import urllib.parse
import http.client
import logging

# 配置设置
config = {
    "host": "10.10.1.111",
    "port": 8089,
    "login": "admin",
    "password": '{"password":"Kuboard123","passcode":""}',
    "client_id": "kuboard-sso",
    "redirect_uri": "/callback",
    "scope": "openid profile email groups",
    "connector_id": "default",
    "state": "/"
}

# 配置日志
logging.basicConfig(level=logging.INFO, format='%(asctime)s - %(levelname)s - %(message)s')

# 存储全局code值
global_code = None

# 发送请求并返回响应对象
def send_request(method, url, headers=None, body=None):
    conn = http.client.HTTPConnection(config["host"], config["port"])
    logging.info(f"发送请求: {method} {url}")
    
    conn.request(method, url, body, headers)
    response = conn.getresponse()
    
    logging.info(f"响应状态码: {response.status}")
    
    # 如果是callback接口，直接返回响应对象，不处理重定向
    if url.startswith("/callback"):
        return response
    
    # 处理重定向 (303 或 302 状态码)
    if response.status in [303, 302]:
        location = response.getheader("Location")
        if location:
            logging.info(f"重定向到: {location}")
            # 解析URL获取code参数
            parsed_url = urllib.parse.urlparse(location)
            query_params = urllib.parse.parse_qs(parsed_url.query)
            if 'code' in query_params:
                global global_code
                global_code = query_params['code'][0]
                logging.info(f"获取到code参数: {global_code}")
            conn.close()
            return location
    return response

# 1. 发送第一个请求，获取 req 参数
def get_req():
    url = f"/sso/auth?access_type=offline&client_id={config['client_id']}&redirect_uri={urllib.parse.quote(config['redirect_uri'])}&response_type=code&scope={urllib.parse.quote(config['scope'])}&state={urllib.parse.quote(config['state'])}&connector_id={config['connector_id']}"
    headers = {"Content-Type": "application/x-www-form-urlencoded"}
    
    response = send_request("GET", url, headers)
    
    # 获取 Location 中的 req 参数
    if isinstance(response, str):  # 如果是重定向
        req = response.split("req=")[-1]
        logging.info(f"[Step 1] 获取 req 参数... req = {req}")
        return req
    else:
        logging.error("无法获取 req 参数")
        return None

# 2. 使用 req 发送登录请求
def login(req):
    url = f"/sso/auth/default?req={req}"
    headers = {
        "Content-Type": "application/x-www-form-urlencoded",
        "Referer": f"http://{config['host']}:{config['port']}/sso/auth/default?req={req}"
    }
    
    data = {
        "login": config['login'],
        "password": config['password']
    }
    
    logging.info(f"[Step 2] 正在进行登录...")
    response = send_request("POST", url, headers, body=urllib.parse.urlencode(data))
    if isinstance(response, str):  # 如果是重定向
        return response
    logging.info(f"[Step 2] 登录成功... 状态码: {response.status}")
    return None

# 3. 提交认证信息
def submit_auth(req):
    url = f"/sso/approval?req={req}"
    headers = {
        "Content-Type": "application/x-www-form-urlencoded"
    }
    
    logging.info(f"[Step 3] 提交认证信息...")
    response = send_request("GET", url, headers)
    if isinstance(response, str):  # 如果是重定向
        return response
    logging.info(f"[Step 3] 提交认证信息成功... 状态码: {response.status}")
    return None

# 4. 获取最终 callback 返回的 cookie 中的 KuboardToken
def get_kuboard_token():
    if not global_code:
        logging.error("未获取到code参数")
        return None
        
    url = f"/callback?code={global_code}&state=%2F"
    headers = {
        "Content-Type": "application/x-www-form-urlencoded"
    }
    
    logging.info(f"[Step 4] 正在获取 KuboardToken...")
    response = send_request("GET", url, headers)
    
    # 直接获取 Set-Cookie 头部中的 KuboardToken
    if isinstance(response, http.client.HTTPResponse):
        set_cookie = response.getheader("Set-Cookie")
        if set_cookie:
            token = None
            for cookie in set_cookie.split(";"):
                if "KuboardToken" in cookie:
                    token = cookie.split("=")[-1]
                    logging.info(f"[Step 5] 获取 KuboardToken... KuboardToken = {token}")
                    return token
            if not token:
                logging.error("未获取到 KuboardToken")
        else:
            logging.error("没有 Set-Cookie 头部，无法获取 KuboardToken")
    else:
        logging.error("响应类型错误，无法获取 KuboardToken")
    return None

def main():
    logging.info("[Start] 开始流程...")
    
    # 步骤 1 获取 req 参数
    req = get_req()
    
    if req:
        # 步骤 2 登录
        redirect_url = login(req)
        if redirect_url:
            # 步骤 3 提交认证信息
            req = submit_auth(req)
            if req:
                # 步骤 4 获取 KuboardToken
                token = get_kuboard_token()
                if token:
                    print(token)  # 打印 token 以便 shell 调用
                else:
                    logging.error("未成功获取到 KuboardToken")

if __name__ == "__main__":
    main()