303 lines
10 KiB
PHP
303 lines
10 KiB
PHP
|
<?php
|
|||
|
|
// +----------------------------------------------------------------------
|
|||
|
|
// | Niucloud-admin 企业快速开发的saas管理平台
|
|||
|
|
// +----------------------------------------------------------------------
|
|||
|
|
// | 官方网址：https://www.niucloud-admin.com
|
|||
|
|
// +----------------------------------------------------------------------
|
|||
|
|
// | niucloud团队 版权所有 开源版本可自由商用
|
|||
|
|
// +----------------------------------------------------------------------
|
|||
|
|
// | Author: Niucloud Team
|
|||
|
|
// +----------------------------------------------------------------------
|
|||
|
|
|
|||
|
|
namespace app\service\api\login;
|
|||
|
|
|
|||
|
|
use app\dict\member\MemberLoginTypeDict;
|
|||
|
|
use app\dict\sys\AppTypeDict;
|
|||
|
|
use app\dict\sys\SmsDict;
|
|||
|
|
use app\model\member\Member;
|
|||
|
|
use app\service\api\captcha\CaptchaService;
|
|||
|
|
use app\service\api\member\MemberConfigService;
|
|||
|
|
use app\service\api\member\MemberService;
|
|||
|
|
use app\service\api\notice\NoticeService;
|
|||
|
|
use core\base\BaseApiService;
|
|||
|
|
use core\exception\ApiException;
|
|||
|
|
use core\exception\AuthException;
|
|||
|
|
use core\util\TokenAuth;
|
|||
|
|
use Exception;
|
|||
|
|
use think\facade\Cache;
|
|||
|
|
use think\facade\Log;
|
|||
|
|
use Throwable;
|
|||
|
|
|
|||
|
|
/**
|
|||
|
|
* 登录服务层
|
|||
|
|
* Class BaseService
|
|||
|
|
* @package app\service
|
|||
|
|
*/
|
|||
|
|
class LoginService extends BaseApiService
|
|||
|
|
{
|
|||
|
|
|
|||
|
|
public function __construct()
|
|||
|
|
{
|
|||
|
|
parent::__construct();
|
|||
|
|
$this->model = new Member();
|
|||
|
|
}
|
|||
|
|
|
|||
|
|
/**
|
|||
|
|
* 会员注册
|
|||
|
|
* @param $data
|
|||
|
|
*/
|
|||
|
|
public function register($data)
|
|||
|
|
{
|
|||
|
|
//检测设置是否自动注册
|
|||
|
|
//自动注册检测授权信息
|
|||
|
|
//注册登录
|
|||
|
|
}
|
|||
|
|
|
|||
|
|
/**
|
|||
|
|
* 登录操作
|
|||
|
|
* @param Member $member_info
|
|||
|
|
* @param string $login_type
|
|||
|
|
* @return array
|
|||
|
|
*/
|
|||
|
|
public function login(Member $member_info, string $login_type)
|
|||
|
|
{
|
|||
|
|
//绑定第三方授权
|
|||
|
|
$this->bingOpenid($member_info);
|
|||
|
|
if (!$member_info->status) throw new ApiException('MEMBER_LOCK');
|
|||
|
|
$member_info->login_time = time();
|
|||
|
|
$member_info->login_ip = $this->request->ip();
|
|||
|
|
$member_info->login_channel = $this->channel;
|
|||
|
|
$member_info->login_type = $login_type;
|
|||
|
|
$member_info->login_count++;
|
|||
|
|
$member_info->last_visit_time = time();
|
|||
|
|
$member_info->save();
|
|||
|
|
$token_info = $this->createToken($member_info);
|
|||
|
|
event("MemberLogin", $member_info);
|
