using System.Web;
using System.Web.Mvc;
using Microsoft.AspNet.Identity;
using Microsoft.AspNet.Identity.EntityFramework;
using Microsoft.Owin.Security;
using Resources;
using Weee.DAL;
using Weee.Filter;
using Weee.Models;
using Weee.ViewModels;
using System;
using log4net;
using System.Linq;
using System.Data.Entity;
using System.IO;
using CScommon;
using System.Threading;
using NLog;
using CaptchaMvc.Models;
using CaptchaMvc.Infrastructure;
using CaptchaMvc.Interface;
using System.Web.Configuration;
using Weee.Service;
using Customize.Insynerger.Interfaces;
using Customize.Insynerger;
using Weee.Models.Customize.Insynerger;
using Customize.ViewModels;
using System.Threading.Tasks;
using System.Net;
using System.Configuration;
using DocumentFormat.OpenXml.ExtendedProperties;
using Qcarbon.Interfaces.adminCheck;
using System.Web.Routing;
using Qcarbon.Database.adminCheck;
using Qcarbon.ViewModels.admin;
using NPOI.SS.Formula.PTG;
using System.Security.Principal;
using System.Security.Claims;
using Customize.ViewModels.Insynerger;

namespace Weee.Controllers
{
    [AllowAnonymous]
    //[MvcMultilanguage]disable obsolete warning, not sure OK or not
    public class AccountController : QcarbonControllerBase
    {
        private readonly EmailService.Service service = DependencyResolver.Current.GetService<EmailService.Service>();//CFT-36
        private readonly WeeeDataContext db;
        private readonly UserManager<User> usermanager;

        protected WeeeSiteInfoService _siteInfoService;
        protected IadminCheckService _adminCheckService;
        protected Logger log;

        string CaptchaEnabled = WebConfigurationManager.AppSettings["CaptchaEnabled"];
        private readonly string baseUrl = "";

        public AccountController(WeeeDataContext d,UserManager<User> u, WeeeSiteInfoService siteInfoService)
            :base(d)
        {
            db = d;
            usermanager = u;
            _siteInfoService = siteInfoService;
            baseUrl = ConfigurationManager.AppSettings["InsynergerAPIurl"];
        }

        protected override void Initialize(RequestContext requestContext)
        {
            base.Initialize(requestContext);
            var userid = User.Identity.GetUserId();
            _adminCheckService = new adminCheckService(db, userid);
            log = NLog.LogManager.GetCurrentClassLogger();
        }

        [Route("account/logout")]
        [Filter.MvcLog("Sign out")]
        public ActionResult Logout()
        {
            HttpContext.GetOwinContext().Authentication.SignOut();
            return RedirectToAction("index", "Home", new { area = "" });
        }

        [Route("account/release")]
        [AllowAnonymous]
        public ActionResult Release()
        {
            return View();
        }
        [Route("account/login")]
        public async Task<ActionResult> Login(string returnurl, string where, string access_token)
        {
            Session.Clear();// .Abandon();
            IinsynergerAuthenticate isa = new insynergerAuthenticate(db, baseUrl);
            ViewBag.SynergerOn = isa.IsSynergerOn();
            var ViewModel = new LoginViewModel();

            // 思納捷轉址登入處
            if (!string.IsNullOrWhiteSpace(access_token))
            {
                access_token= access_token.Trim();
                User user = null;
                if (ViewBag.SynergerOn)
                {
                    HttpResponseRec httpRec = //await isa.myInfo2username(access_token);
                        await isa.login(ViewModel.UserName, ViewModel.Password, access_token);
                    if (httpRec.statusCode == HttpStatusCode.OK && httpRec.result!=null)
                    {
                        User usr = (User)httpRec.result;
                        user = (from a in db.Users
                                where a.UserName == usr.UserName
                                select a).FirstOrDefault();
                        if (user != null)
                        {
                            if (user.Company == null && user.CompanyID > 0)
                                user.Company = (from a in db.Companies
                                                where a.ID == user.CompanyID
                                                select a).FirstOrDefault();
                            HttpContext.GetOwinContext().Authentication.SignOut(DefaultAuthenticationTypes.ExternalCookie);
                            var identity = usermanager.CreateIdentity(user, DefaultAuthenticationTypes.ApplicationCookie);
                            HttpContext.GetOwinContext().Authentication.SignIn(new AuthenticationProperties()
                            {
                                IsPersistent = ViewModel.RememberMe
                            }, identity);
                            ViewModel.UserName = user.UserName;
                            ActionResult ret = normalCompanyLogin(ViewModel, user, identity, true, true); // isa.IsSynergerOn());
                            if (ret != null)
                                return ret;
                        }
                        else
                            ViewModel.errMsg = $"username {httpRec.result} not existed!";
                    }
                    else if (!string.IsNullOrWhiteSpace(httpRec.errorMessage))
                        ViewModel.errMsg = httpRec.errorMessage;
                }
            }
            if (!string.IsNullOrWhiteSpace(ViewModel.errMsg))
                ModelState.AddModelError("", ViewModel.errMsg);
            var siteInfo = _siteInfoService.GetWebSiteInfo();
            if (siteInfo != null)
            {
                ViewModel.SiteInfo = siteInfo;
                HttpContext.Application["customLoginImg"] = siteInfo.loginImagePath;
            }
            else
                HttpContext.Application["customLoginImg"] = null;
            ViewModel.CaptchaUse = CaptchaUse(); 
            if (CaptchaUse())
              ViewModel.CaptchaItem = GetCaptcha();

