/**
    * 
    */
   package gboat2.web.service.impl;
   
   import gboat2.base.bridge.GboatAppContext;
   import gboat2.base.bridge.model.NaviResource;
   import gboat2.base.bridge.model.Priority;
   import gboat2.base.bridge.model.Resource;
  import gboat2.base.bridge.model.UserSession;
  import gboat2.base.core.cache.ICacheService;
  import gboat2.base.core.logging.IBusinessLogService;
  import gboat2.base.core.logging.Level;
  import gboat2.base.core.model.Opera;
  import gboat2.base.core.service.IModuleService;
  import gboat2.web.Constants;
  import gboat2.web.business.IAuthorityBusiness;
  import gboat2.web.business.IDataLevelBusiness;
  import gboat2.web.business.IShortcutBusiness;
  import gboat2.web.business.ISystemConfigBusiness;
  import gboat2.web.business.IUserBusiness;
  import gboat2.web.model.AuthorityDataLevelResourceVO;
  import gboat2.web.model.AuthorityOperationResourceVO;
  import gboat2.web.model.AuthorityResourceVO;
  import gboat2.web.model.DataLevel;
  import gboat2.web.model.Group;
  import gboat2.web.model.Role;
  import gboat2.web.model.SystemConfig;
  import gboat2.web.model.User;
  import gboat2.web.model.UserGroupOrganMapper;
  import gboat2.web.service.ISessionService;
  import gboat2.web.service.PrivilegeException;
  
  import java.util.ArrayList;
  import java.util.HashMap;
  import java.util.Iterator;
  import java.util.LinkedList;
  import java.util.List;
  import java.util.Map;
  import java.util.Set;
  
  import javax.servlet.http.HttpServletRequest;
  
  import org.apache.commons.lang3.StringUtils;
  import org.springframework.beans.factory.annotation.Autowired;
  
  /**
   * @author zhaop
   * 
   */
  public class SessionServiceImpl implements ISessionService {
  
  	@Autowired
  	private IUserBusiness userService;
  
  	@Autowired
  	private IAuthorityBusiness authorityService;
  
  	@Autowired
  	private IModuleService moduleService;
  
  	@Autowired
  	private IBusinessLogService loggerService;
  
  	@Autowired
  	private ICacheService cacheSer;
  
  	@Autowired
  	private IDataLevelBusiness dataLevelService;
  	
  	@Autowired
  	private ISystemConfigBusiness systemService;
  
  	/** 快捷图标服务*/
  	@Autowired
  	private IShortcutBusiness shortcutService;
  	
  	/*
  	 * (non-Javadoc)
  	 * 
  	 * @see gboat2.web.service.ISessionService#getGroupByCode(java.lang.String)
  	 */
  	@Override
  	public Group getGroupByCode(String groupCode) {
  
  		return null;
  	}
  
  	/*
  	 * (non-Javadoc)
  	 * 
  	 * @see gboat2.web.service.ISessionService#getRoleByCode(java.lang.String)
  	 */
  	@Override
  	public Role getRoleByCode(String roleCode) {
  		// TODO Auto-generated method stub
  		return null;
  	}
  
 	/** 
 	  * {@inheritDoc}   
 	  * @see gboat2.web.service.ISessionService#getDeniedPriority(javax.servlet.http.HttpServletRequest) 
 	  */
 	public Map<String, List<String>> getDeniedPriority(HttpServletRequest request) {
 		UserSession session = GboatAppContext.getUserSession();
 		if (null == session || null == session.getPriority()) {
 			return null;
 		}
 		Set<String> actionNames = session.getPriority().getPriorityActionNames();
 		if (null == actionNames) {
 			return null;
 		}
 
 		Map<String, List<String>> deniedPriority = new HashMap<String, List<String>>();
 		for (String actionName : actionNames) {
 			List<String> operaCodes = getAnnotatedOperasByAction(actionName);
 			if (null != operaCodes) {
 				List<String> deniedCodes = new ArrayList<String>(operaCodes.size());
 				for (String code : operaCodes) {
 					if (!session.havePriority(new Resource(actionName, code))) {//如果无权限，则加入禁止列表
 						deniedCodes.add(code);
 					}
 				}
 				deniedPriority.put(actionName, deniedCodes);
 			}
 		}
 
 		return deniedPriority;
 	}
 
 	private List<String> getAnnotatedOperasByAction(String actionName) {
 		List<String> tmpMethods = new ArrayList<String>();
 		List<Opera> tmpOperaList = moduleService.getOperaByAction(actionName);
 		if (null != tmpOperaList) {
 			for (Opera opera : tmpOperaList) {
 				tmpMethods.add(opera.getCode());
 			}
 		}
 		return tmpMethods;
 	}
 
