using Microsoft.AspNetCore.Mvc;
using Microsoft.AspNetCore.Mvc.Filters;
using HT.Cloud.Code;
using HT.Cloud.Service.SystemOrganize;

/// <summary>
/// 权限验证
/// </summary>
namespace HT.Cloud.Web
{
	public class HandlerAuthorizeAttribute : ActionFilterAttribute
	{
		private readonly bool _needAuth;

		private string _authorize { get; set; }

		/// <summary>
		/// 权限特性
		/// </summary>
		/// <param name="authorize">权限参数</param>
		/// <param name="needAuth">是否鉴权</param>
		public HandlerAuthorizeAttribute(string authorize = "", bool needAuth = true)
		{
			_authorize = authorize.ToLower();
			_needAuth = needAuth;
		}

		public override void OnActionExecuting(ActionExecutingContext filterContext)
		{
			if (OperatorProvider.Provider.GetCurrent() != null && OperatorProvider.Provider.GetCurrent().IsSuperAdmin)
			{
				return;
			}
			if (!_needAuth)
			{
				return;
			}
			if (!string.IsNullOrEmpty(_authorize) && AuthorizeCheck(filterContext))
			{
				return;
			}
			if (!ActionAuthorize(filterContext))
			{
				OperatorProvider.Provider.EmptyCurrent("pc_").GetAwaiter().GetResult();
				//filterContext.HttpContext.Response.WriteAsync("<script>top.location.href ='" + filterContext.HttpContext.Request.PathBase + "/Home/Error?msg=403" + "';if(document.all) window.event.returnValue = false;</script>");
				filterContext.Result = new RedirectResult(filterContext.HttpContext.Request.PathBase + "/Home/Error?msg=403");
				return;
			}
		}

		private bool ActionAuthorize(ActionExecutingContext filterContext)
		{
			try
			{
				OperatorResult result = OperatorProvider.Provider.IsOnLine("pc_").GetAwaiter().GetResult();
				if (result.stateCode <= 0)
				{
					return false;
				}
				var action = GlobalContext.HttpContext.Request.Path;
				return GlobalContext.GetRequiredService<RoleAuthorizeService>().ActionValidate(action).GetAwaiter().GetResult();
			}
			catch (System.Exception ex)
			{
				LogHelper.WriteWithTime(ex);
				return false;
			}
		}

		private bool AuthorizeCheck(ActionExecutingContext filterContext)
		{
			try
			{
				OperatorResult result = OperatorProvider.Provider.IsOnLine("pc_").GetAwaiter().GetResult();
				if (result.stateCode <= 0)
				{
					return false;
				}
				return GlobalContext.GetRequiredService<RoleAuthorizeService>().ActionValidate(_authorize, true).GetAwaiter().GetResult();
			}
			catch (System.Exception ex)
			{
				LogHelper.WriteWithTime(ex);
				return false;
			}
		}
	}
}