            if (returnurl != null && returnurl.Contains("changepassword"))
            {
                return RedirectToAction("changepassword", "PROFILE", new { Length = 7});
            }
            if (returnurl != null && (User.Identity.IsAuthenticated))
            {
                if (User.IsInRole(ProgramConstants.admin))
                {
                    return RedirectToAction("index", "home", new { area = "admin" });
                }
                else if (User.IsInRole(ProgramConstants.certification))
                {
                    return RedirectToAction("index", "home", new { area = "certification" });
                }
                else if (User.IsInRole(ProgramConstants.normalcompany))
                {
                    return RedirectToAction("index", "home");
                }
            }

            /* to do: login layout is broken when user zoom in */
            ViewModel.cmd = "登入";
            ViewBag.ReturnUrl = returnurl;
            if(where != null && where.Trim() != "" && where == "password")
            {
                ViewBag.SuccessSendResetPasswordEmail = Resource.SuccessSendResetPasswordEmail;
            }

            return View(ViewModel);
        }
        protected ActionResult normalCompanyLogin(LoginViewModel ViewModel, User user
            , ClaimsIdentity identity, bool emailConfirmed, bool synergerLogined)
        {
            if (!_adminCheckService.adminCheckPass())//若未能規避權限控管檢查
            {
                try
                {
                    AdminAccess aa = _adminCheckService.getAdminAccess();
                    if (aa == null)
                        throw new Exception("伺服器尚未匯入金鑰，請洽系統管理員處理");
                    DateTime td = DateTime.Today;
                    if (aa.activeStartDate > td || aa.activeEndDate < td)
                        throw new Exception($"伺服器不在金鑰可使用期間之中(" +
                            $"{aa.activeStartDate.Value.ToString("yyyy/MM/dd")}-" +
                            $"{aa.activeEndDate.Value.ToString("yyyy/MM/dd")})" +
                            $"，請洽系統管理員處理");
                    //var userid = User.Identity.GetUserId();
                    IcompanyAdminCheckService _companyAdminCheckService = new companyAdminCheckService(db, user.Id);
                    int companyId = _companyAdminCheckService.userName2companyID(ViewModel.UserName);
                    companyAdminAccessVM caa = _companyAdminCheckService.getCompanyAdminAccessVM(companyId);
                    string tds = DateTime.Today.ToString("yyyy/MM/dd");
                    Thread.Sleep(10);
                    if (caa==null || caa.activeStartDate.CompareTo(tds) > 0 || caa.activeEndDate.CompareTo(tds) < 0)
                        throw new Exception($"您的帳戶不在可使用期間之中(" +
                            $"{caa.activeStartDate}-{caa.activeEndDate})" +
                            $"，請洽系統管理員處理");
                }
                catch (Exception ex)
                {
                    log.Error(ex);
                    log.Error(CScommon.Exceptions.inner(ex));
                    log.Error(ex.StackTrace);
                    ModelState.AddModelError("", ex.Message);

