AuthController.php 15 KB

123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118119120121122123124125126127128129130131132133134135136137138139140141142143144145146147148149150151152153154155156157158159160161162163164165166167168169170171172173174175176177178179180181182183184185186187188189190191192193194195196197198199200201202203204205206207208209210211212213214215216217218219220221222223224225226227228229230231232233234235236237238239240241242243244245246247248249250251252253254255256257258259260261262263264265266267268269270271272273274275276277278279280281282283284285286287288289290291292293294295296297298299300301302303304305306307308309310311312313314315316317318319320321322323324325326327328329330331332333334335336337338339340341342343344345346347348349350351352353354355356357358359360361362363364365366367368369370371372373374375376377378379380381382383384385386387388389390
  1. <?php
  2. namespace app\api\controller;
  3. use app\admin\model\sms\SmsRecord;
  4. use app\http\validates\user\RegisterValidates;
  5. use app\models\user\User;
  6. use app\models\user\UserToken;
  7. use app\models\user\WechatUser;
  8. use app\Request;
  9. use crmeb\jobs\TestJob;
  10. use crmeb\repositories\ShortLetterRepositories;
  11. use crmeb\services\CacheService;
  12. use crmeb\services\UtilService;
  13. use crmeb\services\ZjSMSServerService;
  14. use think\facade\Cache;
  15. use think\exception\ValidateException;
  16. use think\facade\Config;
  17. use think\facade\Queue;
  18. use think\facade\Session;
  19. /**微信小程序授权类
  20. * Class AuthController
  21. * @package app\api\controller
  22. */
  23. class AuthController
  24. {
  25. /**
  26. * H5账号登陆
  27. * @param Request $request
  28. * @return mixed
  29. * @throws \think\db\exception\DataNotFoundException
  30. * @throws \think\db\exception\ModelNotFoundException
  31. * @throws \think\exception\DbException
  32. */
  33. public function login(Request $request)
  34. {
  35. $user = User::where('account', $request->param('account'))->find();
  36. if ($user) {
  37. if ($user->pwd !== md5($request->param('password')))
  38. return app('json')->fail('账号或密码错误');
  39. if ($user->pwd === md5(123456))
  40. return app('json')->fail('请修改您的初始密码,再尝试登陆!');
  41. } else {
  42. return app('json')->fail('账号或密码错误');
  43. }
  44. if (!$user['status'])
  45. return app('json')->fail('已被禁止,请联系管理员');
  46. // 设置推广关系
  47. User::setSpread(intval($request->param('spread')), $user->uid);
  48. $token = UserToken::createToken($user, 'user');
  49. if ($token) {
  50. event('UserLogin', [$user, $token]);
  51. return app('json')->success('登录成功', ['token' => $token->token, 'expires_time' => $token->expires_time]);
  52. } else
  53. return app('json')->fail('登录失败');
  54. }
  55. /**
  56. * 退出登录
  57. * @param Request $request
  58. */
  59. public function logout(Request $request)
  60. {
  61. $request->tokenData()->delete();
  62. return app('json')->success('成功');
  63. }
  64. public function verifyCode()
  65. {
  66. $unique = password_hash(uniqid(true), PASSWORD_BCRYPT);
  67. Cache::set('sms.key.' . $unique, 0, 300);
  68. return app('json')->success(['key' => $unique]);
  69. }
  70. public function captcha(Request $request)
  71. {
  72. ob_clean();
  73. $rep = captcha();
  74. $key = app('session')->get('captcha.key');
  75. $uni = $request->get('key');
  76. if ($uni)
  77. Cache::set('sms.key.cap.' . $uni, $key, 300);
  78. return $rep;
  79. }
  80. /**
  81. * 验证验证码是否正确
  82. *
  83. * @param $uni
  84. * @param string $code
  85. * @return bool
  86. * @throws \Psr\SimpleCache\InvalidArgumentException
  87. */
