AuthorizationsController.php 11 KB

123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118119120121122123124125126127128129130131132133134135136137138139140141142143144145146147148149150151152153154155156157158159160161162163164165166167168169170171172173174175176177178179180181182183184185186187188189190191192193194195196197198199200201202203204205206207208209210211212213214215216217218219220221222223224225226227228229230231232233234235236237238239240241242243244245246247248249250251252253254255256257258259260261262263264265266267268269270271272273274275276277278279280281282283284285286287288289290291292293294295296297298299300301302303304305306307308309310311312313314315316317318319320321322323324325326327328329330331332333334335336337338339340341342343344345346347348349350351352353354355
  1. <?php
  2. namespace App\Http\Controllers\Api;
  3. use App\Exceptions\SmsException;
  4. use App\Models\AdminRole;
  5. use App\Models\User;
  6. use App\Services\SmsService;
  7. use App\Services\TencentImAccountService;
  8. use App\Transformers\UserTransformer;
  9. use Carbon\Carbon;
  10. use Illuminate\Http\Request;
  11. use Illuminate\Support\Facades\Auth;
  12. use Illuminate\Support\Facades\DB;
  13. use Illuminate\Support\Facades\Hash;
  14. use Illuminate\Support\Facades\Validator;
  15. class AuthorizationsController extends Controller
  16. {
  17. protected $tencentImAccountService;
  18. public function __construct(TencentImAccountService $tencentImAccountService)
  19. {
  20. $this->tencentImAccountService = $tencentImAccountService;
  21. }
  22. /**
  23. * 手机号登录
  24. * @param Request $request
  25. * @return \Illuminate\Http\JsonResponse
  26. */
  27. public function login_by_mobile(Request $request)
  28. {
  29. $validator = Validator::make($request->all(), [
  30. 'mobile' => ['required', 'regex:/^1[3456789]\d{9}$/'],
  31. 'verifyKey' => 'bail|required|string',
  32. 'smsCode' => 'bail|required',
  33. ], [
  34. 'mobile.required'=>"手机号码必须",
  35. 'mobile.regex'=>"手机号码格式错误",
  36. 'verifyKey.required'=>"验证码必须",
  37. 'smsCode.required'=>"短信验证码必须",
  38. ]);
  39. if ($validator->fails()) {
  40. return $this->response()->errorForbidden($validator->messages()->first());
  41. }
  42. try {
  43. //验证短信验证码
  44. SmsService::checkSmsCodeByVerifyKey($request->verifyKey, $request->smsCode);
  45. } catch (SmsException $e) {
  46. abort(403, $e->getMessage());
  47. } catch (\Exception $e) {
  48. abort(403, '短信校验失败');
  49. }
  50. $user = User::firstOrCreate([
  51. 'mobile' => $request->input('mobile'),
  52. ]);
  53. if (!$user->ycode) {
  54. $user->ycode = $this->create_code();
  55. }
  56. if (!$user->tencent_im_user_id) {
  57. $user->tencent_im_user_id = $this->tencentImAccountService->accountImport($user);
  58. }
  59. $user->save();
  60. $token = Auth::guard('api')->fromUser($user);
  61. self::updateLastLogin($user, $token);
  62. $resdata['token'] = "Bearer ".$token;
  63. $resdata['sex'] = $user->sex;
  64. $resdata['password'] = $user->password?1:0;
  65. $resdata['tencent_im_user_id'] =$user->tencent_im_user_id;
  66. return response()->json($resdata);
  67. }
  68. public function captcha(){
  69. return response(captcha_src());
  70. }
  71. /**
  72. * 根据用户ID生成唯一邀请码
  73. * @param $user_id
  74. * @return string
  75. */
  76. public function create_code() {
  77. $code = create_invite_code();
  78. if(User::where(['ycode'=>$code])->first()){
  79. $code = create_invite_code();
  80. }
  81. return $code;
  82. }
  83. /**
  84. * 用户账号密码登录
  85. * @param Request $request
  86. * @return \Illuminate\Http\JsonResponse|void
  87. */
  88. public function login_by_account_password(Request $request)