                    var siteInfo = _siteInfoService.GetWebSiteInfo();
                    if (siteInfo != null)
                    {
                        ViewModel.SiteInfo = siteInfo;
                        HttpContext.Application["customLoginImg"] = siteInfo.loginImagePath;
                    }
                    else
                        HttpContext.Application["customLoginImg"] = null;
                    ViewModel.CaptchaUse = CaptchaUse();
                    if (CaptchaUse())
                        ViewModel.CaptchaItem = GetCaptcha();
                    return View(ViewModel);
                }
            }
            if (usermanager.IsInRole(user.Id, ProgramConstants.normalcompany))
            {
                copyReportTemplate(CScommon.ProgramConstants.OrganizationExcelLCAdata, identity.Name);//盤查表
                copyReportTemplate(CScommon.ProgramConstants.OrganizationExcelList, identity.Name);//清冊
                copyReportTemplate(CScommon.ProgramConstants.OrganizationWordReport, identity.Name, true);//組織型報告書
                copyReportTemplate(CScommon.ProgramConstants.OrganizationExcelLCArisk, identity.Name);//風險評估表
                copyReportTemplate(CScommon.ProgramConstants.ProductWordReport, identity.Name, true);//產品型報告書
                copyReportTemplate(CScommon.ProgramConstants.ProductExcelLCAdata, identity.Name, true);//產品型盤查表
                copyReportTemplate(CScommon.ProgramConstants.ProductExcelList, identity.Name, true);//產品型清冊
                copyReportTemplate(CScommon.ProgramConstants.ProductSensitivity, identity.Name, true);//敏感度分析
                InsynergerPreloginVM synergerVM=new InsynergerPreloginVM();
                synergerVM.id = ViewModel.UserName;
                if (string.IsNullOrWhiteSpace(ViewModel.Password))
                    synergerVM.pd = "";
                else
                    synergerVM.pd = CScommon.GoldenKeyEnDe.ToMD5( ViewModel.Password);
                Session["synergerVM"]=synergerVM;
                //if (synergerLogined)
                if (false)//undone !!... 暫時關掉轉自動登入畫面
                {
                    return RedirectToAction("Insynerger", "Home");//, new { area = "" });
                }
                else
                    return RedirectToAction("WeeeCarbonFootprint", "Home", new { area = "" });
            }
            if (emailConfirmed)
                ModelState.AddModelError("", Resources.Resource.StaticLabelaccountpending);
            else
                return RedirectToAction("ResendConfirmEmail", "Account", new { userName = user.UserName });
            return null;
        }
        [HttpPost]
        [AllowAnonymous]
        [Route("account/login")]
        [Filter.MvcLog("Sign In")]      
        public async Task<ActionResult> Login(string returnurl, LoginViewModel ViewModel)
        {
            //Session.Clear();// .Abandon();
            var siteInfo = _siteInfoService.GetWebSiteInfo();
            if (siteInfo != null)
            {
                ViewModel.SiteInfo = siteInfo;
                HttpContext.Application["customLoginImg"] = siteInfo.loginImagePath;
            }
            else
                HttpContext.Application["customLoginImg"] = null;
            IinsynergerAuthenticate isa = new insynergerAuthenticate(db, baseUrl);
            ViewBag.SynergerOn = isa.IsSynergerOn();
            ViewModel.CaptchaUse = CaptchaUse();
            if(CaptchaUse() && ViewModel != null && ViewModel.CaptchaItem != null)
            {
                if (!CheckCaptcha(ViewModel.CaptchaItem))
                {
                    ViewModel.CaptchaItem = GetCaptcha();
                    ModelState.AddModelError("", "識別碼錯誤");
                    return View(ViewModel);
                }
            }
            if (!string.IsNullOrWhiteSpace(ViewModel.cmd) &&
                    ViewModel.cmd.CompareTo(Resource.SignUp) == 0)
                return RedirectToAction("Register");
            string errMsg = "";
            if (ModelState.IsValid)
            {
                User user = null;
                bool synergerLogined = false;
                if (ViewBag.SynergerOn)
                {
                    HttpResponseRec httpRec = 
                        await isa.login(ViewModel.UserName, ViewModel.Password);
                    if (httpRec.statusCode == HttpStatusCode.OK)
                    {
                        user = (from a in db.Users
                                where a.UserName == ViewModel.UserName
                                select a).FirstOrDefault();
                        if (user != null) 
                        {
                            if (user.Company == null && user.CompanyID > 0)
                            {
                                user.Company = (from a in db.Companies
                                                where a.ID == user.CompanyID
                                                select a).FirstOrDefault();
                            }
