const swagger = require("../../_docs/swagger.json");
const auth = require("../service/biz_auth_verify");
const proxy = require("../service/biz_proxy_service");

function getRequestBody(ctx) {
  if (ctx.request && ctx.request.body && Object.keys(ctx.request.body).length > 0) {
    return ctx.request.body;
  }
  if (typeof ctx.getBody === "function") {
    return ctx.getBody() || {};
  }
  return {};
}

/**
 * 从请求中提取 Token
 * 支持 Authorization: Bearer xxx 和 query ?token=xxx
 */
function extractToken(ctx) {
  const authHeader = ctx.get("Authorization") || "";
  if (authHeader.startsWith("Bearer ")) {
    return authHeader.slice(7).trim();
  }
  return ctx.query.token || "";
}

/**
 * 提取 swagger tags 第一项作为 feature 名（用于套餐功能点校验）
 */
function pickFeature(spec) {
  if (spec.tags && spec.tags.length > 0) {
    return spec.tags[0];
  }
  return null;
}

/**
 * 从 swagger.json 动态生成全部转发路由
 */
const routes = {};

for (const [path, methods] of Object.entries(swagger.paths)) {
  for (const [method, spec] of Object.entries(methods)) {
    const routeKey = `${method.toUpperCase()} ${path}`;

    routes[routeKey] = async (ctx) => {
      // 1. 提取 Token
      const token = extractToken(ctx);
      if (!token) {
        ctx.status = 401;
        ctx.body = { ok: false, error_code: "TOKEN_MISSING", message: "缺少 Token" };
        return;
      }

      // 2. 鉴权：Token + 用户 + 订阅 + 套餐功能点
      const feature = pickFeature(spec);
      const authResult = await auth.verifyRequest({ token, feature });
      if (!authResult.ok) {
        ctx.status = 403;
        ctx.body = authResult;
        return;
      }

      // 3. 组装 query（去掉 token 参数，避免泄露）
      const query = { ...ctx.query };
      delete query.token;

      // 4. 转发到上游
      const result = await proxy.forwardRequest({
        api_path: path,
        method: method.toUpperCase(),
        query,
        body: getRequestBody(ctx),
        headers: ctx.headers || {},
        auth_ctx: authResult.context,
      });

      // 5. 原样返回上游响应
      ctx.status = result.status;
      ctx.body = result.data;
    };
  }
}

module.exports = routes;