kge/application/api/controller/User.php

<?php

namespace app\api\controller;

use app\common\controller\Api;
use app\common\library\Ems;
use app\common\library\Sms;
use app\common\library\Wechat;
use app\common\service\UserService;
use fast\Random;
use think\Exception;
use think\Log;
use think\Validate;
use miniprogram\wxBizDataCrypt;
use onlogin\onlogin;
use think\Db;

/**
 * 会员接口
 */
class User extends Api
{
    protected $noNeedLogin = ['login', 'onLogin', 'mobilelogin', 'register', 'resetpwd', 'changemobile', 'third', 'getUserOpenid', 'wxMiniProgramLogin','getNickName','wechatlogin','bindmobile'];
    protected $noNeedRight = '*';

    public function _initialize()
    {
        parent::_initialize();
    }

    /**
     * 会员中心
     */
    public function index()
    {
        $this->success('', ['welcome' => $this->auth->nickname]);
    }

    /**
     * 会员登录
     *
     * @param string $account 账号
     * @param string $password 密码
     */
    public function login()
    {
        $account = $this->request->request('account');
        $password = $this->request->request('password');
        if (!$account || !$password) {
            $this->error(__('Invalid parameters'));
        }
        $ret = $this->auth->login($account, $password);
        if ($ret) {
            $data = ['userinfo' => $this->auth->getUserinfo()];
            $this->success(__('Logged in successful'), $data);
        } else {
            $this->error($this->auth->getError());
        }
    }

    /**
     * 手机验证码登录
     *
     * @param string $mobile 手机号
     * @param string $captcha 验证码
     */
    public function mobilelogin()
    {
        $mobile = input('mobile');
        $captcha = input('captcha');
        if (!$mobile || !$captcha) {
            $this->error(__('Invalid parameters'));
        }
        if (!Validate::regex($mobile, "^1\d{10}$")) {
            $this->error(__('Mobile is incorrect'));
        }
        if (!Sms::check($mobile, $captcha, 'mobilelogin')) {
            $this->error(__('Captcha is incorrect'));
        }
        $user = \app\common\model\User::getByMobile($mobile);

        if ($user) {
            if ($user->status == -1) {
                $this->error('账户已注销');
            }
            if ($user->status != 1) {
                $this->error(__('Account is locked'));
            }
            //如果已经有账号则直接登录
            $is_register = 0;
            $ret = $this->auth->direct($user->id);
        } else {
            $is_register = 1;
            $ret = $this->auth->register($mobile, Random::alnum(), $mobile, []);
        }
        if ($ret) {
            Sms::flush($mobile, 'mobilelogin');
//            $data = ['is_register' => $is_register, 'userinfo' => $this->auth->getUserinfo()];
            $this->success(__('Logged in successful'), $this->auth->getUserinfo());
        } else {
            $this->error($this->auth->getError());
        }
    }

    //苹果登录+注册
    public function applelogin(){
        $iosUserId = input('ios_user_id','');
        if(!$iosUserId){
            $this->error(__('Invalid parameters'));
        }

        $user = Db::name('user')->where('ios_user_id',$iosUserId)->find();
        if ($user) {
            if ($user['status'] == -1) {
                $this->error('账户已经注销');
            }
            if ($user['status'] != 1) {
                $this->error(__('Account is locked'));
            }
            //如果已经有账号则直接登录
            $ret = $this->auth->direct($user['id']);
        } else {

            $ret = $this->auth->ios_register($iosUserId);
        }
        if ($ret) {
            $this->success(__('Logged in successful'), $this->auth->getUserinfo());
        } else {
            $this->error($this->auth->getError());
        }
    }

    /*
     * 修改用户的坐标
     * */
    public function change_longlat(){
        $longitude = input('longitude',0);
        $latitude  = input('latitude',0);
        if(empty($longitude) || empty($latitude)){
            $this->error();
        }

        $data = [
            'longitude' => $longitude,
            'latitude'  => $latitude,
        ];
        Db::name('user')->where('id',$this->auth->id)->update($data);
        $this->success();
    }

    /**
     * 绑定用户
     */
    public function bindUser()
    {
        $invite_no = input('invite_no'); // 邀请码
        if (!$invite_no) {
            $this->error("请输入邀请码！");
        }
        $user_id = $this->auth->id;

