AuthorizationsController.php 12 KB

123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118119120121122123124125126127128129130131132133134135136137138139140141142143144145146147148149150151152153154155156157158159160161162163164165166167168169170171172173174175176177178179180181182183184185186187188189190191192193194195196197198199200201202203204205206207208209210211212213214215216217218219220221222223224225226227228229230231232233234235236237238239240241242243244245246247248249250251252253254255256257258259260261262263264265266267268269270271272273274275276277278279280281282283284285286287288289290291292293294295296297298299300301302303304305306307308309310311312313314315316317318319320321322323324325326327328329330331332333334335336337338339340341342343344345346347348349350351352353354355356357358359360361362363364365366367368369370371372373374375376
  1. <?php
  2. namespace App\Http\Controllers\Api;
  3. use App\Exceptions\SmsException;
  4. use App\Models\AdminRole;
  5. use App\Models\User;
  6. use App\Models\UserInviteLog;
  7. use App\Services\SmsService;
  8. use App\Services\TencentImAccountService;
  9. use App\Transformers\UserTransformer;
  10. use Carbon\Carbon;
  11. use Illuminate\Http\Request;
  12. use Illuminate\Support\Facades\Auth;
  13. use Illuminate\Support\Facades\DB;
  14. use Illuminate\Support\Facades\Hash;
  15. use Illuminate\Support\Facades\Validator;
  16. use PHPUnit\Util\Exception;
  17. class AuthorizationsController extends Controller
  18. {
  19. protected $tencentImAccountService;
  20. public function __construct(TencentImAccountService $tencentImAccountService)
  21. {
  22. $this->tencentImAccountService = $tencentImAccountService;
  23. }
  24. /**
  25. * 手机号登录
  26. * @param Request $request
  27. * @return \Illuminate\Http\JsonResponse
  28. */
  29. public function login_by_mobile(Request $request)
  30. {
  31. $validator = Validator::make($request->all(), [
  32. 'mobile' => ['required', 'regex:/^1[3456789]\d{9}$/'],
  33. 'verifyKey' => 'bail|required|string',
  34. 'smsCode' => 'bail|required',
  35. ], [
  36. 'mobile.required'=>"手机号码必须",
  37. 'mobile.regex'=>"手机号码格式错误",
  38. 'verifyKey.required'=>"验证码必须",
  39. 'smsCode.required'=>"短信验证码必须",
  40. ]);
  41. if ($validator->fails()) {
  42. return $this->response()->errorForbidden($validator->messages()->first());
  43. }
  44. // try {
  45. // //验证短信验证码
  46. // SmsService::checkSmsCodeByVerifyKey($request->verifyKey, $request->smsCode);
  47. // } catch (SmsException $e) {
  48. // abort(403, $e->getMessage());
  49. // } catch (\Exception $e) {
  50. // abort(403, '短信校验失败');
  51. // }
  52. User::firstOrCreate([
  53. 'mobile' => $request->input('mobile'),
  54. ]);
  55. $user = User::query()->where(['mobile'=>$request->input('mobile')])->first();
  56. if (!$user->ycode) {
  57. $user->ycode = $this->create_code();
  58. }
  59. if (!$user->tencent_im_user_id) {
  60. $user->tencent_im_user_id = $this->tencentImAccountService->accountImport($user);
  61. }
  62. if($user->status!=1){
  63. return $this->response->errorForbidden("用户已被禁用,请联系管理员");
  64. }
  65. $user->save();
  66. $token = Auth::guard('api')->fromUser($user);
  67. self::updateLastLogin($user, $token);
  68. $resdata['token'] = "Bearer ".$token;
  69. $resdata['sex'] = $user->sex;
  70. $resdata['password'] = $user->password?1:0;
  71. $resdata['tencent_im_user_id'] =$user->tencent_im_user_id;
  72. $resdata['mobile'] =$user->mobile;
  73. $resdata['lock_pass'] =$user->lock_pass?$user->lock_pass:false;
  74. $resdata['status'] =$user->status;
  75. $resdata['is_auth'] =$user->is_auth;
  76. $resdata['ycode'] =$user->ycode;
  77. $resdata['online'] =$user->online;
  78. $resdata['notice_status'] =$user->notice_status;
  79. return response()->json($resdata);
  80. }
  81. public function captcha(){
  82. return response(captcha_src());
  83. }
  84. /**
  85. * 根据用户ID生成唯一邀请码
  86. * @param $user_id
  87. * @return string
  88. */
  89. public function create_code() {
