/**
     * 發(fā)送手機(jī)驗(yàn)證碼
     */
    @PostMapping("code")
    public Result sendCode(@RequestParam("phone") String phone, HttpSession session) {
        //發(fā)送短信驗(yàn)證碼并保存驗(yàn)證碼
        return userService.sendCode(phone, session);
    }

    /**
     * 登錄功能
     * @param loginForm 登錄參數(shù)，包含手機(jī)號(hào)、驗(yàn)證碼；或者手機(jī)號(hào)、密碼
     */
    @PostMapping("/login")
    public Result login(@RequestBody LoginFormDTO loginForm, HttpSession session){
        // 實(shí)現(xiàn)登錄功能
        return userService.login(loginForm, session);
    }

    /**
     * 發(fā)送短信驗(yàn)證碼并保存驗(yàn)證碼
     * @param phone
     * @param session
     * @return
     */
    @Override
    public Result sendCode(String phone, HttpSession session) {
        //1.校驗(yàn)手機(jī)號(hào)是否合法
        boolean phoneInvalid = RegexUtils.isPhoneInvalid(phone);
        //2.若不合法，返回錯(cuò)誤信息
        if(!phoneInvalid){
            return Result.fail("手機(jī)號(hào)不合法");
        }
        //3.生成驗(yàn)證碼 6位
        String code = RandomUtil.randomNumbers(6);
        //4.保存驗(yàn)證碼到session中
        session.setAttribute("code",code);
        //5.發(fā)送驗(yàn)證碼 (這里可以結(jié)合阿里云提供的第三方服務(wù)來(lái)做，但是為了方便，輸出一下就可以)
        log.debug("發(fā)送短信驗(yàn)證碼成功，驗(yàn)證碼：{}",code);
        //6.返回ok
        return Result.ok();

    }

     /**
     * 登錄功能
     * @param loginForm
     * @param session
     * @return
     */
    @Override
    public Result login(LoginFormDTO loginForm, HttpSession session) {

        String phone = loginForm.getPhone();
        //1.校驗(yàn)手機(jī)號(hào)是否合法
        if(!RegexUtils.isPhoneInvalid(phone)){
            return Result.fail("手機(jī)號(hào)不合法");
        }
        //2.校驗(yàn)驗(yàn)證碼是否一致
        String sessionCode = (String) session.getAttribute("code");
        String userCode = loginForm.getCode();
        //3.驗(yàn)證碼不一致返回錯(cuò)誤信息
        if(sessionCode == null ||!sessionCode.equals(userCode)){
            return Result.fail("驗(yàn)證碼錯(cuò)誤");
        }
        //4.根據(jù)手機(jī)號(hào)到數(shù)據(jù)庫(kù)查詢用戶
        User user = query().eq("phone", phone).one();
        //5.若用戶不存在則創(chuàng)建用戶并保存到數(shù)據(jù)庫(kù)
        if(user == null){
            user = createUserByPhone(phone);
        }
        //6.保存用戶信息到session中
        UserDTO userDTO = new UserDTO();
        BeanUtils.copyProperties(user,userDTO);
        session.setAttribute("user",userDTO);

        //7.返回ok
        return Result.ok();
    }

public class LoginInterceptor implements HandlerInterceptor {
    @Override
    public boolean preHandle(HttpServletRequest request, HttpServletResponse response, Object handler) throws Exception {
        //1.獲取session
        HttpSession session = request.getSession();

        //2.獲取session里面的user
        User user = (User) session.getAttribute("user");

        //3.用戶不存在，則攔截
        if(user == null){
            //4.攔截，返回401
            response.setStatus(401);
            return false;
        }
        //5.存在，保存到ThreadLocal中
        UserDTO userDTO = new UserDTO();
        userDTO.setId(user.getId());
        userDTO.setIcon(user.getIcon());
        userDTO.setNickName(user.getNickName());
        UserHolder.saveUser(userDTO);

        //6.放行
        return true;
    }

    @Override
    public void afterCompletion(HttpServletRequest request, HttpServletResponse response, Object handler, Exception ex) throws Exception {
        //在頁(yè)面渲染完成返回給用戶前，刪除用戶信息，避免內(nèi)存泄漏
        UserHolder.removeUser();
    }
}

@Configuration//由Spring創(chuàng)建的對(duì)象 可以使用 Autowired
public class MVCconfig implements WebMvcConfigurer {

    @Autowired
    private StringRedisTemplate stringRedisTemplate;
    @Override
    public void addInterceptors(InterceptorRegistry registry) {
       registry.addInterceptor(new LoginInterceptor(stringRedisTemplate))
               .excludePathPatterns(
                       "/user/code",
                       "/user/login",
                       "/shop/**",
                       "/shop-type/**",
                       "/blog/hot",
                       "/upload/**",
                       "/voucher/**"
               );
    }
}

     /**
     * 發(fā)送手機(jī)驗(yàn)證碼
     */
    @PostMapping("code")
    public Result sendCode(@RequestParam("phone") String phone, HttpSession session) {
        //發(fā)送短信驗(yàn)證碼并保存驗(yàn)證碼
        return userService.sendCode(phone, session);
    }

    /**
     * 登錄功能
     * @param loginForm 登錄參數(shù)，包含手機(jī)號(hào)、驗(yàn)證碼；或者手機(jī)號(hào)、密碼
     */
    @PostMapping("/login")
    public Result login(@RequestBody LoginFormDTO loginForm, HttpSession session){
        // 實(shí)現(xiàn)登錄功能
        return userService.login(loginForm, session);
    }

    @GetMapping("/me")
    public Result me(){
        //獲取當(dāng)前登錄的用戶并返回
        UserDTO user = UserHolder.getUser();
        return Result.ok(user);
    }

