AuthController.php 15 KB

123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118119120121122123124125126127128129130131132133134135136137138139140141142143144145146147148149150151152153154155156157158159160161162163164165166167168169170171172173174175176177178179180181182183184185186187188189190191192193194195196197198199200201202203204205206207208209210211212213214215216217218219220221222223224225226227228229230231232233234235236237238239240241242243244245246247248249250251252253254255256257258259260261262263264265266267268269270271272273274275276277278279280281282283284285286287288289290291292293294295296297298299300301302303304305306307308309310311312313314315316317318319320321322323324325326327328329330331332333334335336337338339340341342343344345346347348349350351352353354355356357358359360361362363364365366367368369370371372373374375376377378379380381382383384385386387388389390391392393394395396
  1. <?php
  2. namespace App\Http\Controllers\Api\V1;
  3. use App\Helper\AttachmentHelper;
  4. use App\Helper\JpushHelper;
  5. use App\Helper\SmsHelper;
  6. use Illuminate\Foundation\Auth\AuthenticatesUsers;
  7. use App\Models\UserInfoModel;
  8. use Illuminate\Http\Request;
  9. use App\Services\Base\ErrorCode;
  10. use Validator, Auth, Cache;
  11. class AuthController extends Controller
  12. {
  13. use SmsHelper,AuthenticatesUsers,AttachmentHelper,JpushHelper;
  14. private $expireTime = 1;
  15. private $keySmsCode = 'auth:sms:';
  16. private $keySmsCodeExist = 'auth:sms:exist';
  17. private $expireTimeExist = 24*60;
  18. public function test(){
  19. //test
  20. if(env("APP_DEBUG")){
  21. return $this->error(0);
  22. }else{
  23. //product
  24. return $this->api(1);
  25. }
  26. }
  27. /**
  28. * @api {post} /api/auth/login 登陆(login)
  29. * @apiDescription 登陆(login)
  30. * @apiGroup Auth
  31. * @apiPermission none
  32. * @apiVersion 0.1.0
  33. * @apiParam {string} phone 手机号码
  34. * @apiParam {string} [jpush]
  35. * @apiParam {string} wechat 微信openid
  36. * @apiParam {String} verify_code 手机验证码
  37. * @apiSuccessExample {json} Success-Response:
  38. * HTTP/1.1 200 OK
  39. * {
  40. * "state": true,
  41. * "code": 0,
  42. * "message": "",
  43. * "data": {
  44. * "token": "eyJ0eXAiOiJKV1QiLCJhbGciOiJSUzI1NiIsImp0aSI6IjdjYWUyYzFmYTUwMTIyZDI0ZTRiYTZhZGZhNmQxYmZlOWNiMzIxMTBmYWJlZjNjYzIyNmViZjRmNGExNWM3NjllNmU2ZTNiYWE5OGNhOWUzIn0.eyJhdWQiOiIxIiwianRpIjoiN2NhZTJjMWZhNTAxMjJkMjRlNGJhNmFkZmE2ZDFiZmU5Y2IzMjExMGZhYmVmM2NjMjI2ZWJmNGY0YTE1Yzc2OWU2ZTZlM2JhYTk4Y2E5ZTMiLCJpYXQiOjE0NzU0MTE1NTgsIm5iZiI6MTQ3NTQxMTU1OCwiZXhwIjo0NjMxMDg1MTU4LCJzdWIiOiIxIiwic2NvcGVzIjpbXX0.E9YGEzuRUOk02aV1EiWLJ_pD0hKoCyW0k_sGy63hM3u5X8K_HI1kVhaU6JNLqLZeszIAroTEDB8XMgZKAqTLlwtL8PLCJcuDoxfk1BRHbfjhDheTsahBysKGalvNEpzRCrGlao0mS0Cg9qDpEsndtypPFS8sfaflToOzbJjiSK2DvQiHSH8xZI3zHJTezgZMz-pB_hPTxp8ajdv0ve1gWtWjs3vERr0Y91X4hngO8X7LuXtAYtfxGZRIye12YE7TuLBMYzj8CCfiRt7Smhyf4palNW5mzKlZpa2l87n6NQ14Iy4oMzQ2PON1j_swrosuE2yZohGOn6fDdSCBRdJ6dLD_emjBdQCQOoB63R7BbhFZgvFX25TjzFJ7r9AdVMiGmebuRKEVSZV_JCGu1C71OIbQk-UK35s00gSr2fmJGBbN2cZTXBRTJpfuMZ_ihFYEZrvVq_Ih2X0xkd36JUuxaUld1BXRgPZvH-9jBuhe0YW2OOlgwpdm6ZB8BMcuS4ftLoi6FipgzFqfIuy-0ZqPMDnJaG7Gycrdpxza00mgOFxYxJtqwZNsUWFRZEVU881l6VC_cy294YXSPQxUwEoyKg-G5Pm8AEB9bqv5z4EU4B8-XTd3zKNqtNba_snHbc711i4EytCiZfYSjNB1hwenq45YYOAhPTwOpFI0kxyRazc",