  90. $code = create_invite_code();
  91. if(User::where(['ycode'=>$code])->first()){
  92. $code = create_invite_code();
  93. }
  94. return $code;
  95. }
  96. /**
  97. * 用户账号密码登录
  98. * @param Request $request
  99. * @return \Illuminate\Http\JsonResponse|void
  100. */
  101. public function login_by_account_password(Request $request)
  102. {
  103. $validator = Validator::make($request->all(), [
  104. 'mobile' => ['required', 'regex:/^1[3456789]\d{9}$/'],
  105. 'password' => 'required|string',
  106. ],[
  107. 'mobile.required'=>"手机号码必须",
  108. 'mobile.regex'=>"手机号码格式错误",
  109. 'password.required'=>"密码必须",
  110. ]);
  111. if ($validator->fails()) {
  112. return $this->response()->errorForbidden($validator->messages()->first());
  113. }
  114. if (!$user=User::where(['mobile' => $request->mobile])->first()) {
  115. return $this->response->errorForbidden('用户不存在!');
  116. }
  117. $credentials = $request->only('mobile', 'password');
  118. if (!$token = auth('api')->attempt($credentials)) {
  119. return $this->response->errorForbidden ('用户名或密码错误');
  120. }
  121. if($user->status!=1){
  122. return $this->response->errorForbidden("用户已被禁用,请联系管理员");
  123. }
  124. if (!$user->ycode) {
  125. $user->ycode = $this->create_code();
  126. }
  127. if (!$user->tencent_im_user_id) {
  128. $user->tencent_im_user_id = $this->tencentImAccountService->accountImport($user);
  129. }
  130. $user->save();
  131. self::updateLastLogin($user, $token);
  132. $resdata['token'] = "Bearer ".$token;
  133. $resdata['sex'] = $user->sex;
  134. $resdata['password'] = $user->password?1:0;
  135. $resdata['tencent_im_user_id'] =$user->tencent_im_user_id;
  136. $resdata['mobile'] =$user->mobile;
  137. $resdata['lock_pass'] =$user->lock_pass?$user->lock_pass:false;
  138. $resdata['status'] =$user->status;
  139. $resdata['is_auth'] =$user->is_auth;
  140. $resdata['ycode'] =$user->ycode;
  141. $resdata['online'] =$user->online;
  142. $resdata['notice_status'] =$user->notice_status;
  143. return response()->json($resdata);
  144. }
  145. /**
  146. * 注册账号
  147. */
  148. public function register(Request $request){
  149. $validator = Validator::make($request->all(), [
  150. 'mobile' => ['required', 'regex:/^1[3456789]\d{9}$/'],
  151. 'password' => 'bail|required',
  152. ],[
  153. 'mobile.required'=>"手机号码必须",
  154. 'mobile.regex'=>"手机号码格式错误",
  155. 'password.required'=>"密码必须",
  156. ]);
  157. if ($validator->fails()){
  158. return $this->response()->errorForbidden($validator->messages()->first());
  159. }
  160. if(User::where(['mobile'=>$request->mobile])->first()){
  161. return $this->response->errorForbidden("该手机号码已使用");
  162. }
  163. $ins = array();
  164. $ins['mobile'] = $request->mobile;
  165. $ins['password'] = $request->password;
  166. if(User::create($ins)){
  167. return response()->json(['message'=>"注册成功"]);
  168. }else{
  169. return $this->response->errorForbidden("注册失败");
  170. }
  171. }
  172. public function reg_h5(Request $request){
  173. $validator = Validator::make($request->all(), [
  174. 'mobile' => ['required', 'regex:/^1[3456789]\d{9}$/'],
  175. 'password' => 'bail|required',
  176. 'smsCode' => 'bail|required',
  177. ],[
  178. 'mobile.required'=>"手机号码必须",
  179. 'mobile.regex'=>"手机号码格式错误",
  180. 'password.required'=>"密码必须",
  181. 'smsCode.required'=>"短信验证码必须",
  182. ]);
  183. if ($validator->fails()){
  184. return response()->json([
  185. 'code'=>0,
  186. 'message'=>$validator->messages()->first()
  187. ]);
  188. }
  189. DB::beginTransaction();
  190. try {
  191. //验证短信验证码
  192. SmsService::checkSmsCodeByVerifyKey($request->verifyKey, $request->smsCode);
  193. if(User::where(['mobile'=>$request->mobile])->first()){
  194. throw new Exception("该手机号码已使用");
  195. }
  196. //邀请码设置
  197. $pid = 0;
  198. if(isset($request->ycode) && $request->ycode!=""){
  199. if(!$puser = User::where(['ycode'=>$request->ycode])->first()){
  200. throw new Exception("邀请码不存在");
  201. }
  202. $pid = $puser->id;
  203. }