                            synergerLogined = true;
                        }
                    }
                    else if (!string.IsNullOrWhiteSpace(httpRec.errorMessage))
                        errMsg = httpRec.errorMessage;
                    //else
                    //    errMsg=httpRec.statusCode.ToString();
                }
                if (user==null && string.IsNullOrWhiteSpace(errMsg))
                    user = usermanager.Find(ViewModel.UserName, ViewModel.Password);
                if (user == null)
                {
                    if (errMsg == "")
                        errMsg = Resource.LoginFailed;
                }
                else
                {
                    HttpContext.GetOwinContext().Authentication.SignOut(DefaultAuthenticationTypes.ExternalCookie);
                    var identity = usermanager.CreateIdentity(user, DefaultAuthenticationTypes.ApplicationCookie);
                    HttpContext.GetOwinContext().Authentication.SignIn(new AuthenticationProperties()
                    {
                        IsPersistent = ViewModel.RememberMe
                    }, identity);
                    if (returnurl != null)
                        return RedirectPermanent(returnurl);
                    bool emailConfirmed = user.EmailConfirmed;
                    if (user.Company == null)
                    {
                        if (usermanager.IsInRole(user.Id, ProgramConstants.admin))
                            return RedirectToAction("Index", "Home", new { area = "admin" });
                        if (emailConfirmed)
                            ModelState.AddModelError("", Resources.Resource.StaticLabelaccountpending);
                        else
                            return RedirectToAction("ResendConfirmEmail", "Account", new { userName = user.UserName });
                    }
                    else if (user.Company.CompanyType == typeof(CertificationCompany))
                    {
                        if (usermanager.IsInRole(user.Id, ProgramConstants.certification))
                            return RedirectToAction("Index", "Home", new { area = "certification" });
                        if (emailConfirmed)
                            ModelState.AddModelError("", Resources.Resource.StaticLabelaccountpending);
                        else
                            return RedirectToAction("ResendConfirmEmail", "Account", new { userName = user.UserName });
                    }
                    else if (user.Company.CompanyType == typeof(NormalCompany))
                    {
                        ActionResult ret = normalCompanyLogin(ViewModel, user, identity, emailConfirmed, synergerLogined);
                        if (ret != null)
                            return ret;
                    }
                    HttpContext.GetOwinContext().Authentication.SignOut(DefaultAuthenticationTypes.ApplicationCookie);
                    ViewModel.CaptchaItem = GetCaptcha();
                    return View(ViewModel);
                }
            }
            if (CaptchaUse() && ViewModel.CaptchaItem != null)
            {
                var vm = ViewModel.CaptchaItem;
                if (string.IsNullOrEmpty(vm.ImageUrl) || string.IsNullOrWhiteSpace(vm.tokenValue))
                    ViewModel.CaptchaItem = GetCaptcha();
            }
            // If we got this far, something failed, redisplay form
            ModelState.AddModelError("", errMsg);// "The user name or password provided is incorrect.");
            return View(ViewModel);
        }
        private void copyReportTemplate(string templateFile, string userName, bool rootAsWell=false)
        {
            string templateSourcePath = Path.Combine(AppDomain.CurrentDomain.BaseDirectory, "App_Data"
                , templateFile);
            string templateTargetPath ;
            try
            {
                templateTargetPath = Server.MapPath( "~/Browser_Local/WebFilesRoot");
            }
            catch
            {
                templateTargetPath = Path.Combine(AppDomain.CurrentDomain.BaseDirectory
                    , "Browser_Local\\WebFilesRoot");
            }
            //Logger log = NLog.LogManager.GetCurrentClassLogger();
            //log.Info($"copyReportTemplate templateTargetPath={templateTargetPath}");
            string port = Request.ServerVariables["SERVER_PORT"];
            if (!Directory.Exists(templateTargetPath))
            {
                if (port=="80" || port=="443")
                    throw new Exception($"virtual directory {templateTargetPath} WebFilesRoot does not exist!");
                else
                    Directory.CreateDirectory(templateTargetPath);
            }
            string rootPath = templateTargetPath;
            templateTargetPath = Path.Combine(templateTargetPath, userName);
            if (!Directory.Exists(templateTargetPath))
                Directory.CreateDirectory(templateTargetPath);

