# Gitea SSH密钥设置脚本 (Windows PowerShell版本)
# 用途: 获取/生成SSH密钥并添加到Gitea
# 用法: .\setup_gitea_ssh_keys.ps1

param(
    [string]$Help
)

# 配置信息（将通过用户输入获取）
$DEFAULT_USERNAME = ""
$DEFAULT_EMAIL = ""
$GITEA_TOKEN = ""
$GITEA_URL = "https://git.sanyitec.cc"
$SSH_PORT = 222

# 检查是否请求帮助
if ($Help -eq "--help" -or $Help -eq "-h") {
    Write-Host "=== Gitea SSH密钥设置脚本 (Windows版) ===" -ForegroundColor Green
    Write-Host "用途: 检查/生成SSH密钥并添加到Gitea"
    Write-Host ""
    Write-Host "用法:"
    Write-Host "  .\setup_gitea_ssh_keys.ps1                # 交互式配置"
    Write-Host ""
    Write-Host "功能:"
    Write-Host "  1. 交互式输入Git用户信息和Gitea Token"
    Write-Host "  2. 检查现有SSH密钥或生成新密钥"
    Write-Host "  3. 自动添加公钥到Gitea"
    Write-Host "  4. 配置Git用户信息"
    Write-Host "  5. 配置SSH连接设置（端口222）"
    Write-Host "  6. 测试Gitea SSH连接"
    Write-Host ""
    exit 0
}

Write-Host "=== Gitea SSH密钥设置脚本 (Windows版) ===" -ForegroundColor Green
Write-Host "将通过交互式配置检查现有SSH密钥或生成新密钥并添加到Gitea" -ForegroundColor Yellow

# 使用当前用户
$SSH_USERNAME = $env:USERNAME
Write-Host "当前用户: $SSH_USERNAME" -ForegroundColor Cyan

# 获取用户输入配置
function Get-UserConfiguration {
    Write-Host "=== 配置信息输入 ===" -ForegroundColor Green
    Write-Host "请输入以下配置信息：" -ForegroundColor Yellow
    Write-Host ""

    # 获取Git用户名
    do {
        $script:DEFAULT_USERNAME = Read-Host "请输入Git用户名"
        if ([string]::IsNullOrWhiteSpace($script:DEFAULT_USERNAME)) {
            Write-Host "❌ 用户名不能为空，请重新输入" -ForegroundColor Red
        }
    } while ([string]::IsNullOrWhiteSpace($script:DEFAULT_USERNAME))

    # 获取Git邮箱
    do {
        $script:DEFAULT_EMAIL = Read-Host "请输入Git邮箱地址"
        if ([string]::IsNullOrWhiteSpace($script:DEFAULT_EMAIL) -or $script:DEFAULT_EMAIL -notmatch "^[^@]+@[^@]+\.[^@]+$") {
            Write-Host "❌ 请输入有效的邮箱地址" -ForegroundColor Red
        }
    } while ([string]::IsNullOrWhiteSpace($script:DEFAULT_EMAIL) -or $script:DEFAULT_EMAIL -notmatch "^[^@]+@[^@]+\.[^@]+$")

    # 获取Gitea Token
    do {
        $script:GITEA_TOKEN = Read-Host "请输入Gitea访问Token" -AsSecureString
        $script:GITEA_TOKEN = [Runtime.InteropServices.Marshal]::PtrToStringAuto([Runtime.InteropServices.Marshal]::SecureStringToBSTR($script:GITEA_TOKEN))
        if ([string]::IsNullOrWhiteSpace($script:GITEA_TOKEN)) {
            Write-Host "❌ Token不能为空，请重新输入" -ForegroundColor Red
        }
    } while ([string]::IsNullOrWhiteSpace($script:GITEA_TOKEN))

    Write-Host ""
    Write-Host "✓ 配置信息输入完成" -ForegroundColor Green
    Write-Host "用户名: $script:DEFAULT_USERNAME" -ForegroundColor Cyan
    Write-Host "邮箱: $script:DEFAULT_EMAIL" -ForegroundColor Cyan
    Write-Host "Token: $('*' * $script:GITEA_TOKEN.Length)" -ForegroundColor Cyan
    Write-Host ""
}

# 检查必要工具
function Check-Dependencies {
    Write-Host "正在检查依赖工具..." -ForegroundColor Yellow

    $missingTools = @()

    # 检查Git
    try {
        git --version | Out-Null
        Write-Host "✓ Git已安装" -ForegroundColor Green
    } catch {
        $missingTools += "Git"
    }