        // 查询邀请码用户信息
        $inviteUserInfo = \app\common\model\User::where(["invite_no" => $invite_no])->find();
        if (!$inviteUserInfo) {
            $this->error("查询不到该邀请码用户信息！");
        }
        //判断邀请码用户不能是自己的下级
        if ($inviteUserInfo['pre_userid'] == $user_id) {
            throw new Exception('对方已被您邀请过');
        }
        if ($inviteUserInfo->id == $user_id) $this->error("不能邀请自己哦！");
        if ($inviteUserInfo->is_auth != 2) $this->error("该邀请码用户尚未完成实名认证");

        $res = \app\common\model\User::update(["pre_userid" => $inviteUserInfo->id], ["id" => $user_id]);
        if ($res) {
            $this->success("恭喜，绑定成功！");
        } else {
            $this->success("网络繁忙，请稍后重试！");
        }
    }

    /**
     * 注册会员
     *
     * @param string $username 用户名
     * @param string $password 密码
     * @param string $email 邮箱
     * @param string $mobile 手机号
     * @param string $code 验证码
     */
    public function register()
    {
        $username = input('username');
        $password = input('password');
        $mobile = input('mobile');
        $code = input('code');
        if (!$username || !$password) {
            $this->error(__('Invalid parameters'));
        }
        if ($mobile && !Validate::regex($mobile, "^1\d{10}$")) {
            $this->error(__('Mobile is incorrect'));
        }
//        $ret = Sms::check($mobile, $code, 'register');
//        if (!$ret) {
//            $this->error(__('Captcha is incorrect'));
//        }
        $ret = $this->auth->register($username, $password, $mobile, []);
        if ($ret) {
            $data = ['userinfo' => $this->auth->getUserinfo()];
            $this->success(__('Sign up successful'), $data);
        } else {
            $this->error($this->auth->getError());
        }
    }

    /**
     * 退出登录
     */
    public function logout()
    {
        $this->auth->logout();
        $this->success(__('Logout successful'));
    }

    /**
     * 修改会员个人信息
     *
     * @ApiMethod (POST)
     * @param string $avatar   头像地址
     * @param string $username 用户名
     * @param string $nickname 昵称
     * @param string $bio      个人简介
     */
    public function profile()
    {
        $field_array = ['avatar','nickname','desc','age_id','gender','job_id','province_id','city_id','has_info'];

        $data = [];
        foreach($field_array as $key => $field){

            //前端传不了post，改了
            if(!request()->has($field,'post')){
                continue;
            }
            /*if(!input('?'.$field)){
                continue;
            }*/

            $newone = input($field);

            if($field == 'avatar'){
                $newone = input('avatar', '', 'trim,strip_tags,htmlspecialchars');
            }

            $data[$field] = $newone;
        }

        if(isset($data['invite_no']) && !empty($data['invite_no'])){
            $intro_user = Db::name('user')->where('invite_no',$data['invite_no'])->value('id');
            if(!$intro_user){
                $this->error('不存在的邀请人');
            }
            if(!empty($this->auth->pre_userid)){
                $this->error('您已经填写过邀请人');
            }
            unset($data['invite_no']);//别人的邀请码，不能改了自己的
            $data['pre_userid'] = $intro_user;

            //邀请用户注册，给邀请人奖励
            if(isset($data['pre_userid']) && !empty($data['pre_userid'])){
                /*$intro_gold = config('site.intro_newuser_gift_goldnum') ?: 0;
                if($intro_gold > 0){
                    $wallet_rs = model('wallet')->lockChangeAccountRemain($data['intro_uid'],'gold',$intro_gold,63,'邀请'.$this->auth->username);
                    if($wallet_rs['status'] === false){
                        Db::rollback();
                        $this->setError($wallet_rs['msg']);
                        return false;
                    }
                }*/
            }
        }
        if(empty($data)){
            $this->error('没有任何改变');
        }

        /*if (!empty($data['nickname']) && !empty($data['avatar']) && !empty($data['age_id']) && $data['has_info']==0) {
            $data['has_info'] = 1;
        }*/

        Db::startTrans();
        $update_rs = Db::name('user')->where('id',$this->auth->id)->update($data);
        if($update_rs === false){
            Db::rollback();
            $this->error('修改资料失败');
        }