            rootPath = Path.Combine(rootPath, templateFile);
            templateTargetPath = Path.Combine(templateTargetPath, templateFile);
            //always copy
            Mutex mutex = new Mutex();
            mutex.WaitOne();
            for(int i=0; i<5; i++)
            {
                try 
                {
                    if (rootAsWell) {
                        if (System.IO.File.Exists(rootPath))
                            System.IO.File.Delete(rootPath);
                        System.IO.File.Copy(templateSourcePath, rootPath);
                    }
                    if (System.IO.File.Exists(templateTargetPath))
                        System.IO.File.Delete(templateTargetPath);
                    System.IO.File.Copy(templateSourcePath, templateTargetPath);
                    break;
                }
                catch 
                { 
                    Task.Delay(1000);
                }
            }
            mutex.ReleaseMutex();
        }
        [Route("account/CertificationRegister")]
        public ActionResult CertificationRegister()
        {
            return View();
        }

        [HttpPost]
        [ValidateAntiForgeryToken]
        [Route("account/CertificationRegister")]
        public ActionResult CertificationRegister(CertificationRegisterViewModel viewModel)
        {
            if (ModelState.IsValid)
            {
                viewModel.User.IsCompanyAdmin = true;
                viewModel.User.IsSystemAdmin = false;
                viewModel.Company.Users.Add(viewModel.User);
                var transac = db.Database.BeginTransaction();
                try
                {
                    db.Companies.Add(viewModel.Company);

                    db.SaveChanges();
                    usermanager.AddPassword(viewModel.User.Id, viewModel.Password);
                    db.SaveChanges();
                    transac.Commit();
                }
                catch(Exception ex)
                {
                    transac.Rollback();
                    ex = CScommon.Exceptions.inner(ex);
                    Logger log = NLog.LogManager.GetCurrentClassLogger();
                    log.Error(ex.StackTrace);
                    throw;
                }
                return RedirectToAction("LOGIN", "ACCOUNT");
            }
            return View(viewModel);
        }

        [Route("account/Register")]
        public ActionResult Register()
        {
            if (Request.IsAuthenticated)
            {
                HttpContext.GetOwinContext().Authentication.SignOut();
                return RedirectToAction("Register");
            }
            else
            {
                var re = new RegisterViewModel();

                re.CaptchaUse = CaptchaUse();
                if (CaptchaUse())
                    re.CaptchaItem = GetCaptcha();
                IinsynergerAuthenticate isa = new insynergerAuthenticate(db, baseUrl);
                ViewBag.SynergerOn = isa.IsSynergerOn();
                ViewBag.OrganizationOnly = configB("OrganizationOnly");
                return View(re);
            }
        }

        [HttpPost]
        [ValidateAntiForgeryToken]
        [Route("account/Register")]
        [Filter.MvcLog("Register")]
        public ActionResult Register(RegisterViewModel viewModel)
        {
            IinsynergerAuthenticate isa = new insynergerAuthenticate(db, baseUrl);
            ViewBag.SynergerOn = isa.IsSynergerOn();
            ViewBag.OrganizationOnly = configB("OrganizationOnly");
            viewModel.CaptchaUse = CaptchaUse();
            if (CaptchaUse() && viewModel != null && viewModel.CaptchaItem != null)
            {
                if (!CheckCaptcha(viewModel.CaptchaItem))
                {
                    viewModel.CaptchaItem = GetCaptcha();
                    ModelState.AddModelError("", "識別碼錯誤");
                    return View(viewModel);
                }
            }

            if (!string.IsNullOrWhiteSpace(viewModel.User.UserName) &&
                    usermanager.FindByName(viewModel.User.UserName) != null)
            {
                ModelState.AddModelError(string.Empty, Resource.UserAccountNameDuplicated);

                if (CaptchaUse() && viewModel.CaptchaItem != null)
                {
                    var vm = viewModel.CaptchaItem;
                    if (string.IsNullOrEmpty(vm.ImageUrl) || string.IsNullOrWhiteSpace(vm.tokenValue))
                        viewModel.CaptchaItem = GetCaptcha();
                }

                return View(viewModel);
            }
            //Start CFT-28
            //if(!string.IsNullOrWhiteSpace(viewModel.Company.VATNumber))
            //{
            //    string vatNumber = viewModel.Company.VATNumber.ToString().Trim();
            //    var query = db.Companies.Where(c => c.VATNumber.Trim() != null && c.VATNumber.Trim() != "" ? c.VATNumber.Trim().ToLower() == vatNumber.Trim().ToLower() : false).FirstOrDefault();
            //    if (query != null)
            //    {
            //        ModelState.AddModelError(string.Empty, Resource.VATNumberDuplicated);

            //        if (CaptchaUse() && viewModel.CaptchaItem != null)
            //        {
            //            var vm = viewModel.CaptchaItem;
            //            if (string.IsNullOrEmpty(vm.ImageUrl) || string.IsNullOrWhiteSpace(vm.tokenValue))
            //                viewModel.CaptchaItem = GetCaptcha();
            //        }

