'use strict';

const _ = require('lodash');
const cookie = global.yoho.cookie;
const crypto = global.yoho.crypto;

module.exports = () => {
    return (req, res, next) => {
        // 从 SESSION 中获取到当前登录用户的 UID
        if (req.session && _.isNumber(req.session.LOGIN_UID)) {
            // 不要使用 === 判断uid的值，如果需要判断使用 ==
            req.user.uid = {
                toString: () => {
                    return req.session.LOGIN_UID;
                },
                sessionKey: req.session.SESSION_KEY
            };
            let userData = _.get(req.session, 'USER', {});

            _.merge(req.user, userData);
        }

        // session 没有读取到的时候，从 cookie 读取 UID
        if (!req.user.uid && req.cookies._UID) {
            // 不要使用 === 判断uid的值，如果需要判断使用 ==
            let sessionKey = req.cookies._SESSION_KEY && crypto.decrypt('yoho9646abcdefgh', req.cookies._SESSION_KEY);

            sessionKey = sessionKey.replace(/\W/g, '');
            req.user.uid = {
                toString: () => {
                    return cookie.getUid(req);
                },
                sessionKey
            };
        }

        next();
    };
};