package middleware

import (
	"github.com/gin-gonic/gin"
	"hy2xs-admin/model/constant"
	"hy2xs-admin/model/vo"
	"hy2xs-admin/service"
	"strings"
)

func JWTHandler() gin.HandlerFunc {
	return func(c *gin.Context) {
		authHeader := c.Request.Header.Get("Authorization")
		if authHeader == "" {
			vo.Fail(constant.UnauthorizedError, c)
			c.Abort()
			return
		}
		parts := strings.SplitN(authHeader, " ", 2)
		if !(len(parts) == 2 && parts[0] == "Bearer") {
			vo.Fail(constant.IllegalTokenError, c)
			c.Abort()
			return
		}
		myClaims, err := service.ParseToken(parts[1])
		if err != nil {
			vo.Fail(err.Error(), c)
			c.Abort()
			return
		}
		admin, err := service.GetAdminForTokenValidation(myClaims.Admin.Id)
		if err != nil {
			vo.Fail(err.Error(), c)
			c.Abort()
			return
		}
		if admin.Status != nil && *admin.Status != 1 {
			vo.Fail("this account has been disabled", c)
			c.Abort()
			return
		}
		tokenVersion := int64(1)
		if admin.TokenVersion != nil && *admin.TokenVersion > 0 {
			tokenVersion = *admin.TokenVersion
		}
		if myClaims.Admin.TokenVersion != tokenVersion {
			vo.Fail(constant.IllegalTokenError, c)
			c.Abort()
			return
		}
		c.Next()
	}
}