QYZH.InteractiveMagazine/QYZH.InteractiveMagazine.Service/AdminAuthService.cs

using BCrypt.Net;
using Microsoft.Extensions.Configuration;
using Microsoft.Extensions.Logging;
using QYZH.InteractiveMagazine.Infrastructure.Auth;
using QYZH.InteractiveMagazine.Infrastructure.Cache;
using QYZH.InteractiveMagazine.IService;
using QYZH.InteractiveMagazine.IService.Dto;
using QYZH.InteractiveMagazine.Models.Common;
using QYZH.InteractiveMagazine.Models.Entity;
using QYZH.InteractiveMagazine.Models.Settings;
using QYZH.InteractiveMagazine.Repository;

namespace QYZH.InteractiveMagazine.Service;

public class AdminAuthService : IAdminAuthService
{
    private readonly IAdminUserRepository _adminUserRepository;
    private readonly IConfiguration _configuration;
    private readonly ILogger<AdminAuthService> _logger;

    private const string TokenKeyPrefix = "InteractiveMagazine:AdminAuth:Token";
    private const string UserInfoKeyPrefix = "InteractiveMagazine:AdminAuth:UserInfo";

    public AdminAuthService(IAdminUserRepository adminUserRepository, IConfiguration configuration, ILogger<AdminAuthService> logger)
    {
        _adminUserRepository = adminUserRepository;
        _configuration = configuration;
        _logger = logger;
    }

    public async Task<AdminLoginOutput> LoginAsync(AdminLoginInput input)
    {
        _logger.LogInformation("管理员登录尝试，用户名: {UserName}", input.UserName);

        if (string.IsNullOrWhiteSpace(input.UserName))
        {
            throw new BusinessException("用户名不能为空", 400);
        }

        if (string.IsNullOrWhiteSpace(input.Password))
        {
            throw new BusinessException("密码不能为空", 400);
        }

        var adminUser = await _adminUserRepository.GetByUserNameAsync(input.UserName);
        if (adminUser == null)
        {
            _logger.LogWarning("管理员登录失败，用户名不存在: {UserName}", input.UserName);
            throw new BusinessException("用户名或密码错误", 401);
        }

        if (!BCrypt.Net.BCrypt.Verify(input.Password, adminUser.PasswordHash))
        {
            _logger.LogWarning("管理员登录失败，密码错误: {UserName}", input.UserName);
            throw new BusinessException("用户名或密码错误", 401);
        }

        if (adminUser.Status != "Active")
        {
            _logger.LogWarning("管理员登录失败，账号已禁用: {UserName}", input.UserName);
            throw new BusinessException("账号已被禁用，请联系系统管理员", 403);
        }

        var jwtSettings = GetJwtSettings();

        var token = JwtHelper.GenerateToken((long)adminUser.Id, adminUser.UserName, jwtSettings);

        await RedisHelper.StringSetAsync($"{TokenKeyPrefix}:{adminUser.Id}", token, TimeSpan.FromMinutes(jwtSettings.ExpiryMinutes));

        _logger.LogInformation("管理员登录成功，用户名: {UserName}, ID: {UserId}", input.UserName, adminUser.Id);

        return new AdminLoginOutput
        {
            Token = token,
            UserId = (long)adminUser.Id,
            UserName = adminUser.UserName,
            Type = adminUser.Type
        };
    }

    public async Task LogoutAsync(long userId)
    {
        _logger.LogInformation("管理员登出，ID: {UserId}", userId);

        await RedisHelper.KeyDeleteAsync($"{TokenKeyPrefix}:{userId}");

        _logger.LogInformation("管理员登出成功，ID: {UserId}", userId);
    }

    public async Task<AdminUserInfoOutput> GetAdminInfoAsync(long userId)
    {
        _logger.LogInformation("获取管理员信息，ID: {UserId}", userId);

        var adminUser = await _adminUserRepository.GetByIdAsync(userId);
        if (adminUser == null)
        {
            _logger.LogWarning("未找到管理员，ID: {UserId}", userId);
            throw new BusinessException("用户不存在", 404);
        }

        return new AdminUserInfoOutput
        {
            UserId = adminUser.Id,
            UserName = adminUser.UserName,
            Type = adminUser.Type,
            Status = adminUser.Status
        };
    }

    public async Task ChangePasswordAsync(long userId, string oldPassword, string newPassword)
    {
        _logger.LogInformation("管理员修改密码尝试，ID: {UserId}", userId);

        if (string.IsNullOrWhiteSpace(oldPassword))
        {
            throw new BusinessException("原密码不能为空", 400);
        }

        if (string.IsNullOrWhiteSpace(newPassword))
        {
            throw new BusinessException("新密码不能为空", 400);
        }

        var adminUser = await _adminUserRepository.GetByIdAsync(userId);
        if (adminUser == null)
        {
            _logger.LogWarning("未找到管理员，ID: {UserId}", userId);
            throw new BusinessException("用户不存在", 404);
        }

        if (!BCrypt.Net.BCrypt.Verify(oldPassword, adminUser.PasswordHash))
        {
            _logger.LogWarning("管理员修改密码失败，原密码错误，ID: {UserId}", userId);
            throw new BusinessException("原密码错误", 400);
        }

        adminUser.PasswordHash = BCrypt.Net.BCrypt.HashPassword(newPassword);

        var result = await _adminUserRepository.UpdateAsync(adminUser);
        if (!result)
        {
            throw new BusinessException("修改密码失败", 500);
        }

        await RedisHelper.KeyDeleteAsync($"{TokenKeyPrefix}:{userId}");

        _logger.LogInformation("管理员修改密码成功，ID: {UserId}", userId);
    }

    private JwtSettings GetJwtSettings()
    {
        var jwtSettings = _configuration.GetSection("JwtSettings").Get<JwtSettings>()
            ?? new JwtSettings
            {
                Issuer = "QYZH.InteractiveMagazine",
                Audience = "QYZH.InteractiveMagazine",
                SecretKey = "your-256-bit-secret-key-here-change-in-production",
                ExpiryMinutes = 120
            };

        if (string.IsNullOrWhiteSpace(jwtSettings.SecretKey))
        {
            throw new BusinessException("JWT 配置不完整", 500);
        }

        return jwtSettings;
    }
}