"use strict";
var __esDecorate = (this && this.__esDecorate) || function (ctor, descriptorIn, decorators, contextIn, initializers, extraInitializers) {
    function accept(f) { if (f !== void 0 && typeof f !== "function") throw new TypeError("Function expected"); return f; }
    var kind = contextIn.kind, key = kind === "getter" ? "get" : kind === "setter" ? "set" : "value";
    var target = !descriptorIn && ctor ? contextIn["static"] ? ctor : ctor.prototype : null;
    var descriptor = descriptorIn || (target ? Object.getOwnPropertyDescriptor(target, contextIn.name) : {});
    var _, done = false;
    for (var i = decorators.length - 1; i >= 0; i--) {
        var context = {};
        for (var p in contextIn) context[p] = p === "access" ? {} : contextIn[p];
        for (var p in contextIn.access) context.access[p] = contextIn.access[p];
        context.addInitializer = function (f) { if (done) throw new TypeError("Cannot add initializers after decoration has completed"); extraInitializers.push(accept(f || null)); };
        var result = (0, decorators[i])(kind === "accessor" ? { get: descriptor.get, set: descriptor.set } : descriptor[key], context);
        if (kind === "accessor") {
            if (result === void 0) continue;
            if (result === null || typeof result !== "object") throw new TypeError("Object expected");
            if (_ = accept(result.get)) descriptor.get = _;
            if (_ = accept(result.set)) descriptor.set = _;
            if (_ = accept(result.init)) initializers.unshift(_);
        }
        else if (_ = accept(result)) {
            if (kind === "field") initializers.unshift(_);
            else descriptor[key] = _;
        }
    }
    if (target) Object.defineProperty(target, contextIn.name, descriptor);
    done = true;
};
var __runInitializers = (this && this.__runInitializers) || function (thisArg, initializers, value) {
    var useValue = arguments.length > 2;
    for (var i = 0; i < initializers.length; i++) {
        value = useValue ? initializers[i].call(thisArg, value) : initializers[i].call(thisArg);
    }
    return useValue ? value : void 0;
};
var __awaiter = (this && this.__awaiter) || function (thisArg, _arguments, P, generator) {
    function adopt(value) { return value instanceof P ? value : new P(function (resolve) { resolve(value); }); }
    return new (P || (P = Promise))(function (resolve, reject) {
        function fulfilled(value) { try { step(generator.next(value)); } catch (e) { reject(e); } }
        function rejected(value) { try { step(generator["throw"](value)); } catch (e) { reject(e); } }
        function step(result) { result.done ? resolve(result.value) : adopt(result.value).then(fulfilled, rejected); }
        step((generator = generator.apply(thisArg, _arguments || [])).next());
    });
};
var __generator = (this && this.__generator) || function (thisArg, body) {
    var _ = { label: 0, sent: function() { if (t[0] & 1) throw t[1]; return t[1]; }, trys: [], ops: [] }, f, y, t, g = Object.create((typeof Iterator === "function" ? Iterator : Object).prototype);
    return g.next = verb(0), g["throw"] = verb(1), g["return"] = verb(2), typeof Symbol === "function" && (g[Symbol.iterator] = function() { return this; }), g;
    function verb(n) { return function (v) { return step([n, v]); }; }
    function step(op) {
        if (f) throw new TypeError("Generator is already executing.");
        while (g && (g = 0, op[0] && (_ = 0)), _) try {
            if (f = 1, y && (t = op[0] & 2 ? y["return"] : op[0] ? y["throw"] || ((t = y["return"]) && t.call(y), 0) : y.next) && !(t = t.call(y, op[1])).done) return t;
            if (y = 0, t) op = [op[0] & 2, t.value];
            switch (op[0]) {
                case 0: case 1: t = op; break;
                case 4: _.label++; return { value: op[1], done: false };
                case 5: _.label++; y = op[1]; op = [0]; continue;
                case 7: op = _.ops.pop(); _.trys.pop(); continue;
                default:
                    if (!(t = _.trys, t = t.length > 0 && t[t.length - 1]) && (op[0] === 6 || op[0] === 2)) { _ = 0; continue; }
                    if (op[0] === 3 && (!t || (op[1] > t[0] && op[1] < t[3]))) { _.label = op[1]; break; }
                    if (op[0] === 6 && _.label < t[1]) { _.label = t[1]; t = op; break; }
                    if (t && _.label < t[2]) { _.label = t[2]; _.ops.push(op); break; }
                    if (t[2]) _.ops.pop();
                    _.trys.pop(); continue;
            }
            op = body.call(thisArg, _);
        } catch (e) { op = [6, e]; y = 0; } finally { f = t = 0; }
        if (op[0] & 5) throw op[1]; return { value: op[0] ? op[1] : void 0, done: true };
    }
};
var __setFunctionName = (this && this.__setFunctionName) || function (f, name, prefix) {
    if (typeof name === "symbol") name = name.description ? "[".concat(name.description, "]") : "";
    return Object.defineProperty(f, "name", { configurable: true, value: prefix ? "".concat(prefix, " ", name) : name });
};
Object.defineProperty(exports, "__esModule", { value: true });
exports.AuthService = void 0;
var common_1 = require("@nestjs/common");
var bcrypt = require("bcrypt");
var AuthService = function () {
