# Copyright (c) Huawei Technologies Co., Ltd. 2023-2025. All rights reserved.
"""API Key管理"""

import hashlib
import logging
import uuid

from apps.common.mongo import MongoDB

logger = logging.getLogger(__name__)


class ApiKeyManager:
    """API Key管理"""

    @staticmethod
    async def generate_api_key(user_sub: str) -> str | None:
        """
        生成新API Key

        :param user_sub: 用户名
        :return: API Key
        """
        mongo = MongoDB()
        api_key = str(uuid.uuid4().hex)
        api_key_hash = hashlib.sha256(api_key.encode()).hexdigest()[:16]

        try:
            user_collection = mongo.get_collection("user")
            await user_collection.update_one(
                {"_id": user_sub},
                {"$set": {"api_key": api_key_hash}},
            )
        except Exception:
            logger.exception("[ApiKeyManager] 生成API Key失败")
            return None
        else:
            return api_key

    @staticmethod
    async def delete_api_key(user_sub: str) -> bool:
        """
        删除API Key

        :param user_sub: 用户ID
        :return: 删除API Key是否成功
        """
        mongo = MongoDB()
        if not await ApiKeyManager.api_key_exists(user_sub):
            return False
        try:
            user_collection = mongo.get_collection("user")
            await user_collection.update_one(
                {"_id": user_sub},
                {"$unset": {"api_key": ""}},
            )
        except Exception:
            logger.exception("[ApiKeyManager] 删除API Key失败")
            return False
        return True

    @staticmethod
    async def api_key_exists(user_sub: str) -> bool:
        """
        检查API Key是否存在

        :param user_sub: 用户ID
        :return: API Key是否存在
        """
        mongo = MongoDB()
        try:
            user_collection = mongo.get_collection("user")
            user_data = await user_collection.find_one({"_id": user_sub}, {"_id": 0, "api_key": 1})
            return user_data is not None and ("api_key" in user_data and user_data["api_key"])
        except Exception:
            logger.exception("[ApiKeyManager] 检查API Key是否存在失败")
            return False

    @staticmethod
    async def get_user_by_api_key(api_key: str) -> str | None:
        """
        根据API Key获取用户信息

        :param api_key: API Key
        :return: 用户ID
        """
        mongo = MongoDB()
        api_key_hash = hashlib.sha256(api_key.encode()).hexdigest()[:16]
        try:
            user_collection = mongo.get_collection("user")
            user_data = await user_collection.find_one({"api_key": api_key_hash}, {"_id": 1})
            return user_data["_id"] if user_data else None
        except Exception:
            logger.exception("[ApiKeyManager] 根据API Key获取用户信息失败")
            return None

    @staticmethod
    async def verify_api_key(api_key: str) -> bool:
        """
        验证API Key，用于FastAPI dependency

        :param api_key: API Key
        :return: 验证API Key是否成功
        """
        mongo = MongoDB()
        api_key_hash = hashlib.sha256(api_key.encode()).hexdigest()[:16]
        try:
            user_collection = mongo.get_collection("user")
            key_data = await user_collection.find_one({"api_key": api_key_hash}, {"_id": 1})
        except Exception:
            logger.exception("[ApiKeyManager] 验证API Key失败")
            return False
        else:
            return key_data is not None

    @staticmethod
    async def update_api_key(user_sub: str) -> str | None:
        """
        更新API Key

        :param user_sub: 用户ID
        :return: 更新后的API Key
        """
        mongo = MongoDB()
        if not await ApiKeyManager.api_key_exists(user_sub):
            return None
        api_key = str(uuid.uuid4().hex)
        api_key_hash = hashlib.sha256(api_key.encode()).hexdigest()[:16]
        try:
            user_collection = mongo.get_collection("user")
            await user_collection.update_one(
                {"_id": user_sub},
                {"$set": {"api_key": api_key_hash}},
            )
        except Exception:
            logger.exception("[ApiKeyManager] 更新API Key失败")
            return None
        return api_key