package com.ard.framework.aspectj;

import com.ard.common.annotation.DataScopePlus;
import com.ard.common.constant.UserConstants;
import com.ard.common.core.domain.entity.SysRole;
import com.ard.common.core.domain.entity.SysUser;
import com.ard.common.core.domain.model.LoginUser;
import com.ard.common.core.text.Convert;
import com.ard.common.utils.SecurityUtils;
import com.ard.common.utils.StringUtils;
import com.ard.framework.security.context.PermissionContextHolder;
import com.baomidou.mybatisplus.core.conditions.query.QueryWrapper;
import org.aspectj.lang.JoinPoint;
import org.aspectj.lang.annotation.Aspect;
import org.aspectj.lang.annotation.Before;
import org.aspectj.lang.annotation.Pointcut;
import org.springframework.stereotype.Component;
import java.util.ArrayList;
import java.util.List;

@Aspect
@Component
public class DataScopePlusAspect {
    /**
     * 全部数据权限
     */
    public static final String DATA_SCOPE_ALL = "1";

    /**
     * 自定数据权限
     */
    public static final String DATA_SCOPE_CUSTOM = "2";

    /**
     * 部门数据权限
     */
    public static final String DATA_SCOPE_DEPT = "3";

    /**
     * 部门及以下数据权限
     */
    public static final String DATA_SCOPE_DEPT_AND_CHILD = "4";

    /**
     * 仅本人数据权限
     */
    public static final String DATA_SCOPE_SELF = "5";


    @Pointcut("@annotation(com.ard.common.annotation.DataScopePlus)")
    public void dataScopePointcut() {
    }

    @Before("@annotation(controllerDataScopePlus)")
    public void doBefore(JoinPoint joinPoint, DataScopePlus controllerDataScopePlus) {
        handleDataScope(joinPoint, controllerDataScopePlus);
    }

    protected void handleDataScope(final JoinPoint joinPoint, DataScopePlus controllerDataScope) {
        // 获取当前用户
        LoginUser loginUser = SecurityUtils.getLoginUser();
        if (StringUtils.isNotNull(loginUser)) {
            SysUser currentUser = loginUser.getUser();
            if (currentUser != null && !currentUser.isAdmin()) {
                String permission = StringUtils.defaultIfEmpty(controllerDataScope.permission(),
                        PermissionContextHolder.getContext());
                dataScopeFilter(joinPoint, currentUser, permission);
            }
        }
    }

    private void dataScopeFilter(JoinPoint joinPoint, SysUser user, String permission) {
        StringBuilder sqlString = new StringBuilder();
        List<String> conditions = new ArrayList<>();
        List<String> scopeCustomIds = new ArrayList<>();

        // 获取用户角色并遍历进行权限检查
        user.getRoles().forEach(role -> {
            if (DATA_SCOPE_CUSTOM.equals(role.getDataScope()) && StringUtils.equals(role.getStatus(),
                    UserConstants.ROLE_NORMAL)) {
                if (StringUtils.containsAny(role.getPermissions(), Convert.toStrArray(permission))) {
                    scopeCustomIds.add(Convert.toStr(role.getRoleId()));
                }
            }
        });

        for (SysRole role : user.getRoles()) {
            String dataScope = role.getDataScope();
            if (conditions.contains(dataScope) || StringUtils.equals(role.getStatus(), UserConstants.ROLE_DISABLE)) {
                continue;
            }

            if (!StringUtils.containsAny(role.getPermissions(), Convert.toStrArray(permission))) {
                continue;
            }

            if (DATA_SCOPE_ALL.equals(dataScope)) {
                sqlString = new StringBuilder();
                conditions.add(dataScope);
                break;
            } else if (DATA_SCOPE_CUSTOM.equals(dataScope)) {
                // 自定义数据权限
                if (scopeCustomIds.size() > 1) {
                    sqlString.append(StringUtils.format(" OR dept_id IN (SELECT dept_id FROM sys_role_dept WHERE " +
                            "role_id IN ({}) )", String.join(",", scopeCustomIds)));
                } else {
                    sqlString.append(StringUtils.format(" OR dept_id IN (SELECT dept_id FROM sys_role_dept WHERE " +
                            "role_id = {} )", role.getRoleId()));
                }
            } else if (DATA_SCOPE_DEPT.equals(dataScope)) {
                // 部门数据权限
                sqlString.append(StringUtils.format(" OR dept_id = {}", user.getDeptId()));
            } else if (DATA_SCOPE_DEPT_AND_CHILD.equals(dataScope)) {
                // 部门及以下数据权限
                sqlString.append(StringUtils.format(" OR dept_id IN (SELECT dept_id FROM sys_dept WHERE dept_id = {} " +
                        "OR find_in_set({}, ancestors))", user.getDeptId(), user.getDeptId()));
            } else if (DATA_SCOPE_SELF.equals(dataScope)) {
                // 仅本人数据权限
                sqlString.append(StringUtils.format(" OR user_id = {}", user.getUserId()));
            }
            conditions.add(dataScope);
        }
        QueryWrapper<?> queryWrapper = getQueryWrapper(joinPoint);
        if (StringUtils.isNotBlank(sqlString.toString())) {
            queryWrapper.apply(sqlString.substring(4));
        }
    }

    private QueryWrapper<?> getQueryWrapper(JoinPoint joinPoint) {
        Object[] args = joinPoint.getArgs();
        if (args != null && args.length > 0 && args[0] instanceof QueryWrapper) {
            return (QueryWrapper<?>) args[0];
        }
        return null;
    }
}