package com.artfess.base.security;

import java.security.MessageDigest;
import org.apache.commons.codec.binary.Base64;
import org.springframework.security.crypto.password.PasswordEncoder;

/**
 * 密码编译器
 * 
 * @company 阿特菲斯信息技术有限公司
 * @author heyifan
 * @email heyf@jee-soft.cn
 * @date 2018年4月19日
 */
public class CustomPwdEncoder implements PasswordEncoder {

	/**
	 * 用于覆盖的自定义encoder
	 */
	private PasswordEncoder delegateEncoder;
	
	/**
	 * 当前线程是否忽略密码
	 */
    private ThreadLocal<Boolean> ingorePwd = new ThreadLocal<Boolean>() {
    	protected Boolean initialValue() {return false;}
    };
	
	public void setIngore(boolean ingore){
		this.ingorePwd.set(ingore);
	}

	public void setDelegateEncoder(PasswordEncoder delegateEncoder) {
		this.delegateEncoder = delegateEncoder;
	}
	
	/**
	 * Encode the raw password.
	 * Generally, a good encoding algorithm applies a SHA-1 or greater hash combined with an 8-byte or greater randomly
	 * generated salt.
	 */
	public String encode(CharSequence rawPassword){
		
		if (delegateEncoder != null) {
			return delegateEncoder.encode(rawPassword);
		}
		
		String pwd=rawPassword.toString();
		try {
			MessageDigest md = MessageDigest.getInstance("SHA-256");
			byte[] digest= md.digest(pwd .getBytes("UTF-8"));
			return new String(Base64.encodeBase64(digest));
		} catch (Exception e) {
			e.printStackTrace();
		}
		return "";
	}

	/**
	 * Verify the encoded password obtained from storage matches the submitted raw password after it too is encoded.
	 * Returns true if the passwords match, false if they do not.
	 * The stored password itself is never decoded.
	 *
	 * @param rawPassword the raw password to encode and match
	 * @param encodedPassword the encoded password from storage to compare with
	 * @return true if the raw password, after encoding, matches the encoded password from storage
	 */
	public synchronized boolean matches(CharSequence rawPassword, String encodedPassword){
		if(ingorePwd.get()){
			this.ingorePwd.set(false);
			return true;
		}

		if (delegateEncoder != null) {
			return delegateEncoder.matches(rawPassword, encodedPassword);
		}
		
		String enc=this.encode(rawPassword);
		return enc.equals(encodedPassword);
	}
}