        Db::commit();
        $this->success();
    }

    /**
     * 修改手机号
     *
     * @param string $mobile 手机号
     * @param string $captcha 验证码
     */
    public function changemobile()
    {
        $user = $this->auth->getUser();
        $mobile = input('mobile');
        $captcha = input('captcha');
        if (!$mobile || !$captcha) {
            $this->error(__('Invalid parameters'));
        }
        if (!Validate::regex($mobile, "^1\d{10}$")) {
            $this->error(__('Mobile is incorrect'));
        }
        if (\app\common\model\User::where('mobile', $mobile)->where('id', '<>', $user->id)->find()) {
            $this->error(__('Mobile already exists'));
        }
        $result = Sms::check($mobile, $captcha, 'changeMobile');
        if (!$result) {
            $this->error(__('Captcha is incorrect'));
        }
        $verification = $user->verification;
        $verification->mobile = 1;
        $user->verification = $verification;
        $user->mobile = $mobile;
        $user->save();

        Sms::flush($mobile, 'changeMobile');
        $this->success("手机号更换成功！");
    }

    /**
     * 第三方登录
     *
     * @param string $platform 平台名称
     * @param string $code Code码
     */
    public function third()
    {
        $url = url('user/index');
        $platform = input("platform");
        $code = input("code");
        $config = get_addon_config('third');
        if (!$config || !isset($config[$platform])) {
            $this->error(__('Invalid parameters'));
        }
        $app = new \addons\third\library\Application($config);
        //通过code换access_token和绑定会员
        $result = $app->{$platform}->getUserInfo(['code' => $code]);
        if ($result) {
            $loginret = \addons\third\library\Service::connect($platform, $result);
            if ($loginret) {
                $data = [
                    'userinfo'  => $this->auth->getUserinfo(),
                    'thirdinfo' => $result
                ];
                $this->success(__('Logged in successful'), $data);
            }
        }
        $this->error(__('Operation failed'), $url);
    }

    /**
     * 重置密码
     *
     * @param string $mobile 手机号
     * @param string $newpassword 新密码
     * @param string $captcha 验证码
     */
    public function resetpwd()
    {
        $type = input("type");
        $mobile = input("mobile");
        $email = input("email");
        $newpassword = input("newpassword");
        $captcha = input("captcha");
        if (!$newpassword || !$captcha) {
            $this->error(__('Invalid parameters'));
        }
        if ($type == 'mobile') {
            if (!Validate::regex($mobile, "^1\d{10}$")) {
                $this->error(__('Mobile is incorrect'));
            }
            $user = \app\common\model\User::getByMobile($mobile);
            if (!$user) {
                $this->error(__('User not found'));
            }
            $ret = Sms::check($mobile, $captcha, 'resetpwd');
            if (!$ret) {
                $this->error(__('Captcha is incorrect'));
            }
            Sms::flush($mobile, 'resetpwd');
        } else {
            if (!Validate::is($email, "email")) {
                $this->error(__('Email is incorrect'));
            }
            $user = \app\common\model\User::getByEmail($email);
            if (!$user) {
                $this->error(__('User not found'));
            }
            $ret = Ems::check($email, $captcha, 'resetpwd');
            if (!$ret) {
                $this->error(__('Captcha is incorrect'));
            }
            Ems::flush($email, 'resetpwd');
        }
        //模拟一次登录
        $this->auth->direct($user->id);
        $ret = $this->auth->changepwd($newpassword, '', true);
        if ($ret) {
            $this->success(__('Reset password successful'));
        } else {
            $this->error($this->auth->getError());
        }
    }

    /**
     * 设置密码
     * @param string $newpassword 新密码
     * @param string $newpassword 新密码
     */
    public function setpwd()
    {
        $params = $this->request->param();
        $validate = new \app\api\validate\User();
        $result = $validate->scene('setPwd')->check($params);
        if (!$result) {
            $this->error($validate->getError());
        }

        $ret = $this->auth->changepwd($params['password'], '', true);
        if ($ret) {
            $this->success(__('Set password successful'));
        } else {
            $this->error($this->auth->getError());
        }
    }

    /**
     * 修改密码
     *
     * @param string $mobile 手机号
     * @param string $newpassword 新密码
     * @param string $captcha 验证码
     */
    public function changepwd()
    {
        $params = $this->request->param();
        $validate = new \app\api\validate\User();
        $result = $validate->scene('changePwd')->check($params);
        if (!$result) {
            $this->error($validate->getError());
        }

