AuthController.php 14 KB

123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118119120121122123124125126127128129130131132133134135136137138139140141142143144145146147148149150151152153154155156157158159160161162163164165166167168169170171172173174175176177178179180181182183184185186187188189190191192193194195196197198199200201202203204205206207208209210211212213214215216217218219220221222223224225226227228229230231232233234235236237238239240241242243244245246247248249250251252253254255256257258259260261262263264265266267268269270271272273274275276277278279280281282283284285286287288289290291292293294295296297298299300301302303304305306307308309310311312313314315316317318319320321322323324325326327328329330331332333334335336337338339340341342343344345346347348349350351352353354355356357358359360361362363364365366
  1. <?php
  2. namespace App\Http\Controllers\Api\V1;
  3. use App\Helper\AttachmentHelper;
  4. use App\Helper\SmsHelper;
  5. use Illuminate\Foundation\Auth\AuthenticatesUsers;
  6. use App\Models\UserInfoModel;
  7. use Illuminate\Http\Request;
  8. use App\Services\Base\ErrorCode;
  9. use Validator, Auth, Cache;
  10. class AuthController extends Controller
  11. {
  12. use SmsHelper,AuthenticatesUsers,AttachmentHelper;
  13. private $expireTime = 1;
  14. private $keySmsCode = 'auth:sms:';
  15. private $keySmsCodeExist = 'auth:sms:exist';
  16. private $expireTimeExist = 24*60;
  17. public function test(){
  18. // return $this->error(ErrorCode::SAVE_USER_FAILED);
  19. return $this->api(['test' => 'test']);
  20. }
  21. /**
  22. * @api {post} /api/auth/login 登陆(login)
  23. * @apiDescription 登陆(login)
  24. * @apiGroup Auth
  25. * @apiPermission none
  26. * @apiVersion 0.1.0
  27. * @apiParam {string} phone 手机号码
  28. * @apiParam {string} wechat 微信openid
  29. * @apiParam {String} verify_code 手机验证码
  30. * @apiSuccessExample {json} Success-Response:
  31. * HTTP/1.1 200 OK
  32. * {
  33. * "state": true,
  34. * "code": 0,
  35. * "message": "",
  36. * "data": {
  37. * "token": "eyJ0eXAiOiJKV1QiLCJhbGciOiJSUzI1NiIsImp0aSI6IjdjYWUyYzFmYTUwMTIyZDI0ZTRiYTZhZGZhNmQxYmZlOWNiMzIxMTBmYWJlZjNjYzIyNmViZjRmNGExNWM3NjllNmU2ZTNiYWE5OGNhOWUzIn0.eyJhdWQiOiIxIiwianRpIjoiN2NhZTJjMWZhNTAxMjJkMjRlNGJhNmFkZmE2ZDFiZmU5Y2IzMjExMGZhYmVmM2NjMjI2ZWJmNGY0YTE1Yzc2OWU2ZTZlM2JhYTk4Y2E5ZTMiLCJpYXQiOjE0NzU0MTE1NTgsIm5iZiI6MTQ3NTQxMTU1OCwiZXhwIjo0NjMxMDg1MTU4LCJzdWIiOiIxIiwic2NvcGVzIjpbXX0.E9YGEzuRUOk02aV1EiWLJ_pD0hKoCyW0k_sGy63hM3u5X8K_HI1kVhaU6JNLqLZeszIAroTEDB8XMgZKAqTLlwtL8PLCJcuDoxfk1BRHbfjhDheTsahBysKGalvNEpzRCrGlao0mS0Cg9qDpEsndtypPFS8sfaflToOzbJjiSK2DvQiHSH8xZI3zHJTezgZMz-pB_hPTxp8ajdv0ve1gWtWjs3vERr0Y91X4hngO8X7LuXtAYtfxGZRIye12YE7TuLBMYzj8CCfiRt7Smhyf4palNW5mzKlZpa2l87n6NQ14Iy4oMzQ2PON1j_swrosuE2yZohGOn6fDdSCBRdJ6dLD_emjBdQCQOoB63R7BbhFZgvFX25TjzFJ7r9AdVMiGmebuRKEVSZV_JCGu1C71OIbQk-UK35s00gSr2fmJGBbN2cZTXBRTJpfuMZ_ihFYEZrvVq_Ih2X0xkd36JUuxaUld1BXRgPZvH-9jBuhe0YW2OOlgwpdm6ZB8BMcuS4ftLoi6FipgzFqfIuy-0ZqPMDnJaG7Gycrdpxza00mgOFxYxJtqwZNsUWFRZEVU881l6VC_cy294YXSPQxUwEoyKg-G5Pm8AEB9bqv5z4EU4B8-XTd3zKNqtNba_snHbc711i4EytCiZfYSjNB1hwenq45YYOAhPTwOpFI0kxyRazc",
  38. * "user": {
  39. * "id": 1,
  40. * "name": "15888888888",
  41. * "email": "abcdefg@gmail.com",
  42. * "type": 2,
  43. * "phone": "15888888888",
  44. * "avatar": null,
  45. * "last_ip": null,
  46. * "created_at": "2016-09-30 00:45:13",
  47. * "updated_at": "2016-09-29 16:43:36"
  48. * }
  49. * }
  50. * }
  51. * @apiErrorExample {json} Error-Response:
  52. * HTTP/1.1 400 Bad Request
  53. * {
  54. * "state": false,
  55. * "code": 1000,
  56. * "message": "传入参数不正确",
  57. * "data": null or []
  58. * }
  59. * 可能出现的错误代码:
  60. * 1000 CLIENT_WRONG_PARAMS 传入参数不正确
  61. * 1103 VERIFY_CODE_TOO_MUCH 验证码大于5次
  62. * 1610 SERVICE_CODE_FAILED 验证码错误
  63. *
  64. */
  65. public function login(Request $request) {
  66. $validator = Validator::make($request->all(),
  67. [
  68. // 'wechat' => 'required',
  69. 'phone' => 'required|regex:/^1[34578]\d{9}$/',
  70. 'verify_code' => 'required',
  71. ],
  72. [
  73. // 'wechat.required' => '请先绑定微信',
  74. 'phone.required' => '请输入手机号码',
  75. 'phone.regex' => '手机号码格式不正确',
  76. 'verify_code.required' => '短信验证码必填',
  77. ]
  78. );
  79. if ($validator->fails())
  80. return $this->validatorError($validator->messages()->all(),ErrorCode::CLIENT_WRONG_PARAMS);
  81. $phone = $request->phone;
  82. $wechat = $request->wechat;
  83. $key = $this->keySmsCode . $phone;
  84. $code = Cache::store('file')->get($key);
  85. $password = 123456;
  86. if ($request->verify_code != $code) return $this->error(ErrorCode::SERVICE_CODE_FAILED);
  87. $user = UserInfoModel::where('phone',$phone)->first();
  88. if (empty($user)) {
  89. $user = UserInfoModel::create([
  90. 'phone'=>$phone,
  91. 'wechat'=>$wechat,
  92. 'password'=>bcrypt(123456)
  93. ]);
  94. $user->status=1;
  95. $user->save();
  96. }else{
  97. //用户已经存在,重新绑定
  98. $user->wechat=$wechat;
  99. $user->password=bcrypt(123456);
  100. $user->save();
  101. }
  102. $status =empty($user) ? 0 : $user->status;
  103. if ($status == 0) return $this->error(ErrorCode::LOCK_USER);
  104. if (Auth::attempt(['phone'=>$phone,'password'=>$password])) {
  105. $user = Auth::user();
  106. /* if (!empty($wechat)) {
  107. $user->wechat =$wechat;
  108. $user->save();
  109. }*/
  110. \Log::info($user);
  111. $token = $user->createToken($user->phone)->accessToken;
