package com.webmanage.config;

import com.webmanage.util.AESUtil;
import org.springframework.boot.SpringApplication;
import org.springframework.boot.env.EnvironmentPostProcessor;
import org.springframework.core.Ordered;
import org.springframework.core.env.ConfigurableEnvironment;
import org.springframework.core.env.EnumerablePropertySource;
import org.springframework.core.env.MapPropertySource;
import org.springframework.core.env.MutablePropertySources;
import org.springframework.util.StringUtils;

import java.util.HashMap;
import java.util.Map;

/**
 * 在应用启动早期对敏感配置进行解密
 */
public class EncryptedPropertyEnvironmentPostProcessor implements EnvironmentPostProcessor, Ordered {

    @Override
    public void postProcessEnvironment(ConfigurableEnvironment environment, SpringApplication application) {
        Map<String, Object> overrides = new HashMap<>();
        // 扫描所有可枚举属性源，收集以 AES: 开头的属性值并解密，放入最高优先级覆盖源
        for (org.springframework.core.env.PropertySource<?> ps : environment.getPropertySources()) {
            if (ps instanceof EnumerablePropertySource) {
                EnumerablePropertySource<?> eps = (EnumerablePropertySource<?>) ps;
                for (String name : eps.getPropertyNames()) {
                    Object raw = eps.getProperty(name);
                    if (raw instanceof String) {
                        String value = (String) raw;
                        if (EncryptedPropertyDetector.isEncrypted(value)) {
                            String cipher = EncryptedPropertyDetector.stripPrefix(value);
                            String plain = AESUtil.decryptWithDefaultKey(cipher);
                            overrides.put(name, plain);
                        }
                    }
                }
            }
        }
        if (!overrides.isEmpty()) {
            MutablePropertySources sources = environment.getPropertySources();
            sources.addFirst(new MapPropertySource("decryptedSensitiveProperties", overrides));
        }
    }

    // 确保尽早执行
    @Override
    public int getOrder() {
        // 在配置文件加载完成后执行，避免拿不到值
        return Ordered.LOWEST_PRECEDENCE;
    }
}