from collections import defaultdict
from rest_framework import serializers, status

from api.admin_permission_conf import PERMISSIONS
from api.models import TtDepartment, User, Role
from api.views.admin.base import AdminApiBase
from api.validator import BaseValidator
from api.utils import decrypt_aes_128_cbc, encrypt_aes_128_cbc, log_critical_error, get_exception_detail
from rest_framework.exceptions import ValidationError
from api.translation import __

class AdminRules(AdminApiBase):
    def validate_request(self,request):
        rules = {
            "id": "nullable|array",
        }
        # if need rename field, can put here
        attribute = {
            # "email": __("attr.email"),
        }
        # validate id first, cause need get location by id, if wrong id direct return error
        validator = BaseValidator(request.data, rules, attribute)
        error = validator.validate()
        if error:
            raise ValidationError(error)
        # custom error after basic validation

        # check id in User table and type is admin
    
    def get_permission_data(self, admin):
        data = []

        for val in admin.userpermission_set.all():
            department_ids = list(
                val.userpermissiondepartment_set.values_list("department_id", flat=True)
            )

            data.append({
                "permission": val.permission,
                "grant_to_all_department": val.grant_to_all_department,
                "department_ids": department_ids,
            })

        return data

    def post(self, request):
        # Validate input
        try:
            self.api_log_skip_outgoing_data = True
            self.validate_request(request)

            ids = request.data.get("id")
            if not ids:
                ids = []

            admin = None
            if isinstance(ids, (list, tuple)) and len(ids) == 1:
                admin = (
                    User.objects
                    .prefetch_related(
                        "role",
                        "userpermission_set__userpermissiondepartment_set"
                        # tags means the relation add in models, __tag means the relation table tag_id get the tag object #2
                    )
                    .filter(id__in=ids,user_type=User.USER_TYPE['admin'])
                    .first()
                )

            info = None
            if admin:
                info = {
                    "id": admin.id,
                    "email": admin.email,
                    "name": admin.name,
                    "status": admin.status,
                    "role": list(admin.role.values_list("id", flat=True)),
                    "permissions": self.get_permission_data(admin),
                    "is_only_self": admin.is_only_self,
                    "created_at": admin.created_at,
                }

            data = {}
            data["delete_confirmation_api"] = False
            data["allow_remove"] = [
                "role",
                "permissions",
            ]

            data["role"] = list(
                Role.objects.values("id", "name", "color", "type", "is_only_self")
            )

            data["permission"] = []
            for val in PERMISSIONS:
                data["permission"].append({
                    "code": val,
                    "name": __("permission." + val)
                })
            data["permission"].sort(key=lambda x: x["code"])

            data["department"] = list(
                TtDepartment.objects.values("id", "code", "name")
            )

            data["status"] = [
                {
                    "id": val,
                    "name": __(f"attr.user_status.{val}")
                }
                for key, val in User.STATUS_TO_CODE.items()
            ]

            response = {
                "info": info,
                "rules": data,
            }

            return self.api_response(data=response)
        except ValidationError as e:
            first_message = e.detail['error']
            errors = e.detail['errors']
            return self.api_response(error=first_message,errors=errors,code=status.HTTP_400_BAD_REQUEST)
        except Exception as e:
            e_details = get_exception_detail(e)
            log_critical_error(user_id=None,descr=e_details['descr'],url=e_details['url'],trace=e_details['trace'])
            return self.api_response(error=__("message.internal_server_error"),code=status.HTTP_500_INTERNAL_SERVER_ERROR)