  112. return $this->api(compact( 'user', 'code','token'));
  113. }else{
  114. return $this->error(ErrorCode::INCORRECT_USER_OR_PASS);
  115. }
  116. }
  117. // 第三方登录 微信
  118. /**
  119. * @api {get} /api/auth/wechat_login 微信登陆(login)
  120. * @apiDescription 微信登陆(login)
  121. * @apiGroup Auth
  122. * @apiPermission none
  123. * @apiVersion 0.1.0
  124. * @apiParam {string} wechat 微信id
  125. * @apiSuccessExample {json} Success-Response:
  126. * HTTP/1.1 200 OK
  127. * {
  128. * "state": true,
  129. * "code": 0,
  130. * "message": "",
  131. * "data": {
  132. * "token": "eyJ0eXAiOiJKV1QiLCJhbGciOiJSUzI1NiIsImp0aSI6IjdjYWUyYzFmYTUwMTIyZDI0ZTRiYTZhZGZhNmQxYmZlOWNiMzIxMTBmYWJlZjNjYzIyNmViZjRmNGExNWM3NjllNmU2ZTNiYWE5OGNhOWUzIn0.eyJhdWQiOiIxIiwianRpIjoiN2NhZTJjMWZhNTAxMjJkMjRlNGJhNmFkZmE2ZDFiZmU5Y2IzMjExMGZhYmVmM2NjMjI2ZWJmNGY0YTE1Yzc2OWU2ZTZlM2JhYTk4Y2E5ZTMiLCJpYXQiOjE0NzU0MTE1NTgsIm5iZiI6MTQ3NTQxMTU1OCwiZXhwIjo0NjMxMDg1MTU4LCJzdWIiOiIxIiwic2NvcGVzIjpbXX0.E9YGEzuRUOk02aV1EiWLJ_pD0hKoCyW0k_sGy63hM3u5X8K_HI1kVhaU6JNLqLZeszIAroTEDB8XMgZKAqTLlwtL8PLCJcuDoxfk1BRHbfjhDheTsahBysKGalvNEpzRCrGlao0mS0Cg9qDpEsndtypPFS8sfaflToOzbJjiSK2DvQiHSH8xZI3zHJTezgZMz-pB_hPTxp8ajdv0ve1gWtWjs3vERr0Y91X4hngO8X7LuXtAYtfxGZRIye12YE7TuLBMYzj8CCfiRt7Smhyf4palNW5mzKlZpa2l87n6NQ14Iy4oMzQ2PON1j_swrosuE2yZohGOn6fDdSCBRdJ6dLD_emjBdQCQOoB63R7BbhFZgvFX25TjzFJ7r9AdVMiGmebuRKEVSZV_JCGu1C71OIbQk-UK35s00gSr2fmJGBbN2cZTXBRTJpfuMZ_ihFYEZrvVq_Ih2X0xkd36JUuxaUld1BXRgPZvH-9jBuhe0YW2OOlgwpdm6ZB8BMcuS4ftLoi6FipgzFqfIuy-0ZqPMDnJaG7Gycrdpxza00mgOFxYxJtqwZNsUWFRZEVU881l6VC_cy294YXSPQxUwEoyKg-G5Pm8AEB9bqv5z4EU4B8-XTd3zKNqtNba_snHbc711i4EytCiZfYSjNB1hwenq45YYOAhPTwOpFI0kxyRazc",
  133. * "user": {
  134. * "id": 1,
  135. * "name": "15888888888",
  136. * "email": "abcdefg@gmail.com",
  137. * "type": 2,
  138. * "phone": "15888888888",
  139. * "avatar": null,
  140. * "last_ip": null,
  141. * "created_at": "2016-09-30 00:45:13",
  142. * "updated_at": "2016-09-29 16:43:36"
  143. * }
  144. * }
  145. * }
  146. * @apiErrorExample {json} Error-Response:
  147. * HTTP/1.1 400 Bad Request
  148. */
  149. public function wechatLogin(Request $request) {
  150. $validator = Validator::make($request->all(),
  151. [
  152. 'wechat' => 'required',
  153. ],
  154. [
  155. 'wechat.required' => '微信id不存在',
  156. ]
  157. );
  158. if ($validator->fails())
  159. return $this->validatorError($validator->messages()->all(),ErrorCode::CLIENT_WRONG_PARAMS);
  160. $user = UserInfoModel::where('wechat',$request->wechat)->first();
  161. if (empty($user)) {
  162. // return $this->error(ErrorCode::LOGIN_FAILED);
  163. }else{
  164. $token = $user->createToken($user->phone)->accessToken;