  45. * "user": {
  46. * "id": 1,
  47. * "name": "15888888888",
  48. * "email": "abcdefg@gmail.com",
  49. * "type": 2,
  50. * "phone": "15888888888",
  51. * "avatar": null,
  52. * "last_ip": null,
  53. * "created_at": "2016-09-30 00:45:13",
  54. * "updated_at": "2016-09-29 16:43:36"
  55. * }
  56. * }
  57. * }
  58. * @apiErrorExample {json} Error-Response:
  59. * HTTP/1.1 400 Bad Request
  60. * {
  61. * "state": false,
  62. * "code": 1000,
  63. * "message": "传入参数不正确",
  64. * "data": null or []
  65. * }
  66. * 可能出现的错误代码:
  67. * 1000 CLIENT_WRONG_PARAMS 传入参数不正确
  68. * 1103 VERIFY_CODE_TOO_MUCH 验证码大于5次
  69. * 1610 SERVICE_CODE_FAILED 验证码错误
  70. *
  71. */
  72. public function login(Request $request) {
  73. $validator = Validator::make($request->all(),
  74. [
  75. // 'wechat' => 'required',
  76. 'phone' => 'required|regex:/^1[34578]\d{9}$/',
  77. 'verify_code' => 'required',
  78. ],
  79. [
  80. // 'wechat.required' => '请先绑定微信',
  81. 'phone.required' => '请输入手机号码',
  82. 'phone.regex' => '手机号码格式不正确',
  83. 'verify_code.required' => '短信验证码必填',
  84. ]
  85. );
  86. if ($validator->fails())
  87. return $this->validatorError($validator->messages()->all(),ErrorCode::CLIENT_WRONG_PARAMS);
  88. $phone = $request->phone;
  89. $wechat = $request->wechat;
  90. // $url = "https://api.weixin.qq.com/sns/oauth2/access_token?appid=wxc5181c0d406023e6&secret=82d15bf4c5c5baaad1e5a521cfdcf96c&code=".$wechat."&grant_type=authorization_code";
  91. // $res = file_get_contents($url); //file_get_contents获取指定路由返回的数据
  92. // \Log::info($res);
  93. // $arr = json_decode($res, true);
  94. // $openid='';
  95. // if(!$arr['errcode'])$openid = $arr['openid'];
  96. \Log::info('openid: ' . $wechat);
  97. $jpush = $request->jpush;
  98. $key = $this->keySmsCode . $phone;
  99. $code = Cache::store('file')->get($key);
  100. $password = 123456;
  101. if ($request->verify_code != $code) return $this->error(ErrorCode::SERVICE_CODE_FAILED);
  102. $user = UserInfoModel::where('phone',$phone)->first();
  103. if (empty($user)) {
  104. $user = UserInfoModel::create([
  105. 'phone'=>$phone,
  106. 'wechat'=>$wechat,
  107. 'jpush'=>$jpush,
  108. 'nickname'=>'瞄喵'.rand(1000,9999),
  109. 'status'=>1,
  110. 'password'=>bcrypt(123456)
  111. ]);
  112. }else{
  113. //用户已经存在,重新绑定
  114. $user->wechat=$wechat;
  115. $user->password=bcrypt(123456);
  116. $user->save();
  117. }
  118. $status =empty($user) ? 0 : $user->status;
  119. if ($status == 0) return $this->error(ErrorCode::LOCK_USER);
  120. if (Auth::attempt(['phone'=>$phone,'password'=>$password])) {