  89. {
  90. $validator = Validator::make($request->all(), [
  91. 'mobile' => ['required', 'regex:/^1[3456789]\d{9}$/'],
  92. 'password' => 'required|string',
  93. ],[
  94. 'mobile.required'=>"手机号码必须",
  95. 'mobile.regex'=>"手机号码格式错误",
  96. 'password.required'=>"密码必须",
  97. ]);
  98. if ($validator->fails()) {
  99. return $this->response()->errorForbidden($validator->messages()->first());
  100. }
  101. if (!$user=User::where(['mobile' => $request->mobile])->first()) {
  102. return $this->response->errorNotFound('用户不存在!');
  103. }
  104. $credentials = $request->only('mobile', 'password');
  105. if (!$token = auth('api')->attempt($credentials)) {
  106. return $this->response->errorUnauthorized ('用户名或密码错误');
  107. }
  108. if (!$user->ycode) {
  109. $user->ycode = $this->create_code();
  110. }
  111. if (!$user->tencent_im_user_id) {
  112. $user->tencent_im_user_id = $this->tencentImAccountService->accountImport($user);
  113. }
  114. $user->save();
  115. self::updateLastLogin($user, $token);
  116. $resdata['token'] ="Bearer ".$token;
  117. $resdata['sex'] = $user->sex;
  118. $resdata['password'] = $user->password?1:0;
  119. $resdata['tencent_im_user_id'] =$user->tencent_im_user_id;
  120. return response()->json($resdata);
  121. }
  122. /**
  123. * 注册账号
  124. */
  125. public function register(Request $request){
  126. $validator = Validator::make($request->all(), [
  127. 'mobile' => ['required', 'regex:/^1[3456789]\d{9}$/'],
  128. 'password' => 'bail|required',
  129. ],[
  130. 'mobile.required'=>"手机号码必须",
  131. 'mobile.regex'=>"手机号码格式错误",
  132. 'password.required'=>"密码必须",
  133. ]);
  134. if ($validator->fails()){
  135. return $this->response()->errorForbidden($validator->messages()->first());
  136. }
  137. if(User::where(['mobile'=>$request->mobile])->first()){
  138. return $this->response->errorForbidden("该手机号码已使用");
  139. }
  140. $ins = array();
  141. $ins['mobile'] = $request->mobile;
  142. $ins['password'] = $request->password;
  143. if(User::create($ins)){
  144. return response()->json(['message'=>"注册成功"]);
  145. }else{
  146. return $this->response->errorForbidden("注册失败");
  147. }
  148. }
  149. public function reg_h5(Request $request){
  150. $validator = Validator::make($request->all(), [
  151. 'mobile' => ['required', 'regex:/^1[3456789]\d{9}$/'],
  152. 'password' => 'bail|required',
  153. 'smsCode' => 'bail|required',
  154. ],[
  155. 'mobile.required'=>"手机号码必须",
  156. 'mobile.regex'=>"手机号码格式错误",
  157. 'password.required'=>"密码必须",
  158. 'smsCode.required'=>"短信验证码必须",
  159. ]);
  160. if ($validator->fails()){
  161. return response()->json([
  162. 'code'=>0,
  163. 'message'=>$validator->messages()->first()
  164. ]);
  165. }
  166. // try {
  167. // //验证短信验证码
  168. // SmsService::checkSmsCodeByVerifyKey($request->verifyKey, $request->smsCode);
  169. // } catch (SmsException $e) {
  170. // return response()->json([
  171. // 'code'=>0,
  172. // 'message'=>$e->getMessage()
  173. // ]);
  174. // } catch (\Exception $e) {
  175. // return response()->json([
  176. // 'code'=>0,
  177. // 'message'=>'短信校验失败'
  178. // ]);
  179. // }
  180. if(User::where(['mobile'=>$request->mobile])->first()){
  181. return response()->json([
  182. 'code'=>0,
  183. 'message'=>'该手机号码已使用'
  184. ]);
  185. }
  186. //邀请码设置
  187. $pid = 0;
  188. if(isset($request->ycode) && $request->ycode!=""){
  189. if(!$puser = User::where(['ycode'=>$request->ycode])->first()){
  190. return response()->json([
  191. 'code'=>0,
  192. 'message'=>'邀请码不存在'
  193. ]);
  194. }
  195. $pid = $puser->id;
  196. }
  197. $ins = array();
  198. $ins['mobile'] = $request->mobile;