  165. return $this->api(compact( 'user', 'code','token'));
  166. }
  167. }
  168. /**
  169. * @api {get} /api/auth/logout 退出(logout)
  170. * @apiDescription 退出(logout)
  171. * @apiGroup Auth
  172. * @apiPermission Passport
  173. * @apiVersion 0.1.0
  174. * @apiSuccessExample {json} Success-Response:
  175. * HTTP/1.1 200 OK
  176. * {
  177. * "state": true,
  178. * "code": 0,
  179. * "message": "",
  180. * "data": {
  181. * "result": true/false
  182. * }
  183. * }
  184. * @apiErrorExample {json} Error-Response:
  185. * HTTP/1.1 400 Bad Request
  186. * {
  187. * "state": false,
  188. * "code": 1104,
  189. * "message": "退出失败",
  190. * "data": null
  191. * }
  192. * 可能出现的错误代码:
  193. * 1104 LOGOUT_FAILED 退出失败
  194. */
  195. public function logout() {
  196. $user = Auth::guard('api')->user();
  197. if ($user->token()->delete()) {
  198. return $this->api(['result' => true]);
  199. }
  200. return $this->error(ErrorCode::LOGOUT_FAILED);
  201. }
  202. /**
  203. * @api {post} /api/auth/code 获取验证码(get code)
  204. * @apiDescription 获取验证码(get code),验证码有效期暂定为15分钟
  205. * @apiGroup Auth
  206. * @apiPermission none
  207. * @apiVersion 0.1.0
  208. * @apiParam {string} phone 手机
  209. * @apiSuccessExample {json} Success-Response:
  210. * HTTP/1.1 200 OK
  211. * {
  212. * "state": true,
  213. * "code": 0,
  214. * "message": "",
  215. * "data": {
  216. * "verify_code": "1234"//该值调试时使用,sms调通后取消
  217. * }
  218. * }
  219. * @apiErrorExample {json} Error-Response:
  220. * HTTP/1.1 400 Bad Request
  221. * {
  222. * "state": false,
  223. * "code": 1000,
  224. * "message": "传入参数不正确",
  225. * "data": null or []
  226. * }
  227. * 可能出现的错误代码:
  228. * 1000 CLIENT_WRONG_PARAMS 传入参数不正确
  229. */
  230. public function getCode(Request $request)
  231. {
  232. $validator = Validator::make($request->all(),
  233. [
  234. 'phone' => 'required|regex:/^1[34578]\d{9}$/',
  235. ],
  236. [
  237. 'phone.required' => '手机号码必填',
  238. 'phone.regex' => '手机号码格式不正确',
  239. ]
  240. );
  241. if ($validator->fails())
  242. return $this->validatorError($validator->messages()->all(),ErrorCode::CLIENT_WRONG_PARAMS);
  243. $phone = $request->phone;
  244. $keyexist = $this->keySmsCodeExist . $phone;
  245. $times = Cache::store('file')->get($keyexist);
  246. if($times>20) {
  247. return $this->error(ErrorCode::VERIFY_CODE_TOO_MUCH);
  248. }else{
  249. $times++;
  250. Cache::store('file')->put($keyexist, $times, $this->expireTimeExist);
  251. }
  252. $verify_code = (string) mt_rand(1000, 9999);
  253. \Log::info('verify_code:'.$verify_code);
  254. $key = $this->keySmsCode . $phone;
  255. Cache::store('file')->put($key, $verify_code, $this->expireTime);
