const axios = require('axios');
const CryptoJS = require('crypto-js');
const NodeRSA = require('node-rsa');

// 配置信息
const CONFIG = {
    BASE_URL: 'http://localhost/dev-api',
    LOGIN_ENDPOINT: '/auth/login',
    CLIENT_ID: 'e5cd7e4891bf95d1d19206ce24a7b32e',
    TENANT_ID: '000000',
    REFERER: 'http://localhost/login?redirect=%252Findex',
    // RSA公钥
    RSA_PUBLIC_KEY:
        'MFwwDQYJKoZIhvcNAQEBBQADSwAwSAJBAKoR8mX0rGKLqzcWmOzbfj64K8ZIgOdHnzkXSOVOZbFu/TJhZ7rFAN+eaGkl3C4buccQd/EjEsj9ir7ijT7h96MCAwEAAQ==',
};

// 默认登录凭据
const CREDENTIALS = {
    username: 'admin',
    password: 'admin123',
};

/**
 * 生成随机AES密钥
 */
function generateRandomAESKey(length = 32) {
    const characters = 'ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789';
    let result = '';
    for (let i = 0; i < length; i++) {
        result += characters.charAt(Math.floor(Math.random() * characters.length));
    }
    return result;
}

/**
 * AES加密数据
 */
function encryptWithAES(data, key) {
    const keyUtf8 = CryptoJS.enc.Utf8.parse(key);
    const encrypted = CryptoJS.AES.encrypt(data, keyUtf8, {
        mode: CryptoJS.mode.ECB,
        padding: CryptoJS.pad.Pkcs7,
    });
    return encrypted.toString();
}

/**
 * RSA加密AES密钥
 */
function encryptAESKeyWithRSA(aesKey) {
    try {
        const pemKey = `-----BEGIN PUBLIC KEY-----\n${CONFIG.RSA_PUBLIC_KEY}\n-----END PUBLIC KEY-----`;
        const rsaKey = new NodeRSA(pemKey);
        rsaKey.setOptions({ encryptionScheme: 'pkcs1' });

        // 将AES密钥转为Base64
        const aesKeyBase64 = CryptoJS.enc.Base64.stringify(CryptoJS.enc.Utf8.parse(aesKey));

        // RSA加密
        return rsaKey.encrypt(aesKeyBase64, 'base64');
    } catch (error) {
        console.error('RSA加密失败:', error.message);
        return null;
    }
}

/**
 * 自定义Header登录 - 按照用户要求
 */
async function customHeaderLogin(credentials = CREDENTIALS) {
    console.log('🔐 开始自定义Header登录...');
    console.log('📍 接口地址:', CONFIG.BASE_URL + CONFIG.LOGIN_ENDPOINT);

    try {
        // 1. 生成AES密钥
        const aesKey = generateRandomAESKey(32);
        console.log('🔑 生成AES密钥:', aesKey);

        // 2. 准备登录数据
        const loginData = {
            tenantId: CONFIG.TENANT_ID,
            username: credentials.username,
            password: credentials.password,
            clientId: CONFIG.CLIENT_ID,
            grantType: 'password',
        };

        console.log('📋 登录数据:', JSON.stringify(loginData, null, 2));

        // 3. AES加密登录数据
        const encryptedData = encryptWithAES(JSON.stringify(loginData), aesKey);
        console.log('🔐 AES加密后数据长度:', encryptedData.length);

        // 4. RSA加密AES密钥
        const encryptedKey = encryptAESKeyWithRSA(aesKey);
        if (!encryptedKey) {
            throw new Error('RSA加密AES密钥失败');
        }
        console.log('🔑 RSA加密后密钥长度:', encryptedKey.length);

        // 5. 按照用户要求设置Header
        const headers = {
            'Content-Type': 'application/json;charset=utf-8',
            clientid: CONFIG.CLIENT_ID, // 用户要求的clientid
            'encrypt-key': encryptedKey, // 用户要求的encrypt-key
            referer: CONFIG.REFERER, // 用户要求的referer
            'Accept-Language': 'zh-CN,zh;q=0.9,en;q=0.8',
            isToken: 'false',
            isEncrypt: 'true',
            repeatSubmit: 'false',
        };

        console.log('📤 请求头设置:');
        console.log('   - clientid:', headers.clientid);
        console.log('   - encrypt-key:', encryptedKey.substring(0, 50) + '...');
        console.log('   - referer:', headers.referer);
        console.log('   - Content-Type:', headers['Content-Type']);

        // 6. 发送登录请求
        console.log('\n🚀 发送登录请求...');
        const response = await axios.post(CONFIG.BASE_URL + CONFIG.LOGIN_ENDPOINT, encryptedData, {
            headers: headers,
            timeout: 10000,
        });

        // 7. 处理响应
        console.log('✅ 请求成功!');
        console.log('📊 响应状态:', response.status);
        console.log('📄 响应数据:', JSON.stringify(response.data, null, 2));

        // 8. 提取Token
        if (response.data.code === 200 && response.data.data?.access_token) {
            const token = response.data.data.access_token;
            console.log('\n🎯 成功获取Token!');
            console.log('🎫 Token:', token);
            console.log('🎫 Token长度:', token.length);
            console.log('🎫 Token前50字符:', token.substring(0, 50) + '...');

            // 测试Token有效性
            await testTokenValidity(token);

            return {
                success: true,
                token: token,
                data: response.data,
            };
        } else {
            console.log('⚠️ 登录请求成功，但未获取到Token');
            console.log('❌ 错误信息:', response.data.msg);
            return {
                success: false,
                error: response.data.msg || 'Unknown error',
                data: response.data,
            };
        }
    } catch (error) {
        console.log('❌ 登录失败!');

        if (error.response) {
            console.log('📊 错误状态码:', error.response.status);
            console.log('📄 错误响应:', JSON.stringify(error.response.data, null, 2));

