<?php namespace Gdoo\User\Services;

use Auth;
use Request;
use DB;
use Session;

use Gdoo\User\Models\Department;
use Gdoo\User\Models\User;
use AIke\User\Models\UserAsset;
use Gdoo\User\Models\Role;

use Gdoo\System\Models\SystemLog;

class UserService
{
    public static function getUser($user_id = 0) {
        $user = null;
        if ($user_id == 0) {
            $user = auth()->user();
        }
        $user = User::find($user_id);
        return $user;
    }

    /**
     * 验证权限
     */
    public static function authorise($action = null, $asset_name = null)
    {
        if ($asset_name === null) {
            $asset_name = Request::module();
        }

        if ($action === null) {
            $action = Request::controller().'.'.Request::action();
        } else {
            if (substr_count($action, '.') === 0) {
                $action = Request::controller().'.'.$action;
            }
        }

        return UserAssetService::check(Auth::user()->role_id, $action, $asset_name);
    }

    /**
     * 验证查看权限
     */
    public static function authoriseAccess($action = null, $asset_name = null)
    {
        $level = static::authorise($action, $asset_name);

        $user = Auth::user();

        // 本人
        if ($level == 1) {
            return [$user->id];
        }

        // 本人和下属
        if ($level == 2) {
            $roles = Role::from(DB::raw('role as node, role as parent'))
            ->select(['node.id'])
            ->whereRaw('node.lft BETWEEN parent.lft AND parent.rgt')
            ->where('parent.id', $user->role_id)
            ->pluck('id');
            return User::whereIn('role_id', $roles)->pluck('id')->toArray();
        }

        // 部门所有人
        if ($level == 3) {
            $departments = Department::from(DB::raw('department as node, department as parent'))
            ->select(['node.id'])
            ->whereRaw('node.lft BETWEEN parent.lft AND parent.rgt')
            ->where('parent.id', $user->department_id)
            ->pluck('id');
            return User::whereIn('department_id', $departments)->pluck('id')->toArray();
        }

        // 销售组
        if ($level == 5) {
            $regions = DB::table('customer_region')->get()->toNested();
            // 审批权限
            $owners = DB::table('customer_region')
            ->where('owner_user_id', $user->id)
            ->get()->toArray();
            // 查询权限
            $assists = DB::table('customer_region')
            ->whereRaw(db_instr('owner_assist', $user->id))
            ->get()->toArray();
            $ids = [];
            foreach($owners as $v) {
                $ids = array_merge($ids, $regions[$v['id']]['parent']);
                $ids = array_merge($ids, $regions[$v['id']]['child']);
            }
            foreach($assists as $v) {
                $ids = array_merge($ids, $regions[$v['id']]['parent']);
                $ids = array_merge($ids, $regions[$v['id']]['child']);
            }
            $user_ids = [];
            foreach($regions as $region) {
                if (in_array($region['id'], $ids)) {
                    if ($region['owner_user_id']) {
                        $user_ids = array_merge($user_ids, [$region['owner_user_id']]);
                    }
                    if ($region['owner_assist']) {
                        $user_ids = array_merge($user_ids, explode(',', $region['owner_user_id']));
                    }
                }
            }
            return $user_ids;
        }

        return [];
    }

    /**
     * 获取角色权限
     */
    public static function getRolesAccess()
    {
        $user = auth()->user();

        $query = [
            'team_id' => 0,
            'customer_id' => 0,
        ];

        foreach ($query as $k => $v) {
            $query[$k] = Request::get($k, $v);
        }

        $teams = DB::table('customer_region')->get()->toNested()->toArray();

        $roles = DB::table('role')
        ->leftJoin('user_role', 'user_role.role_id', '=', 'role.id')
        ->where('user_role.user_id', $user['id'])
        ->get();

        // 支持销售组
        $isTeam = false;

        $res = [];

        // 自己
        $res['userId'] = $user->id;

        foreach($roles as $role) {

            // 全部数据权限
            if ($role['access'] == 'all') {
                $isTeam = true;
                continue;
            }

            if ($role['access'] == 'team' || $role['access'] == 'team2') {
                $isTeam = true;
            }

            // 获取单个角色权限
            $access = static::getRoleAccess($user, $role, $teams);

            // 筛选了销售组重置过滤条件
            if ($isTeam && $query['team_id'] > 0) {
                $access['whereIn']['team'] = [$query['team_id']];
            }
            $res['roles'][] = $access;
        }

        if ($isTeam) {
            $res['team'] = $teams;
        }

        // 没有筛选销售组
        if ($query['team_id'] == 0) {
            $query['customer_id'] = 0;
        }
        
        $res['query'] = $query;

        print_r($res);

        return $res;
    }

    /**
     * 获取角色权限
     */
    public static function getRoleAccess($user, $role, $teams)
    {
        $res = [];

        $res['whereIn'] = [];
        $res['authorise'] = false;