            //        return View(viewModel);
            //    }
            //}
            //End CFT-28
            if (ModelState.IsValid)
            {
                viewModel.User.IsCompanyAdmin = true;
                viewModel.User.IsSystemAdmin = false;
                viewModel.User.CreatedTime = DateTime.Now;
                viewModel.Company.Users.Add(viewModel.User);
                if (viewModel.IsAuditor && checkCertificationCompanyNameExist(viewModel.Company.Name))
                {
                    ModelState.AddModelError(string.Empty, "公司名稱\"" + viewModel.Company.Name + "\"已存在");
                    if (CaptchaUse() && viewModel.CaptchaItem != null)
                    {
                        var vm = viewModel.CaptchaItem;
                        if (string.IsNullOrEmpty(vm.ImageUrl) || string.IsNullOrWhiteSpace(vm.tokenValue))
                            viewModel.CaptchaItem = GetCaptcha();
                    }
                    return View(viewModel);
                }
                using (var trans = db.Database.BeginTransaction())
                {
                    //var trans = db.Database.BeginTransaction();
                    try
                    {
                        string err = CScommon.FieldCheck.loginID(viewModel.User.UserName);
                        if (err != "")
                            throw new Exception(err);
                        if (viewModel.SynergerGroupId!=null)
                        {
                            SynergerUser su = new SynergerUser();
                            su.groupId =(int) viewModel.SynergerGroupId;
                            su.userId = viewModel.User.Id;
                            su.isSelf = true;
                            db.SynergerUser.Add(su);
                        }
                        if (!viewModel.IsAuditor)//一般使用者
                        {
                            viewModel.Company.Fabs.Add(viewModel.Fab);
                            db.Companies.Add(viewModel.Company);
                        }
                        else//查證稽核使用者
                        {
                            string json =JsonUtl.fromT(viewModel.Company);
                            CertificationCompany cerComp =JsonUtl.toT<CertificationCompany>(json);
                            foreach (User usr in viewModel.Company.Users)
                                cerComp.Users.Add(usr);
                            db.Companies.Add(cerComp);
                        }
                        db.SaveChanges();
                        usermanager.AddPassword(viewModel.User.Id, viewModel.Password);
                        db.SaveChanges();
                        //trans.Commit();

                        //CFT-65
                        var UserAccountType = new UserAccountType();
                        UserAccountType.AccountType =(ACCOUNT_TYPE) viewModel.UserAccountType;
                        UserAccountType.UserId = viewModel.User.Id;
                        UserAccountType.StartTime = DateTime.Now;
                        UserAccountType.EndTime = DateTime.Now.AddMonths(1);
                        UserAccountType.Enabled = true;
                        db.UserAccountType.Add(UserAccountType);
                        db.SaveChanges();

                        //send email to register to confrim
                        service.SendRequestMessaageToAdminOrUser(
                            viewModel.User.Email, viewModel.User.UserName
                            , "user", "register", ViewBag.baseUrl);//CFT-36
                        ViewBag.RegistedMessage = Resource.RegistedSuccessful;
                        trans.Commit();

                        if (CaptchaUse() && viewModel.CaptchaItem != null)
                        {
                            var vm = viewModel.CaptchaItem;
                            if (string.IsNullOrEmpty(vm.ImageUrl) || string.IsNullOrWhiteSpace(vm.tokenValue))
                                viewModel.CaptchaItem = GetCaptcha();
                        }

                        return View(viewModel);
                        //return RedirectToAction("LOGIN", "ACCOUNT");
                        //End CFT-35
                    }
                    catch (Exception ex)
                    {
                        trans.Rollback();
                        Exception inn = CScommon.Exceptions.inner(ex);
                        string err = $"json:{JsonUtl.fromT(viewModel)}\n" +
                            $"message:{inn.Message}\n" +
                            $"stacktrace:{ex.StackTrace}";
                        writeLog(db, "", err);
                        Logger log = NLog.LogManager.GetCurrentClassLogger();
                        log.Error(ex.StackTrace);
                        ModelState.AddModelError(string.Empty, ex.Message);

                        if (CaptchaUse() && viewModel.CaptchaItem != null)
                        {
                            var vm = viewModel.CaptchaItem;
                            if (string.IsNullOrEmpty(vm.ImageUrl) || string.IsNullOrWhiteSpace(vm.tokenValue))
                                viewModel.CaptchaItem = GetCaptcha();
                        }

