<?php

namespace App\Http\Middleware;

use Agent;
use App\Components\IPIP;
use App\Components\QQWry;
use Closure;
use Illuminate\Http\Request;
use Log;
use Response;

class isForbidden
{

    /**
     * 限制机器人、指定IP访问
     *
     * @param  Request  $request
     * @param  Closure  $next
     *
     * @return mixed
     */
    public function handle(Request $request, Closure $next)
    {
        // 拒绝机器人访问
        if (sysConfig('is_forbid_robot') && Agent::isRobot()) {
            Log::info("识别到机器人访问(" . getClientIp() . ")");

            return Response::view(
                'auth.error',
                ['message' => trans('error.ForbiddenRobot')],
                403
            );
        }

        // 拒绝通过订阅链接域名访问网站，防止网站被探测
        if (false !== strpos(sysConfig('subscribe_domain'), $request->getHost())
            && ! str_contains(
                sysConfig('subscribe_domain'),
                sysConfig('website_url')
            )) {
            Log::info("识别到通过订阅链接访问，强制跳转至百度(" . getClientIp() . ")");

            return redirect('https://www.baidu.com');
        }

        $ip = getClientIP();
        if (filter_var($ip, FILTER_VALIDATE_IP, FILTER_FLAG_IPV6)) {
            Log::info('识别到IPv6，尝试解析：' . $ip);
            $isIPv6 = true;
            $ipInfo = getIPInfo($ip);
        } else {
            $isIPv6 = false;
            $ipInfo = QQWry::ip($ip); // 通过纯真IP库解析IPv4信息
            if (isset($ipInfo['error'])) {
                Log::info('无法识别IPv4，尝试使用IPIP的IP库解析：' . $ip);
                $ipip   = IPIP::ip($ip);
                $ipInfo = [
                    'country'  => $ipip['country_name'],
                    'province' => $ipip['region_name'],
                    'city'     => $ipip['city_name'],
                ];
            } else {
                // 判断纯真IP库获取的国家信息是否与IPIP的IP库获取的信息一致，不一致则用IPIP的（因为纯真IP库的非大陆IP准确率较低）
                $ipip = IPIP::ip($ip);
                if ($ipInfo['country'] != $ipip['country_name']) {
                    $ipInfo['country']  = $ipip['country_name'];
                    $ipInfo['province'] = $ipip['region_name'];
                    $ipInfo['city']     = $ipip['city_name'];
                }
            }
        }

        // 拒绝无IP请求
        if (empty($ipInfo) || empty($ipInfo['country'])) {
            return Response::view(
                'auth.error',
                ['message' => trans('error.ForbiddenAccess')],
                403
            );
        }

        if ( ! in_array($ipInfo['country'], ['本机地址', '局域网'])) {
            // 拒绝大陆IP访问
            if (sysConfig('is_forbid_china')) {
                if (($isIPv6 && $ipInfo['country'] === 'China')
                    || ($ipInfo['country'] === '中国'
                        && ! in_array(
                            $ipInfo['province'],
                            ['香港', '澳门', '台湾']
                        ))) {
                    Log::info('识别到大陆IP，拒绝访问：' . $ip);

                    return Response::view(
                        'auth.error',
                        [
                            'message' => trans(
                                'error.ForbiddenChina'
                            ),
                        ],
                        403
                    );
                }
            }

            // 拒绝非大陆IP访问
            if (sysConfig('is_forbid_oversea')) {
                if (($isIPv6 && $ipInfo['country'] !== 'China') || $ipInfo['country'] !== '中国'
                    || in_array($ipInfo['province'], ['香港', '澳门', '台湾'])) {
                    Log::info(
                        '识别到海外IP，拒绝访问：' . $ip . ' - ' . $ipInfo['country']
                    );

                    return Response::view(
                        'auth.error',
                        [
                            'message' => trans(
                                'error.ForbiddenOversea'
                            ),
                        ],
                        403
                    );
                }
            }
        }

        return $next($request);
    }

}