        // 用户组
        $group_id = $user['group_id'];
        switch ($group_id) {
            // 用户
            case 1:
                // 角色数据权限
                switch ($role['access']) {
                    // 本人
                    case 'me':
                        $res['userIds'] = [$user->id];
                        $res['customerIds'] = [];
                        $res['teamIds'] = [];
                        $res['whereIn']['user'] = $res['userIds'];
                        $res['authorise'] = true;
                        break;
                    // 本人和下属
                    case 'me2':
                        $users = DB::table('user')->whereRaw('(id = '.$user->id.' or leader_id = '.$user->id.')')->pluck('id')->toArray();
                        $res['userIds'] = $users;
                        $res['customerIds'] = [];
                        $res['teamIds'] = [];
                        $res['whereIn']['user'] = $users;
                        $res['authorise'] = true;
                        break;
                    // 本部门
                    case 'dept':
                        $users = DB::table('user')->where('department_id', $user->department_id)->pluck('id')->toArray();
                        $res['userIds'] = $users;
                        $res['customerIds'] = [];
                        $res['teamIds'] = [];
                        $res['whereIn']['user'] = $users;
                        $res['authorise'] = true;
                        break;
                    // 本部门和下级部门
                    case 'dept2':
                        $departmentIds = DB::table('user')->treeById($user->department_id)->toArray();
                        $users = DB::table('user')->whereIn('department_id', $departmentIds)->pluck('id')->toArray();
                        $res['userIds'] = $users;
                        $res['customerIds'] = [];
                        $res['teamIds'] = [];
                        $res['whereIn']['user'] = $users;
                        $res['authorise'] = true;
                        break;
                    // 本销售组
                    case 'team':
                        // 审批权限,查询权限
                        $teamIds = DB::table('customer_region')
                        ->whereRaw('(owner_user_id = '.$user->id.' or '.db_instr('owner_assist', $user->id).')')->pluck('id')->toArray();
                        $res['userIds'] = [];
                        $res['customerIds'] = [];
                        $res['teamIds'] = $teamIds;
                        $res['whereIn']['team'] = $teamIds;
                        $res['authorise'] = true;
                        break;
                    // 本销售组和下级销售组
                    case 'team2':
                        // 审批权限,查询权限
                        $_teamIds = DB::table('customer_region')
                        ->whereRaw('(owner_user_id = '.$user->id.' or '.db_instr('owner_assist', $user->id).')')->pluck('id')->toArray();
                        $teamIds = [];
                        foreach($_teamIds as $_teamId) {
                            foreach($teams[$_teamId]['child'] as $id) {
                                $teamIds[] = $id;
                            }
                        }
                        $res['userIds'] = [];
                        $res['customerIds'] = [];
                        $res['teamIds'] = $teamIds;
                        $res['whereIn']['team'] = $teamIds;
                        $res['authorise'] = true;
                        break;
                    case 'all':
                        break;
                }
            // 客户
            case 2:
                $customerIds = DB::table('customer')->where('user_id', $user->id)->pluck('id')->toArray();
                $res['userIds'] = [];
                $res['customerIds'] = $customerIds;
                $res['whereIn']['customer'] = $customerIds;
                $res['teamIds'] = [];
                $res['authorise'] = true;
                break;
            // 客户联系人
            case 3:
                $customerIds = DB::table('customer_contact')->where('user_id', $user->id)->pluck('customer_id')->toArray();
                $res['userIds'] = [];
                $res['customerIds'] = $customerIds;
                $res['whereIn']['customer'] = $customerIds;
                $res['teamIds'] = [];
                $res['authorise'] = true;
                break;
            // 供应商
            case 4:
                break;
            // 供应商联系人
            case 5:
                break;
        }
        return $res;
    }

    /**
     * 检查动态密码
     */
    public static function wantsTotp()
    {
        if (env('AUTH_TOTP', true) == false) {
            return 0;
        }

        $auth_totp = Auth::user()->auth_totp;

        if ($auth_totp == 0) {
            return 0;
        } elseif ($auth_totp == 1 && Session::get('auth_totp') == true) {
            return 0;
        } else {
            return 1;
        }
    }

    /**
     * 取得用户列表
     */
    public static function getAll($userId = 0)
    {
        static $data = [];

        if (empty($data)) {
            $data = User::get(['id', 'department_id', 'role_id', 'username', 'name', 'email', 'phone', 'birthday', 'gender'])->keyBy('id');
        }

        return $userId > 0 ? $data[$userId] : $data;
    }

    /**
     *
     * 传入部门编号，角色编码，用户编码，进行并集处理返回用户编号
     */
    public static function getDRU($receive_id, $status = 1)
    {
        if ($receive_id == '') {
            return [];
        }
        $receives = explode(',', str_replace(['u', 'r', 'd'], ['u_', 'r_', 'd_'], $receive_id));

        $scope = [];
        foreach ($receives as $receive) {
            list($type, $id) = explode('_', $receive);
            $scope[$type][] = $id;
        }

        return DB::table('user')
        ->where('status', $status)
        ->where(function ($q) use ($scope) {
            if ($scope['d']) {
                $q->orwhereIn('department_id', $scope['d']);
            }
            if ($scope['r']) {
                $q->orwhereIn('role_id', $scope['r']);
            }
            if ($scope['u']) {
                $q->orwhereIn('id', $scope['u']);
            }
        })->get(['id', 'role_id', 'department_id', 'username', 'name', 'email', 'phone']);
    }

    // 登录失败，记录错误信息
    public static function authLogWrite($ip)
    {
        $log = SystemLog::where('ip', $ip)->first();

        $data['ip'] = $ip;
        if ($log->id) {
            $data['error_count'] = $log->error_count + 1;
            SystemLog::where('ip', $ip)->update($data);
        } else {
            $data['error_count'] = 1;
            SystemLog::insert($data);
        }
    }

    // 获取记录，没有记录返回空
    public static function authLogRead($ip)
    {
        return SystemLog::where('ip', $ip)->first();
    }

    // 登录成功，销毁错误信息
    public static function authLogDelete($ip)
    {
        SystemLog::where('ip', $ip)->delete();
    }

    // 检查IP
    public static function authLogCheckIp($ip, $auth_ip)
    {
        if (empty($auth_ip)) {
            return true;
        }
        $auth_ip = explode(PHP_EOL, $auth_ip);
        return ($auth_ip && in_array($ip, $auth_ip));
    }
}