// Package hgorm
// @Link  https://github.com/bufanyun/hotgo
// @Copyright  Copyright (c) 2022 HotGo CLI
// @Author  Ms <133814250@qq.com>
// @License  https://github.com/bufanyun/hotgo/blob/master/LICENSE
//
package hgorm

// 预处理
import (
	"fmt"
	"github.com/gogf/gf/v2/database/gdb"
	"github.com/gogf/gf/v2/frame/g"
	"github.com/gogf/gf/v2/text/gstr"
	"hotgo/internal/consts"
	"hotgo/internal/library/contexts"
	"hotgo/internal/model/entity"
	"hotgo/utility/tree"
)

// HandlerFilterAuth 过滤数据权限
// 通过上下文中的用户角色权限和表中是否含有需要过滤的字段附加查询条件
func HandlerFilterAuth(m *gdb.Model) *gdb.Model {
	var (
		needAuth    bool
		filterField string
		role        *entity.AdminRole
		ctx         = m.GetCtx()
		fields      = escapeFieldsToSlice(m.GetFieldsStr())
		co          = contexts.Get(ctx)
	)

	if co == nil || co.User == nil {
		return m
	}

	// 优先级：created_by > member_id
	if gstr.InArray(fields, "created_by") {
		needAuth = true
		filterField = "created_by"
	}

	if !needAuth && gstr.InArray(fields, "member_id") {
		needAuth = true
		filterField = "member_id"
	}

	if !needAuth {
		return m
	}

	err := g.Model("admin_role").Where("id", co.User.RoleId).Scan(&role)
	if err != nil {
		panic(fmt.Sprintf("failed to role information err:%+v", err))
	}

	if role == nil {
		panic("failed to role information roleModel == nil")
	}

	sq := g.Model("admin_member").Fields("id")

	switch role.DataScope {
	case consts.RoleDataAll: // 全部权限
		// ...
	case consts.RoleDataNowDept: // 当前部门
		m = m.WhereIn(filterField, sq.Where("dept_id", co.User.DeptId))
	case consts.RoleDataDeptAndSub: // 当前部门及以下部门
		m = m.WhereIn(filterField, sq.WhereIn("dept_id", GetDeptAndSub(co.User.DeptId)))
	case consts.RoleDataDeptCustom: // 自定义部门
		m = m.WhereIn(filterField, sq.WhereIn("dept_id", role.CustomDept.Var().Ints()))
	case consts.RoleDataSelf: // 仅自己
		m = m.Where(filterField, co.User.Id)
	case consts.RoleDataSelfAndSub: // 自己和直属下级
		m = m.WhereIn(filterField, GetSelfAndSub(co.User.Id))
	case consts.RoleDataSelfAndAllSub: // 自己和全部下级
		m = m.WhereIn(filterField, GetSelfAndAllSub(co.User.Id))

	default:
		panic("dataScope is not registered")
	}

	return m
}

// HandlerForceCache 强制缓存
func HandlerForceCache(m *gdb.Model) *gdb.Model {
	return m.Cache(gdb.CacheOption{Duration: -1, Force: true})
}

// escapeFieldsToSlice 将转义过的字段转换为字段集切片
func escapeFieldsToSlice(s string) []string {
	return gstr.Explode(",", gstr.Replace(gstr.Replace(s, "`,`", ","), "`", ""))
}

// GetDeptAndSub 获取指定部门的所有下级，含本部门
func GetDeptAndSub(deptId int64) (ids []int64) {
	array, err := g.Model("admin_dept").
		WhereLike("tree", "%"+tree.GetIdLabel(deptId)+"%").
		Fields("id").
		Array()
	if err != nil {
		return
	}

	for _, v := range array {
		ids = append(ids, v.Int64())
	}

	ids = append(ids, deptId)
	return
}

// GetSelfAndSub 获取直属下级，包含自己
func GetSelfAndSub(memberId int64) (ids []int64) {
	array, err := g.Model("admin_member").
		Where("pid", memberId).
		Fields("id").
		Array()
	if err != nil {
		return
	}

	for _, v := range array {
		ids = append(ids, v.Int64())
	}

	ids = append(ids, memberId)
	return
}

// GetSelfAndAllSub 获取全部下级，包含自己
func GetSelfAndAllSub(memberId int64) (ids []int64) {
	array, err := g.Model("admin_member").
		WhereLike("tree", "%"+tree.GetIdLabel(memberId)+"%").
		Fields("id").
		Array()
	if err != nil {
		return
	}

	for _, v := range array {
		ids = append(ids, v.Int64())
	}

	ids = append(ids, memberId)
	return
}