    var _classDecorators = [(0, common_1.Injectable)()];
    var _classDescriptor;
    var _classExtraInitializers = [];
    var _classThis;
    var AuthService = _classThis = /** @class */ (function () {
        function AuthService_1(prisma, jwtService) {
            this.prisma = prisma;
            this.jwtService = jwtService;
        }
        AuthService_1.prototype.validateUser = function (account, password) {
            return __awaiter(this, void 0, void 0, function () {
                var user, isPasswordValid;
                return __generator(this, function (_a) {
                    switch (_a.label) {
                        case 0: return [4 /*yield*/, this.prisma.teacher.findUnique({
                                where: { loginAccount: account },
                            })];
                        case 1:
                            user = _a.sent();
                            if (!user) {
                                throw new common_1.UnauthorizedException('账号或密码错误');
                            }
                            return [4 /*yield*/, bcrypt.compare(password, user.passwordHash)];
                        case 2:
                            isPasswordValid = _a.sent();
                            if (!isPasswordValid) {
                                throw new common_1.UnauthorizedException('账号或密码错误');
                            }
                            if (user.status !== 'ACTIVE') {
                                throw new common_1.UnauthorizedException('账号已被停用');
                            }
                            return [2 /*return*/, user];
                    }
                });
            });
        };
        AuthService_1.prototype.login = function (dto) {
            return __awaiter(this, void 0, void 0, function () {
                var user, tenant, teacher, isPasswordValid, payload, token;
                return __generator(this, function (_a) {
                    switch (_a.label) {
                        case 0:
                            if (!(dto.role === 'admin')) return [3 /*break*/, 1];
                            // 超管账号（硬编码或从配置读取）
                            if (dto.account === 'admin' && dto.password === '123456') {
                                user = {
                                    id: 1,
                                    name: '超级管理员',
                                    role: 'admin',
                                };
                            }
                            else {
                                throw new common_1.UnauthorizedException('账号或密码错误');
                            }
                            return [3 /*break*/, 7];
                        case 1:
                            if (!(dto.role === 'school')) return [3 /*break*/, 3];
                            return [4 /*yield*/, this.prisma.tenant.findFirst({
                                    where: { name: dto.account },
                                })];
                        case 2:
                            tenant = _a.sent();
                            if (!tenant) {
                                throw new common_1.UnauthorizedException('账号或密码错误');
                            }
                            // 验证密码（这里简化处理）
                            if (dto.password !== '123456') {
                                throw new common_1.UnauthorizedException('账号或密码错误');
                            }
                            user = {
                                id: tenant.id,
                                name: tenant.name,
                                role: 'school',
                                tenantId: tenant.id,
                                tenantName: tenant.name,
                            };
                            return [3 /*break*/, 7];
                        case 3:
                            if (!(dto.role === 'teacher')) return [3 /*break*/, 6];
                            return [4 /*yield*/, this.prisma.teacher.findUnique({
                                    where: { loginAccount: dto.account },
                                })];
                        case 4:
                            teacher = _a.sent();
                            if (!teacher) {
                                throw new common_1.UnauthorizedException('账号或密码错误');
                            }
                            return [4 /*yield*/, bcrypt.compare(dto.password, teacher.passwordHash)];
                        case 5:
                            isPasswordValid = _a.sent();
                            if (!isPasswordValid) {
                                throw new common_1.UnauthorizedException('账号或密码错误');
                            }
                            if (teacher.status !== 'ACTIVE') {
                                throw new common_1.UnauthorizedException('账号已被停用');
                            }
                            user = {
                                id: teacher.id,
                                name: teacher.name,
                                role: 'teacher',
                                tenantId: teacher.tenantId,
                            };
                            return [3 /*break*/, 7];
                        case 6: throw new common_1.UnauthorizedException('无效的角色');