  199. $ins['password'] = $request->password;
  200. $ins['pid'] = $pid;
  201. if(User::create($ins)){
  202. return response()->json([
  203. 'code'=>1,
  204. 'message'=>'注册成功'
  205. ]);
  206. }else{
  207. return response()->json([
  208. 'code'=>0,
  209. 'message'=>'注册失败'
  210. ]);
  211. }
  212. }
  213. /**
  214. * 忘记密码
  215. */
  216. public function forget_password(Request $request){
  217. $validator = Validator::make($request->all(), [
  218. 'mobile' => ['required', 'regex:/^1[3456789]\d{9}$/'],
  219. 'verifyKey' => 'bail|required|string',
  220. 'smsCode' => 'bail|required',
  221. 'password' => 'bail|required',
  222. ],[
  223. 'mobile.required'=>"手机号码必须",
  224. 'mobile.regex'=>"手机号码格式错误",
  225. 'verifyKey.required'=>"验证码必须",
  226. 'smsCode.required'=>"短信验证码必须",
  227. 'password.required'=>"密码必须",
  228. ]);
  229. if ($validator->fails()) {
  230. return $this->response()->errorForbidden($validator->messages()->first());
  231. }
  232. try {
  233. //验证短信验证码
  234. SmsService::checkSmsCodeByVerifyKey($request->verifyKey, $request->smsCode);
  235. } catch (SmsException $e) {
  236. abort(403, $e->getMessage());
  237. } catch (\Exception $e) {
  238. abort(403, '短信校验失败');
  239. }
  240. $user = User::where(['mobile'=>$request->mobile])->first();
  241. $user->password =$request->password;// Hash::make($request->password);
  242. if($user->save()){
  243. return $this->response->noContent();
  244. }
  245. }
  246. /**
  247. * 用户协议
  248. */
  249. public function xieyi(Request $request){
  250. if(isset($request->cont) && $request->cont==1){
  251. $data = DB::table("document")->where(['id'=>$request->id])->first();
  252. return response()->json(['data'=>$data]);
  253. }else{
  254. $url = "https://".$_SERVER['HTTP_HOST']."/xieyi/content.html?id=1";
  255. $url2 = "https://".$_SERVER['HTTP_HOST']."/xieyi/content.html?id=2";
  256. return response()->json(['url1'=>$url,'url2'=>$url2]);
  257. }
  258. }
  259. public function xieyi_content(Request $request){
  260. $data = DB::table("document")->where(['id'=>$request->type])->first();
  261. return response()->json(['data'=>$data]);
  262. }
  263. /**
  264. * Get the authenticated User.
  265. *
  266. * @return \Illuminate\Http\JsonResponse
  267. */
  268. public function me()
  269. {
  270. $user = auth('api')->user();
  271. return $this->response->item($user, new UserTransformer());
  272. }
  273. /**
  274. * Log the user out (Invalidate the token).
  275. *
  276. * @return \Illuminate\Http\JsonResponse
  277. */
  278. public function logout()
  279. {
  280. auth('api')->logout();
  281. return response()->json(['message' => '退出成功!']);
  282. }
  283. /**
  284. * Refresh a token.
  285. * 刷新token,如果开启黑名单,以前的token便会失效。
  286. * 值得注意的是用上面的getToken再获取一次Token并不算做刷新,两次获得的Token是并行的,即两个都可用。
  287. * @return \Illuminate\Http\JsonResponse
  288. */
  289. public function refresh()
  290. {
  291. return $this->respondWithToken(Auth::guard('api')->refresh());
  292. }
  293. static public function updateLastLogin(User $user, string $jwtToken)
  294. {
  295. $user->remember_token = $jwtToken;
  296. $user->last_login_time = Carbon::now();
  297. $user->last_login_ip = request()->ip();
  298. $user->save();
  299. }
  300. /**
  301. * Get the token array structure.
  302. *
  303. * @param string $token
  304. *
  305. * @return \Illuminate\Http\JsonResponse
  306. */
  307. protected function respondWithToken($token)
  308. {
  309. return response()->json([
  310. 'access_token' => $token,
  311. 'token_type' => 'Bearer',
  312. 'expires_in' => Auth::guard('api')->factory()->getTTL() * 60
  313. ]);
  314. }
  315. }