using System.Security.Claims;
using AgriculturalPlatform.Api.Models;

namespace AgriculturalPlatform.Api.Services;

/// <summary>从 JWT 声明中解析的当前登录用户</summary>
public class CurrentUser
{
    public int Id { get; init; }
    public string Username { get; init; } = string.Empty;
    public string RealName { get; init; } = string.Empty;
    public UserRole Role { get; init; }
    public int? OrgId { get; init; }

    public bool IsSuperAdmin => Role == UserRole.SuperAdmin;
}

public class CurrentUserService(IHttpContextAccessor accessor)
{
    public CurrentUser? Get()
    {
        var principal = accessor.HttpContext?.User;
        if (principal is null) return null;
        var idClaim = principal.FindFirstValue(ClaimTypes.NameIdentifier);
        if (!int.TryParse(idClaim, out var id)) return null;

        Enum.TryParse<UserRole>(principal.FindFirstValue(ClaimTypes.Role), out var role);
        int? orgId = int.TryParse(principal.FindFirstValue("orgId"), out var o) ? o : null;

        return new CurrentUser
        {
            Id = id,
            Username = principal.FindFirstValue(ClaimTypes.Name) ?? "",
            RealName = principal.FindFirstValue("realName") ?? "",
            Role = role,
            OrgId = orgId
        };
    }
}