    # 检查SSH
    try {
        ssh -V 2>$null | Out-Null
        Write-Host "✓ SSH已安装" -ForegroundColor Green
    } catch {
        Write-Host "⚠ SSH未找到，将使用Windows内置OpenSSH" -ForegroundColor Yellow
    }

    if ($missingTools.Count -gt 0) {
        Write-Host "❌ 缺少以下工具: $($missingTools -join ', ')" -ForegroundColor Red
        Write-Host "请安装Git for Windows: https://git-scm.com/download/win" -ForegroundColor Yellow
        exit 1
    }

    Write-Host "✓ 所有依赖工具检查完成" -ForegroundColor Green
}

# 检查或生成SSH密钥
function Check-OrGenerate-SSHKey {
    Write-Host "正在检查SSH密钥..." -ForegroundColor Yellow

    $sshDir = "$env:USERPROFILE\.ssh"
    $privateKeyPath = "$sshDir\id_rsa"
    $publicKeyPath = "$sshDir\id_rsa.pub"

    # 检查是否已存在SSH密钥
    if (Test-Path $publicKeyPath) {
        Write-Host "✓ SSH密钥已存在" -ForegroundColor Green
        return
    }

    Write-Host "正在生成SSH密钥..." -ForegroundColor Yellow

    # 创建.ssh目录
    if (!(Test-Path $sshDir)) {
        New-Item -ItemType Directory -Path $sshDir -Force | Out-Null
    }

    # 生成SSH密钥
    try {
        ssh-keygen -t rsa -b 4096 -C $DEFAULT_EMAIL -f $privateKeyPath -N '""'
        Write-Host "✓ SSH密钥生成成功" -ForegroundColor Green
    } catch {
        Write-Host "❌ SSH密钥生成失败: $($_.Exception.Message)" -ForegroundColor Red
        exit 1
    }
}

# 获取公钥
function Get-PublicKey {
    Write-Host "正在获取公钥..." -ForegroundColor Yellow

    $publicKeyPath = "$env:USERPROFILE\.ssh\id_rsa.pub"

    if (Test-Path $publicKeyPath) {
        $script:PUBLIC_KEY = Get-Content $publicKeyPath -Raw
        $script:PUBLIC_KEY = $script:PUBLIC_KEY.Trim()
        Write-Host "✓ 公钥获取成功" -ForegroundColor Green
        Write-Host "公钥内容: $($script:PUBLIC_KEY.Substring(0, [Math]::Min(50, $script:PUBLIC_KEY.Length)))..." -ForegroundColor Cyan
    } else {
        Write-Host "❌ 公钥文件不存在" -ForegroundColor Red
        exit 1
    }
}

# 验证Gitea Token
function Verify-GiteaToken {
    Write-Host "正在验证Gitea Token..." -ForegroundColor Yellow

    try {
        $headers = @{
            "Authorization" = "token $GITEA_TOKEN"
            "Accept" = "application/json"
        }

        # 忽略SSL证书验证
        [System.Net.ServicePointManager]::ServerCertificateValidationCallback = {$true}

        $response = Invoke-RestMethod -Uri "$GITEA_URL/api/v1/user" -Headers $headers -Method Get
        Write-Host "✓ Gitea Token验证成功，用户: $($response.login)" -ForegroundColor Green
    } catch {
        Write-Host "❌ Gitea Token验证失败: $($_.Exception.Message)" -ForegroundColor Red
        exit 1
    }
}

# 检查SSH密钥是否已存在于Gitea
function Check-KeyExistsOnGitea {
    Write-Host "正在检查SSH密钥是否已存在于Gitea..." -ForegroundColor Yellow

    # 获取当前公钥的指纹部分
    $currentKeyContent = ($script:PUBLIC_KEY -split ' ')[1]
    Write-Host "当前本地密钥指纹: $($currentKeyContent.Substring(0, [Math]::Min(50, $currentKeyContent.Length)))..." -ForegroundColor Cyan

    try {
        $headers = @{
            "Authorization" = "token $GITEA_TOKEN"
            "Accept" = "application/json"
        }

        $giteaKeys = Invoke-RestMethod -Uri "$GITEA_URL/api/v1/user/keys" -Headers $headers -Method Get

        Write-Host "Gitea上现有的密钥:" -ForegroundColor Cyan
        foreach ($key in $giteaKeys) {
            $keyPreview = $key.key.Substring(0, [Math]::Min(50, $key.key.Length))
            Write-Host "  - $($key.title): $keyPreview..." -ForegroundColor Gray
        }