  204. $ins = array();
  205. $ins['mobile'] = $request->mobile;
  206. $ins['password'] = $request->password;
  207. $ins['pid'] = $pid;
  208. $ins['created_at'] = date('Y-m-d H:i:s');
  209. $ins['updated_at'] = date('Y-m-d H:i:s');
  210. $insid = User::query()->insertGetId($ins);
  211. //赠送会员天数
  212. UserInviteLog::query()->create([
  213. 'user_id'=>$pid,
  214. 'invite_id'=>$insid,
  215. 'day'=>1,
  216. 'status'=>0,
  217. ]);
  218. DB::commit();
  219. } catch (SmsException $e) {
  220. DB::rollBack();
  221. return response()->json([
  222. 'code'=>0,
  223. 'message'=>$e->getMessage()
  224. ]);
  225. } catch (\Exception $e) {
  226. DB::rollBack();
  227. return response()->json([
  228. 'code'=>0,
  229. 'message'=>'短信校验失败'
  230. ]);
  231. }
  232. return response()->json([
  233. 'code'=>1,
  234. 'message'=>'注册成功'
  235. ]);
  236. }
  237. /**
  238. * 忘记密码
  239. */
  240. public function forget_password(Request $request){
  241. $validator = Validator::make($request->all(), [
  242. 'mobile' => ['required', 'regex:/^1[3456789]\d{9}$/'],
  243. 'verifyKey' => 'bail|required|string',
  244. 'smsCode' => 'bail|required',
  245. 'password' => 'bail|required',
  246. ],[
  247. 'mobile.required'=>"手机号码必须",
  248. 'mobile.regex'=>"手机号码格式错误",
  249. 'verifyKey.required'=>"验证码必须",
  250. 'smsCode.required'=>"短信验证码必须",
  251. 'password.required'=>"密码必须",
  252. ]);
  253. if ($validator->fails()) {
  254. return $this->response()->errorForbidden($validator->messages()->first());
  255. }
  256. try {
  257. //验证短信验证码
  258. SmsService::checkSmsCodeByVerifyKey($request->verifyKey, $request->smsCode);
  259. } catch (SmsException $e) {
  260. abort(403, $e->getMessage());
  261. } catch (\Exception $e) {
  262. abort(403, '短信校验失败');
  263. }
  264. $user = User::where(['mobile'=>$request->mobile])->first();
  265. $user->password =$request->password;// Hash::make($request->password);
  266. if($user->save()){
  267. return $this->response->noContent();
  268. }
  269. }
  270. /**
  271. * 用户协议
  272. */
  273. public function xieyi(Request $request){
  274. if(isset($request->cont) && $request->cont==1){
  275. $data = DB::table("document")->where(['id'=>$request->id])->first();
  276. return response()->json(['data'=>$data]);
  277. }else{
  278. $url = "https://".$_SERVER['HTTP_HOST']."/xieyi/content.html?id=1";
  279. $url2 = "https://".$_SERVER['HTTP_HOST']."/xieyi/content.html?id=2";
  280. return response()->json(['url1'=>$url,'url2'=>$url2]);
  281. }
  282. }
  283. /**
  284. * Get the authenticated User.
  285. *
  286. * @return \Illuminate\Http\JsonResponse
  287. */
  288. public function me()
  289. {
  290. $user = auth('api')->user();
  291. return $this->response->item($user, new UserTransformer());
  292. }
  293. /**
  294. * Log the user out (Invalidate the token).
  295. *
  296. * @return \Illuminate\Http\JsonResponse
  297. */
  298. public function logout()
  299. {
  300. auth('api')->logout();
  301. return response()->json(['message' => '退出成功!']);
  302. }
  303. /**
  304. * Refresh a token.
  305. * 刷新token,如果开启黑名单,以前的token便会失效。
  306. * 值得注意的是用上面的getToken再获取一次Token并不算做刷新,两次获得的Token是并行的,即两个都可用。
  307. * @return \Illuminate\Http\JsonResponse
  308. */
  309. public function refresh()
  310. {
  311. return $this->respondWithToken(Auth::guard('api')->refresh());
  312. }
  313. static public function updateLastLogin(User $user, string $jwtToken)
  314. {
  315. $user->remember_token = $jwtToken;
  316. $user->last_login_time = Carbon::now();
  317. $user->last_login_ip = request()->ip();
  318. $user->save();
  319. }
  320. /**
  321. * Get the token array structure.
  322. *
  323. * @param string $token
  324. *
  325. * @return \Illuminate\Http\JsonResponse
  326. */
  327. protected function respondWithToken($token)
  328. {
  329. return response()->json([
  330. 'access_token' => $token,
  331. 'token_type' => 'Bearer',
  332. 'expires_in' => Auth::guard('api')->factory()->getTTL() * 60
  333. ]);
  334. }
  335. }