mce/internal/controller/settings_controller.go

package controller

import (
	"io"
	"net/http"
	"strconv"

	"metazone.cc/metalab/internal/common"
	"metazone.cc/metalab/internal/model"

	"github.com/gin-gonic/gin"
)

// profileProvider SettingsController 对 Service 层的最小依赖（ISP：4 个方法）
type profileProvider interface {
	GetProfile(userID uint) (*model.User, error)
	UpdateProfile(userID uint, username, bio string) error
	ChangePassword(userID uint, currentPassword, newPassword string) error
	DeleteAccount(userID uint, password, reason string) error
}

// avatarProvider 头像上传对 Service 层的最小依赖（ISP：2 个方法）
type avatarProvider interface {
	ProcessAvatar(userID uint, file io.Reader, contentType string, cropX, cropY, cropSize int) (string, error)
	ProcessImage(userID uint, file io.Reader, contentType string, cropX, cropY, cropSize int) (string, error)
}

// auditSubmittable 个人设置对审核服务的依赖（ISP：3 个方法）
type auditSubmittable interface {
	ShouldAudit(userID uint) (bool, error)
	SubmitProfileChanges(userID uint, currentUser *model.User, newUsername, newBio string) error
	Submit(userID uint, auditType, newValue string) error
	GetPendingTypes(userID uint) ([]string, error)
}

// SettingsController 个人设置控制器
type SettingsController struct {
	authService   profileProvider
	avatarService avatarProvider
	auditService  auditSubmittable
}

// NewSettingsController 构造函数
func NewSettingsController(authService profileProvider, avatarService avatarProvider, auditService auditSubmittable) *SettingsController {
	return &SettingsController{authService: authService, avatarService: avatarService, auditService: auditService}
}

// SettingsPage 个人设置页面（需登录）
func (sc *SettingsController) SettingsPage(c *gin.Context) {
	uidVal, exists := c.Get("uid")
	if !exists {
		c.Redirect(http.StatusFound, "/auth/login")
		c.Abort()
		return
	}
	uid := uidVal.(uint)

	tab := c.Param("tab")
	if tab != "profile" && tab != "account" {
		c.String(http.StatusNotFound, "页面不存在")
		return
	}

	user, err := sc.authService.GetProfile(uid)
	if err != nil || user == nil {
		c.String(http.StatusNotFound, "用户不存在")
		return
	}

	// 查询待审核类型（用于前端显示审核提示）
	pendingTypes, _ := sc.auditService.GetPendingTypes(uid)

	c.HTML(http.StatusOK, "settings/index.html", common.BuildPageData(c, gin.H{
		"Title":        "个人设置",
		"ExtraCSS":     "/static/css/settings.css",
		"ActiveTab":    tab,
		"User":         user,
		"RoleName":     model.RoleDisplayNames[user.Role],
		"StatusName":   model.StatusDisplayNames[user.Status],
		"PendingTypes": pendingTypes,
		"AuditTypes":   model.AuditTypeNames,
	}))
}

// UpdateProfile 修改个人资料（用户名 + 个性签名，需登录）
// 普通用户走审核流程，管理员及以上直接落库
func (sc *SettingsController) UpdateProfile(c *gin.Context) {
	uid, exists := c.Get("uid")
	if !exists {
		common.Error(c, http.StatusUnauthorized, "请先登录")
		return
	}

	var req struct {
		Username string `json:"username"`
		Bio      string `json:"bio"`
	}
	if err := c.ShouldBindJSON(&req); err != nil {
		common.Error(c, http.StatusBadRequest, "参数错误")
		return
	}

	userID := uid.(uint)

	// 判断是否需要审核
	shouldAudit, err := sc.auditService.ShouldAudit(userID)
	if err != nil {
		common.Error(c, http.StatusInternalServerError, "操作失败")
		return
	}

	if shouldAudit {
		user, err := sc.authService.GetProfile(userID)
		if err != nil {
			common.Error(c, http.StatusInternalServerError, "操作失败")
			return
		}
		if err := sc.auditService.SubmitProfileChanges(userID, user, req.Username, req.Bio); err != nil {
			handleAuditSubmitError(c, err)
			return
		}
		common.OkMessage(c, "修改已提交审核，通过前当前信息保持不变")
		return
	}

	// 管理员及以上直接更新
	if err := sc.authService.UpdateProfile(userID, req.Username, req.Bio); err != nil {
		handleSettingsError(c, err)
		return
	}

	common.OkMessage(c, "个人资料已更新")
}

// UploadAvatar 上传头像（需登录，multipart/form-data）
// 普通用户走审核流程，管理员及以上直接更新
func (sc *SettingsController) UploadAvatar(c *gin.Context) {
	uid, exists := c.Get("uid")
	if !exists {
		common.Error(c, http.StatusUnauthorized, "请先登录")
		return
	}

	file, header, err := c.Request.FormFile("avatar")
	if err != nil {
		common.Error(c, http.StatusBadRequest, "请选择文件")
		return
	}
	defer file.Close()