  88. protected function checkCaptcha($uni, string $code): bool
  89. {
  90. $cacheName = 'sms.key.cap.' . $uni;
  91. if (!Cache::has($cacheName)) {
  92. return false;
  93. }
  94. $key = Cache::get($cacheName);
  95. $code = mb_strtolower($code, 'UTF-8');
  96. $res = password_verify($code, $key);
  97. if ($res) {
  98. Cache::delete($cacheName);
  99. }
  100. return $res;
  101. }
  102. /**
  103. * 验证码发送
  104. * @param Request $request
  105. * @return mixed
  106. */
  107. public function verify(Request $request)
  108. {
  109. list($phone, $type) = UtilService::postMore([['phone',0],['type','']],$request, true);
  110. try {
  111. validate(RegisterValidates::class)->scene('code')->check(['phone'=>$phone]);
  112. } catch (ValidateException $e) {
  113. return app('json')->fail($e->getError());
  114. }
  115. if(User::checkPhone($phone) && $type == 'register') return app('json')->fail('手机号已注册');
  116. if(!User::checkPhone($phone) && $type == 'login') return app('json')->fail('账号不存在!');
  117. $time = 300;
  118. if(CacheService::get('code_'.$phone) && false)
  119. return app('json')->fail($time.'秒内有效');
  120. $code = rand(100000,999999);
  121. $data['code'] = $code;
  122. $res = ZjSMSServerService::send($phone,$data);
  123. if($res['status'] == 400) return app('json')->fail('短信平台验证码发送失败'.$res['msg']);
  124. CacheService::set('code_'.$phone, $code, $time);
  125. return app('json')->success($res['msg'] ?? '发送失败');
  126. }
  127. /**
  128. * H5注册新用户
  129. * @param Request $request
  130. * @return mixed
  131. */
  132. public function register(Request $request)
  133. {
  134. list($account, $captcha, $password, $spread) = UtilService::postMore([['account', ''], ['captcha', ''], ['password', ''], ['spread', 0]], $request, true);
  135. try {
  136. validate(RegisterValidates::class)->scene('register')->check(['account' => $account, 'captcha' => $captcha, 'password' => $password]);
  137. } catch (ValidateException $e) {
  138. return app('json')->fail($e->getError());
  139. }
  140. $verifyCode = CacheService::get('code_' . $account);
  141. if (!$verifyCode)
  142. return app('json')->fail('请先获取验证码');
  143. $verifyCode = substr($verifyCode, 0, 6);
  144. if ($verifyCode != $captcha)
  145. return app('json')->fail('验证码错误');
  146. if (strlen(trim($password)) < 6 || strlen(trim($password)) > 16)
  147. return app('json')->fail('密码必须是在6到16位之间');
  148. if ($password == '123456') return app('json')->fail('密码太过简单,请输入较为复杂的密码');
  149. $registerStatus = User::register($account, $password, $spread);
  150. if ($registerStatus) return app('json')->success('注册成功');
  151. return app('json')->fail(User::getErrorInfo('注册失败'));
  152. }
  153. /**
  154. * 密码修改
  155. * @param Request $request
  156. * @return mixed
  157. */
  158. public function reset(Request $request)
  159. {
  160. list($account, $captcha, $password) = UtilService::postMore([['account', ''], ['captcha', ''], ['password', '']], $request, true);
  161. try {
  162. validate(RegisterValidates::class)->scene('register')->check(['account' => $account, 'captcha' => $captcha, 'password' => $password]);
  163. } catch (ValidateException $e) {
  164. return app('json')->fail($e->getError());
  165. }
  166. $verifyCode = CacheService::get('code_' . $account);
  167. if (!$verifyCode)
  168. return app('json')->fail('请先获取验证码');
  169. $verifyCode = substr($verifyCode, 0, 6);
  170. if ($verifyCode != $captcha)
  171. return app('json')->fail('验证码错误');
  172. if (strlen(trim($password)) < 6 || strlen(trim($password)) > 16)
  173. return app('json')->fail('密码必须是在6到16位之间');
