package com.wsk.travelf.security;

import com.wsk.travelf.pojo.Admin;
import com.wsk.travelf.pojo.Permission;
import com.wsk.travelf.service.AdminService;
import org.springframework.beans.factory.annotation.Autowired;
import org.springframework.security.core.GrantedAuthority;
import org.springframework.security.core.authority.SimpleGrantedAuthority;
import org.springframework.security.core.userdetails.User;
import org.springframework.security.core.userdetails.UserDetails;
import org.springframework.security.core.userdetails.UserDetailsService;
import org.springframework.security.core.userdetails.UsernameNotFoundException;
import org.springframework.stereotype.Component;

import java.util.ArrayList;
import java.util.List;

/**
 *      自定义认证授权逻辑
 */

@Component
public class MyUserDetailsService implements UserDetailsService {
    @Autowired
    private AdminService adminService;

    @Override
    public UserDetails loadUserByUsername(String username) throws UsernameNotFoundException {
        //  1.认证
        Admin admin = adminService.findByAdminName(username);
        if (admin == null) {
            throw new UsernameNotFoundException("用户不存在");
        }
        if (!admin.isStatus()) {
            throw new UsernameNotFoundException("用户不可用");
        }

        //  2.授权
        List<Permission> permissions = adminService.findAllPermission(username);
        List<GrantedAuthority> grantedAuthorities = new ArrayList();
        for (Permission permission:permissions) {
            grantedAuthorities.add(new SimpleGrantedAuthority(permission.getPermissionDesc()));
        }

        //  3.将查询到的用户对象封装成UsersDetails对象
        UserDetails userDetails = User.withUsername(admin.getUsername())
                                        .password(admin.getPassword())
                                        .authorities(grantedAuthorities)
                                        .build();

        return userDetails;
    }
}