                        case 7:
                            payload = {
                                sub: user.id,
                                role: user.role,
                                tenantId: user.tenantId,
                            };
                            token = this.jwtService.sign(payload);
                            if (!(dto.role === 'teacher')) return [3 /*break*/, 9];
                            return [4 /*yield*/, this.prisma.teacher.update({
                                    where: { id: user.id },
                                    data: { lastLoginAt: new Date() },
                                })];
                        case 8:
                            _a.sent();
                            _a.label = 9;
                        case 9: return [2 /*return*/, {
                                token: token,
                                user: {
                                    id: user.id,
                                    name: user.name,
                                    role: user.role,
                                    tenantId: user.tenantId,
                                    tenantName: user.tenantName,
                                },
                            }];
                    }
                });
            });
        };
        AuthService_1.prototype.getProfile = function (userId, role) {
            return __awaiter(this, void 0, void 0, function () {
                var tenant, teacher;
                var _a;
                return __generator(this, function (_b) {
                    switch (_b.label) {
                        case 0:
                            if (!(role === 'admin')) return [3 /*break*/, 1];
                            return [2 /*return*/, {
                                    id: 1,
                                    name: '超级管理员',
                                    role: 'admin',
                                }];
                        case 1:
                            if (!(role === 'school')) return [3 /*break*/, 3];
                            return [4 /*yield*/, this.prisma.tenant.findUnique({
                                    where: { id: userId },
                                })];
                        case 2:
                            tenant = _b.sent();
                            if (!tenant) {
                                throw new common_1.UnauthorizedException('用户不存在');
                            }
                            return [2 /*return*/, {
                                    id: tenant.id,
                                    name: tenant.name,
                                    role: 'school',
                                    tenantId: tenant.id,
                                    tenantName: tenant.name,
                                }];
                        case 3:
                            if (!(role === 'teacher')) return [3 /*break*/, 5];
                            return [4 /*yield*/, this.prisma.teacher.findUnique({
                                    where: { id: userId },
                                    include: {
                                        tenant: {
                                            select: {
                                                id: true,
                                                name: true,
                                            },
                                        },
                                    },
                                })];
                        case 4:
                            teacher = _b.sent();
                            if (!teacher) {
                                throw new common_1.UnauthorizedException('用户不存在');
                            }
                            return [2 /*return*/, {
                                    id: teacher.id,
                                    name: teacher.name,
                                    role: 'teacher',
                                    tenantId: teacher.tenantId,
                                    tenantName: (_a = teacher.tenant) === null || _a === void 0 ? void 0 : _a.name,
                                    email: teacher.email,
                                    phone: teacher.phone,
                                }];
                        case 5: throw new common_1.UnauthorizedException('无效的角色');
                    }
                });
            });
        };
        return AuthService_1;
    }());
    __setFunctionName(_classThis, "AuthService");
    (function () {
        var _metadata = typeof Symbol === "function" && Symbol.metadata ? Object.create(null) : void 0;
        __esDecorate(null, _classDescriptor = { value: _classThis }, _classDecorators, { kind: "class", name: _classThis.name, metadata: _metadata }, null, _classExtraInitializers);
        AuthService = _classThis = _classDescriptor.value;
        if (_metadata) Object.defineProperty(_classThis, Symbol.metadata, { enumerable: true, configurable: true, writable: true, value: _metadata });
        __runInitializers(_classThis, _classExtraInitializers);
    })();
    return AuthService = _classThis;
}();
exports.AuthService = AuthService;
