import hashlib
import json
import re
import time
from aiohttp import web
from base import Dict
from config.config_util import config
import dao
from domain import User, Role, Privilege
from FrontUtils import user2cookie
from exception import PrivilegeError

__author__ = 'thanatos'

from handlers import get, post, permission


@get('/victoria')
def index():
    blogs = [
        {'title': 'Bootstrap大法好啊', 'create_at': time.time() - 3600},
        {'title': 'Python是一门高效又优雅的语言', 'create_at': time.time() - 60},
        {'title': 'Java适合去开发企业级的应用', 'create_at': time.time() - 360460},
        {'title': '挖掘机学校哪家强！', 'create_at': time.time() - 8000},
        {'title': '机器学习与数据挖掘', 'create_at': time.time() - 4000}
    ]
    return {
        '__template__': 'victoria.html',
        'blogs': blogs
    }

@get('/')
def admin_index():
    return 'redirect:/static/tpls/admin/adminIndex.html'

@get('/register')
def register():
    return {
        '__template__': 'register.html'
    }

@get('/favicon.ico')
def favicon():
    return 'redirect:/static/favicon.ico'

_RE_EMAIL = re.compile(r'^[a-z0-9\.\-\_]+\@[a-z0-9\-\_]+(\.[a-z0-9\-\_]+){1,4}$')
COOKIE_NAME = config.cookie.name


@post('/register')
def register(*, name, email, password, request):
    errors = Dict()
    if not name or len(name) > 10:
        errors.name = '昵称填写有误'
    if not email or not _RE_EMAIL.match(email):
        errors.email = '邮箱填写错误'
    if not password:
        errors.password = '密码不能为空'
    users = yield from User.findAll('email=?', [email])
    if len(users) > 0:
        errors.user = '用户已注册'
    if errors:
        return {
            '__template__': 'register.html',
            'errors': errors
        }
    password = hashlib.md5(password.encode('utf-8')).hexdigest()
    user = User(name=name, email=email, password=password)
    yield from user.save()
    # make session cookie:
    r = web.Response()
    r.set_cookie(COOKIE_NAME, user2cookie(user, 86400), max_age=86400, httponly=True)
    referer = request.headers.get('Referer')
    r = web.HTTPFound(referer or '/')
    return r


@get('/login')
def login():
    return {
        '__template__': 'login.html'
    }


@post('/login')
def login(*, name, password, request):
    if not name or not password:
        return {
            'code': 1,
            'message': '邮箱或密码不能为空'
        }
    users = yield from User.findAll(name, where='name=?')
    if not users:
        return {
            'code': 1,
            'message': '没有此用户'
        }
    user = users[0]
    if user.password != hashlib.md5(password.encode('utf-8')).hexdigest():
        return {
            'code': 1,
            'message': '帐号或密码错误'
        }
    # authenticate ok, set cookie:
    r = web.Response(body=json.dumps({'code': 0}, ensure_ascii=False, default=lambda o: o.__dict__, allow_nan=False).encode('utf-8'))
    r.content_type = 'application/json;charset=utf-8'
    r.set_cookie(COOKIE_NAME, user2cookie(user, 86400), max_age=86400, httponly=True)
    return r


@get('/login_out')
def login_out():
    web.Response.set_cookie(COOKIE_NAME, '-deleted-', max_age=0, httponly=True)
    return {
        'code': 0
    }

@get('/admin/user/list')
@permission('admin:user.list')
def user_list(*, request, is_admin=False, current=1):
    """
    User列表
    :param is_admin: True查找admin用户列表，False查找非admin用户列表
    :return:
    """
    page = yield from User.page(current=current, cascade=True)
    if page.data:
        for user in page.data:
            user.remove('password', 'isAdmin')
            if user.roles:
                for role in user.roles:
                    role.reserve('id', 'name')
    return {
        'code': 0,
        'page': page
    }

@get('/admin/user/unique')
@permission('admin:user.unique')
def user_unique(*,request, uid):
    """
    根据用户id查找用户
    :param uid:
    :return:
    """
    user = yield from User.find(uid, fetchable=False, cascade=True)
    user.remove('password')
    return {
        'code': 0,
        'user': user
    }