|||
|
|
return [
|
|||
|
|
'token' => $token_info['token'],
|
|||
|
|
'expires_time' => $token_info['params']['exp'],
|
|||
|
|
];
|
|||
|
|
}
|
|||
|
|
|
|||
|
|
|
|||
|
|
/**
|
|||
|
|
* 账号登录
|
|||
|
|
* @param string $username
|
|||
|
|
* @param string $password
|
|||
|
|
* @return array|false
|
|||
|
|
*/
|
|||
|
|
public function account(string $username, string $password)
|
|||
|
|
{
|
|||
|
|
$member_service = new MemberService();
|
|||
|
|
$member_info = $member_service->findMemberInfo(['username|mobile' => $username, 'site_id' => $this->site_id]);
|
|||
|
|
if ($member_info->isEmpty()) throw new AuthException('MEMBER_NOT_EXIST');//账号不存在
|
|||
|
|
if (!check_password($password, $member_info->password)) return false;//密码与账号不匹配
|
|||
|
|
return $this->login($member_info, MemberLoginTypeDict::USERNAME);
|
|||
|
|
}
|
|||
|
|
|
|||
|
|
|
|||
|
|
/**
|
|||
|
|
* 手机号登录
|
|||
|
|
* @param string $mobile
|
|||
|
|
* @return array
|
|||
|
|
*/
|
|||
|
|
public function mobile(string $mobile){
|
|||
|
|
//校验手机验证码
|
|||
|
|
$this->checkMobileCode($mobile);
|
|||
|
|
//登录注册配置
|
|||
|
|
$config = (new MemberConfigService())->getLoginConfig();
|
|||
|
|
$is_mobile = $config['is_mobile'];
|
|||
|
|
if($is_mobile != 1) throw new AuthException('MOBILE_LOGIN_UNOPENED');
|
|||
|
|
$member_service = new MemberService();
|
|||
|
|
$member_info = $member_service->findMemberInfo(['mobile' => $mobile, 'site_id' => $this->site_id]);
|
|||
|
|
if ($member_info->isEmpty()) throw new AuthException('MEMBER_NOT_EXIST');//账号不存在
|
|||
|
|
|
|||
|
|
return $this->login($member_info, MemberLoginTypeDict::MOBILE);
|
|||
|
|
}
|
|||
|
|
|
|||
|
|
/**
|
|||
|
|
* 生成token
|
|||
|
|
* @param $member_info
|
|||
|
|
* @return array|null
|
|||
|
|
*/
|
|||
|
|
public function createToken($member_info): ?array
|
|||
|
|
{
|
|||
|
|
$expire_time = env('system.api_token_expire_time') ?? 3600;//todo 不一定和管理端合用这个token时限
|
|||
|
|
return TokenAuth::createToken($member_info->member_id, AppTypeDict::API, ['member_id' => $member_info->member_id, 'username' => $member_info->username, 'site_id' => $member_info->site_id], $expire_time);
|
|||
|
|
}
|
|||
|
|
|
|||
|
|
/**
|
|||
|
|
* 登陆退出(当前账户)
|
|||
|
|
*/
|
|||
|
|
public function logout(): ?bool
|
|||
|
|
{
|
|||
|
|
self::clearToken($this->member_id, $this->request->apiToken());
|
|||
|
|
return true;
|
|||
|
|
}
|
|||
|
|
|
|||
|
|
/**
|
|||
|
|
* 清理token
|
|||
|
|
* @param int $member_id
|
|||
|
|
* @param string|null $token
|
|||
|
|
* @return bool|null
|
|||
|
|
*/
|
|||
|
|
public static function clearToken(int $member_id, ?string $token = ''): ?bool
|
|||
|
|
{
|
|||
|
|
TokenAuth::clearToken($member_id, AppTypeDict::API, $token);
|
|||
|
|
return true;
|
|||
|