        $mobile = input("mobile");
        $newpassword = input("password");
        $captcha = input("captcha");

        $user = \app\common\model\User::getByMobile($mobile);
        if (!$user) {
            $this->error(__('User not found'));
        }
        $ret = Sms::check($mobile, $captcha, 'resetpwd');
        if (!$ret) {
            $this->error(__('Captcha is incorrect'));
        }
        Sms::flush($mobile, 'resetpwd');
        $ret = $this->auth->changepwd($newpassword, '', true);
        if ($ret) {
            $this->success(__('Change password successful'));
        } else {
            $this->error($this->auth->getError());
        }
    }

    /**
     * 获取用户openid
     */
    public function getUserOpenid()
    {
        $code = $this->request->param('code');// code值
        if (!$code) {
            $this->error(__('Invalid parameters'));
        }
        $config = config("wxMiniProgram");
        $getopenid = "https://api.weixin.qq.com/sns/jscode2session?appid=" . $config["appid"] . "&secret=" . $config["secret"] . "&js_code=" . $code . "&grant_type=authorization_code";
        $openidInfo = $this->getJson($getopenid);
        if (!isset($openidInfo["openid"])) {
            $this->error("用户openid获取失败", $openidInfo);
        }
        //  获取的结果存入数据库
        $sessionkeyModel = new \app\common\model\UserSessionkey();
        if ($sessionkeyModel->where(["openid" => $openidInfo["openid"]])->find()) {
            $update = [];
            $update["sessionkey"] = $openidInfo["session_key"];
            $res = $sessionkeyModel->update($update, ["openid" => $openidInfo["openid"]]);
        } else {
            $insert = [];
            $insert["sessionkey"] = $openidInfo["session_key"];
            $insert["openid"] = $openidInfo["openid"];
            $insert["createtime"] = time();
            $res = $sessionkeyModel->insert($insert);
        }

        if ($res) {
            $this->success("获取成功！", $openidInfo);
        } else {
            $this->error("获取失败！");
        }

    }

    /**
     * 微信小程序登录
     */
    public function wxMiniProgramLogin()
    {
        $openid = $this->request->param('openid');// openid值
        $encryptedData = $this->request->param('encryptedData');// 加密数据
        $iv = $this->request->param('iv');// 加密算法
        $signature = $this->request->param('signature');// 签名验证
        $rawData = $this->request->param('rawData');// 签名验证
        $logintype = $this->request->param('loginType', 1);// 登录方式:1=手机号,2=微信授权openid

        if (!$openid || !$encryptedData || !$iv) {
            $this->error(__('Invalid parameters'));
        }
        $encryptedData = urldecode($encryptedData);

        $config = config("wxMiniProgram");
        // 获取openid和sessionkey
        $sessionkeyModel = new \app\common\model\UserSessionkey();
        $openidInfo = $sessionkeyModel->where(["openid" => $openid])->find();
        $openid = $openidInfo['openid'];
        $session_key = $openidInfo['sessionkey'];

//        // 数据签名校验
//        $signature2 = sha1($rawData . $session_key);
//        if ($signature != $signature2) {
//            $this->error(__('数据签名验证失败'));
//        }

        // 根据加密数据和加密算法获取用户信息
        $pc = new WXBizDataCrypt($config["appid"], $session_key);
        $data = "";
        $errCode = $pc->decryptData($encryptedData, $iv, $data);

        if ($errCode == 0) {
            $data = json_decode($data, true);
            // 用户登录逻辑 === 开始
            $userModel = new \app\common\model\User();
            $auth = \app\common\library\Auth::instance();
            if ($logintype == 1) { // 手机号登录
                $userInfo = $userModel->where(["mobile" => $data["purePhoneNumber"]])->find();
                // 用户信息不存在时使用
                $extend = ["mobile" => $data["purePhoneNumber"]];