	// 裁切参数（可选，来自前端裁切弹窗）
	cropX, _ := strconv.Atoi(c.PostForm("crop_x"))
	cropY, _ := strconv.Atoi(c.PostForm("crop_y"))
	cropSize, _ := strconv.Atoi(c.PostForm("crop_size"))

	userID := uid.(uint)

	// 判断是否需要审核
	shouldAudit, err := sc.auditService.ShouldAudit(userID)
	if err != nil {
		common.Error(c, http.StatusInternalServerError, "操作失败")
		return
	}

	if shouldAudit {
		// 仅处理图片，不更新用户
		avatarURL, err := sc.avatarService.ProcessImage(userID, file, header.Header.Get("Content-Type"), cropX, cropY, cropSize)
		if err != nil {
			common.Error(c, http.StatusBadRequest, err.Error())
			return
		}
		if err := sc.auditService.Submit(userID, model.AuditTypeAvatar, avatarURL); err != nil {
			handleAuditSubmitError(c, err)
			return
		}
		common.OkMessage(c, "头像已提交审核，通过前当前头像保持不变")
		return
	}

	// 管理员及以上直接更新
	url, err := sc.avatarService.ProcessAvatar(userID, file, header.Header.Get("Content-Type"), cropX, cropY, cropSize)
	if err != nil {
		common.Error(c, http.StatusBadRequest, err.Error())
		return
	}

	common.Ok(c, gin.H{"url": url})
}

// ChangePassword 修改密码（需登录）
func (sc *SettingsController) ChangePassword(c *gin.Context) {
	uid, exists := c.Get("uid")
	if !exists {
		common.Error(c, http.StatusUnauthorized, "请先登录")
		return
	}

	var req struct {
		CurrentPassword string `json:"current_password" binding:"required"`
		NewPassword     string `json:"new_password" binding:"required,min=8"`
	}
	if err := c.ShouldBindJSON(&req); err != nil {
		common.Error(c, http.StatusBadRequest, "请检查输入")
		return
	}

	if err := sc.authService.ChangePassword(uid.(uint), req.CurrentPassword, req.NewPassword); err != nil {
		handleSettingsError(c, err)
		return
	}

	common.OkMessage(c, "密码已修改，请重新登录")
}

// DeleteAccount 自助注销账号（需登录，验证密码 + 注销原因）
func (sc *SettingsController) DeleteAccount(c *gin.Context) {
	uid, exists := c.Get("uid")
	if !exists {
		common.Error(c, http.StatusUnauthorized, "请先登录")
		return
	}

	var req struct {
		Password string `json:"password" binding:"required"`
		Reason   string `json:"reason"`
	}
	if err := c.ShouldBindJSON(&req); err != nil {
		common.Error(c, http.StatusBadRequest, "请检查输入")
		return
	}

	if err := sc.authService.DeleteAccount(uid.(uint), req.Password, req.Reason); err != nil {
		handleSettingsError(c, err)
		return
	}

	common.OkMessage(c, "账号已注销，7 天内重新登录即可恢复")
}

// handleSettingsError 统一处理 settings 接口的 service 层错误
func handleSettingsError(c *gin.Context, err error) {
	switch err {
	case common.ErrUsernameTaken:
		common.Error(c, http.StatusConflict, err.Error())
	case common.ErrUsernameInvalid:
		common.Error(c, http.StatusBadRequest, err.Error())
	case common.ErrBioTooLong:
		common.Error(c, http.StatusBadRequest, err.Error())
	case common.ErrIncorrectPassword:
		common.Error(c, http.StatusForbidden, err.Error())
	case common.ErrOwnerCannotDelete:
		common.Error(c, http.StatusForbidden, err.Error())
	default:
		common.Error(c, http.StatusInternalServerError, "操作失败")
	}
}

// handleAuditSubmitError 统一处理审核提交的错误
func handleAuditSubmitError(c *gin.Context, err error) {
	switch err {
	case common.ErrAuditDisabled:
		common.Error(c, http.StatusForbidden, "审核功能未开启")
	case common.ErrAuditTypeOff:
		common.Error(c, http.StatusForbidden, "该类型审核未开启，请联系管理员")
	case common.ErrUsernameTaken:
		common.Error(c, http.StatusConflict, err.Error())
	default:
		common.Error(c, http.StatusInternalServerError, "提交审核失败")
	}
}

// AuditStatus 查询当前用户的待审核类型（需登录）
func (sc *SettingsController) AuditStatus(c *gin.Context) {
	uid, exists := c.Get("uid")
	if !exists {
		common.Error(c, http.StatusUnauthorized, "请先登录")
		return
	}

	types, err := sc.auditService.GetPendingTypes(uid.(uint))
	if err != nil {
		common.Ok(c, gin.H{"pending_types": []string{}})
		return
	}
	if types == nil {
		types = []string{}
	}
	common.Ok(c, gin.H{"pending_types": types})
}