                        return View(viewModel);
                    }
                }
            }

            if (CaptchaUse() && viewModel.CaptchaItem != null)
            {
                var vm = viewModel.CaptchaItem;
                if (string.IsNullOrEmpty(vm.ImageUrl) || string.IsNullOrWhiteSpace(vm.tokenValue))
                    viewModel.CaptchaItem = GetCaptcha();
            }

            return View(viewModel);
        }

        //CFT-46
        [Route("account/RegisterConfirm")]
        public ActionResult RegisterConfirm(string key)
        {
            var siteInfo = _siteInfoService.GetWebSiteInfo();
            try
            {
                if (siteInfo != null)
                {
                    //ViewModel.SiteInfo = siteInfo;
                    HttpContext.Application["customLoginImg"] = siteInfo.loginImagePath;
                }
                else
                    HttpContext.Application["customLoginImg"] = null;
                IinsynergerAuthenticate isa = new insynergerAuthenticate(db, baseUrl);
                ViewBag.SynergerOn = isa.IsSynergerOn();
                if (string.IsNullOrWhiteSpace(key))
                    throw new Exception("參數錯誤");
                string userName = service.Decrypt(key);
                var userInfo = db.Users.FirstOrDefault(u => u.UserName.Trim().ToLower() == userName);
                if (userInfo != null)
                {
                    userInfo.EmailConfirmed = true;
                    var entry = db.Entry(userInfo);
                    entry.State = EntityState.Modified;
                    db.SaveChanges();

                    //通知系統管理者開通帳號
                    //Start CFT-35
                    var email = db.Users.Where(u => u.IsSystemAdmin == true).Select(u => u.Email).FirstOrDefault();//CFT-36
                    service.SendRequestMessaageToAdminOrUser(email, userName
                        , "admin", "", ViewBag.baseUrl);//CFT-36
                    return View(siteInfo);
                }
                else
                {
                    return RedirectToAction("Register");
                }
            }
            catch (Exception ex)
            {
                Exception inn = CScommon.Exceptions.inner(ex);
                ModelState.AddModelError(string.Empty, inn);
                return View(siteInfo);
            }
        }

        [Route("account/ResendConfirmEmail")]
        public ActionResult ResendConfirmEmail(string userName)
        {
            ResendConfirmEmailViewModel ViewModel = new ResendConfirmEmailViewModel();
            var siteInfo = _siteInfoService.GetWebSiteInfo();
            if (siteInfo != null)
            {
                ViewModel.SiteInfo = siteInfo;
                HttpContext.Application["customLoginImg"] = siteInfo.loginImagePath;
            }
            else
                HttpContext.Application["customLoginImg"] = null;
            IinsynergerAuthenticate isa = new insynergerAuthenticate(db, baseUrl);
            ViewBag.SynergerOn = isa.IsSynergerOn();
            ViewBag.userName = userName;
            return View(ViewModel);
        }

        [HttpPost]
        [Route("account/ResendConfirmEmail")]
        public ActionResult ResendConfirmEmail( ResendConfirmEmailViewModel ViewModel)
        {
            var siteInfo = _siteInfoService.GetWebSiteInfo();
            if (siteInfo != null)
            {
                ViewModel.SiteInfo = siteInfo;
                HttpContext.Application["customLoginImg"] = siteInfo.loginImagePath;
            }
            else
                HttpContext.Application["customLoginImg"] = null;
            IinsynergerAuthenticate isa = new insynergerAuthenticate(db, baseUrl);
            ViewBag.SynergerOn = isa.IsSynergerOn();
            var email = ViewModel.Email;
            string userName = ViewModel.UserName;
            var info = db.Users.FirstOrDefault(u => u.UserName == ViewModel.UserName);
            if(info != null)
            {
                info.Email = email;
                db.Users.Attach(info);
                db.SaveChanges();

                //send email to register to confrim
                service.SendRequestMessaageToAdminOrUser(email, userName
                    , "user", "register", ViewBag.baseUrl);
                ViewBag.Message = Resource.SuccessSendEmail;
            }
            return View(ViewModel);
        }
        //End CFT-46