            } else { // 微信授权openid登录
                $userInfo = $userModel->where(["openid" => $openid])->find();
                // 用户信息不存在时使用
                $extend = [
                    'openid'   => $data['openId'],
                    'nickname' => $data['nickName'],
                    'avatar'   => $data['avatarUrl'],
                    'gender'   => $data['gender'],
                ];
            }
            // 判断用户是否已经存在
            if ($userInfo) { // 登录
                $user = \app\common\model\User::get($userInfo["id"]);
                if (!$user) {
                    $this->error("网络错误！请稍后重试");
                }
                $user->save(["logintime" => time()]);
                $res = $auth->direct($user->id);
                $is_register = 0;
            } else { // 注册
                // 先随机一个用户名,随后再变更为u+数字id
                $username = Random::alnum(20);
                $password = Random::alnum(6);

                Db::startTrans();
                try {
                    // 默认注册一个会员
                    $result = $auth->register($username, $password, "", $extend);

                    if (!$result) {
                        return false;
                    }
                    $user = $auth->getUser();
                    $fields = ['username' => 'u' . $user->id];

                    // 更新会员资料
                    $user = \app\common\model\User::get($user->id);
                    $user->save($fields);

                    Db::commit();
                } catch (PDOException $e) {
                    Db::rollback();
                    $auth->logout();
                    return false;
                }

                // 写入登录Cookies和Token
                $res = $auth->direct($user->id);
                $is_register = 1;
            }
            $userInfo = $auth->getUserinfo();
            $userInfo["is_register"] = $is_register;
            if ($res) {
                $this->success("登录成功！", $userInfo);
            } else {
                $this->error("登录失败！");
            }
            // 用户登录逻辑 === 结束
        } else {
            $this->error("解密失败！", ["code" => $errCode]);
        }
    }

    /**
     * json 请求
     * @param $url
     * @return mixed
     */
    private function getJson($url)
    {
        $ch = curl_init();
        curl_setopt($ch, CURLOPT_URL, $url);
        curl_setopt($ch, CURLOPT_SSL_VERIFYPEER, FALSE);
        curl_setopt($ch, CURLOPT_SSL_VERIFYHOST, FALSE);
        curl_setopt($ch, CURLOPT_RETURNTRANSFER, 1);
        $output = curl_exec($ch);
        curl_close($ch);
        return json_decode($output, true);
    }

    /**
     * 运营商一键登录
     */
    public function onLogin()
    {
        $accessToken = $this->request->param('accessToken');// 运营商预取号获取到的token
        $token = $this->request->param('tokenT');// 易盾返回的token
        if (!$accessToken || !$token) {
            $this->error("参数获取失败！");
        }

        $params = array(
            // 运营商预取号获取到的token
            "accessToken" => $accessToken,
            // 易盾返回的token
            "token"       => $token
        );

        // 获取密钥配置
        $configInfo = config("onLogin");
        $onlogin = new onlogin($configInfo["secretid"], $configInfo["secretkey"], $configInfo["businessid"]);

        $ret = $onlogin->check($params);

//        $ret = [];
//        $ret["code"] = 200;
//        $ret["msg"] = "ok";
//        $ret["data"] = [
//            "phone" => "17574504021",
//            "resultCode" => 0
//        ];

        if ($ret["code"] == 200) {
            $data = $ret["data"];
            $phone = $data["phone"];
            if (empty($phone)) {
                // 取号失败,建议进行二次验证,例如短信验证码
                $this->error("取号登录失败，请用验证码方式登录！");
            } else {
                // 取号成功, 执行登录等流程
                // 用户登录逻辑 === 开始
                $userModel = new \app\common\model\User();
                $auth = \app\common\library\Auth::instance();

                $userInfo = $userModel->where(["mobile" => $phone])->find();
                // 用户信息不存在时使用
                $extend = ["mobile" => $phone];

                // 判断用户是否已经存在
                if ($userInfo) { // 登录
                    $user = \app\common\model\User::get($userInfo["id"]);
                    if (!$user) {
                        $this->error("网络错误！请稍后重试");
                    }
                    if ($user->status != 'normal') {
                        $this->error(__('Account is locked'));
                    }
                    $user->save(["logintime" => time()]);
                    $res = $auth->direct($user->id);
                    $is_register = 0;
                } else { // 注册
                    // 先随机一个用户名,随后再变更为u+数字id
                    $username = Random::alnum(20);
                    $password = Random::alnum(6);

                    Db::startTrans();
                    try {
                        // 默认注册一个会员
                        $result = $auth->register($username, $password, "", $extend);

                        if (!$result) {
                            return false;
                        }
                        $user = $auth->getUser();
                        $fields = ['username' => 'u' . $user->id];

