AuthorizationsController.php 17 KB

123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118119120121122123124125126127128129130131132133134135136137138139140141142143144145146147148149150151152153154155156157158159160161162163164165166167168169170171172173174175176177178179180181182183184185186187188189190191192193194195196197198199200201202203204205206207208209210211212213214215216217218219220221222223224225226227228229230231232233234235236237238239240241242243244245246247248249250251252253254255256257258259260261262263264265266267268269270271272273274275276277278279280281282283284285286287288289290291292293294295296297298299300301302303304305306307308309310311312313314315316317318319320321322323324325326327328329330331332333334335336337338339340341342343344345346347348349350351352353354355356357358359360361362363364365366367368369370371372373374375376377378379380381382383384385386387388389390391392393394395396397398399400401402403404405406407408409410411412413414415416417418419420421422423424425426427428429430431432433434435436437438439440441442443444445446447448449450451452453454455456457458459460461462463464465466467468469470471472473474475476477478479480481482483484485
  1. <?php
  2. namespace App\Http\Controllers\Api;
  3. use App\Exceptions\SmsException;
  4. use App\Models\AdminRole;
  5. use App\Models\User;
  6. use App\Models\UserInfoModel;
  7. use App\Models\UserInviteLog;
  8. use App\Models\UserVipLimit;
  9. use App\Models\UserBlacklistModel;
  10. use App\Models\UserLikeModel;
  11. use App\Models\UserLookModel;
  12. use App\Services\JPushService;
  13. use App\Services\SmsService;
  14. use App\Services\TencentImAccountService;
  15. use App\Transformers\UserTransformer;
  16. use Carbon\Carbon;
  17. use http\Env\Response;
  18. use Illuminate\Http\Request;
  19. use Illuminate\Support\Facades\Auth;
  20. use Illuminate\Support\Facades\DB;
  21. use Illuminate\Support\Facades\Hash;
  22. use Illuminate\Support\Facades\Validator;
  23. use PHPUnit\Util\Exception;
  24. class AuthorizationsController extends Controller
  25. {
  26. protected $tencentImAccountService;
  27. public function __construct(TencentImAccountService $tencentImAccountService)
  28. {
  29. $this->tencentImAccountService = $tencentImAccountService;
  30. }
  31. /**
  32. * 极光认证一键登录
  33. */
  34. public function auth_login(Request $request){
  35. file_put_contents('login_log.log',date("Y-m-d H:i:s").var_export($request->all(),true).PHP_EOL,FILE_APPEND);
  36. try {
  37. if(empty($request->loginToken)){
  38. throw new Exception("参数错误");
  39. }
  40. $loginToken = $request->loginToken;
  41. $exID = $request->post('exID','800');
  42. $ret = JPushService::jgLoginTokenVerify($loginToken,$exID);
  43. $mobile = JPushService::jgOpensslPrivateDecrypt($ret['phone']);
  44. $res = $this->do_login($mobile);
  45. }catch (\Exception $exception){
  46. return $this->response->errorForbidden($exception->getMessage());
  47. }
  48. return response()->json($res);
  49. }
  50. /**
  51. * 手机号登录
  52. * @param Request $request
  53. * @return \Illuminate\Http\JsonResponse
  54. */
  55. public function login_by_mobile(Request $request)
  56. {
  57. file_put_contents('login_log.log',date("Y-m-d H:i:s").var_export($request->all(),true).PHP_EOL,FILE_APPEND);
  58. try {
  59. $validator = Validator::make($request->all(), [