    @Autowired
    private StringRedisTemplate stringRedisTemplate;
    /**
     * 發(fā)送短信驗(yàn)證碼并保存驗(yàn)證碼
     * @param phone
     * @param session
     * @return
     */
    @Override
    public Result sendCode(String phone, HttpSession session) {
        //1.校驗(yàn)手機(jī)號(hào)是否合法
        boolean phoneInvalid = RegexUtils.isPhoneInvalid(phone);

        //2.若不合法，返回錯(cuò)誤信息
        if(!phoneInvalid){
            return Result.fail("手機(jī)號(hào)不合法");
        }

        //3.生成驗(yàn)證碼 6位
        String code = RandomUtil.randomNumbers(6);

        //4.保存驗(yàn)證碼到redis中
        stringRedisTemplate.opsForValue().set(RedisConstants.LOGIN_CODE_KEY+phone,code,RedisConstants.LOGIN_CODE_TTL, TimeUnit.MINUTES);

        //5.發(fā)送驗(yàn)證碼 (這里可以結(jié)合阿里云提供的第三方服務(wù)來(lái)做，但是為了方便，輸出一下就可以)
        log.debug("發(fā)送短信驗(yàn)證碼成功，驗(yàn)證碼：{}",code);

        //6.返回ok
        return Result.ok();
    }

    /**
     * 登錄功能
     * @param loginForm
     * @param session
     * @return
     */
    @Override
    public Result login(LoginFormDTO loginForm, HttpSession session) {

        String phone = loginForm.getPhone();
        //1.校驗(yàn)手機(jī)號(hào)是否合法
        if(!RegexUtils.isPhoneInvalid(phone)){
            return Result.fail("手機(jī)號(hào)不合法");
        }
        //2.TODO 從Redis獲取驗(yàn)證碼并校驗(yàn)驗(yàn)證碼是否一致
        String reidsCode = stringRedisTemplate.opsForValue().get(RedisConstants.LOGIN_CODE_KEY+phone);
        String userCode = loginForm.getCode();
        //3.驗(yàn)證碼不一致返回錯(cuò)誤信息
        if(reidsCode == null ||!reidsCode.equals(userCode)){
            return Result.fail("驗(yàn)證碼錯(cuò)誤");
        }
        //4.根據(jù)手機(jī)號(hào)到數(shù)據(jù)庫(kù)查詢用戶
        User user = query().eq("phone", phone).one();
        //5.若用戶不存在則創(chuàng)建用戶并保存到數(shù)據(jù)庫(kù)
        if(user == null){
            user = createUserByPhone(phone);
        }
        //6.保存用戶信息到redis中
        //6.1 生成隨機(jī)token 作為登錄令牌
        String token = UUID.randomUUID().toString(true);
        //6.2 將UserDTO轉(zhuǎn)為 HashMap
        UserDTO userDTO = new UserDTO();
        BeanUtils.copyProperties(user,userDTO);

        Map<String, Object>usertMap = new HashMap<>();
        usertMap.put("id", userDTO.getId().toString());
        usertMap.put("nickName", userDTO.getNickName());
        usertMap.put("icon", userDTO.getIcon());
        //6.3 存儲(chǔ)到redis中
        String tokenKey = RedisConstants.LOGIN_USER_KEY+token;
        stringRedisTemplate.opsForHash().putAll(tokenKey,usertMap);
        //6.4 設(shè)置有效期
        stringRedisTemplate.expire(tokenKey,RedisConstants.LOGIN_USER_TTL,TimeUnit.MINUTES);

        //7.返回token
        return Result.ok(token);
    }

    /**
     * 根據(jù)手機(jī)號(hào)創(chuàng)建用戶
     * @param phone
     * @return
     */
    private User createUserByPhone(String phone) {
        User user = new User();
        user.setPhone(phone);
        user.setNickName(SystemConstants.USER_NICK_NAME_PREFIX + RandomUtil.randomString(6));
        save(user);
        return user;
    }

      @Override
    public boolean preHandle(HttpServletRequest request, HttpServletResponse response, Object handler) throws Exception {
        // 1.獲取請(qǐng)求頭中的token
        String token = request.getHeader("authorization");
        if(StringUtils.isEmpty(token)){
            //token 為空 攔截，返回401
            response.setStatus(401);
            return false;
        }

        //2.通過(guò)token獲取redis中的用戶信息
        String tokenKey = RedisConstants.LOGIN_USER_KEY + token;
        Map<Object, Object> userMap = stringRedisTemplate.opsForHash()
                .entries(tokenKey);

        //3.用戶不存在，則攔截
        if(userMap.isEmpty()){
            //4.攔截，返回401
            response.setStatus(401);
            return false;
        }
        //5. 將HashMap轉(zhuǎn)為UserDTO
        UserDTO userDTO = BeanUtil.fillBeanWithMap(userMap, new UserDTO(), false);

        //6.存在，保存到ThreadLocal中
        UserHolder.saveUser(userDTO);

        //7.重置token有效期
        stringRedisTemplate.expire(tokenKey,RedisConstants.LOGIN_USER_TTL,TimeUnit.MINUTES)
        //8.放行
        return true;
    }

@Configuration//由Spring創(chuàng)建的對(duì)象 可以使用 Autowired
public class MVCconfig implements WebMvcConfigurer {

    @Autowired
    private StringRedisTemplate stringRedisTemplate;
    @Override
    public void addInterceptors(InterceptorRegistry registry) {
       registry.addInterceptor(new LoginInterceptor(stringRedisTemplate))
               .excludePathPatterns(
                       "/user/code",
                       "/user/login",
                       "/shop/**",
                       "/shop-type/**",
                       "/blog/hot",
                       "/upload/**",
                       "/voucher/**"
               );
    }
}