                        // 更新会员资料
                        $user = \app\common\model\User::get($user->id);
                        $user->save($fields);

                        Db::commit();
                    } catch (PDOException $e) {
                        Db::rollback();
                        $auth->logout();
                        return false;
                    }

                    // 写入登录Cookies和Token
                    $res = $auth->direct($user->id);
                    $is_register = 1;
                }
                $userInfo["userinfo"] = $auth->getUserinfo();
                $userInfo["is_register"] = $is_register;
                if ($res) {
                    $this->success("登录成功！", $userInfo);
                } else {
                    $this->error("登录失败！");
                }
                // 用户登录逻辑 === 结束
            }
        } else {
            $this->error("登录失败，请用验证码方式登录！");
        }
    }


    /**
     * 注销账号
     *
     * @param string $mobile 手机号
     * @param string $captcha 验证码
     */
    public function cancleUser()
    {
        $user = $this->auth->getUser();

        $user->status = -1;
        //unset($user->power);
        $user->save();

        $this->auth->logout();

        $this->success("账号注销成功！");
    }



    /**
     * 获取昵称
     * @return string
     */
    public function getNickName()
    {
        $result['nickname'] = get_rand_nick_name();

        $this->success('获取成功',$result);
    }

    //微信登录,预先假注册
    public function wechatlogin(){

        $code = $this->request->param('code','');
        if(!$code){
            $this->error(__('Invalid parameters'));
        }
        //微信
        $wechat = new Wechat();

        $wxuserinfo = $wechat->getwxuserinfo($code);
        Log::error('code:'.$code.',wxuserinfo:'.json_encode($wxuserinfo));
        if(!$wxuserinfo){
            $this->error('openid获取失败');
        }
        $openid = $wxuserinfo['openid'];

        $user = Db::name('user')->where('openid',$openid)->find();
        if ($user) {
            if ($user['status'] == -1) {
                $this->error('账户已注销');
            }
            if ($user['status'] != 1) {
                $this->error(__('Account is locked'));
            }
            //如果已经有账号则直接登录
            $ret = $this->auth->direct($user['id']);
            $is_register = 0;
            $userInfo = $this->auth->getUserinfo();
        } else {
            //记录code和openid，绑定手机号的时候更新openid
            $wechatCodeData = [
                'code' => $code,
                'openid' => $openid,
                'createtime' => time(),
            ];
            $wechatCode = Db::name('wechat_code')->where(['openid'=>$openid])->find();
            if (empty($wechatCode)) {
                Db::name('wechat_code')->insertGetId($wechatCodeData);
            } else {
                Db::name('wechat_code')->where(['openid'=>$openid])->update($wechatCodeData);
            }
            $ret = true;
            $is_register = 1;
            $userInfo = [];
            $data = ['code'=>$code,'is_register' => $is_register, 'userinfo' => $userInfo];
            $this->success('获取信息成功', $data, 2);
        }
        if ($ret) {
            $data = ['code'=>$code,'is_register' => $is_register, 'userinfo' => $userInfo];
            $this->success(__('Logged in successful'), $data);
        } else {
            $this->error($this->auth->getError());
        }
    }

    //获取openid
    public function getopenid() {
        //code
        $code = $this->request->post('code', '', 'trim');// code值
        if (!$code) {
            $this->error(__('Invalid parameters'));
        }

        $config = config('wxMiniProgram');
        $getopenid_url = 'https://api.weixin.qq.com/sns/jscode2session?appid='.$config['appid'].'&secret='.$config['secret'].'&js_code='.$code.'&grant_type=authorization_code';

        $openidInfo = httpRequest($getopenid_url, 'GET');//$this->getJson($getopenid_url);
        $openidInfo = json_decode($openidInfo,true);

        if(!isset($openidInfo['openid'])) {
            $this->error('用户openid获取失败', $openidInfo);
        }
        $user = Db::name('user')->where('mini_openid',$openidInfo['openid'])->find();
        //$openidInfo['mobile'] = isset($user['mobile']) ? $user['mobile'] : '';

        $this->success('获取成功', $openidInfo);
    }



    //申请真人认证
    public function realauth()
    {
        try {
            $realName = $this->request->param('real_name','');
            $idCard   = $this->request->param('id_card','');
            if ($this->auth->is_auth == 2) {
                $this->error('您已经真人认证过了~');
            }
            if (empty($realName)) {
                throw new Exception('请输入姓名');
            }
            if (empty($idCard)) {
                throw new Exception('请输入身份证号');
            }
            $userAuthWhere['user_id'] = ['neq',$this->auth->id];
            $userAuthWhere['idcard'] = $idCard;

