package handler

import (
	"net/http"

	"github.com/gin-gonic/gin"
	"golang.org/x/crypto/bcrypt"
	"gorm.io/gorm"

	"github.com/wangjia/jiu/backend/internal/middleware"
	"github.com/wangjia/jiu/backend/internal/model"
)

type UserHandler struct {
	db *gorm.DB
}

func NewUserHandler(db *gorm.DB) *UserHandler {
	return &UserHandler{db: db}
}

// List GET /api/v1/users
func (h *UserHandler) List(c *gin.Context) {
	shopID := middleware.GetShopID(c)
	var users []model.User
	h.db.Where("shop_id = ? AND deleted_at IS NULL", shopID).
		Order("id ASC").Find(&users)
	c.JSON(http.StatusOK, gin.H{"data": users})
}

// Create POST /api/v1/users
func (h *UserHandler) Create(c *gin.Context) {
	shopID := middleware.GetShopID(c)
	var req struct {
		Username string `json:"username" binding:"required"`
		Password string `json:"password" binding:"required"`
		RealName string `json:"real_name"`
		Phone    string `json:"phone"`
		Role     string `json:"role"`
	}
	if err := c.ShouldBindJSON(&req); err != nil {
		c.JSON(http.StatusBadRequest, gin.H{"error": err.Error()})
		return
	}
	hash, err := bcrypt.GenerateFromPassword([]byte(req.Password), bcrypt.DefaultCost)
	if err != nil {
		c.JSON(http.StatusInternalServerError, gin.H{"error": "密码加密失败"})
		return
	}
	role := req.Role
	if role == "" {
		role = "operator"
	}
	u := model.User{
		TenantBase:   model.TenantBase{ShopID: shopID},
		Username:     req.Username,
		PasswordHash: string(hash),
		RealName:     req.RealName,
		Phone:        req.Phone,
		Role:         role,
		IsActive:     true,
	}
	if err := h.db.Create(&u).Error; err != nil {
		c.JSON(http.StatusBadRequest, gin.H{"error": "用户名已存在"})
		return
	}
	c.JSON(http.StatusCreated, gin.H{"data": u})
}

// Update PUT /api/v1/users/:id
func (h *UserHandler) Update(c *gin.Context) {
	shopID := middleware.GetShopID(c)
	var u model.User
	if err := h.db.Where("id = ? AND shop_id = ? AND deleted_at IS NULL", c.Param("id"), shopID).
		First(&u).Error; err != nil {
		c.JSON(http.StatusNotFound, gin.H{"error": "用户不存在"})
		return
	}
	var req struct {
		RealName string `json:"real_name"`
		Phone    string `json:"phone"`
		Role     string `json:"role"`
		IsActive *bool  `json:"is_active"`
	}
	c.ShouldBindJSON(&req)
	if req.RealName != "" {
		u.RealName = req.RealName
	}
	if req.Phone != "" {
		u.Phone = req.Phone
	}
	if req.Role != "" {
		u.Role = req.Role
	}
	if req.IsActive != nil {
		u.IsActive = *req.IsActive
	}
	h.db.Save(&u)
	c.JSON(http.StatusOK, gin.H{"data": u})
}

// ResetPassword PUT /api/v1/users/:id/reset-password
func (h *UserHandler) ResetPassword(c *gin.Context) {
	shopID := middleware.GetShopID(c)
	var u model.User
	if err := h.db.Where("id = ? AND shop_id = ? AND deleted_at IS NULL", c.Param("id"), shopID).
		First(&u).Error; err != nil {
		c.JSON(http.StatusNotFound, gin.H{"error": "用户不存在"})
		return
	}
	var req struct {
		Password string `json:"password" binding:"required"`
	}
	if err := c.ShouldBindJSON(&req); err != nil {
		c.JSON(http.StatusBadRequest, gin.H{"error": err.Error()})
		return
	}
	hash, err := bcrypt.GenerateFromPassword([]byte(req.Password), bcrypt.DefaultCost)
	if err != nil {
		c.JSON(http.StatusInternalServerError, gin.H{"error": "密码加密失败"})
		return
	}
	h.db.Model(&u).Update("password_hash", string(hash))
	c.JSON(http.StatusOK, gin.H{"message": "密码已重置"})
}