|
}
|
|||
|
|
|
|||
|
|
|
|||
|
|
/**
|
|||
|
|
* 解析token
|
|||
|
|
* @param string|null $token
|
|||
|
|
* @return array
|
|||
|
|
*/
|
|||
|
|
public function parseToken(?string $token){
|
|||
|
|
if(empty($token))
|
|||
|
|
{
|
|||
|
|
//定义专属于授权认证机制的错误响应, 定义专属语言包
|
|||
|
|
throw new AuthException('MUST_LOGIN', 401);
|
|||
|
|
}
|
|||
|
|
|
|||
|
|
try {
|
|||
|
|
$token_info = TokenAuth::parseToken($token, AppTypeDict::API);
|
|||
|
|
} catch ( Throwable $e ) {
|
|||
|
|
// if(env('app_debug', false)){
|
|||
|
|
// throw new AuthException($e->getMessage(), 401);
|
|||
|
|
// }else{
|
|||
|
|
throw new AuthException('LOGIN_EXPIRE', 401);
|
|||
|
|
// }
|
|||
|
|
}
|
|||
|
|
if(!$token_info)
|
|||
|
|
{
|
|||
|
|
throw new AuthException('MUST_LOGIN', 401);
|
|||
|
|
}
|
|||
|
|
//验证有效次数或过期时间
|
|||
|
|
return $token_info;
|
|||
|
|
}
|
|||
|
|
|
|||
|
|
/**
|
|||
|
|
* 手机发送验证码
|
|||
|
|
* @param $mobile
|
|||
|
|
* @param string $type 发送短信的业务场景
|
|||
|
|
* @return array
|
|||
|
|
* @throws Exception
|
|||
|
|
*/
|
|||
|
|
public function sendMobileCode($mobile, string $type = ''){
|
|||
|
|
(new CaptchaService())->check();
|
|||
|
|
if(empty($mobile)) throw new AuthException('MOBILE_NEEDED');
|
|||
|
|
//发送
|
|||
|
|
if(!in_array($type, SmsDict::SCENE_TYPE)) throw new AuthException('MEMBER_MOBILE_CAPTCHA_ERROR');
|
|||
|
|
$code = str_pad(random_int(1, 9999), 4, 0, STR_PAD_LEFT);// 生成4位随机数，左侧补0
|
|||
|
|
(new NoticeService())->send('member_verify_code', ['code' => $code, 'mobile' => $mobile]);
|
|||
|
|
//将验证码存入缓存
|
|||
|
|
$key = md5(uniqid(null, true));
|
|||
|
|
$cache_tag_name = "mobile_key".$mobile.$type;
|
|||
|
|
$this->clearMobileCode($mobile, $type);
|
|||
|
|
Cache::tag($cache_tag_name)->set($key, [ 'mobile' => $mobile, 'code' => $code, 'type' => $type], 600);
|
|||
|
|
return ['key' => $key];
|
|||
|
|
}
|
|||
|
|
|
|||
|
|
public function getMobileCodeCacheName(){
|
|||
|
|
|
|||
|
|
}
|
|||
|
|
|
|||
|
|
public function clearMobileCode($mobile, $type){
|
|||
|
|
$cache_tag_name = "mobile_key".$mobile.$type;
|
|||
|
|
Cache::tag($cache_tag_name)->clear();
|
|||
|
|
}
|
|||
|
|
|
|||
|
|
/**
|
|||
|
|
* 校验手机验证码
|
|||
|
|
* @param string $mobile
|
|||
|
|
* @return true
|
|||
|
|
*/
|
|||
|
|
public function checkMobileCode(string $mobile){
|
|||
|
|
if(empty($mobile)) throw new AuthException('MOBILE_NEEDED');
|
|||
|
|
$mobile_key = request()->param('mobile_key', '');
|
|||
|
|
$mobile_code = request()->param('mobile_code', '');
|
|||
|
|
if(empty($mobile_key) || empty($mobile_code)) throw new AuthException('MOBILE_CAPTCHA_ERROR');
|
|||
|
|
$cache = Cache::get($mobile_key);
|
|||
|
|
if(empty($cache)) throw new AuthException('MOBILE_CAPTCHA_ERROR');
|
|||
|
|