  60. 'mobile' => ['required', 'regex:/^1[3456789]\d{9}$/'],
  61. 'verifyKey' => 'bail|required|string',
  62. 'smsCode' => 'bail|required',
  63. ], [
  64. 'mobile.required'=>"手机号码必须",
  65. 'mobile.regex'=>"手机号码格式错误",
  66. 'verifyKey.required'=>"验证码必须",
  67. 'smsCode.required'=>"短信验证码必须",
  68. ]);
  69. if ($validator->fails()) {
  70. return $this->response()->errorForbidden($validator->messages()->first());
  71. }
  72. //验证短信验证码
  73. SmsService::checkSmsCodeByVerifyKey($request->verifyKey, $request->smsCode);
  74. $res = $this->do_login($request->mobile,null,$request->registrationId,$request->phoneModel);
  75. }catch (\Exception $exception){
  76. return $this->response->errorForbidden($exception->getMessage());
  77. } catch (SmsException $e) {
  78. return $this->response->errorForbidden($e->getMessage());
  79. }
  80. return response()->json($res);
  81. }
  82. /**
  83. * 用户账号密码登录
  84. * @param Request $request
  85. * @return \Illuminate\Http\JsonResponse|void
  86. */
  87. public function login_by_account_password(Request $request)
  88. {
  89. file_put_contents('login_log.log',date("Y-m-d H:i:s").var_export($request->all(),true).PHP_EOL,FILE_APPEND);
  90. try {
  91. $validator = Validator::make($request->all(), [
  92. 'mobile' => ['required', 'regex:/^1[3456789]\d{9}$/'],
  93. 'password' => 'required|string',
  94. ],[
  95. 'mobile.required'=>"手机号码必须",
  96. 'mobile.regex'=>"手机号码格式错误",
  97. 'password.required'=>"密码必须",
  98. ]);
  99. if ($validator->fails()) {
  100. throw new Exception($validator->messages()->first());
  101. }
  102. $res = $this->do_login($request->mobile,$request->password,$request->registrationId,$request->phoneModel);
  103. }catch (\Exception $exception){
  104. return $this->response->errorForbidden($exception->getMessage());
  105. }
  106. file_put_contents('login_log.log',date("Y-m-d H:i:s").'执行成功'.PHP_EOL,FILE_APPEND);
  107. return response()->json($res);
  108. }
  109. //登录操作
  110. public function do_login($mobile,$password=null,$registrationId=null,$phoneModel=null){
  111. if(!empty($password)){
  112. if (!$user=User::query()->where(['mobile' => $mobile,'is_distory'=>0])->whereNull('deleted_at')->first()) {
  113. throw new Exception("用户不存在");
  114. }
  115. file_put_contents('login_log.log',date("Y-m-d H:i:s").var_export($user->toArray(),true).PHP_EOL,FILE_APPEND);
  116. $credentials = ['mobile'=>$mobile,'password'=>$password];
  117. if (!auth('api')->attempt($credentials)) {
  118. throw new Exception("手机号或密码错误");
  119. }
  120. }else{
  121. if(!User::query()->where(['mobile'=>$mobile,'is_distory'=>0])->first()){
  122. User::query()->create([
  123. 'mobile' => $mobile,
  124. ]);
  125. }
  126. $user = User::query()->where(['mobile'=>$mobile,'is_distory'=>0])->whereNull('deleted_at')->first();
  127. }
  128. if (!$user->ycode) {
  129. $user->ycode = $this->create_code();
  130. }
  131. if(!UserInfoModel::query()->where('user_id',$user->id)->first()){
  132. UserInfoModel::query()->create([
  133. 'user_id'=>$user->id,
  134. 'avatar'=>"https://zhengda.oss-cn-chengdu.aliyuncs.com/chengluApp/default.jpg",
  135. 'nickname'=>"用户".$user->mobile,
  136. 'birthday'=>"1990-01-01"
  137. ]);
  138. }
  139. if(!UserVipLimit::query()->where('user_id',$user->id)->first()){
  140. UserVipLimit::query()->create([