 	/*
 	 * (non-Javadoc)
 	 * 
 	 * @see gboat2.web.service.ISessionService#login(java.lang.String,
 	 * java.lang.String)
 	 */
 	@Override
 	public UserSession login(String loginId, String passwd) {
 		// TODO Auto-generated method stub
 		return null;
 	}
 
 	/*
 	 * (non-Javadoc)
 	 * 
 	 * @see gboat2.web.service.ISessionService#login(java.lang.String,
 	 * java.lang.String, java.lang.String)
 	 */
 	@Override
 	public UserSession login(String userId, String groupId, String roleId, String systemId) throws PrivilegeException {
 		User user = (User) userService.get(User.class, userId);
 		UserSession userSession = null;
 		if (user != null) {
 			List<UserGroupOrganMapper> statusList = userService.getURGOMapperByUserId(user.getUserId());
 			UserGroupOrganMapper status = null;
 			for (UserGroupOrganMapper m : statusList) {
 				if (groupId.equals(m.getGroupId()) && roleId.equals(m.getRoleId())) {
 					status = m;
 					break;
 				}
 			}
 			if (user != null && status != null) {
 				/**修改成获取全部系统角色权限的方式 2014-05-25**/
 				//userSession = login(user, status, systemId);
 				userSession = login(user, status);
 			} else {
 				throw new PrivilegeException("无法获取到用户的有效身份!");
 			}
 		} else {
 			throw new PrivilegeException("用户不存在!");
 		}
 		return userSession;
 	}
 
 	/*
 	 * (non-Javadoc)
 	 * 
 	 * @see gboat2.web.service.ISessionService#login(gboat2.web.model.User,
 	 * gboat2.web.model.UserGroupOrganMapper)
 	 */
 	@Override
 	public UserSession login(User user, UserGroupOrganMapper status, String systemId) throws PrivilegeException {
 		UserSession userSession = new UserSession();
 		userSession.setUserId(user.getUserId());
 		userSession.setSystemId(systemId);
 		userSession.setLoginId(user.getLoginId());
 		userSession.setUserNameZh(user.getUserNameZh());
 		userSession.setUserNameEn(user.getUserNameEn());
 		userSession.setOrganId(status.getOrganId());
 		userSession.setOrganType(status.getOrganType());
 		Group group = (Group) userService.get(Group.class, status.getGroupId());
 		//userSession.setGroup(group);
 		//userSession.setRole((Role) userService.get(Role.class, status.getRoleId()));
 		userSession.setGroupCode(group.getGroupCode());
 		userSession.setRoleCode(((Role) userService.get(Role.class, status.getRoleId())).getRoleCode());
 		// userSession.setRoleId(status.getRoleId());
 
 		String authForId = status.getGroupId() + "." + status.getRoleId() + "." + status.getUserId();
 		boolean UserCustomize = authorityService.isAuthorityCustomize(authForId, systemId);
 		Priority prioity = null;
 		Map<String, DataLevel> allDataLevel = new HashMap<String, DataLevel>();
 		//获取数据权限
 		Map<String, String> dataLevel = this.fetchDataLevelPriority(status.getGroupId(), status.getRoleId(), systemId);
 		List<DataLevel> dataLevels = dataLevelService.findAllDataLevel();
 		for (DataLevel item : dataLevels) {
 			allDataLevel.put(item.getLevelId(), item);
 		}
 
 		if (UserCustomize) {//用户是否定制过权限
 			prioity = buildPriority(systemId, group, authForId, dataLevel);
 			userSession.setPriority(prioity);
 		} else {
 			//缓存权限
 			String cacheKey = status.getGroupId() + "." + status.getRoleId() + "-" + systemId;
 			prioity = (Priority) this.cacheSer.get(Constants.PRIORITY_CACHE_CATALOG, cacheKey);
 			if (null == prioity) {
 				authForId = this.computeAuthForId(status.getGroupId(), status.getRoleId(), systemId);
 				prioity = buildPriority(systemId, group, authForId, dataLevel);
 				// 缓存
 				// 需要在【设置权限】和【设置数据级别】的时候清空缓存
 				this.cacheSer.put(Constants.PRIORITY_CACHE_CATALOG, cacheKey, prioity);
 			}
 			userSession.setPriority(prioity);
 		}
 
