//go:build windows

package adminreset

import (
	"bufio"
	"context"
	"errors"
	"fmt"
	"os"
	"strings"

	"git.pcux.cn/xuans/Smail/utils/password"

	"golang.org/x/term"
)

func ReadProtectedPassword() (string, error) {
	if !term.IsTerminal(int(os.Stdin.Fd())) {
		return "", errors.New("受保护的密码输入需要交互式控制台")
	}
	first, err := readWindowsPassword("请输入新的超级管理员密码")
	if err != nil {
		return "", err
	}
	second, err := readWindowsPassword("请再次输入新的超级管理员密码")
	if err != nil {
		clearPassword(&first)
		return "", err
	}
	if first == "" || first != second {
		clearPassword(&first)
		clearPassword(&second)
		return "", errors.New("密码为空或两次输入不一致")
	}
	clearPassword(&second)
	return first, nil
}

func readWindowsPassword(prompt string) (string, error) {
	if !term.IsTerminal(int(os.Stdin.Fd())) {
		return "", errors.New("受保护的密码输入需要交互式控制台")
	}
	fmt.Fprint(os.Stderr, strings.TrimRight(prompt, ":： ")+"： ")
	valueBytes, err := term.ReadPassword(int(os.Stdin.Fd()))
	fmt.Fprintln(os.Stderr)
	if err != nil {
		return "", errors.New("受保护的密码输入失败")
	}
	value := string(valueBytes)
	for index := range valueBytes {
		valueBytes[index] = 0
	}
	if password.ValidateUserPassword(value) != nil {
		return "", errors.New("密码长度必须为 8 到 12 个字符")
	}
	return value, nil
}

func ReadVisibleInput(prompt string) (string, error) {
	if !term.IsTerminal(int(os.Stdin.Fd())) {
		return "", errors.New("安全验证需要交互式控制台")
	}
	fmt.Fprint(os.Stderr, strings.TrimRight(prompt, ":： ")+"： ")
	value, err := bufio.NewReader(os.Stdin).ReadString('\n')
	if err != nil {
		return "", errors.New("读取安全验证输入失败")
	}
	return strings.TrimSuffix(strings.TrimSuffix(value, "\n"), "\r"), nil
}

func ReadVisibleInputContext(ctx context.Context, prompt string) (string, error) {
	if err := ctx.Err(); err != nil {
		return "", err
	}
	type result struct {
		value string
		err   error
	}
	done := make(chan result, 1)
	go func() {
		value, err := ReadVisibleInput(prompt)
		done <- result{value: value, err: err}
	}()
	select {
	case value := <-done:
		return value.value, value.err
	case <-ctx.Done():
		return "", ctx.Err()
	}
}

// Windows 控制台直接显示标准输出，无需额外的密码代理确认。
func ShowResult(string) {}