  121. $user = Auth::user();
  122. /* if (!empty($wechat)) {
  123. $user->wechat =$wechat;
  124. $user->save();
  125. }*/
  126. \Log::info($user);
  127. $token = $user->createToken($user->phone)->accessToken;
  128. return $this->api(compact( 'user', 'code','token'));
  129. }else{
  130. return $this->error(ErrorCode::INCORRECT_USER_OR_PASS);
  131. }
  132. }
  133. // 第三方登录 微信
  134. /**
  135. * @api {get} /api/auth/wechat_login 微信登陆(login)
  136. * @apiDescription 微信登陆(login)
  137. * @apiGroup Auth
  138. * @apiPermission none
  139. * @apiVersion 0.1.0
  140. * @apiParam {string} wechat 微信id
  141. * @apiSuccessExample {json} Success-Response:
  142. * HTTP/1.1 200 OK
  143. * {
  144. * "state": true,
  145. * "code": 0,
  146. * "message": "",
  147. * "data": {
  148. * "token": "eyJ0eXAiOiJKV1QiLCJhbGciOiJSUzI1NiIsImp0aSI6IjdjYWUyYzFmYTUwMTIyZDI0ZTRiYTZhZGZhNmQxYmZlOWNiMzIxMTBmYWJlZjNjYzIyNmViZjRmNGExNWM3NjllNmU2ZTNiYWE5OGNhOWUzIn0.eyJhdWQiOiIxIiwianRpIjoiN2NhZTJjMWZhNTAxMjJkMjRlNGJhNmFkZmE2ZDFiZmU5Y2IzMjExMGZhYmVmM2NjMjI2ZWJmNGY0YTE1Yzc2OWU2ZTZlM2JhYTk4Y2E5ZTMiLCJpYXQiOjE0NzU0MTE1NTgsIm5iZiI6MTQ3NTQxMTU1OCwiZXhwIjo0NjMxMDg1MTU4LCJzdWIiOiIxIiwic2NvcGVzIjpbXX0.E9YGEzuRUOk02aV1EiWLJ_pD0hKoCyW0k_sGy63hM3u5X8K_HI1kVhaU6JNLqLZeszIAroTEDB8XMgZKAqTLlwtL8PLCJcuDoxfk1BRHbfjhDheTsahBysKGalvNEpzRCrGlao0mS0Cg9qDpEsndtypPFS8sfaflToOzbJjiSK2DvQiHSH8xZI3zHJTezgZMz-pB_hPTxp8ajdv0ve1gWtWjs3vERr0Y91X4hngO8X7LuXtAYtfxGZRIye12YE7TuLBMYzj8CCfiRt7Smhyf4palNW5mzKlZpa2l87n6NQ14Iy4oMzQ2PON1j_swrosuE2yZohGOn6fDdSCBRdJ6dLD_emjBdQCQOoB63R7BbhFZgvFX25TjzFJ7r9AdVMiGmebuRKEVSZV_JCGu1C71OIbQk-UK35s00gSr2fmJGBbN2cZTXBRTJpfuMZ_ihFYEZrvVq_Ih2X0xkd36JUuxaUld1BXRgPZvH-9jBuhe0YW2OOlgwpdm6ZB8BMcuS4ftLoi6FipgzFqfIuy-0ZqPMDnJaG7Gycrdpxza00mgOFxYxJtqwZNsUWFRZEVU881l6VC_cy294YXSPQxUwEoyKg-G5Pm8AEB9bqv5z4EU4B8-XTd3zKNqtNba_snHbc711i4EytCiZfYSjNB1hwenq45YYOAhPTwOpFI0kxyRazc",
  149. * "user": {
  150. * "id": 1,
  151. * "name": "15888888888",
  152. * "email": "abcdefg@gmail.com",
  153. * "type": 2,
  154. * "phone": "15888888888",
  155. * "avatar": null,
  156. * "last_ip": null,
  157. * "created_at": "2016-09-30 00:45:13",
  158. * "updated_at": "2016-09-29 16:43:36"
  159. * }
  160. * }
  161. * }
  162. * @apiErrorExample {json} Error-Response:
  163. * HTTP/1.1 400 Bad Request
  164. */
  165. public function wechatLogin(Request $request) {
  166. $validator = Validator::make($request->all(),
  167. [
  168. 'wechat' => 'required',
  169. ],
  170. [
  171. 'wechat.required' => '微信id不存在',
  172. ]
  173. );
  174. if ($validator->fails())
  175. return $this->validatorError($validator->messages()->all(),ErrorCode::CLIENT_WRONG_PARAMS);
  176. $url = "https://api.weixin.qq.com/sns/oauth2/access_token?appid=wxc5181c0d406023e6&secret=82d15bf4c5c5baaad1e5a521cfdcf96c&code=".$request->wechat."&grant_type=authorization_code";
  177. $res = file_get_contents($url); //file_get_contents获取指定路由返回的数据
  178. \Log::info($res);
