('头像上传失败');
        }
    }
}