<?php

namespace app\controller\v2;

use app\extra\basic\Base;
use app\extra\dyLife\Crypt;
use app\middleware\AuthMiddleware;
use app\model\saas\SaasUserOpen;
use DI\Attribute\Inject;
use LinFly\Annotation\Attributes\Route\Controller;
use LinFly\Annotation\Attributes\Route\Middleware;
use LinFly\Annotation\Attributes\Route\PostMapping;
use Shopwwi\WebmanAuth\Facade\Auth as AuthFacade;
use support\Request;
use support\Response;


#[Controller("/v2/auth"),Middleware(AuthMiddleware::class)]
class Auth extends Base
{

    protected array $noNeedLogin = ["loginMobile"];

    #[Inject]
    protected SaasUserOpen $model;


    /**
     * 手机号码
     * @param Request $request
     * @return Response
     */
    #[PostMapping("mobile")]
    public function loginMobile(Request $request): Response
    {
        try {
            $param = $this->_valid([
                "login.require"     => '获取登录参数失败',
                "code.default"      => '',
                "encryptedData.default"      => '',
                "iv.default"        => '',
            ],$request->method());
            if (!is_array($param)) return error($param);
            $sessionKey = (new Crypt)->config($this->getDyConfig())->getSessionKey($param['login']);
            if (empty($sessionKey)) return error("请重新进入再试");
            if (!empty($param['code'])) {
                $mobileStr = (new Crypt)->config($this->getDyConfig())->token()->getMobile($param['code']);
            } else {
                $data = $this->decrypt($param['encryptedData'],$sessionKey['session_key'],$param['iv']);
                $mobileStr = $data['purePhoneNumber'];
            }
            if (empty($mobileStr)) return error("授权信息获取失败");
            $map = ["openid" => $sessionKey['openid']];
            $user = $this->model->where($map)->findOrEmpty();
            if ($user->isEmpty()) {
                $map["create_ip"] = $request->getRealIp();
                $user->insertGetId($map);
            }
            $userAuth = get_object_vars(AuthFacade::guard("user")->login(['openid' => $sessionKey['openid']]));
            return success("ok",$userAuth);
        } catch (\Throwable $th) {
            return error($th->getMessage());
        }
    }


    protected function decrypt2code($private_key, $ciphertext_str) {
        // 解码 base64 密文
        $ciphertext = base64_decode($ciphertext_str);

        // 使用私钥解密
        openssl_private_decrypt($ciphertext, $plaintext, $private_key, OPENSSL_PKCS1_PADDING);

        if ($plaintext === false) {
            return [];
        }
        return json_decode($plaintext,true);
    }
    protected function decrypt($encrypted_data, $session_key, $iv) {
        $data = base64_decode($encrypted_data);
        $key = base64_decode($session_key);
        $iv_decoded = base64_decode($iv);
        // 使用 AES-256-CBC 模式解密
        $decrypted = openssl_decrypt($data, 'AES-128-CBC', $key, OPENSSL_RAW_DATA, $iv_decoded);

        return json_decode($decrypted,true);
    }

}