  141. 'user_id'=>$user->id,
  142. ]);
  143. }
  144. if (!$user->tencent_im_user_id) {
  145. $user->tencent_im_user_id = $this->tencentImAccountService->accountImport($user);
  146. }
  147. if($user->status!=1){
  148. throw new Exception("用户已被禁用,请联系管理员");
  149. }
  150. $token = Auth::guard('api')->fromUser($user);
  151. $user->remember_token = $token;
  152. $user->last_login_time = date("Y-m-d H:i:s");
  153. $user->last_login_ip = request()->ip();
  154. if(!empty($registrationId)){
  155. $user->registrationId = $registrationId;
  156. $user->phoneModel = $phoneModel;
  157. }
  158. $re = $user->save();
  159. file_put_contents('login_log.log',date("Y-m-d H:i:s").$re.PHP_EOL,FILE_APPEND);
  160. $resdata['token'] = "Bearer ".$token;
  161. $resdata['sex'] = $user->sex;
  162. $resdata['password'] = $user->password?1:0;
  163. $resdata['tencent_im_user_id'] =$user->tencent_im_user_id;
  164. $resdata['mobile'] =$user->mobile;
  165. $resdata['lock_pass'] =$user->lock_pass?$user->lock_pass:false;
  166. $resdata['status'] =$user->status;
  167. $resdata['is_auth'] =$user->is_auth;
  168. $resdata['ycode'] =$user->ycode;
  169. $resdata['online'] =$user->online;
  170. $resdata['notice_status'] =$user->notice_status;
  171. $resdata['userinfo'] = $this->getinfo($user->id);
  172. return $resdata;
  173. }
  174. public function captcha(){
  175. return response(captcha_src());
  176. }
  177. /**
  178. * 根据用户ID生成唯一邀请码
  179. * @param $user_id
  180. * @return string
  181. */
  182. public function create_code() {
  183. $code = create_invite_code();
  184. if(User::where(['ycode'=>$code])->first()){
  185. $code = create_invite_code();
  186. }
  187. return $code;
  188. }
  189. /**
  190. * 注册账号
  191. */
  192. public function register(Request $request){
  193. $validator = Validator::make($request->all(), [
  194. 'mobile' => ['required', 'regex:/^1[3456789]\d{9}$/'],
  195. 'password' => 'bail|required',
  196. ],[
  197. 'mobile.required'=>"手机号码必须",
  198. 'mobile.regex'=>"手机号码格式错误",
  199. 'password.required'=>"密码必须",
  200. ]);
  201. if ($validator->fails()){
  202. return $this->response()->errorForbidden($validator->messages()->first());
  203. }
  204. if(User::where(['mobile'=>$request->mobile,'is_distory'=>0])->first()){
  205. return $this->response->errorForbidden("该手机号码已注册");
  206. }
  207. $ins = array();
  208. $ins['mobile'] = $request->mobile;
  209. $ins['password'] = $request->password;
  210. if(User::create($ins)){
  211. return response()->json(['message'=>"注册成功"]);
  212. }else{
  213. return $this->response->errorForbidden("注册失败");
  214. }
  215. }
  216. public function reg_h5(Request $request){
  217. $validator = Validator::make($request->all(), [
  218. 'mobile' => ['required', 'regex:/^1[3456789]\d{9}$/'],
  219. 'password' => 'bail|required',
  220. 'smsCode' => 'bail|required',
  221. ],[
  222. 'mobile.required'=>"手机号码必须",
  223. 'mobile.regex'=>"手机号码格式错误",
  224. 'password.required'=>"密码必须",
  225. 'smsCode.required'=>"短信验证码必须",
  226. ]);
  227. if ($validator->fails()){
  228. return response()->json([
  229. 'code'=>0,
  230. 'message'=>$validator->messages()->first()
  231. ]);
  232. }
  233. DB::beginTransaction();
  234. try {
  235. //验证短信验证码
  236. SmsService::checkSmsCodeByVerifyKey($request->verifyKey, $request->smsCode);