        # 检查是否有匹配的密钥
        foreach ($key in $giteaKeys) {
            if ($key.key -like "*$currentKeyContent*") {
                Write-Host "✓ SSH密钥已存在于Gitea账户中" -ForegroundColor Green
                Write-Host "现有密钥标题: $($key.title)" -ForegroundColor Cyan
                return $true
            }
        }

        Write-Host "⚠ 当前SSH密钥不存在于Gitea账户中，需要添加" -ForegroundColor Yellow
        return $false

    } catch {
        Write-Host "❌ 检查Gitea密钥失败: $($_.Exception.Message)" -ForegroundColor Red
        return $false
    }
}

# 添加SSH密钥到Gitea
function Add-KeyToGitea {
    # 先检查密钥是否已存在
    if (Check-KeyExistsOnGitea) {
        Write-Host "✓ 跳过添加，使用现有密钥" -ForegroundColor Green
        return
    }

    Write-Host "正在添加SSH密钥到Gitea..." -ForegroundColor Yellow

    # 生成密钥标题
    $keyTitle = "$SSH_USERNAME@$env:COMPUTERNAME-$(Get-Date -Format 'yyyyMMdd_HHmmss')"

    try {
        $headers = @{
            "Authorization" = "token $GITEA_TOKEN"
            "Accept" = "application/json"
            "Content-Type" = "application/json"
        }

        $body = @{
            title = $keyTitle
            key = $script:PUBLIC_KEY
        } | ConvertTo-Json

        $response = Invoke-RestMethod -Uri "$GITEA_URL/api/v1/user/keys" -Headers $headers -Method Post -Body $body

        Write-Host "✓ SSH密钥已成功添加到Gitea" -ForegroundColor Green
        Write-Host "密钥标题: $keyTitle" -ForegroundColor Cyan
        if ($response.id) {
            Write-Host "密钥ID: $($response.id)" -ForegroundColor Cyan
        }

    } catch {
        $errorMessage = $_.Exception.Message
        if ($errorMessage -like "*422*" -or $errorMessage -like "*already*") {
            Write-Host "⚠ 这个SSH密钥已经存在于Gitea账户中" -ForegroundColor Yellow
            Write-Host "✓ 可以继续使用现有密钥" -ForegroundColor Green
        } else {
            Write-Host "❌ 添加SSH密钥失败: $errorMessage" -ForegroundColor Red
            Write-Host "可能的原因:" -ForegroundColor Yellow
            Write-Host "1. SSH密钥格式不正确" -ForegroundColor Yellow
            Write-Host "2. Gitea Token权限不足" -ForegroundColor Yellow
            Write-Host "3. 密钥已被其他账户使用" -ForegroundColor Yellow
            Write-Host "4. 网络连接问题" -ForegroundColor Yellow
            exit 1
        }
    }
}

# 配置Git用户信息
function Configure-Git {
    Write-Host "正在配置Git用户信息..." -ForegroundColor Yellow

    try {
        git config --global user.name $DEFAULT_USERNAME
        git config --global user.email $DEFAULT_EMAIL

        Write-Host "✓ Git用户信息配置完成" -ForegroundColor Green
        Write-Host "用户名: $(git config --global user.name)" -ForegroundColor Cyan
        Write-Host "邮箱: $(git config --global user.email)" -ForegroundColor Cyan
    } catch {
        Write-Host "❌ Git配置失败: $($_.Exception.Message)" -ForegroundColor Red
        exit 1
    }
}

# 配置Gitea SSH
function Configure-GiteaSSH {
    Write-Host "正在配置Gitea SSH..." -ForegroundColor Yellow

    $sshDir = "$env:USERPROFILE\.ssh"
    $configPath = "$sshDir\config"

    # 创建SSH目录
    if (!(Test-Path $sshDir)) {
        New-Item -ItemType Directory -Path $sshDir -Force | Out-Null
    }

    # 从Gitea URL中提取主机名
    $giteaHost = ($GITEA_URL -replace "https?://", "") -replace "/.*", ""

    # 检查是否已有Gitea配置
    $configExists = $false
    if (Test-Path $configPath) {
        $configContent = Get-Content $configPath -Raw
        if ($configContent -like "*Host $giteaHost*") {
            $configExists = $true
        }
    }

    if (!$configExists) {
        $sshConfig = @"

# Gitea SSH configuration
Host $giteaHost
    Hostname $giteaHost
    Port $SSH_PORT
    User git
    IdentityFile ~/.ssh/id_rsa
"@
        Add-Content -Path $configPath -Value $sshConfig
        Write-Host "✓ 已配置Gitea SSH" -ForegroundColor Green
    } else {
        Write-Host "✓ Gitea SSH配置已存在" -ForegroundColor Green
    }
}