        //CFT-45
        [Route("account/ResetPassword")]
        public ActionResult ResetPassword(string userName)
        {
            if (userName == null || userName.Trim() == "")
            {
                ViewBag.Message = Resource.UserNameRequired;
                return RedirectToAction("LOGIN", "ACCOUNT");
            }
            var info = db.Users.FirstOrDefault(u => u.UserName == userName);

            if (info != null)
            {
                //send email to register to confrim
                service.SendRequestMessaageToAdminOrUser(info.Email
                    , info.UserName, "user", "password", ViewBag.baseUrl);
                ViewBag.SuccessSendResetPasswordEmail = Resource.SuccessSendResetPasswordEmail;
            }

            return RedirectToAction("LOGIN","ACCOUNT", new { where = "password"});
        }

        [AllowAnonymous]
        [Route("account/ForgetPass")]
        public ActionResult ForgetPass(ForgetPassViewModel ViewModel)
        {
            var re = ViewModel;// new ForgetPassViewModel();

            var siteInfo = _siteInfoService.GetWebSiteInfo();
            if (siteInfo != null)
            {
                ViewModel.SiteInfo = siteInfo;
                HttpContext.Application["customLoginImg"] = siteInfo.loginImagePath;
            }
            else
                HttpContext.Application["customLoginImg"] = null;
            IinsynergerAuthenticate isa = new insynergerAuthenticate(db, baseUrl);
            ViewBag.SynergerOn = isa.IsSynergerOn();
            if (ViewModel == null || ViewModel.DoSearch == 0)
                return View(re);

            if (ViewModel != null && 
                !string.IsNullOrWhiteSpace(ViewModel.UserName) && 
                !string.IsNullOrWhiteSpace(ViewModel.Email))
            {
                var list = db.Users.Where(x => 
                   x.Email == ViewModel.Email && x.UserName == ViewModel.UserName).ToList();
                if (list != null && list.Count() > 0)
                {
                    var info = list.FirstOrDefault();

                    //Logger log = NLog.LogManager.GetCurrentClassLogger();
                    //log.Info($"baseUrl={baseUrl} ViewBag.baseUrl={ViewBag.baseUrl}");
                    service.SendRequestMessaageToAdminOrUser(info.Email
                        , info.UserName, "user", "password", ViewBag.baseUrl);
                    ViewBag.SuccessSendResetPasswordEmail = Resource.SuccessSendResetPasswordEmail;
                }
                else
                    ModelState.AddModelError("", "帳號或Email錯誤");
            }          
            else
                ModelState.AddModelError("", "帳號或Email空白");

            return View(re);
        }

        [Route("account/ConfirmResetPassword")]
        [Filter.MvcLog("ConfirmResetPassword")]
        public ActionResult ConfirmResetPassword(string key)
        {
            string userName = service.Decrypt(key);
            var userInfo = db.Users.FirstOrDefault(u => u.UserName == userName);
            if(userInfo != null)
            {
                return RedirectToAction("changepassword2", "PROFILE", new { key = key });
            }
            else
            {
                return RedirectToAction("LOGIN","ACCOUNT");
            }
        }
        private string trimLeft(string oriS, string keyword) {
            string ret = oriS;
            int i = oriS.IndexOf(keyword);
            if (i > 0)
                ret = oriS.Substring(i);
            return ret;
        }
        private CaptchaViewModel GetCaptcha()
        { 
            var re = new CaptchaViewModel();

            var parameterLength = new ParameterModel(DefaultCaptchaManager.LengthAttribute, 3);
            var parameters = new ParameterModelContainer(new[] { parameterLength });
            var info = CaptchaUtils.CaptchaManager.GenerateNew(this, parameters);
            string trim2defaultCaptcha = trimLeft(info.ImageUrl, "DefaultCaptcha");
            re.ImageUrl = trim2defaultCaptcha;// info.ImageUrl.Substring(2);
            //log.Info($"ImageUrl={re.ImageUrl}");
            re.tokenValue = info.TokenValue;

            return re;
        }

        private bool CheckCaptcha(CaptchaViewModel model)
        {           
            var captchaValue = CaptchaUtils.CaptchaManager.StorageProvider
                              .GetValue(model.CaptchaToken, TokenType.Validation);
            if (captchaValue == null || !captchaValue.IsEqual(model.Captcha))
                return false;
            else
                return  true;
        }

        private bool CaptchaUse()
        {
            return CaptchaEnabled == "1";
        }

        [Route("account/version")]
        [AllowAnonymous]
        public ActionResult Version()
        {
            var ViewModel = new LoginViewModel();
            var siteInfo = _siteInfoService.GetWebSiteInfo();
            if (siteInfo != null)
                ViewModel.SiteInfo = siteInfo;
            return View(ViewModel);
        }

        protected override void Dispose(bool disposing)
        {
            if (disposing)
            {
                db.Dispose();
            }
            base.Dispose(disposing);
        }

        private bool checkCertificationCompanyNameExist(string name)
        {
            var exist = (from a in db.Companies
                         join b in db.CertificationCompanies on a.ID equals b.ID
                         where a.Name == name
                         select a).Any();
            return exist;
        }

    }
}