Auth.php 20 KB

123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118119120121122123124125126127128129130131132133134135136137138139140141142143144145146147148149150151152153154155156157158159160161162163164165166167168169170171172173174175176177178179180181182183184185186187188189190191192193194195196197198199200201202203204205206207208209210211212213214215216217218219220221222223224225226227228229230231232233234235236237238239240241242243244245246247248249250251252253254255256257258259260261262263264265266267268269270271272273274275276277278279280281282283284285286287288289290291292293294295296297298299300301302303304305306307308309310311312313314315316317318319320321322323324325326327328329330331332333334335336337338339340341342343344345346347348349350351352353354355356357358359360361362363364365366367368369370371372373374375376377378379380381382383384385386387388389390391392393394395396397398399400401402403404405406407408409410411412413414415416417418419420421422423424425426427428429430431432433434435436437438439440441442443444445446447448449450451452453454455456457458459460461462463464465466467468469470471472473474475476477478479480481482483484485486487488489490491492493494495496497498499500501502503504505506507508509510511512513514515516517518519520521522523524525526527528529530531532533534535536537538539540541542543544545546547548549550551552553554555556557558559560561562563564565566567568569570571572573574575576577578579580581582583584585586587588589590591592593594595596597598599600601602603604605606607608609610611612613614615616617618619620621622623624625626627628629630631632633634635636637638639640641642643644645646647648649650651652653654655656657658659660661662663664665666667668669670671672673674675676677678679680681682683684685686687688689690691692693694695696697698699700701702703704705706707708709710711712713714715716717718719720721
  1. <?php
  2. namespace app\common\library;
  3. use app\common\model\User;
  4. use app\common\model\UserRule;
  5. use fast\Random;
  6. use think\Config;
  7. use think\Db;
  8. use think\Exception;
  9. use think\Hook;
  10. use think\Request;
  11. use think\Validate;
  12. class Auth
  13. {
  14. protected static $instance = null;
  15. protected $_error = '';
  16. protected $_logined = false;
  17. protected $_user = null;
  18. protected $_token = '';
  19. //Token默认有效时长
  20. protected $keeptime = 2592000;
  21. protected $requestUri = '';
  22. protected $rules = [];
  23. //默认配置
  24. protected $config = [];
  25. protected $options = [];
  26. protected $allowFields = ['id', 'username', 'nickname', 'mobile', 'avatar', 'gender', 'createtime' ,'idcard_status'];
  27. public function __construct($options = [])
  28. {
  29. if ($config = Config::get('user')) {
  30. $this->config = array_merge($this->config, $config);
  31. }
  32. $this->options = array_merge($this->config, $options);
  33. }
  34. /**
  35. *
  36. * @param array $options 参数
  37. * @return Auth
  38. */
  39. public static function instance($options = [])
  40. {
  41. if (is_null(self::$instance)) {
  42. self::$instance = new static($options);
  43. }
  44. return self::$instance;
  45. }
  46. /**
  47. * 获取User模型
  48. * @return User
  49. */
  50. public function getUser()
  51. {
  52. return $this->_user;
  53. }
  54. /**
  55. * 兼容调用user模型的属性
  56. *
  57. * @param string $name
  58. * @return mixed
  59. */
  60. public function __get($name)
  61. {
  62. return $this->_user ? $this->_user->$name : null;
  63. }
  64. /**
  65. * 兼容调用user模型的属性
  66. */
  67. public function __isset($name)
  68. {
  69. return isset($this->_user) ? isset($this->_user->$name) : false;
  70. }
  71. /**
  72. * 根据Token初始化
  73. *
  74. * @param string $token Token
  75. * @return boolean
  76. */
  77. public function init($token)
  78. {
  79. if ($this->_logined) {
  80. return true;
  81. }
  82. if ($this->_error) {
  83. return false;
  84. }
  85. $data = Token::get($token);
