from collections import defaultdict

from rest_framework import serializers, status

from api.admin_permission_conf import PERMISSIONS
from api.models import Role, RolePermission
from api.models.audit_trail import AuditTrail
from api.models.audit_trail_details import AuditTrailDetails
from api.views.admin.base import AdminApiBase
from api.validator import BaseValidator
from api.utils import decrypt_aes_128_cbc, encrypt_aes_128_cbc, log_critical_error, get_exception_detail, \
    get_add_new_data, get_ip, get_old_new_data, bulk_sync_to_redis, get_multiple_old_new_data, search_old_new_data
from rest_framework.exceptions import ValidationError
from api.translation import __
from backend.redis_client import redis_client


class RoleUpdate(AdminApiBase):
    def validate_request(self,request):
        rules = {
            "id": "required|array|exists:api.Role,id",
            "desc": "nullable",
            "color": "nullable",
        }
        # if need rename field, can put here
        attribute = {
            # "email": __("attr.email"),
        }
        # validate id first, cause need get role by id, if wrong id direct return error
        validator = BaseValidator(request.data,rules,attribute)
        error = validator.validate()
        if error:
            raise ValidationError(error)

        edit_role = (
            Role.objects
            .prefetch_related("rolepermission_set")
            .filter(id__in=request.data.get("id"))
        )

        if request.data.get("name") and edit_role.count() == 1:
            role = edit_role.first()
            if request.data.get("name") != role.name:
                rules['name'] = "nullable|not_exists:api.Role,name"

        # if need rename field, can put here
        attribute = {
            # "email": __("attr.email"),
        }

        validator = BaseValidator(request.data,rules,attribute)
        error = validator.validate()

        if error:
            raise ValidationError(error)

        # custom error after basic validation
        permissions = request.data.get("permissions", [])
        invalid_permission = [p for p in permissions if p not in PERMISSIONS]
        if invalid_permission:
            raise ValidationError({
                "error": __('validation.exists'),
                "errors": {"permissions": __("validation.exists",field=__("attr.permissions"),values=invalid_permission)}
            })


        return edit_role

    def post(self, request):
        # Validate input
        try:
            edit_role = self.validate_request(request)

            action="role_update" # this is for audit log only
            old_new_data = {
                "new_data": {},
                "old_data": {},
            }
            updated = False
            update_fields = {}
            name = request.data.get("name")
            ignore_fields = ['id','timestamp','signature']
            # if more than 1 role edit, ignore code
            if edit_role.count() == 1:
                current_edit_role = edit_role.first()
                if "name" in request.data:
                    old_new_data.setdefault("old_data", {}).setdefault(current_edit_role.id, {})["name"] = current_edit_role.name
                    old_new_data.setdefault("new_data", {}).setdefault(current_edit_role.id, {})["name"] = name
                    update_fields['name'] = request.data['name']
                    updated = True

            if "color" in request.data:
                for val in edit_role:
                    old_new_data.setdefault("old_data", {}).setdefault(val.id, {})["color"] = val.color
                    old_new_data.setdefault("new_data", {}).setdefault(val.id, {})["color"] = request.data['color']
                update_fields['color'] = request.data['color']
                updated = True

            if "desc" in request.data:
                for val in edit_role:
                    old_new_data.setdefault("old_data", {}).setdefault(val.id, {})["desc"] = val.desc
                    old_new_data.setdefault("new_data", {}).setdefault(val.id, {})["desc"] = request.data['desc']
                update_fields['desc'] = request.data['desc']
                updated = True

            if "permissions" in request.data:
                permissions = request.data['permissions']
                for val in edit_role:
                    current_permission = list(val.rolepermission_set.values_list("permission",flat=True))
                    if set(permissions) != set(current_permission):
                        updated=True
                        val.rolepermission_set.all().delete()
                        RolePermission.bulk_insert(val.id, permissions)
                        old_new_data.setdefault("old_data", []).setdefault(val.id, {})["permission"] = [__("permission.admin." + p) for p in current_permission]
                        old_new_data.setdefault("new_data", []).setdefault(val.id, {})["permission"] = [__("permission.admin." + p) for p in permissions]


            if updated and update_fields:
                update_fields['updated_by'] = request.user.id
                edit_role.update(**update_fields)

            # old_new_data[key][pos_module_group.id]["module"].append(module_id)

            if old_new_data['old_data'] or old_new_data['new_data']:
                # insert audit trail and details
                # can insert the parent first, then only insert details
                audit_trail = AuditTrail.objects.create(
                    user_id=request.user.id,
                    type=self.audit_type,
                    ip_address=get_ip(request)
                )

                name = ",".join(edit_role.values_list("name", flat=True))
                remark_param = {
                    "name":name
                }

                # call to a function for insert details, so in future if want change to used worker, can modify in function only
                AuditTrailDetails.custom_insert(
                    audit_trail=audit_trail,
                    action=action,
                    remark_param=remark_param,
                    new_data=old_new_data['new_data'],
                    old_data=old_new_data['old_data'],
                )

            response = {

            }

            return self.api_response(data=response)
        except ValidationError as e:
            first_message = e.detail['error']
            errors = e.detail['errors']
            return self.api_response(error=first_message,errors=errors,code=status.HTTP_400_BAD_REQUEST)
        except Exception as e:
            e_details = get_exception_detail(e)
            log_critical_error(user_id=None,descr=e_details['descr'],url=e_details['url'],trace=e_details['trace'])
            return self.api_response(error=__("message.internal_server_error"),code=status.HTTP_500_INTERNAL_SERVER_ERROR)