  237. if(User::where(['mobile'=>$request->mobile,'is_distory'=>0])->first()){
  238. throw new Exception("该手机号码已使用");
  239. }
  240. //邀请码设置
  241. $pid = 0;
  242. if(isset($request->ycode) && $request->ycode!=""){
  243. if(!$puser = User::where(['ycode'=>$request->ycode])->first()){
  244. throw new Exception("邀请码不存在");
  245. }
  246. $pid = $puser->id;
  247. }
  248. $ins = array();
  249. $ins['mobile'] = $request->mobile;
  250. $ins['password'] = $request->password;
  251. $ins['pid'] = $pid;
  252. $ins['created_at'] = date('Y-m-d H:i:s');
  253. $ins['updated_at'] = date('Y-m-d H:i:s');
  254. $insid = User::query()->insertGetId($ins);
  255. //赠送会员天数
  256. UserInviteLog::query()->create([
  257. 'user_id'=>$pid,
  258. 'invite_id'=>$insid,
  259. 'day'=>1,
  260. 'status'=>0,
  261. ]);
  262. DB::commit();
  263. } catch (SmsException $e) {
  264. DB::rollBack();
  265. return response()->json([
  266. 'code'=>0,
  267. 'message'=>$e->getMessage()
  268. ]);
  269. } catch (\Exception $e) {
  270. DB::rollBack();
  271. return response()->json([
  272. 'code'=>0,
  273. 'message'=>'短信校验失败'
  274. ]);
  275. }
  276. return response()->json([
  277. 'code'=>1,
  278. 'message'=>'注册成功'
  279. ]);
  280. }
  281. /**
  282. * 忘记密码
  283. */
  284. public function forget_password(Request $request){
  285. try {
  286. $validator = Validator::make($request->all(), [
  287. 'mobile' => ['required', 'regex:/^1[3456789]\d{9}$/'],
  288. 'verifyKey' => 'bail|required|string',
  289. 'smsCode' => 'bail|required',
  290. 'password' => 'bail|required',
  291. ],[
  292. 'mobile.required'=>"手机号码必须",
  293. 'mobile.regex'=>"手机号码格式错误",
  294. 'verifyKey.required'=>"验证码必须",
  295. 'smsCode.required'=>"短信验证码必须",
  296. 'password.required'=>"密码必须",
  297. ]);
  298. if ($validator->fails()) {
  299. throw new Exception($validator->messages()->first());
  300. }
  301. //验证短信验证码
  302. //SmsService::checkSmsCodeByVerifyKey($request->verifyKey, $request->smsCode);
  303. $user = User::where(['mobile'=>$request->mobile])->first();
  304. $user->password =$request->password;// Hash::make($request->password);
  305. if(!$user->save()){
  306. throw new Exception("设置失败");
  307. }
  308. $res = $this->do_login($request->mobile,$request->password);
  309. }catch (\Exception $exception){
  310. return $this->response->errorForbidden($exception->getMessage());
  311. } catch (SmsException $e) {
  312. return $this->response->errorForbidden($e->getMessage());
  313. }
  314. return response()->json($res);
  315. }
  316. /**
  317. * 用户协议
  318. */
  319. public function xieyi(Request $request){
  320. if(isset($request->cont) && $request->cont==1){
  321. $data = DB::table("document")->where(['id'=>$request->id])->first();
  322. return response()->json(['data'=>$data]);
  323. }else{
  324. $url = "https://".$_SERVER['HTTP_HOST']."/xieyi/content.html?id=1";
  325. $url2 = "https://".$_SERVER['HTTP_HOST']."/xieyi/content.html?id=2";
  326. return response()->json(['url1'=>$url,'url2'=>$url2]);
  327. }
  328. }
  329. /**
  330. * Get the authenticated User.
  331. *
  332. * @return \Illuminate\Http\JsonResponse
  333. */
  334. public function me()
  335. {
  336. $user = auth('api')->user();
  337. return $this->response->item($user, new UserTransformer());
  338. }
  339. /**
  340. * Log the user out (Invalidate the token).