@post('/admin/user/add')
@permission('admin:user.add')
def user_add(*, request, user=User, rids=None):
    """
    User添加
    :param user:
    :return:
    """
    user.password = hashlib.md5(user.password.encode('utf-8')).hexdigest()
    yield from user.save()
    if rids:
        for rid in rids:
            yield from dao.execute('INSERT INTO User_Role(user_id, role_id) VALUES(?,?)', (user.id, rid))
    print('user add --> %s ' % user)
    return {
        'code': 0,
        'message': '添加成功'
    }


@post('/admin/role/add')
@permission('admin:role.add')
def role_add(*, request, role=Role):
    """
    Role添加
    :param role:
    :return:
    """
    yield from role.save()
    return {
        'code': 0,
        'message': '添加成功'
    }


@post('/admin/privilege/add')
@permission('admin:privilege.add')
def privilege_add(*, request, privilege=Privilege, parent_id=None):
    """
    Privilege添加
    :param privilege:
    :return:
    """
    privilege.parent = parent_id
    yield from privilege.save()
    return {
        'code': 0,
        'message': '添加成功'
    }


@post('/admin/{model}/delete')
def model_delete(*, model, uid, request):
    """
    User, Role, Privilege的删除操作
    :param model: 由URL决定操作的对象
    :param uid: 传JSON格式的数组
    :return:
    """
    if not uid:
        return {
            'code': 1,
            'message': '没有id值'
        }
    if model == 'user':
        if not request.__user__.access('admin:user.delete'):
            raise PrivilegeError()
        user = User(id=uid)
        yield from dao.execute('DELETE FROM User_Role WHERE user_id=?', user.id)
        yield from user.prune()
    if model == 'role':
        if not request.__user__.access('admin:role.delete'):
            raise PrivilegeError()
        role = Role(id=uid)
        yield from dao.execute('DELETE FROM User_Role WHERE role_id=?', role.id)
        yield from dao.execute('DELETE FROM Role_Privilege WHERE role_id=?', role.id)
        yield from role.prune()
    if model == 'privilege':
        if not request.__user__.access('admin:privilege.delete'):
            raise PrivilegeError()
        privilege = Privilege(id=uid)
        yield from dao.execute('DELETE FROM Role_Privilege WHERE privilege_id=?', privilege.id)
        yield from privilege.prune()
    return {
        'code': 0
    }


@post('/admin/user/update')
@permission('admin:user.update')
def user_update(*, request, user=User, rids):
    """
    用户信息更新
    :param user: name, email, telephone, role
    :param rids:
    :return:
    """
    if user.id is None:
        return {
            'code': 1
        }
    yield from user.renew('name', 'email', 'telephone')
    yield from dao.execute('DELETE FROM User_Role WHERE user_id=?', user.id)
    if rids is not None and rids:
        for rid in rids:
            yield from dao.execute('INSERT INTO User_Role(user_id, role_id) VALUES(?,?)', (user.id, rid))
    return {
        'code': 0,
        'message': '更新成功'
    }

@post('/admin/role/update')
@permission('admin:role.update')
def role_update(*, request, role=Role, pids):
    """
    更新角色信息
    :param role:
    :param pids:
    :return:
    """
    if role.id is None:
        return {
            'code': 1
        }
    yield from role.renew('name', 'description')
    yield from dao.execute('DELETE FROM Role_Privilege WHERE role_id=?', role.id)
    if pids is not None and pids:
        for pid in pids:
            yield from dao.execute('INSERT INTO Role_Privilege(role_id, privilege_id) VALUES(?,?)', (role.id, pid))
    return {
        'code': 0,
        'message': '更新成功'
    }


@get('/admin/role/list')
@permission('admin:role.list')
def role_list(*, request, page_num=1):
    """
    角色列表
    :param page_num:
    :return:
    """
    page = yield from Role.page(current=page_num)
    return {
        'code': 0,
        'page': page
    }