  174. if ($password == '123456') return app('json')->fail('密码太过简单,请输入较为复杂的密码');
  175. $resetStatus = User::reset($account, $password);
  176. if ($resetStatus) return app('json')->success('修改成功');
  177. return app('json')->fail(User::getErrorInfo('修改失败'));
  178. }
  179. /**
  180. * 手机号登录
  181. * @param Request $request
  182. * @return mixed
  183. * @throws \think\db\exception\DataNotFoundException
  184. * @throws \think\db\exception\ModelNotFoundException
  185. * @throws \think\exception\DbException
  186. */
  187. public function mobile(Request $request)
  188. {
  189. list($phone, $captcha, $spread) = UtilService::postMore([['phone', ''], ['captcha', ''], ['spread', 0]], $request, true);
  190. //验证手机号
  191. try {
  192. validate(RegisterValidates::class)->scene('code')->check(['phone' => $phone]);
  193. } catch (ValidateException $e) {
  194. return app('json')->fail($e->getError());
  195. }
  196. //验证验证码
  197. $verifyCode = CacheService::get('code_' . $phone);
  198. if (!$verifyCode)
  199. return app('json')->fail('请先获取验证码');
  200. $verifyCode = substr($verifyCode, 0, 6);
  201. if ($verifyCode != $captcha)
  202. return app('json')->fail('验证码错误');
  203. //数据库查询
  204. $user = User::where('account', $phone)->find();
  205. if (!$user)
  206. return app('json')->fail('用户不存在');
  207. if (!$user->status)
  208. return app('json')->fail('已被禁止,请联系管理员');
  209. // 设置推广关系
  210. User::setSpread($spread, $user->uid);
  211. $token = UserToken::createToken($user, 'user');
  212. if ($token) {
  213. event('UserLogin', [$user, $token]);
  214. return app('json')->success('登录成功', ['token' => $token->token, 'expires_time' => $token->expires_time]);
  215. } else
  216. return app('json')->fail('登录失败');
  217. }
  218. /**
  219. * H5切换登陆
  220. * @param Request $request
  221. * @return mixed
  222. * @throws \think\db\exception\DataNotFoundException
  223. * @throws \think\db\exception\ModelNotFoundException
  224. * @throws \think\exception\DbException
  225. */
  226. public function switch_h5(Request $request)
  227. {
  228. $from = $request->post('from', 'wechat');
  229. $user = $request->user();
  230. if ($from === 'h5') {
  231. $user = User::where('phone', $user['phone'])->where('user_type', '<>', 'h5')->find();
  232. $user->login_type = 'wechat';
  233. $user->save();
  234. } else {
  235. //数据库查询
  236. $user = User::where('account|phone', $user['phone'])->where('user_type', 'h5')->find();
  237. if (!$user)
  238. return app('json')->fail('H5用户不存在,无法切换');
  239. if (!$user->status) return app('json')->fail('已被禁止,请联系管理员');
  240. $wechatUserInfo = WechatUser::where('uid', $request->uid())->find();//当前登陆用户信息
  241. $wechatH5UserInfo = WechatUser::where('uid', $user->uid)->find();//H5登陆切换用户信息
  242. if ($wechatH5UserInfo->unionid && $wechatUserInfo->unionid != $wechatH5UserInfo->unionid)
  243. return app('json')->fail('您的账号已绑定特定用户无法切换到此用户上');
  244. if ($wechatH5UserInfo->openid && $wechatUserInfo->openid != $wechatH5UserInfo->openid)
  245. return app('json')->fail('您的账号已绑定特定用户无法切换到此用户上');
  246. if ($wechatH5UserInfo->routine_openid && $wechatUserInfo->routine_openid != $wechatH5UserInfo->routine_openid)
  247. return app('json')->fail('您的账号已绑定特定用户无法切换到此用户上');
  248. switch ($from) {
  249. case 'wechat':
  250. if (!$wechatH5UserInfo->openid)
  251. $wechatH5UserInfo->openid = $wechatUserInfo->openid;
  252. if (!$wechatH5UserInfo->unionid && $wechatUserInfo->unionid)
  253. $wechatH5UserInfo->unionid = $wechatUserInfo->unionid;
  254. break;
  255. case 'routine':
  256. if (!$wechatH5UserInfo->routine_openid)
  257. $wechatH5UserInfo->routine_openid = $wechatUserInfo->routine_openid;
