using Microsoft.IdentityModel.Tokens;
using System.IdentityModel.Tokens.Jwt;
using System.Text;
using System.Security.Claims;

namespace CompetitionAPI
{
    public class TokenValidationService
    {
        private readonly string _secretKey;
        private readonly string _issuer;

        public TokenValidationService(string secretKey, string issuer)
        {
            _secretKey = secretKey;
            _issuer = issuer;
        }

        public bool ValidateToken(string token)
        {
            var tokenHandler = new JwtSecurityTokenHandler();
            var key = Encoding.ASCII.GetBytes(_secretKey);

            try
            {
                tokenHandler.ValidateToken(token, new TokenValidationParameters
                {
                    ValidateIssuer = true,
                    ValidIssuer = _issuer,
                    ValidateIssuerSigningKey = true,
                    IssuerSigningKey = new SymmetricSecurityKey(key),
                    ValidateAudience = false, // 可选：是否验证 Audience
                    ValidateLifetime = true, // 是否验证 Token 是否过期
                    ClockSkew = TimeSpan.Zero // 设置时间偏差
                }, out var validatedToken);

                if (validatedToken != null)
                {
                    var model = ((System.IdentityModel.Tokens.Jwt.JwtSecurityToken)validatedToken).Claims;
                    // 从旧token中提取用户信息
                    var userId = model.First(claim => claim.Type == ClaimTypes.NameIdentifier).Value;
                    var roleId = model.First(claim => claim.Type == ClaimTypes.Role).Value;
                    if (roleId == "2")
                    {
                        Competition.Mysql.BLL.admin_user bll = new Competition.Mysql.BLL.admin_user();
                        var user_model = bll.GetModel(userId);
                        if (user_model != null)
                        {
                            if (user_model.r4 == token)
                            {
                                return true;
                            }
                            else
                            {
                                return false;
                            }
                        }
                        else
                        {
                            return false;
                        }
                    }
                    else
                    {
                        return true;
                    }
                }
                else
                {
                    return false;
                }
            }
            catch (Exception)
            {
                // Token 验证失败
                return false;
            }
        }
    }
}