  341. *
  342. * @return \Illuminate\Http\JsonResponse
  343. */
  344. public function logout()
  345. {
  346. $user = auth('api')->user();
  347. $user->online = 0;
  348. $user->save();
  349. auth('api')->logout();
  350. return response()->json(['message' => '退出成功!']);
  351. }
  352. /**
  353. * Refresh a token.
  354. * 刷新token,如果开启黑名单,以前的token便会失效。
  355. * 值得注意的是用上面的getToken再获取一次Token并不算做刷新,两次获得的Token是并行的,即两个都可用。
  356. * @return \Illuminate\Http\JsonResponse
  357. */
  358. public function refresh()
  359. {
  360. return $this->respondWithToken(Auth::guard('api')->refresh());
  361. }
  362. static public function updateLastLogin(User $user, string $jwtToken)
  363. {
  364. $user->remember_token = $jwtToken;
  365. $user->last_login_time = Carbon::now();
  366. $user->last_login_ip = request()->ip();
  367. $user->save();
  368. }
  369. /**
  370. * Get the token array structure.
  371. *
  372. * @param string $token
  373. *
  374. * @return \Illuminate\Http\JsonResponse
  375. */
  376. protected function respondWithToken($token)
  377. {
  378. return response()->json([
  379. 'access_token' => $token,
  380. 'token_type' => 'Bearer',
  381. 'expires_in' => Auth::guard('api')->factory()->getTTL() * 60
  382. ]);
  383. }
  384. /**
  385. * 获取个人资料
  386. */
  387. public function getinfo($user_id){
  388. $user = User::where(['id'=>$user_id])->first();
  389. $userinfo = UserInfoModel::query()->where('user_id', $user->id)->first();
  390. //不看拉黑用户
  391. $black_list = UserBlacklistModel::query()
  392. ->where('user_id',$user->id)
  393. ->orWhere('black_id',$user->id)
  394. ->select(['black_id'])
  395. ->get()
  396. ->toArray();
  397. $ids = array_column($black_list,'black_id');
  398. $ids[]= $user->id;
  399. $userinfo['hobby'] = !empty($userinfo['hobby'])?explode(',',$userinfo['hobby']):[];
  400. $userinfo['photo'] = !empty($userinfo['photo'])?json_decode($userinfo['photo'],true):[];
  401. $video_info = !empty($userinfo['video'])?json_decode($userinfo['video'],true):[];
  402. $userinfo['video'] = array_column($video_info,'url');
  403. $userinfo['like_num'] = $user->like_num;
  404. $userinfo['like_me_num'] = $user->like_me_num;
  405. $userinfo['look_num'] = UserLookModel::query()
  406. ->with(['user'=>function($query){
  407. $query->select('id','sex','is_vip','tencent_im_user_id');
  408. },'user_info'])
  409. ->where(['look_id'=>$user->id])
  410. ->whereNotIn('user_id',$ids)
  411. ->whereHas("user",function($query){
  412. $query->where('is_distory',0)->select();
  413. })->count();
  414. $userinfo['look_num_red'] = UserLookModel::query()
  415. ->with(['user'=>function($query){
  416. $query->select('id','sex','is_vip','tencent_im_user_id');
  417. },'user_info'])
  418. ->where(['look_id'=>$user->id,'status'=>0])
  419. ->whereNotIn('user_id',$ids)
  420. ->whereHas("user",function($query){
  421. $query->where('is_distory',0)->select();
  422. })
  423. ->count();
  424. $userinfo['sex'] = $user->sex;
  425. $userinfo['mobile'] = $user->mobile;
  426. $userinfo['is_auth'] = $user->is_auth;
  427. $userinfo['is_vip'] = $user->is_vip;
  428. $userinfo['ycode'] = $user->ycode;
  429. $userinfo['notice_status'] = $user->notice_status;
  430. $userinfo['update_num'] = UserVipLimit::query()->where('user_id',$user->id)->value('user_info');
  431. $userinfo['see_user_num'] = UserVipLimit::query()->where('user_id',$user->id)->value("user_detail");
  432. return $userinfo;
  433. }
  434. }