package v1

import (
	"strconv"
	"strings"

	"git.lzcwy.cn/zhengchiliu/zt-closet-manage-backend/internal/dto"
	"git.lzcwy.cn/zhengchiliu/zt-closet-manage-backend/internal/middleware"
	"git.lzcwy.cn/zhengchiliu/zt-closet-manage-backend/internal/service"
	"git.lzcwy.cn/zhengchiliu/zt-closet-manage-backend/pkg/app"
	"git.lzcwy.cn/zhengchiliu/zt-closet-manage-backend/pkg/errcode"
	"github.com/gin-gonic/gin"
)

// AdminHandler 管理员账号相关接口。
type AdminHandler struct {
	svc *service.AdminService
}

// NewAdminHandler 创建管理员 handler。
func NewAdminHandler() *AdminHandler {
	return &AdminHandler{svc: service.NewAdminService()}
}

// Login 管理员登录（公开）。
func (h *AdminHandler) Login(c *gin.Context) {
	response := app.NewResponse(c)
	var request dto.AdminLoginRequest
	if err := c.ShouldBindJSON(&request); err != nil {
		response.ToErrorResponse(errcode.InvalidParams.WithDetails(err.Error()))
		return
	}
	out, e := h.svc.Login(c.Request.Context(), &request)
	if e != nil {
		response.ToErrorResponse(e)
		return
	}
	response.ToResponse(out)
}

// RefreshToken 刷新 token（公开）。
func (h *AdminHandler) RefreshToken(c *gin.Context) {
	response := app.NewResponse(c)
	var request dto.AdminRefreshTokenRequest
	if err := c.ShouldBindJSON(&request); err != nil {
		response.ToErrorResponse(errcode.InvalidParams.WithDetails(err.Error()))
		return
	}
	out, e := h.svc.RefreshToken(c.Request.Context(), &request)
	if e != nil {
		response.ToErrorResponse(e)
		return
	}
	response.ToResponse(out)
}

// Logout 登出（需鉴权）。
func (h *AdminHandler) Logout(c *gin.Context) {
	response := app.NewResponse(c)
	var request struct {
		RefreshToken string `json:"refresh_token" binding:"required"`
	}
	if err := c.ShouldBindJSON(&request); err != nil {
		response.ToErrorResponse(errcode.InvalidParams.WithDetails(err.Error()))
		return
	}
	accessToken := bearerToken(c)
	if e := h.svc.Logout(c.Request.Context(), accessToken, request.RefreshToken); e != nil {
		response.ToErrorResponse(e)
		return
	}
	response.ToResponse(nil)
}

// ChangePassword 修改自己密码（需鉴权）。
func (h *AdminHandler) ChangePassword(c *gin.Context) {
	response := app.NewResponse(c)
	var request dto.AdminChangePasswordRequest
	if err := c.ShouldBindJSON(&request); err != nil {
		response.ToErrorResponse(errcode.InvalidParams.WithDetails(err.Error()))
		return
	}
	adminID, ok := middleware.GetAdminID(c.Request.Context())
	if !ok {
		response.ToErrorResponse(errcode.Unauthorized)
		return
	}
	if e := h.svc.ChangePassword(c.Request.Context(), adminID, &request); e != nil {
		response.ToErrorResponse(e)
		return
	}
	response.ToResponse(nil)
}

// List 管理员列表（仅超级管理员）。
func (h *AdminHandler) List(c *gin.Context) {
	response := app.NewResponse(c)
	var request dto.AdminListRequest
	if err := c.ShouldBindQuery(&request); err != nil {
		response.ToErrorResponse(errcode.InvalidParams.WithDetails(err.Error()))
		return
	}
	out, e := h.svc.List(c.Request.Context(), &request)
	if e != nil {
		response.ToErrorResponse(e)
		return
	}
	response.ToResponse(out)
}

// Create 创建管理员（仅超级管理员）。
func (h *AdminHandler) Create(c *gin.Context) {
	response := app.NewResponse(c)
	var request dto.AdminCreateRequest
	if err := c.ShouldBindJSON(&request); err != nil {
		response.ToErrorResponse(errcode.InvalidParams.WithDetails(err.Error()))
		return
	}
	out, e := h.svc.Create(c.Request.Context(), &request)
	if e != nil {
		response.ToErrorResponse(e)
		return
	}
	response.ToResponse(out)
}

// Update 更新管理员（仅超级管理员）。
func (h *AdminHandler) Update(c *gin.Context) {
	response := app.NewResponse(c)
	id, err := strconv.ParseInt(c.Param("id"), 10, 64)
	if err != nil || id <= 0 {
		response.ToErrorResponse(errcode.InvalidParams.WithDetails("非法管理员 ID"))
		return
	}
	var request dto.AdminUpdateRequest
	if err := c.ShouldBindJSON(&request); err != nil {
		response.ToErrorResponse(errcode.InvalidParams.WithDetails(err.Error()))
		return
	}
	adminID, ok := middleware.GetAdminID(c.Request.Context())
	if !ok {
		response.ToErrorResponse(errcode.Unauthorized)
		return
	}
	if e := h.svc.Update(c.Request.Context(), adminID, id, &request); e != nil {
		response.ToErrorResponse(e)
		return
	}
	response.ToResponse(nil)
}

// Delete 删除管理员（仅超级管理员）。
func (h *AdminHandler) Delete(c *gin.Context) {
	response := app.NewResponse(c)
	id, err := strconv.ParseInt(c.Param("id"), 10, 64)
	if err != nil || id <= 0 {
		response.ToErrorResponse(errcode.InvalidParams.WithDetails("非法管理员 ID"))
		return
	}
	adminID, ok := middleware.GetAdminID(c.Request.Context())
	if !ok {
		response.ToErrorResponse(errcode.Unauthorized)
		return
	}
	if e := h.svc.Delete(c.Request.Context(), adminID, id); e != nil {
		response.ToErrorResponse(e)
		return
	}
	response.ToResponse(nil)
}

// bearerToken 从 Authorization 头提取裸 token。
func bearerToken(c *gin.Context) string {
	authHeader := c.GetHeader("Authorization")
	parts := strings.SplitN(authHeader, " ", 2)
	if len(parts) == 2 && parts[0] == "Bearer" {
		return parts[1]
	}
	return ""
}