  86. if (!$data) {
  87. return false;
  88. }
  89. $user_id = intval($data['user_id']);
  90. if ($user_id > 0) {
  91. $user = User::get($user_id);
  92. if (!$user) {
  93. $this->setError('Account not exist');
  94. return false;
  95. }
  96. if ($user['status'] == -1) {
  97. $this->setError('账号已注销');
  98. return false;
  99. }
  100. if ($user['status'] != 1) {
  101. $this->setError('Account is locked');
  102. return false;
  103. }
  104. $this->_user = $user;
  105. $this->_logined = true;
  106. $this->_token = $token;
  107. //初始化成功的事件
  108. Hook::listen("user_init_successed", $this->_user);
  109. return true;
  110. } else {
  111. $this->setError('You are not logged in');
  112. return false;
  113. }
  114. }
  115. /**
  116. * 注册用户
  117. *
  118. * @param string $username 用户名
  119. * @param string $password 密码
  120. * @param string $email 邮箱
  121. * @param string $mobile 手机号
  122. * @param array $extend 扩展参数
  123. * @return boolean
  124. */
  125. public function register($username, $password, $email = '', $mobile = '', $extend = [])
  126. {
  127. // 检测用户名、昵称、邮箱、手机号是否存在
  128. /*if (User::getByUsername($username)) {
  129. $this->setError('Username already exist');
  130. return false;
  131. }
  132. if (User::getByNickname($username)) {
  133. $this->setError('Nickname already exist');
  134. return false;
  135. }
  136. if ($email && User::getByEmail($email)) {
  137. $this->setError('Email already exist');
  138. return false;
  139. }*/
  140. if(empty($mobile)){
  141. $this->setError('手机号必填');
  142. return false;
  143. }
  144. if ($mobile && User::getByMobile($mobile)) {
  145. $this->setError('Mobile already exist');
  146. return false;
  147. }
  148. $ip = request()->ip();
  149. $time = time();
  150. $data = [
  151. // 'username' => $username,
  152. // 'password' => $password,
  153. // 'email' => $email,
  154. 'mobile' => $mobile,
  155. // 'level' => 1,
  156. // 'score' => 0,
  157. 'avatar' => config('site.user_default_avatar'),
  158. ];
  159. $params = array_merge($data, [
  160. // 'nickname' => preg_match("/^1[3-9]{1}\d{9}$/", $username) ? substr_replace($username, '****', 3, 4) : $username,
  161. 'nickname' => get_rand_nick_name(),
  162. // 'salt' => Random::alnum(),
  163. 'jointime' => $time,
  164. 'joinip' => $ip,
  165. 'logintime' => $time,
  166. 'loginip' => $ip,
  167. 'prevtime' => $time,
  168. 'status' => 1
  169. ]);
  170. // $params['password'] = $this->getEncryptPassword($password, $params['salt']);
  171. $params = array_merge($params, $extend);
  172. //账号注册时需要开启事务,避免出现垃圾数据
  173. Db::startTrans();
  174. try {
  175. $user = User::create($params, true);
  176. $this->_user = User::get($user->id);
  177. $this->_user->username = 'u' . (10000 + $user->id);
  178. $this->_user->save();
  179. //设置Token
  180. $this->_token = Random::uuid();
  181. Token::set($this->_token, $user->id, $this->keeptime);
  182. //设置登录状态
  183. $this->_logined = true;
  184. //注册钱包
  185. $wallet_id = Db::name('user_wallet')->insertGetId(['user_id'=>$user->id]);
  186. if(!$wallet_id){
  187. $this->setError('注册用户失败');
  188. Db::rollback();
  189. return false;
  190. }
  191. //[环信]注册用户。忽略失败
  192. /*$easemob = new Easemob();
  193. $rs = $easemob->user_create('user'.$user->id);
  194. if($rs === false){
  195. $this->setError('注册用户失败');
  196. Db::rollback();
  197. return false;
  198. }*/
  199. //腾讯im注册用户
  200. $tenim = new Tenim();
  201. $rs = $tenim->register('user'.$user->id,$params['nickname'],'');
  202. if($rs !== true){
  203. $this->setError($rs);
  204. Db::rollback();
  205. return false;
  206. }
  207. //注册成功的事件
  208. Hook::listen("user_register_successed", $this->_user, $data);
  209. Db::commit();
  210. } catch (Exception $e) {
  211. $this->setError($e->getMessage());
  212. Db::rollback();
  213. return false;
  214. }
  215. return true;
  216. }
  217. public function tv_register($tv_userid = '')