$temp_mobile = $cache['mobile'];
|
|||
|
|
$temp_code = $cache['code'];
|
|||
|
|
$temp_type = $cache['type'];
|
|||
|
|
if($temp_mobile != $mobile || $temp_code != $mobile_code) throw new AuthException('MOBILE_CAPTCHA_ERROR');
|
|||
|
|
$this->clearMobileCode($temp_mobile, $temp_type);
|
|||
|
|
return true;
|
|||
|
|
|
|||
|
|
}
|
|||
|
|
|
|||
|
|
/**
|
|||
|
|
* 绑定openid
|
|||
|
|
* @param $member
|
|||
|
|
* @return true
|
|||
|
|
*/
|
|||
|
|
public function bingOpenid($member){
|
|||
|
|
$config = (new MemberConfigService())->getLoginConfig();
|
|||
|
|
$is_auth_register = $config['is_auth_register'];
|
|||
|
|
$open_id = $this->request->param('openid');
|
|||
|
|
if(!empty($open_id)){
|
|||
|
|
Log::write('channel_1'.$this->channel);
|
|||
|
|
if(!empty($this->channel)){
|
|||
|
|
$openid_field = match($this->channel){
|
|||
|
|
'wechat' => 'wx_openid',
|
|||
|
|
'weapp' => 'weapp_openid',
|
|||
|
|
default => ''
|
|||
|
|
};
|
|||
|
|
if(!empty($openid_field)){
|
|||
|
|
if(!$member->isEmpty()){
|
|||
|
|
if(empty($member->$openid_field)){
|
|||
|
|
//todo 定义当前第三方授权方没有退出登录功能,故这儿不做openid是否存在账号验证
|
|||
|
|
// $member_service = new MemberService();
|
|||
|
|
// $open_member = $member_service->findMemberInfo([$openid_field => $open_id, 'site_id' => $this->site_id]);
|
|||
|
|
|
|||
|
|
$member->$openid_field = $open_id;
|
|||
|
|
$member->save();
|
|||
|
|
}else{
|
|||
|
|
if( $member->$openid_field != $open_id){
|
|||
|
|
throw new AuthException('MEMBER_IS_BIND_AUTH');
|
|||
|
|
}
|
|||
|
|
}
|
|||
|
|
}
|
|||
|
|
}
|
|||
|
|
}
|
|||
|
|
}
|
|||
|
|
return true;
|
|||
|
|
}
|
|||
|
|
|
|||
|
|
/**
|
|||
|
|
* 重置密码
|
|||
|
|
* @param string $mobile
|
|||
|
|
* @param string $password
|
|||
|
|
*/
|
|||
|
|
public function resetPassword(string $mobile, string $password){
|
|||
|
|
$member_service = new MemberService();
|
|||
|
|
//校验手机验证码
|
|||
|
|
$this->checkMobileCode($mobile);
|
|||
|
|
$member_info = $member_service->findMemberInfo(['mobile' => $mobile, 'site_id' => $this->site_id]);
|
|||
|
|
if ($member_info->isEmpty()) throw new AuthException('MOBILE_NOT_EXIST_MEMBER');//账号不存在
|
|||
|
|
//todo 需要考虑一下,新的密码和原密码一样能否通过验证
|
|||
|
|
$password_hash = create_password($password);
|
|||
|
|
$data = array(
|
|||
|
|
'password' => $password_hash,
|
|||
|
|
);
|
|||
|
|
$member_service->editByFind($member_info, $data);
|
|||
|
|
self::clearToken($member_info['member_id'], $this->request->apiToken());
|
|||
|
|
return true;
|
|||
|
|
}
|
|||
|
|
|
|||
|
|
public function loginScanCode(){
|
|||
|
|
|
|||
|
|
}
|
|||
|
|
|
|||
|
|
public function loginByScanCode(){
|
|||
|
|
|
|||
|
|
}
|
|||
|
|
|
|||
|
|
public function checkScanCode(){
|
|||
|
|
|
|||
|
|
}
|
|||
|
|
|
|||
|
|
}
|