  179. $arr = json_decode($res, true);
  180. $openid='';
  181. if(!isset($arr['errcode']))$openid = $arr['openid'];
  182. \Log::info('openid: ' . $openid);
  183. if($openid!='')$user = UserInfoModel::where('wechat',$openid)->first();
  184. \Log::info($user);
  185. if (empty($user)) {
  186. \Log::info('empty: ' . empty($user));
  187. // return $this->error(ErrorCode::LOGIN_FAILED);
  188. return $this->api(['openid' => $openid]);
  189. }else{
  190. $token = $user->createToken($user->phone)->accessToken;
  191. return $this->api(compact( 'user', 'openid','token'));
  192. }
  193. }
  194. /**
  195. * @api {get} /api/auth/logout 退出(logout)
  196. * @apiDescription 退出(logout)
  197. * @apiGroup Auth
  198. * @apiPermission Passport
  199. * @apiVersion 0.1.0
  200. * @apiSuccessExample {json} Success-Response:
  201. * HTTP/1.1 200 OK
  202. * {
  203. * "state": true,
  204. * "code": 0,
  205. * "message": "",
  206. * "data": {
  207. * "result": true/false
  208. * }
  209. * }
  210. * @apiErrorExample {json} Error-Response:
  211. * HTTP/1.1 400 Bad Request
  212. * {
  213. * "state": false,
  214. * "code": 1104,
  215. * "message": "退出失败",
  216. * "data": null
  217. * }
  218. * 可能出现的错误代码:
  219. * 1104 LOGOUT_FAILED 退出失败
  220. */
  221. public function logout() {
  222. $user = Auth::guard('api')->user();
  223. if ($user->token()->delete()) {
  224. return $this->api(['result' => true]);
  225. }
  226. return $this->error(ErrorCode::LOGOUT_FAILED);
  227. }
  228. /**
  229. * @api {post} /api/auth/code 获取验证码(get code)
  230. * @apiDescription 获取验证码(get code),验证码有效期暂定为15分钟
  231. * @apiGroup Auth
  232. * @apiPermission none
  233. * @apiVersion 0.1.0
  234. * @apiParam {string} phone 手机
  235. * @apiSuccessExample {json} Success-Response:
  236. * HTTP/1.1 200 OK
  237. * {
  238. * "state": true,
  239. * "code": 0,
  240. * "message": "",
  241. * "data": {
  242. * "verify_code": "1234"//该值调试时使用,sms调通后取消
  243. * }
  244. * }
  245. * @apiErrorExample {json} Error-Response:
  246. * HTTP/1.1 400 Bad Request
  247. * {
  248. * "state": false,
  249. * "code": 1000,
  250. * "message": "传入参数不正确",
  251. * "data": null or []
  252. * }
  253. * 可能出现的错误代码:
  254. * 1000 CLIENT_WRONG_PARAMS 传入参数不正确
  255. */
  256. public function getCode(Request $request)
  257. {
  258. $validator = Validator::make($request->all(),
  259. [
  260. 'phone' => 'required|regex:/^1[34578]\d{9}$/',
  261. ],
  262. [
  263. 'phone.required' => '手机号码必填',
  264. 'phone.regex' => '手机号码格式不正确',
  265. ]
  266. );
  267. if ($validator->fails())
  268. return $this->validatorError($validator->messages()->all(),ErrorCode::CLIENT_WRONG_PARAMS);
  269. $phone = $request->phone;
  270. $keyexist = $this->keySmsCodeExist . $phone;
  271. $times = Cache::store('file')->get($keyexist);
  272. if($times>20) {
  273. return $this->error(ErrorCode::VERIFY_CODE_TOO_MUCH);
  274. }else{
  275. $times++;