 		loggerService.log(Level.DEBUG, "用户登录", "用户登录 ： " + user.getUserNameZh());
 
 		return userSession;
 	}
 	
 	public UserSession login(User user, UserGroupOrganMapper status) throws PrivilegeException{
 		UserSession userSession = new UserSession();
 		userSession.setUserId(user.getUserId());
 		userSession.setLoginId(user.getLoginId());
 		userSession.setUserNameZh(user.getUserNameZh());
 		userSession.setUserNameEn(user.getUserNameEn());
 		userSession.setOrganId(status.getOrganId());
 		userSession.setOrganType(status.getOrganType());
 		Group group = (Group) userService.get(Group.class, status.getGroupId());
 		userSession.setGroupCode(group.getGroupCode());
 		userSession.setRoleCode(((Role) userService.get(Role.class, status.getRoleId())).getRoleCode());
 		// userSession.setRoleId(status.getRoleId());
 
 		List<SystemConfig> systems = systemService.getAllSystemConfig();
 		
 		String systemId;
 		Priority allPriority = new Priority(group.getDefaultDataLevel());
 		boolean havePriority = false;
 		for(SystemConfig system : systems){
 			try{
 				systemId = system.getSystemId();
 				String authForId = status.getGroupId() + "." + status.getRoleId() + "." + status.getUserId();
 				boolean UserCustomize = authorityService.isAuthorityCustomize(authForId, systemId);
 				Priority priority = null;
 				Map<String, DataLevel> allDataLevel = new HashMap<String, DataLevel>();
 				//获取数据权限
 				Map<String, String> dataLevel = this.fetchDataLevelPriority(status.getGroupId(), status.getRoleId(), systemId);
 				List<DataLevel> dataLevels = dataLevelService.findAllDataLevel();
 				for (DataLevel item : dataLevels) {
 					allDataLevel.put(item.getLevelId(), item);
 				}
 		
 				if (UserCustomize) {//用户是否定制过权限
 					priority = buildPriority(systemId, group, authForId, dataLevel);
 					userSession.setPriority(priority);
 				} else {
 					//缓存权限
 					String cacheKey = status.getGroupId() + "." + status.getRoleId() + "-" + systemId;
 					priority = (Priority) this.cacheSer.get(Constants.PRIORITY_CACHE_CATALOG, cacheKey);
 					if (null == priority) {
 						authForId = this.computeAuthForId(status.getGroupId(), status.getRoleId(), systemId);
 						priority = buildPriority(systemId, group, authForId, dataLevel);
 						// 缓存
 						// 需要在【设置权限】和【设置数据级别】的时候清空缓存
 						if (null != priority) {
 							this.cacheSer.put(Constants.PRIORITY_CACHE_CATALOG, cacheKey, priority);
 						}
 					}
 				}
 				if (null != priority) {
 					allPriority.appendPriority(priority);
 					havePriority = true;
 				}
 			} catch(Exception e){
 				//ignore here,adjust after all checked
 				System.out.println("权限异常:"+e.getMessage());
 			}
 		}
 		
 		if(!havePriority){
 			throw new PrivilegeException("没有当前系统的任何模块权限!");
 		}
 
 		userSession.setPriority(allPriority);
 		loggerService.log(Level.DEBUG, "用户登录", "用户登录 ： " + user.getUserNameZh());
 
 		return userSession;
 	}
 
 	/**
 	 * 工具权限对象
 	 * @param systemId
 	 * @param group
 	 * @param authForId
 	 * @param dataLevel
 	 * @return
 	 * @throws PrivilegeException
 	 */
 	private Priority buildPriority(String systemId, Group group, String authForId, Map<String, String> dataLevel) {
 		Priority prioity;
 		prioity = new Priority(group.getDefaultDataLevel());
 		//设置操作权限
 		List<AuthorityOperationResourceVO> aORlist = authorityService.getAuthorityOperationResource(authForId, systemId);
 		if (null != aORlist && aORlist.size() > 0) {
 			//记录全操作权限的Action类，当出现对同Action的单方法权限控制时，移除全操作权限
 			List<String> addedAllActions = new LinkedList<String>();
 			for (AuthorityOperationResourceVO vo : aORlist) {
 				if (StringUtils.isEmpty(vo.getOperationCode())) {
 					prioity.addAllOperationPriorityOf(vo.getActionClass());
 					addedAllActions.add(vo.getActionClass());
 				} else {
 					prioity.addOperationPriority(vo.getActionClass(), vo.getOperationCode());
 					if(addedAllActions.contains(vo.getActionClass())){
 						prioity.removeAllOperationProrityOf(vo.getActionClass());
 						addedAllActions.remove(vo.getActionClass());
 					}
 				}
 			}
 		} else {
 			// ignore 
 			//throw new PrivilegeException("没有当前系统的任何模块权限!");
 			return null;
 		}
 