  218. {
  219. if(empty($tv_userid)){
  220. $this->setError('盒子用户id必填');
  221. return false;
  222. }
  223. if ($tv_userid && User::getByTvUserid($tv_userid)) {
  224. $this->setError('tv user already exist');
  225. return false;
  226. }
  227. $ip = request()->ip();
  228. $time = time();
  229. $data = [
  230. 'tv_userid' => $tv_userid,
  231. 'nickname' => '盒子用户',
  232. 'comefrom' => 2,
  233. 'avatar' => config('site.user_default_avatar'),
  234. ];
  235. $params = array_merge($data, [
  236. 'jointime' => $time,
  237. 'joinip' => $ip,
  238. 'logintime' => $time,
  239. 'loginip' => $ip,
  240. 'prevtime' => $time,
  241. 'status' => 1
  242. ]);
  243. //账号注册时需要开启事务,避免出现垃圾数据
  244. Db::startTrans();
  245. try {
  246. $user = User::create($params, true);
  247. $this->_user = User::get($user->id);
  248. $this->_user->username = 'u' . (10000 + $user->id);
  249. $this->_user->save();
  250. //设置Token
  251. $this->_token = Random::uuid();
  252. Token::set($this->_token, $user->id, $this->keeptime);
  253. //设置登录状态
  254. $this->_logined = true;
  255. //注册钱包
  256. $wallet_id = Db::name('user_wallet')->insertGetId(['user_id'=>$user->id]);
  257. if(!$wallet_id){
  258. $this->setError('注册用户失败');
  259. Db::rollback();
  260. return false;
  261. }
  262. //[环信]注册用户。忽略失败
  263. /*$easemob = new Easemob();
  264. $rs = $easemob->user_create('user'.$user->id);
  265. if($rs === false){
  266. $this->setError('注册用户失败');
  267. Db::rollback();
  268. return false;
  269. }*/
  270. //腾讯im注册用户
  271. $tenim = new Tenim();
  272. $rs = $tenim->register('user'.$user->id,$params['nickname'],'');
  273. if($rs !== true){
  274. $this->setError($rs);
  275. Db::rollback();
  276. return false;
  277. }
  278. //注册成功的事件
  279. Hook::listen("user_register_successed", $this->_user, $data);
  280. Db::commit();
  281. } catch (Exception $e) {
  282. $this->setError($e->getMessage());
  283. Db::rollback();
  284. return false;
  285. }
  286. return true;
  287. }
  288. /**
  289. * 用户登录
  290. *
  291. * @param string $account 账号,用户名、邮箱、手机号
  292. * @param string $password 密码
  293. * @return boolean
  294. */
  295. public function login($account, $password)
  296. {
  297. // $field = Validate::is($account, 'email') ? 'email' : (Validate::regex($account, '/^1\d{10}$/') ? 'mobile' : 'username');
  298. $field = 'mobile';
  299. $user = User::get([$field => $account]);
  300. if (!$user) {
  301. $this->setError('Account is incorrect');
  302. return false;
  303. }
  304. if ($user->status == -1) {
  305. $this->setError('账户已注销');
  306. return false;
  307. }
  308. if ($user->status != 1) {
  309. $this->setError('Account is locked');
  310. return false;
  311. }
  312. if ($user->password != $this->getEncryptPassword($password, $user->salt)) {
  313. $this->setError('Password is incorrect');
  314. return false;
  315. }
  316. //直接登录会员
  317. return $this->direct($user->id);
  318. }
  319. /**
  320. * 退出
  321. *
  322. * @return boolean
  323. */
  324. public function logout()
  325. {
  326. if (!$this->_logined) {
  327. $this->setError('You are not logged in');
  328. return false;
  329. }
  330. //设置登录标识
  331. $this->_logined = false;
  332. //删除Token
  333. Token::delete($this->_token);
  334. //退出成功的事件
  335. Hook::listen("user_logout_successed", $this->_user);
  336. return true;
  337. }
  338. /**
  339. * 修改密码
  340. * @param string $newpassword 新密码
  341. * @param string $oldpassword 旧密码
  342. * @param bool $ignoreoldpassword 忽略旧密码
  343. * @return boolean
  344. */
  345. public function changepwd($newpassword, $oldpassword = '', $ignoreoldpassword = false)
  346. {
  347. if (!$this->_logined) {
  348. $this->setError('You are not logged in');
  349. return false;
  350. }
  351. //判断旧密码是否正确
  352. if ($this->_user->password == $this->getEncryptPassword($oldpassword, $this->_user->salt) || $ignoreoldpassword) {
  353. Db::startTrans();
  354. try {
