package com.xmzs.midjourney.support;


import cn.hutool.core.text.CharSequenceUtil;
import com.xmzs.midjourney.Constants;
import com.xmzs.midjourney.ProxyProperties;
import jakarta.servlet.http.HttpServletRequest;
import jakarta.servlet.http.HttpServletResponse;
import lombok.RequiredArgsConstructor;
import org.springframework.stereotype.Component;
import org.springframework.web.servlet.HandlerInterceptor;


@Component
@RequiredArgsConstructor
public class ApiAuthorizeInterceptor implements HandlerInterceptor {
	private final ProxyProperties properties;

	@Override
	public boolean preHandle(HttpServletRequest request, HttpServletResponse response, Object handler) throws Exception {
		if (CharSequenceUtil.isBlank(this.properties.getApiSecret())) {
			return true;
		}
		String apiSecret = request.getHeader(Constants.API_SECRET_HEADER_NAME);
		boolean authorized = CharSequenceUtil.equals(apiSecret, this.properties.getApiSecret());
		if (!authorized) {
			response.setStatus(HttpServletResponse.SC_UNAUTHORIZED);
		}
		return authorized;
	}

}