  276. Cache::store('file')->put($keyexist, $times, $this->expireTimeExist);
  277. }
  278. $verify_code = (string) mt_rand(1000, 9999);
  279. \Log::info('verify_code:'.$verify_code);
  280. $key = $this->keySmsCode . $phone;
  281. Cache::store('file')->put($key, $verify_code, $this->expireTime);
  282. $msg = '【喵喵】您的验证码是:' . $verify_code;
  283. /*
  284. $result = $this->sendSms($msg, $phone);
  285. if (!$result)
  286. $this->logger->Error("Send sms failed.");
  287. */
  288. return $this->api(['verify_code' => $verify_code]);
  289. }
  290. public function refreshToken() {
  291. $token = '';//TODO
  292. return $this->api([
  293. 'token' => $token,
  294. ]);
  295. }
  296. public function isLogin()
  297. {
  298. $user = Auth::user();
  299. $res = true;
  300. if(!$user) $res = false;
  301. return $this->api([
  302. 'result' => $res,
  303. ]);
  304. }
  305. /**
  306. * @api {post} /api/auth/avatar 上传头像(avatar)
  307. * @apiDescription 上传头像(reset)
  308. * @apiGroup Auth
  309. * @apiPermission Passport
  310. * @apiVersion 0.1.0
  311. * @apiParam {File} avatar 头像图片
  312. * @apiSuccessExample {json} Success-Response:
  313. * HTTP/1.1 200 OK
  314. * {
  315. * "state": true,
  316. * "code": 0,
  317. * "message": "",
  318. * "data": {
  319. * "md5": "fdf8dd78eb383b8acf6d94d4752c1424",
  320. * }
  321. * }
  322. * @apiErrorExample {json} Error-Response:
  323. * HTTP/1.1 400 Bad Request
  324. * {
  325. * "state": false,
  326. * "code": 1000,
  327. * "message": "传入参数不正确",
  328. * "data": null or []
  329. * }
  330. * 可能出现的错误代码:
  331. * 200 SAVE_USER_FAILED 保存用户数据失败
  332. * 201 ATTACHMENT_MKDIR_FAILED 创建附件目录失败
  333. * 202 ATTACHMENT_UPLOAD_INVALID 上传附件文件无效
  334. * 203 ATTACHMENT_SAVE_FAILED 保存附件失败
  335. * 204 ATTACHMENT_MOVE_FAILED 移动附件失败
  336. * 205 ATTACHMENT_DELETE_FAILED 删除附件文件失败
  337. * 206 ATTACHMENT_RECORD_DELETE_FAILED 删除附件记录失败
  338. * 1000 CLIENT_WRONG_PARAMS 传入参数不正确
  339. * 1101 INCORRECT_VERIFY_CODE 输入验证码错误
  340. * 1105 USER_DOES_NOT_EXIST 用户不存在
  341. * 1200 ATTACHMENT_UPLOAD_FAILED 附件上传失败
  342. * 1201 ATTACHMENT_SIZE_EXCEEDED 附件大小超过限制
  343. * 1202 ATTACHMENT_MIME_NOT_ALLOWED 附件类型不允许
  344. * 1203 ATTACHMENT_NOT_EXIST 附件不存在
  345. */
  346. public function avatar(Request $request) {
  347. // $user = Auth::user();
  348. $user = $this->getUser();
  349. $old_avatar = $user->avatar;
  350. $result = $this->uploadAttachment($request, 'avatar', 'avatar', 4 * 1024 * 1024, [
  351. 'image/jpeg',
  352. 'image/png',
  353. 'image/gif',
  354. ]);
  355. if (is_array($result)) {
  356. $result = array_shift($result);
  357. }
  358. if (is_string($result)) {
  359. $user->avatar = config('app.url')."/attachment/".$result;
  360. if (!$user->save()) {
  361. return $this->error(ErrorCode::SAVE_USER_FAILED);
  362. }
  363. $this->deleteAttachment($old_avatar);
  364. return $this->api(['file' => $result]);
  365. }
  366. return $this->error($result);
  367. }
  368. }