  355. $salt = Random::alnum();
  356. $newpassword = $this->getEncryptPassword($newpassword, $salt);
  357. $this->_user->save(['loginfailure' => 0, 'password' => $newpassword, 'salt' => $salt]);
  358. Token::delete($this->_token);
  359. //修改密码成功的事件
  360. Hook::listen("user_changepwd_successed", $this->_user);
  361. Db::commit();
  362. } catch (Exception $e) {
  363. Db::rollback();
  364. $this->setError($e->getMessage());
  365. return false;
  366. }
  367. return true;
  368. } else {
  369. $this->setError('Password is incorrect');
  370. return false;
  371. }
  372. }
  373. /**
  374. * 直接登录账号
  375. * @param int $user_id
  376. * @return boolean
  377. */
  378. public function direct($user_id)
  379. {
  380. $user = User::get($user_id);
  381. if ($user) {
  382. Db::startTrans();
  383. try {
  384. $ip = request()->ip();
  385. $time = time();
  386. //判断连续登录和最大连续登录
  387. if ($user->logintime < \fast\Date::unixtime('day')) {
  388. // $user->successions = $user->logintime < \fast\Date::unixtime('day', -1) ? 1 : $user->successions + 1;
  389. // $user->maxsuccessions = max($user->successions, $user->maxsuccessions);
  390. }
  391. $user->prevtime = $user->logintime;
  392. //记录本次登录的IP和时间
  393. $user->loginip = $ip;
  394. $user->logintime = $time;
  395. //重置登录失败次数
  396. $user->loginfailure = 0;
  397. $user->save();
  398. $this->_user = $user;
  399. $this->_token = Random::uuid();
  400. Token::set($this->_token, $user->id, $this->keeptime);
  401. $this->_logined = true;
  402. //登录成功的事件
  403. Hook::listen("user_login_successed", $this->_user);
  404. Db::commit();
  405. } catch (Exception $e) {
  406. Db::rollback();
  407. $this->setError($e->getMessage());
  408. return false;
  409. }
  410. return true;
  411. } else {
  412. return false;
  413. }
  414. }
  415. /**
  416. * 检测是否是否有对应权限
  417. * @param string $path 控制器/方法
  418. * @param string $module 模块 默认为当前模块
  419. * @return boolean
  420. */
  421. public function check($path = null, $module = null)
  422. {
  423. if (!$this->_logined) {
  424. return false;
  425. }
  426. $ruleList = $this->getRuleList();
  427. $rules = [];
  428. foreach ($ruleList as $k => $v) {
  429. $rules[] = $v['name'];
  430. }
  431. $url = ($module ? $module : request()->module()) . '/' . (is_null($path) ? $this->getRequestUri() : $path);
  432. $url = strtolower(str_replace('.', '/', $url));
  433. return in_array($url, $rules);
  434. }
  435. /**
  436. * 判断是否登录
  437. * @return boolean
  438. */
  439. public function isLogin()
  440. {
  441. if ($this->_logined) {
  442. return true;
  443. }
  444. return false;
  445. }
  446. /**
  447. * 获取当前Token
  448. * @return string
  449. */
  450. public function getToken()
  451. {
  452. return $this->_token;
  453. }
  454. public function getUserinfo_simple(){
  455. $userinfo = Token::get($this->_token);
  456. return $userinfo;
  457. }
  458. /**
  459. * 获取会员基本信息
  460. */
  461. public function getUserinfo()
  462. {
  463. $data = $this->_user->toArray();
  464. $allowFields = $this->getAllowFields();
  465. $userinfo = array_intersect_key($data, array_flip($allowFields));
  466. $userinfo = array_merge($userinfo, Token::get($this->_token));
  467. $userinfo['avatar'] = localpath_to_netpath($userinfo['avatar']);
  468. //实名信息
  469. $userinfo['realname'] = '';
  470. $realname = Db::name('user_idconfirm')->where('user_id',$this->id)->where('status',1)->value('realname');
  471. if(!empty($realname)){
  472. $userinfo['realname'] = $realname;
  473. }
  474. //待审核好友申请
  475. $userinfo['friend_apply_number'] = Db::name('friend_apply')->where('to_user_id',$this->id)->where('status',0)->count();
  476. return $userinfo;
  477. }
  478. /**
  479. * 获取会员组别规则列表
  480. * @return array|bool|\PDOStatement|string|\think\Collection
  481. */
  482. public function getRuleList()
  483. {
  484. if ($this->rules) {
  485. return $this->rules;
  486. }
