from rest_framework import serializers, status
from django.contrib.auth import authenticate
from django.utils import timezone
from datetime import timedelta

from api.admin_permission_conf import PERMISSIONS
from api.models import AuditTrail, AuditTrailDetails
from api.models.access_token import AccessToken
from api.views.admin.base import AdminApiBase
from api.validator import BaseValidator
from api.utils import decrypt_aes_128_cbc, encrypt_aes_128_cbc, log_critical_error, get_exception_detail, \
    get_add_new_data, get_ip
from rest_framework.exceptions import ValidationError
from api.models.role import Role
from api.models.role_permission import RolePermission
from api.translation import __

class RoleCreate(AdminApiBase):
    def validate_request(self,request):
        rules = {
            "name": "required|not_exists:api.Role,name",
            "desc": "nullable",
            "color": "required",
            "permissions": "nullable|array",
        }

        # if need rename field, can put here
        attribute = {
            # "email": __("attr.email"),
        }

        validator = BaseValidator(request.data,rules,attribute)
        error = validator.validate()
        if error:
            raise ValidationError(error)

        # custom error after basic validation
        permissions = request.data.get("permissions", [])
        invalid_permission = [p for p in permissions if p not in PERMISSIONS]

        if invalid_permission:
            raise ValidationError({
                "error": __('validation.exists'),
                "errors": {"permissions": __("validation.exists",field=__("attr.permissions"),values=invalid_permission)}
            })

    def post(self, request):
        # Validate input
        try:
            self.validate_request(request)

            old_new_data = {
                "new_data": None,
            }

            action = "role_create"  # this is for audit log only

            name = request.data.get('name')
            permissions = request.data.get('permissions')

            role = Role.objects.create(
                name=name,
                type="admin",
                desc=request.data.get('desc'),
                color=request.data.get('color'),
                created_by = request.user.id
            )
            old_new_data['new_data']=get_add_new_data(role)
            if permissions:
                RolePermission.bulk_insert(role.id, permissions)
                old_new_data.setdefault("new_data", [])["permission"] = [__("permission.admin." + p) for p in permissions]

            # insert audit trail and details
            # can insert the parent first, then only insert details
            audit_trail = AuditTrail.objects.create(
                user_id=request.user.id,
                type=self.audit_type,
                ip_address=get_ip(request)
            )
            remark_param = {
                "name": name,
            }

            # call to a function for insert details, so in future if want change to used worker, can modify in function only
            AuditTrailDetails.custom_insert(
                audit_trail=audit_trail,
                action=action,
                remark_param=remark_param,
                new_data=old_new_data['new_data'],
            )
            response = {

            }

            return self.api_response(data=response)
        except ValidationError as e:
            first_message = e.detail['error']
            errors = e.detail['errors']
            return self.api_response(error=first_message, errors=errors, code=status.HTTP_400_BAD_REQUEST)
        except Exception as e:
            e_details = get_exception_detail(e)
            log_critical_error(user_id=None, descr=e_details['descr'], url=e_details['url'], trace=e_details['trace'])
            return self.api_response(error=__("message.internal_server_error"),code=status.HTTP_500_INTERNAL_SERVER_ERROR)