@Service
@RequiredArgsConstructor
public class UserDetailsServiceImpl implements UserDetailsService {


    private final SysUserMapper sysUserMapper;
    //用戶登錄請求/login，自動調(diào)用方法
    //根據(jù)用戶名獲取用戶信息
    //UserDetails 存儲用戶信息，包括用戶名，密碼，權(quán)限
    @Override
    public UserDetails loadUserByUsername(String username) throws UsernameNotFoundException {
        LambdaQueryWrapper<SysUser> wrapper = new LambdaQueryWrapper<>();
        wrapper.eq(SysUser::getUsername, username);
        SysUser sysUser = sysUserMapper.selectOne(wrapper);
        if (Objects.isNull(sysUser)){
            throw new UsernameNotFoundException("用戶名不存在");
        }
        //認(rèn)證成功回UserDetails對象

        return new LoginUser(sysUser);
    }


}

@ToString
public class LoginUser implements UserDetails {

    private SysUser sysUser;

    public LoginUser(SysUser sysUser) {
        this.sysUser = sysUser;
    }

    // 權(quán)限
    @Override
    public Collection<? extends GrantedAuthority> getAuthorities() {
        return List.of();
    }

    @Override
    public String getPassword() {
        return sysUser.getPassword();
    }

    @Override
    public String getUsername() {
        return sysUser.getUsername();
    }

    // 賬號是否過期
    @Override
    public boolean isAccountNonExpired() {
        return true;
    }

    // 賬號是否被鎖定
    @Override
    public boolean isAccountNonLocked() {
        return true;
    }

    // 密碼是否過期
    @Override
    public boolean isCredentialsNonExpired() {
        return true;
    }

    // 賬號是否可用
    @Override
    public boolean isEnabled() {
        return true;
    }
}

@RestController
@Tag(name = "認(rèn)證模塊", description = "認(rèn)證模塊")
@RequestMapping("/auth")
@RequiredArgsConstructor
public class AuthController {

    //注入AuthenticationManager（認(rèn)證管理器）
    private final AuthenticationManager authenticationManager;

    private final JwtUtils jwtUtils;

    @PostMapping("/login")
    @Operation(summary = "登錄")
    public Result login(@RequestParam("username") String username, @RequestParam("password") String password) {
        System.out.println(username + password);
        //登錄邏輯
        //調(diào)用UserDetailsService.loadUserByUsername方法獲取
        //不能直接調(diào)用，需要通過AuthenticationManager進(jìn)行認(rèn)證

        Authentication authentication = new UsernamePasswordAuthenticationToken(username, password);
        Authentication authenticate = null;
        try {
            authenticate = authenticationManager.authenticate(authentication);
        } catch (BadCredentialsException e) {
            return Result.failed(ResultCode.USERNAME_OR_PASSWORD_ERROR);
        }

        //認(rèn)證成功方法token
        String token=jwtUtils.generateToken(authenticate);
        return Result.success(token);
    }
}

@Configuration
@EnableWebSecurity // 開啟web安全
@EnableMethodSecurity
@RequiredArgsConstructor
public class SecurityConfig {

    private final IgnoredUrl ignoredUrl;


    /**
     * 配置認(rèn)證管理器 AuthenticationManager
     * 作用：用于身份認(rèn)證
     * 參數(shù)：UserDetailsService, PasswordEncoder
     */
    @Bean
    public AuthenticationManager authenticationManager(UserDetailsService userDetailsService, PasswordEncoder passwordEncoder) {
        DaoAuthenticationProvider provider = new DaoAuthenticationProvider();
        provider.setUserDetailsService(userDetailsService);
        provider.setPasswordEncoder(passwordEncoder);
        return new ProviderManager(provider);
    }

    /**
     * 密碼編碼器
     *
     * @return
     */
    @Bean
    public PasswordEncoder passwordEncoder() {
        return new BCryptPasswordEncoder();
    }


    @Bean
    public SecurityFilterChain securityFilterChain(HttpSecurity http) throws Exception {
        //關(guān)閉csrf防護(hù)，否則回導(dǎo)致登錄失敗
        http.csrf(a -> a.disable()); //禁用SCRF
        //配置安全攔截規(guī)則
        http.authorizeHttpRequests(req ->
                                   req.requestMatchers(ignoredUrl.getUrls())
                                   .permitAll()
                                   .anyRequest().authenticated());
        /**
         * 配置登錄頁
         */
        http.formLogin(form -> form
                       .loginPage("/")
                       .successForwardUrl("/index") //登錄成功跳轉(zhuǎn)頁面
                       .loginProcessingUrl("/login")//登錄處理url
                       .failureForwardUrl("/error") //登錄失敗跳轉(zhuǎn)頁面
                       //                .usernameParameter("name")//自定義用戶名參數(shù)
                       //                .passwordParameter("password")//自定義密碼參數(shù)
                      );

        return http.build();
    }
}

@Component
public class JwtUtils {

    @Value("${jwt.secret}")
    private String secret;
    @Value("${jwt.expiration}")
    private Integer expiration;

    /**
     *
     */

    public String generateToken(Authentication authentication) {
        Date now = new Date();
        Date expirationDate = DateUtil.offsetSecond(now, expiration);
        Map<String, Object> claims = new HashMap<>();
        claims.put("username", authentication.getName());//用戶名
        claims.put("exp", expirationDate);
        //        claims.put();
        return JWTUtil.createToken(claims, secret.getBytes());
    }
}

@Component
@Data
@ConfigurationProperties(prefix = "security.ignored")
@ToString
public class IgnoredUrl {

    private String[] urls;
}