  487. $group = $this->_user->group;
  488. if (!$group) {
  489. return [];
  490. }
  491. $rules = explode(',', $group->rules);
  492. $this->rules = UserRule::where('status', 1)->where('id', 'in', $rules)->field('id,pid,name,title,ismenu')->select();
  493. return $this->rules;
  494. }
  495. /**
  496. * 获取当前请求的URI
  497. * @return string
  498. */
  499. public function getRequestUri()
  500. {
  501. return $this->requestUri;
  502. }
  503. /**
  504. * 设置当前请求的URI
  505. * @param string $uri
  506. */
  507. public function setRequestUri($uri)
  508. {
  509. $this->requestUri = $uri;
  510. }
  511. /**
  512. * 获取允许输出的字段
  513. * @return array
  514. */
  515. public function getAllowFields()
  516. {
  517. return $this->allowFields;
  518. }
  519. /**
  520. * 设置允许输出的字段
  521. * @param array $fields
  522. */
  523. public function setAllowFields($fields)
  524. {
  525. $this->allowFields = $fields;
  526. }
  527. /**
  528. * 删除一个指定会员
  529. * @param int $user_id 会员ID
  530. * @return boolean
  531. */
  532. public function delete($user_id)
  533. {
  534. $user = User::get($user_id);
  535. if (!$user) {
  536. return false;
  537. }
  538. Db::startTrans();
  539. try {
  540. // 删除会员
  541. User::destroy($user_id);
  542. // 删除会员指定的所有Token
  543. Token::clear($user_id);
  544. Hook::listen("user_delete_successed", $user);
  545. Db::commit();
  546. } catch (Exception $e) {
  547. Db::rollback();
  548. $this->setError($e->getMessage());
  549. return false;
  550. }
  551. return true;
  552. }
  553. /**
  554. * 获取密码加密后的字符串
  555. * @param string $password 密码
  556. * @param string $salt 密码盐
  557. * @return string
  558. */
  559. public function getEncryptPassword($password, $salt = '')
  560. {
  561. return md5(md5($password) . $salt);
  562. }
  563. /**
  564. * 检测当前控制器和方法是否匹配传递的数组
  565. *
  566. * @param array $arr 需要验证权限的数组
  567. * @return boolean
  568. */
  569. public function match($arr = [])
  570. {
  571. $request = Request::instance();
  572. $arr = is_array($arr) ? $arr : explode(',', $arr);
  573. if (!$arr) {
  574. return false;
  575. }
  576. $arr = array_map('strtolower', $arr);
  577. // 是否存在
  578. if (in_array(strtolower($request->action()), $arr) || in_array('*', $arr)) {
  579. return true;
  580. }
  581. // 没找到匹配
  582. return false;
  583. }
  584. /**
  585. * 设置会话有效时间
  586. * @param int $keeptime 默认为永久
  587. */
  588. public function keeptime($keeptime = 0)
  589. {
  590. $this->keeptime = $keeptime;
  591. }
  592. /**
  593. * 渲染用户数据
  594. * @param array $datalist 二维数组
  595. * @param mixed $fields 加载的字段列表
  596. * @param string $fieldkey 渲染的字段
  597. * @param string $renderkey 结果字段
  598. * @return array
  599. */
  600. public function render(&$datalist, $fields = [], $fieldkey = 'user_id', $renderkey = 'userinfo')
  601. {
  602. $fields = !$fields ? ['id', 'nickname', 'level', 'avatar'] : (is_array($fields) ? $fields : explode(',', $fields));
  603. $ids = [];
  604. foreach ($datalist as $k => $v) {
  605. if (!isset($v[$fieldkey])) {
  606. continue;
  607. }
  608. $ids[] = $v[$fieldkey];
  609. }
  610. $list = [];
  611. if ($ids) {
  612. if (!in_array('id', $fields)) {
  613. $fields[] = 'id';
  614. }
  615. $ids = array_unique($ids);
  616. $selectlist = User::where('id', 'in', $ids)->column($fields);
  617. foreach ($selectlist as $k => $v) {
  618. $list[$v['id']] = $v;
  619. }
  620. }
  621. foreach ($datalist as $k => &$v) {
  622. $v[$renderkey] = $list[$v[$fieldkey]] ?? null;
  623. }
  624. unset($v);
  625. return $datalist;
  626. }
  627. /**
  628. * 设置错误信息
  629. *
  630. * @param string $error 错误信息
  631. * @return Auth
  632. */
  633. public function setError($error)
  634. {
  635. $this->_error = $error;
  636. return $this;
  637. }
  638. /**
  639. * 获取错误信息
  640. * @return string
  641. */
  642. public function getError()
  643. {
  644. return $this->_error ? __($this->_error) : '';
  645. }
  646. }