# 测试Gitea SSH连接
function Test-GiteaConnection {
    Write-Host "正在测试Gitea SSH连接..." -ForegroundColor Yellow

    # 从Gitea URL中提取主机名
    $giteaHost = ($GITEA_URL -replace "https?://", "") -replace "/.*", ""

    Write-Host "尝试连接到 $giteaHost..." -ForegroundColor Cyan

    try {
        # 使用ssh命令测试连接
        $testResult = ssh -T -o StrictHostKeyChecking=no -o ConnectTimeout=10 "git@$giteaHost" 2>&1

        Write-Host "SSH测试输出: $testResult" -ForegroundColor Gray

        if ($testResult -like "*Hi there*" -or $testResult -like "*successfully authenticated*" -or $testResult -like "*Welcome*" -or $testResult -like "*Hi $DEFAULT_USERNAME*") {
            Write-Host "✓ Gitea SSH连接测试成功" -ForegroundColor Green
            Write-Host "现在可以通过SSH访问Gitea仓库" -ForegroundColor Green
        } else {
            Write-Host "⚠ Gitea SSH连接测试未完全成功" -ForegroundColor Yellow
            Write-Host "测试结果: $testResult" -ForegroundColor Gray

            if ($testResult -like "*Connection closed*" -or $testResult -like "*Connection refused*" -or $testResult -like "*Network is unreachable*") {
                Write-Host "这可能是网络连接问题，但SSH密钥已成功添加到Gitea" -ForegroundColor Yellow
                Write-Host "建议稍后手动测试: ssh -T git@$giteaHost" -ForegroundColor Yellow
            } else {
                Write-Host "可能的原因:" -ForegroundColor Yellow
                Write-Host "1. SSH密钥未正确添加到Gitea" -ForegroundColor Yellow
                Write-Host "2. 网络连接问题" -ForegroundColor Yellow
                Write-Host "3. SSH配置问题" -ForegroundColor Yellow
                Write-Host "4. Gitea服务暂时不可用" -ForegroundColor Yellow
                Write-Host "建议稍后手动测试: ssh -T git@$giteaHost" -ForegroundColor Yellow
            }
        }
    } catch {
        Write-Host "⚠ SSH连接测试遇到问题: $($_.Exception.Message)" -ForegroundColor Yellow
        Write-Host "但SSH密钥已成功添加到Gitea，建议稍后手动测试" -ForegroundColor Yellow
    }
}

# 主执行流程
function Main {
    Write-Host "开始Gitea SSH密钥设置过程..." -ForegroundColor Green
    Write-Host ""

    # 获取用户配置
    Get-UserConfiguration

    # 执行各个步骤
    Check-Dependencies
    Write-Host ""

    Check-OrGenerate-SSHKey
    Write-Host ""

    Get-PublicKey
    Write-Host ""

    Verify-GiteaToken
    Write-Host ""

    Add-KeyToGitea
    Write-Host ""

    Configure-Git
    Write-Host ""

    Configure-GiteaSSH
    Write-Host ""

    Test-GiteaConnection
    Write-Host ""

    Write-Host "=== 设置完成 ===" -ForegroundColor Green
    Write-Host "✓ Git已安装并配置完成" -ForegroundColor Green
    Write-Host "✓ Git用户信息已设置: $DEFAULT_USERNAME <$DEFAULT_EMAIL>" -ForegroundColor Green
    Write-Host "✓ SSH密钥已添加到Gitea" -ForegroundColor Green
    Write-Host "✓ 用户 $SSH_USERNAME 现在可以通过SSH访问Gitea仓库" -ForegroundColor Green
    Write-Host ""
    Write-Host "测试命令:" -ForegroundColor Yellow
    $giteaHost = ($GITEA_URL -replace "https?://", "") -replace "/.*", ""
    Write-Host "  git clone git@${giteaHost}:username/repository.git" -ForegroundColor Cyan
    Write-Host "  ssh -T git@$giteaHost" -ForegroundColor Cyan
    Write-Host "  git config --list     # 查看git配置" -ForegroundColor Cyan
}

# 执行主函数
try {
    Main
} catch {
    Write-Host "❌ 脚本执行失败: $($_.Exception.Message)" -ForegroundColor Red
    Write-Host "请检查网络连接和配置信息" -ForegroundColor Yellow
    exit 1
}