  258. if (!$wechatH5UserInfo->unionid && $wechatUserInfo->unionid)
  259. $wechatH5UserInfo->unionid = $wechatUserInfo->unionid;
  260. break;
  261. }
  262. $wechatH5UserInfo->save();
  263. User::where('uid', $request->uid())->update(['login_type' => 'h5']);
  264. }
  265. $token = UserToken::createToken($user, 'user');
  266. if ($token) {
  267. event('UserLogin', [$user, $token]);
  268. //退出上一个账号
  269. $request->tokenData()->delete();
  270. return app('json')->success('登录成功', ['userInfo' => $user, 'token' => $token->token, 'expires_time' => $token->expires_time, 'time' => strtotime($token->expires_time)]);
  271. } else
  272. return app('json')->fail('登录失败');
  273. }
  274. /**
  275. * 绑定手机号
  276. * @param Request $request
  277. * @return mixed
  278. * @throws \think\db\exception\DataNotFoundException
  279. * @throws \think\db\exception\ModelNotFoundException
  280. * @throws \think\exception\DbException
  281. */
  282. public function binding_phone(Request $request)
  283. {
  284. list($phone, $captcha, $step) = UtilService::postMore([
  285. ['phone', ''],
  286. ['captcha', ''],
  287. ['step', 0]
  288. ], $request, true);
  289. //验证手机号
  290. try {
  291. validate(RegisterValidates::class)->scene('code')->check(['phone' => $phone]);
  292. } catch (ValidateException $e) {
  293. return app('json')->fail($e->getError());
  294. }
  295. //验证验证码
  296. $verifyCode = CacheService::get('code_' . $phone);
  297. if (!$verifyCode)
  298. return app('json')->fail('请先获取验证码');
  299. $verifyCode = substr($verifyCode, 0, 6);
  300. if ($verifyCode != $captcha)
  301. return app('json')->fail('验证码错误');
  302. $userInfo = User::where('uid', $request->uid())->find();
  303. $userPhone = $userInfo->phone;
  304. if (!$userInfo) return app('json')->fail('用户不存在');
  305. if ($userInfo->phone) return app('json')->fail('您的账号已经绑定过手机号码!');
  306. if (User::where('phone', $phone)->where('user_type', '<>', 'h5')->count())
  307. return app('json')->fail('此手机已经绑定,无法多次绑定!');
  308. if (User::where('account', $phone)->where('phone', $phone)->where('user_type', 'h5')->find()) {
  309. if (!$step) return app('json')->success('H5已有账号是否绑定此账号上', ['is_bind' => 1]);
  310. $userInfo->phone = $phone;
  311. } else {
  312. $userInfo->account = $phone;
  313. $userInfo->phone = $phone;
  314. }
  315. if ($userInfo->save() || $userPhone == $phone)
  316. return app('json')->success('绑定成功');
  317. else
  318. return app('json')->fail('绑定失败');
  319. }
  320. /**
  321. * 设置或修改密码
  322. * @param Request $request
  323. * @return mixed
  324. */
  325. public function transaction(Request $request)
  326. {
  327. list($oldpass,$pass) = UtilService::postMore([
  328. ['oldpass',''],
  329. ['pass',''],
  330. ],$request,true);
  331. $user = User::where('uid',$request->uid())->find();
  332. if(empty($user['transaction']) || empty($user['salt']))
  333. {
  334. if(strlen($pass)!=6) return app('json')->fail('交易密码为6位数字');
  335. $data['salt'] = substr(uniqid(),0,6);
  336. $data['transaction'] = md5(md5($data['salt'].$pass).$data['salt']);
  337. User::edit($data,$request->uid());
  338. return app('json')->success('设置成功');
  339. }
  340. else
  341. {
  342. if(strlen($oldpass)!=6 || strlen($pass)!=6) return app('json')->fail('原交易密码和新交易密码都是6位数字');
  343. $data['salt'] = $user['salt'];
  344. if(md5(md5($data['salt'].$oldpass).$data['salt'])!=$user['transaction']) return app('json')->fail('原交易密码错误');
  345. $data['transaction'] = md5(md5($data['salt'].$pass).$data['salt']);
  346. User::edit($data,$request->uid());
  347. return app('json')->success('修改成功');
  348. }
  349. }
  350. }