package com.slcf.filter;

import java.io.IOException;
import java.io.PrintWriter;

import javax.servlet.Filter;
import javax.servlet.FilterChain;
import javax.servlet.FilterConfig;
import javax.servlet.ServletException;
import javax.servlet.ServletOutputStream;
import javax.servlet.ServletRequest;
import javax.servlet.ServletResponse;
import javax.servlet.annotation.WebFilter;
import javax.servlet.http.HttpServletRequest;
import javax.servlet.http.HttpServletResponse;
import javax.servlet.http.HttpSession;

import com.google.zxing.BarcodeFormat;
import com.google.zxing.WriterException;
import com.google.zxing.client.j2se.MatrixToImageWriter;
import com.google.zxing.common.BitMatrix;
import com.google.zxing.oned.Code128Writer;
import com.slcf.pojo.UserBean;

import com.google.zxing.BarcodeFormat;
import com.google.zxing.WriterException;
import com.google.zxing.client.j2se.MatrixToImageWriter;
import com.google.zxing.common.BitMatrix;
import com.google.zxing.oned.Code128Writer;

/**
 * 登录验证的过滤器 servlet3.0新特性（注解）
 */
@WebFilter("/*")
public class LoginFilter implements Filter {

//	private FilterConfig config;
//    private String allowOrigin="*";
    
	/**
	 * Default constructor.
	 */
	public LoginFilter() {
		// TODO Auto-generated constructor stub
	}

	/**
	 * @see Filter#destroy()
	 */
	public void destroy() {
		// TODO Auto-generated method stub
	}

	/**
	 * @see Filter#doFilter(ServletRequest, ServletResponse, FilterChain)
	 */
	public void doFilter(ServletRequest request, ServletResponse response,
			FilterChain chain) throws IOException, ServletException {

//		if(1==1) {
//			chain.doFilter(request, response);
//	    	return;
//		}
    	
		// 获取HttpServletRequest
		HttpServletRequest req = (HttpServletRequest) request;
		HttpServletResponse rep = (HttpServletResponse)response;
		
		//////////////////////////////////////////////////////////
//		if("*".equals(allowOrigin)) {
//			rep.setHeader("Access-Control-Allow-Origin", req.getHeader("Origin"));
//	    }
	    rep.setHeader("Access-Control-Allow-Origin", req.getHeader("Origin"));
	    rep.setHeader("Access-Control-Allow-Headers", "Access-Control-Allow-Origin,content-type,token,id,x-requested-with,Authorization");
//	    rep.setHeader("Access-Control-Allow-Methods","*");
	    //	    rep.setHeader("Access-Control-Request-Headers","Origin, X-Requested-With, content-Type, Accept, Authorization");
//	    rep.addHeader("Access-Control-Allow-Origin",req.getHeader("Origin"));
////	        httpServletResponse.addHeader("Access-Control-Allow-Methods","post,put, get ,delete, options");
//		rep.addHeader("Access-Control-Allow-Credentials","true");
//		rep.setHeader("Access-Control-Allow-Methods", req.getHeader("Access-Control-Allow-Methods"));
////		rep.setHeader("Access-Control-Max-Age", "3600");
//		rep.setHeader("Access-Control-Allow-Headers", req.getHeader("Access-Control-Allow-Headers"));
//		rep.setHeader("Content-Type", req.getHeader("application/json"));
//		if("OPTIONS".equalsIgnoreCase(req.getMethod())){
//            //服务器成功处理了请求，但没有返回任何内容。
//            rep.setStatus(204);
//            return;
//        }
		//////////////////////////////////////////////
	        
		// 获取session
		HttpSession session = req.getSession();
		// 获取当前登录用户信息
		UserBean userBean = (UserBean)session.getAttribute("currentUser");		
		// 获取请求URL信息
		String url = req.getRequestURI();
//		String suffix = url.substring(url.lastIndexOf('.'));

		//不需要过滤的url
//	    String[] urls = {"/login","/json",".js",".css",".ico",".jpg",".png",".gif",".bmp"};	    
		String[] urls = {"/login","/json","/asrsApi","/apiLogin","/css","/jsFiles","/static","/images",".png",".gif",".jpg",".bmp"};
	    boolean flag = false;
//	    flag = Arrays.asList(urls).contains(suffix);
	    for (String str : urls) {
	        if (url.indexOf(str) != -1) {
	            flag =true;
	            break;
	        }
	    }
		
	    String sessionId = request.getParameter("uid");
	    if(sessionId!=null && !sessionId.equals("")){
	    	MySessionContext myContext = MySessionContext.getInstance();
			HttpSession session1 = myContext.getSession(sessionId);
			if(session1!=null) {
				userBean = (UserBean)session1.getAttribute("currentUser");
			}
	    }
	    
	    if(flag==true) {
	    	chain.doFilter(request, response);
	    	return;
	    }
		
		if (url.contains("login.jsp") || url.contains("doLogin.action")) {
			// 转发到下一个过滤器或Servlet（表示正常运行）
			chain.doFilter(request, response);
		}
		else if (userBean != null) {
			// 转发到下一个过滤器或Servlet（表示正常运行）
			chain.doFilter(request, response);
		} else {			
//			rep.sendRedirect(req.getContextPath()+ "/login.jsp");
//			req.getRequestDispatcher(req.getContextPath()+"/login.jsp").forward(req,
//					response);
			if(url.contains("phone")) {
//				Map<String, Object> map = new HashMap<String, Object>();
//				map.put("code", -1);
//				map.put("msg", "Sessionout");
				PrintWriter out = response.getWriter();
//				out.println(map.toString()); 
				out.print("Sessionout");
				return;
			}
			else {
				String loginUrl = req.getContextPath()+ "/login.jsp";
				PrintWriter out = response.getWriter();
				out.println("<html>"); 
				out.println("<script>");
				out.println("window.open ('"+loginUrl+"','_parent')"); //作为父窗口打开
				out.println("</script>"); 
				out.println("</html>"); 
				return;
			}
		}

	}

	/**
	 * @see Filter#init(FilterConfig)
	 */
	public void init(FilterConfig fConfig) throws ServletException {
		// TODO Auto-generated method stub
//		this.config = config;
//        allowOrigin=this.config.getInitParameter("allowOrigin");
//        LOG.debug("httpServletResponse.addHeader(\"Access-Control-Allow-Origin\","+allowOrigin+");");
	}	

}