  256. $msg = '【喵喵】您的验证码是:' . $verify_code;
  257. /*
  258. $result = $this->sendSms($msg, $phone);
  259. if (!$result)
  260. $this->logger->Error("Send sms failed.");
  261. */
  262. return $this->api(['verify_code' => $verify_code]);
  263. }
  264. public function refreshToken() {
  265. $token = '';//TODO
  266. return $this->api([
  267. 'token' => $token,
  268. ]);
  269. }
  270. public function isLogin()
  271. {
  272. $user = Auth::user();
  273. $res = true;
  274. if(!$user) $res = false;
  275. return $this->api([
  276. 'result' => $res,
  277. ]);
  278. }
  279. /**
  280. * @api {post} /api/auth/avatar 上传头像(avatar)
  281. * @apiDescription 上传头像(reset)
  282. * @apiGroup Auth
  283. * @apiPermission Passport
  284. * @apiVersion 0.1.0
  285. * @apiParam {File} avatar 头像图片
  286. * @apiSuccessExample {json} Success-Response:
  287. * HTTP/1.1 200 OK
  288. * {
  289. * "state": true,
  290. * "code": 0,
  291. * "message": "",
  292. * "data": {
  293. * "md5": "fdf8dd78eb383b8acf6d94d4752c1424",
  294. * }
  295. * }
  296. * @apiErrorExample {json} Error-Response:
  297. * HTTP/1.1 400 Bad Request
  298. * {
  299. * "state": false,
  300. * "code": 1000,
  301. * "message": "传入参数不正确",
  302. * "data": null or []
  303. * }
  304. * 可能出现的错误代码:
  305. * 200 SAVE_USER_FAILED 保存用户数据失败
  306. * 201 ATTACHMENT_MKDIR_FAILED 创建附件目录失败
  307. * 202 ATTACHMENT_UPLOAD_INVALID 上传附件文件无效
  308. * 203 ATTACHMENT_SAVE_FAILED 保存附件失败
  309. * 204 ATTACHMENT_MOVE_FAILED 移动附件失败
  310. * 205 ATTACHMENT_DELETE_FAILED 删除附件文件失败
  311. * 206 ATTACHMENT_RECORD_DELETE_FAILED 删除附件记录失败
  312. * 1000 CLIENT_WRONG_PARAMS 传入参数不正确
  313. * 1101 INCORRECT_VERIFY_CODE 输入验证码错误
  314. * 1105 USER_DOES_NOT_EXIST 用户不存在
  315. * 1200 ATTACHMENT_UPLOAD_FAILED 附件上传失败
  316. * 1201 ATTACHMENT_SIZE_EXCEEDED 附件大小超过限制
  317. * 1202 ATTACHMENT_MIME_NOT_ALLOWED 附件类型不允许
  318. * 1203 ATTACHMENT_NOT_EXIST 附件不存在
  319. */
  320. public function avatar(Request $request) {
  321. // $user = Auth::user();
  322. $user = $this->getUser();
  323. $old_avatar = $user->avatar;
  324. $result = $this->uploadAttachment($request, 'avatar', 'avatar', 4 * 1024 * 1024, [
  325. 'image/jpeg',
  326. 'image/png',
  327. 'image/gif',
  328. ]);
  329. if (is_array($result)) {
  330. $result = array_shift($result);
  331. }
  332. if (is_string($result)) {
  333. $user->avatar = config('app.url')."/attachment/".$result;
  334. if (!$user->save()) {
  335. return $this->error(ErrorCode::SAVE_USER_FAILED);
  336. }
  337. $this->deleteAttachment($old_avatar);
  338. return $this->api(['file' => $result]);
  339. }
  340. return $this->error($result);
  341. }
  342. }