            // 特殊错误处理
            if (error.response.status === 500) {
                console.log('💡 提示: 这可能是服务器端加密处理问题');
            } else if (error.response.status === 403) {
                console.log('💡 提示: 这是权限配置问题，需要联系管理员');
            }
        } else if (error.request) {
            console.log('🌐 网络错误，请检查服务器是否启动');
            console.log('📡 请求详情:', error.message);
        } else {
            console.log('⚙️ 请求配置错误:', error.message);
        }

        return {
            success: false,
            error: error.response?.data || error.message,
        };
    }
}

/**
 * 测试Token有效性
 */
async function testTokenValidity(token) {
    console.log('\n🧪 测试Token有效性...');

    try {
        const response = await axios.get(CONFIG.BASE_URL + '/system/user/getInfo', {
            headers: {
                Authorization: `Bearer ${token}`,
                clientid: CONFIG.CLIENT_ID,
                referer: CONFIG.REFERER,
                'Accept-Language': 'zh-CN,zh;q=0.9,en;q=0.8',
            },
            timeout: 10000,
        });

        console.log('✅ Token有效! 用户信息获取成功');
        console.log('👤 用户信息:', JSON.stringify(response.data, null, 2));
        return true;
    } catch (error) {
        console.log('❌ Token测试失败');
        if (error.response) {
            console.log('📊 错误状态码:', error.response.status);
            console.log('📄 错误信息:', error.response.data);
        } else {
            console.log('🌐 网络错误:', error.message);
        }
        return false;
    }
}

/**
 * 标准非加密登录 (备用方案)
 */
async function standardLogin(credentials = CREDENTIALS) {
    console.log('\n🔓 尝试标准非加密登录 (备用方案)...');

    const loginData = {
        tenantId: CONFIG.TENANT_ID,
        username: credentials.username,
        password: credentials.password,
        clientId: CONFIG.CLIENT_ID,
        grantType: 'password',
    };

    const headers = {
        'Content-Type': 'application/json;charset=utf-8',
        clientid: CONFIG.CLIENT_ID,
        referer: CONFIG.REFERER,
        'Accept-Language': 'zh-CN,zh;q=0.9,en;q=0.8',
    };

    try {
        const response = await axios.post(CONFIG.BASE_URL + CONFIG.LOGIN_ENDPOINT, loginData, {
            headers,
            timeout: 10000,
        });

        console.log('✅ 标准登录请求成功');
        console.log('📄 响应数据:', JSON.stringify(response.data, null, 2));

        if (response.data.code === 200 && response.data.data?.access_token) {
            const token = response.data.data.access_token;
            console.log('🎫 获取到Token:', token.substring(0, 50) + '...');
            return { success: true, token: token, data: response.data };
        } else {
            return { success: false, error: response.data.msg, data: response.data };
        }
    } catch (error) {
        console.log('❌ 标准登录失败');
        if (error.response) {
            console.log('📊 状态码:', error.response.status);
            console.log('📄 错误信息:', error.response.data);
        }
        return { success: false, error: error.response?.data || error.message };
    }
}

/**
 * 主函数 - 智能登录策略
 */
async function smartLogin(credentials) {
    console.log('🌟'.repeat(25));
    console.log('🚀 智能登录脚本 - 自定义Header版本');
    console.log('🌟'.repeat(25));

    let result = null;

    // 策略1: 首先尝试加密登录
    console.log('\n📋 策略1: 尝试加密登录 (用户指定Header格式)');
    result = await customHeaderLogin(credentials);

    if (result.success) {
        console.log('\n🎉 加密登录成功!');
        return result;
    }

    // 策略2: 如果加密登录失败，尝试标准登录
    console.log('\n📋 策略2: 尝试标准非加密登录 (备用方案)');
    result = await standardLogin(credentials);

    if (result.success) {
        console.log('\n🎉 标准登录成功!');
        return result;
    }

    // 所有策略都失败
    console.log('\n❌ 所有登录策略都失败了');
    console.log('🔧 建议检查:');
    console.log('   1. 服务器是否正常运行');
    console.log('   2. 用户权限是否正确配置');
    console.log('   3. 网络连接是否正常');

    return result;
}

// 导出函数
module.exports = {
    customHeaderLogin,
    standardLogin,
    testTokenValidity,
    smartLogin,
    CONFIG,
    CREDENTIALS,
};

// 直接运行脚本
if (require.main === module) {
    console.log('🔥 检查依赖包...');

    // 检查依赖
    try {
        require('axios');
        require('crypto-js');
        require('node-rsa');
        console.log('✅ 所有依赖包检查完成');
    } catch (error) {
        console.error('❌ 缺少依赖包，请运行: npm install axios crypto-js node-rsa');
        process.exit(1);
    }

    // 运行智能登录
    smartLogin(CREDENTIALS)
        .then((result) => {
            console.log('\n' + '🌟'.repeat(25));
            console.log('📊 最终结果:');
            if (result.success) {
                console.log('✅ 登录成功!');
                console.log('🎫 Token:', result.token);
                console.log('💡 您可以使用这个Token进行后续API调用');
            } else {
                console.log('❌ 登录失败!');
                console.log('📄 错误信息:', result.error);
            }
            console.log('🌟'.repeat(25));
        })
        .catch((error) => {
            console.error('💥 脚本运行出错:', error.message);
            process.exit(1);
        });
}