@get('/admin/role/unique')
@permission('admin:role.unique')
def role_unique(*, request, rid):
    """
    得到这个角色对象以及它所有的权限
    :param rid:
    :return:
    """
    role = yield from Role.find(rid)
    sqls = ['SELECT p.* FROM Role_Privilege AS rp',
            'JOIN Privilege AS p',
            'ON p.id = rp.privilege_id AND rp.role_id=?']
    privileges = yield from Privilege.select(role.id, sql=' '.join(sqls + ['AND p.parent_id IS NULL']))

    def find_children(ps):
        for p in ps:
            children = yield from Privilege.select(role.id, p.id, sql=' '.join(sqls + ['AND p.parent_id=?']))
            if children:
                p.children = children
                yield from find_children(children)
    if privileges:
        yield from find_children(privileges)
        role.privileges = privileges
    return {
        'code': 0,
        'role': role
    }


@get('/admin/role/simple/list')
@permission('admin:role.simple-list')
def role_simple_list(*, request):
    """
    角色下拉菜单，只返回所有Role的id,name
    :return:
    """
    roles = yield from Role.select(sql='SELECT id,name FROM Role')
    return {
        'code': 0,
        'roles': roles
    }


@get('/admin/privilege/list')
@permission('admin:privilege.list')
def privilege_list(*, request):
    """
    Privilege列表
    :return:
    """
    privileges = yield from Privilege.findAll(where='parent_id IS NULL', fetchable=False)
    yield from Privilege.find_children(privileges)
    return {
        'code': 0,
        'privileges': privileges
    }

@get('/admin/privilege/unique')
@permission('admin:privilege.unique')
def privilege_unique(*, request, pid):
    """
    得到单个权限对象以及他的全部子权限
    :param pid:
    :return:
    """
    privilege = yield from Privilege.find(pid, fetchable=True)
    yield from Privilege.find_children(privilege)
    return {
        'code': 0,
        'privilege': privilege
    }

@post('/admin/privilege/update')
@permission('admin:privilege.update')
def privilege_update(*, request, privilege=Privilege):
    """
    更新权限信息
    :param privilege:
    :return:
    """
    if privilege[Privilege.__key__] is None:
        return {
            'code': 1
        }
    yield from privilege.renew()
    return {
        'code': 0,
        'message': '更新成功'
    }

@post('/admin/{model}/batch/delete')
def batch_delete(*, request, model, ids):
    """
    User,Role,Privilege批量删除
    :param model: 由URL决定，user,role,privilege
    :param ids: 传JSON格式的数组
    :return:
    """
    if isinstance(ids, list):
        for uid in ids:
            yield from model_delete(model=model, uid=uid, request=request)
        return {
            'code': 0,
            'message': '删除成功'
        }
    else:
        return {
            'code': 1
        }


@post('/admin/user/add/role')
@permission('admin:user.add-role')
def user_add_role(*, request, uid, rids):
    """
    为用户添加角色
    :param uid: 用户id
    :param rids: 角色id
    :return:
    """
    if uid and rids:
        for rid in rids:
            yield from dao.execute('INSERT INTO User_Role(user_id, role_id) VALUES(?,?)', uid, rid)
    return {
        'code': 0,
        'message': '添加成功'
    }


@post('/admin/role/add/privilege')
@permission('admin:role.add-privilege')
def role_add_privilege(*, request, rid, pids):
    """
    为角色添加权限
    :param rid: 角色id
    :param pids: 权限id
    :return:
    """
    if rid and pids:
        for pid in pids:
            yield from dao.execute('INSERT INTO Role_Privilege(role_id, privilege_id) VALUES(?,?)', (rid, pid))
    return {
        'code': 0,
        'message': '添加成功'
    }


@get('/admin/user/get/privilege')
def user_get_privilege(*, request):
    """
    用户获得自己可使用权限
    :return:
    """
    sqls = ['SELECT privilege_id AS id, privilege_name AS name, privilege_url AS url',
            'FROM User_Role_Privilege WHERE privilege_is_display=1 AND user_id=?']
    privileges = yield from dao.select(' '.join(sqls + ['AND privilege_parent_id IS NULL']), request.__user__.id)

    privileges = yield from Privilege.transfer(privileges, False, False)

    def find_children(ps):
        for p in ps:
            children = yield from Privilege.select(request.__user__.id, p.id, sql=' '.join(sqls + ['AND privilege_parent_id=?']))
            if children:
                p.children = children
                yield from find_children(children)
    if privileges:
        yield from find_children(privileges)
    return {
        'code': 0,
        'privileges': privileges
    }