 		//设置数据权限
 		if (null != dataLevel) {
 			for (Map.Entry<String, String> entry : dataLevel.entrySet()) {
 				String levelId = entry.getValue();
 				DataLevel level = (DataLevel) dataLevelService.get(DataLevel.class, levelId);
 				prioity.addDataPriority(entry.getKey(), level.getLevelCode());
 			}
 		}
 		return prioity;
 	}
 
 	@Override
 	public String computeAuthForId(String groupId, String roleId, String systemId) {
 		List<AuthorityResourceVO> groupRoleAuthority = authorityService.getAuthorityByStatus(groupId + "." + roleId, systemId);
 		if (groupRoleAuthority.size() == 0) {
 			return roleId;
 		} else {
 			return groupId + "." + roleId;
 		}
 	}
 
 	/**
 	 * 获取DataLevelPriority
 	 * 
 	 * @param groupId 用户组id
 	 * @param roleId 角色id
 	 * @return 数据级别
 	 */
 	private Map<String, String> fetchDataLevelPriority(String groupId, String roleId, String systemId) {
 		List<AuthorityDataLevelResourceVO> dataLevelPriority = authorityService.getAuthorityDataLevelResource(groupId, roleId, systemId);
 		Map<String, String> dataLevel = new HashMap<String, String>();
 		if (null != dataLevelPriority) {
 			for (AuthorityDataLevelResourceVO vo : dataLevelPriority) {
 				dataLevel.put(vo.getActionClass(), vo.getDataLevel());
 			}
 		}
 		return dataLevel;
 	}
 
 	/* (non-Javadoc)
 	 * @see gboat2.web.service.ISessionService#loadNavigationMenuToSession(gboat2.base.bridge.model.UserSession, gboat2.web.model.UserGroupOrganMapper)
 	 */
 	@Override
 	public UserSession loadNavigationMenuToSession(UserSession userSession, UserGroupOrganMapper mapper) {
 		String authForId = mapper.getGroupId() + "." + mapper.getRoleId();
 		if(authorityService.isAuthorityCustomize(authForId + "."+userSession.getUserId(),userSession.getSystemId())){//用户定制
 			authForId = authForId + "."+userSession.getUserId();
 		}
 		String systemIdtemp = userSession.getSystemId();
 		gboat2.web.model.Resource root = shortcutService.findResourceTreeForRoleOfGroup(authForId,systemIdtemp);
 		NaviResource navi = new NaviResource();
 		userSession.setAttribute(UserSession.NAVIGATION_MENU, covertToNaviResource(navi,root));
 		return userSession;
 	}
 	
 	private NaviResource covertToNaviResource(NaviResource navi, gboat2.web.model.Resource resource){
 		NaviResource naviResource = covertNaviResource(resource);
 		navi.addChild(naviResource);
 		if(resource.getChildren() != null && resource.getChildren().size()>0){
 			Iterator<gboat2.web.model.Resource> iterator = resource.getChildren().iterator();
 			while(iterator.hasNext()){
 				covertToNaviResource(naviResource, iterator.next());
 			}
 		}
 		return navi;
 	}
 	
 	private NaviResource covertNaviResource(gboat2.web.model.Resource resource){
 		NaviResource navi = new NaviResource();
 		navi.setResId(resource.getResId());
 		navi.setResName(resource.getResName());
 		navi.setResUrl(resource.getResUrl());
 		navi.setSystemId(resource.getSystemId());
 		navi.setType(resource.getType());
 		navi.setLeaf(resource.getLeaf());
 		navi.setMainMenu(resource.getMainMenu());
 		navi.setResCode(resource.getResCode());
 		return navi;
 	}
 }