            // 获取用户已经实名认证的数量
            $authenticatedCount = model('UserAuth')->where(['idcard' => $idCard])->count();

            // 如果已经实名认证的数量不超过3个
            if ($authenticatedCount > 3) {
                throw new Exception('您当前身份证号已经认证过3次');
            }

            /*$userAuth = model('UserAuth')->where($userAuthWhere)->find();
            if (!empty($userAuth)) {
                throw new Exception('该身份证号已被其他用户实名验证过');
            }*/
            /*$userService = new UserService();
            $faceParams = [
                'real_name' => $realName,
                'id_card' => $idCard,
                'user_id' => $this->auth->id,
            ];
            $res = $userService->faceAuth($faceParams);
            if (!$res['status']) {
                $this->error('您的网络开小差啦5~');
            }
            $rs = $res['data'];
            if (!$rs || $rs['code'] != 0) {
                $this->error('您的网络开小差啦6~');
            }

            $user_auth = [
                'user_id' => $this->auth->id,
                'realname' => $realName,
                'idcard' => $idCard,
                'certify_id' => isset($rs['result']['faceId']) ? $rs['result']['faceId'] : '',
                'out_trade_no' => isset($rs['result']['orderNo']) ? $rs['result']['orderNo'] : '',
                'status' => 0,
                'createtime' => time(),
                'updatetime' => time()
            ];*/
            $userService = new UserService();
            $aliParams = [
                'id_card' => $idCard,
                'real_name' => $realName,
            ];
            $aliCheckRes = $userService->aliCheck($aliParams);
            if (!$aliCheckRes['status']) {
                throw new Exception($aliCheckRes['msg']);
            }
            $user_auth = [
                'user_id' => $this->auth->id,
                'realname' => $realName,
                'idcard' => $idCard,
                'certify_id' => '',
                'out_trade_no' => '',
                'status' => 1,
                'createtime' => time(),
            ];
            //开启事务
            Db::startTrans();
            //查询是否认证过
            $info = Db::name('user_auth')->where(['user_id' => $this->auth->id])->find();
            if ($info) {
                $auth_rs = Db::name('user_auth')->where(['id' => $info['id']])->setField($user_auth);
            } else {
                $auth_rs = Db::name('user_auth')->insertGetId($user_auth);
            }
            if (!$auth_rs) {
                Db::rollback();
                $this->error('您的网络开小差啦7~');
            }
            //修改用户表认证状态
            $user_rs = Db::name('user')->where(['id' => $this->auth->id])->setField('is_auth', 2);
            if ($user_rs === false) {
                Db::rollback();
                $this->error('您的网络开小差啦8~');
            }

            Db::commit();
            /*$return_data = [
                'face_id' => $user_auth['certify_id'],
                'order_no' => $user_auth['out_trade_no'],
                'user_id' => (string)$this->auth->id,
                'nonce' => $rs['nonce'],
                'sign' => $rs['sign'],
            ];*/
            $this->success('验证成功');
        } catch (Exception $e) {
            $this->error($e->getMessage());
        }
    }

    //查询真人认证结果
    public function getrealauthresult() {
        $user_auth = Db::name('user_auth')->where(['user_id' => $this->auth->id])->find();
        if (!$user_auth) {
            $this->success('尚未认证');
        }
        if ($user_auth['status'] == 1) {
            $this->success('真人认证通过');
        }
        if (!$user_auth['certify_id']) {
            $this->success('请先进行真人认证');
        }
        $tencentConfig = config('tencent_yun');
        $sercrtId = isset($tencentConfig['SecretId']) ? $tencentConfig['SecretId'] : '';
        $sercrtKey = isset($tencentConfig['SecretKey']) ? $tencentConfig['SecretKey'] : '';
        //获取token
        $token_url = 'https://miniprogram-kyc.tencentcloudapi.com/api/oauth2/access_token?app_id='.$sercrtId.'&secret='.$sercrtKey.'&grant_type=client_credential&version=1.0.0';
        $token_result = file_get_contents($token_url);
        if (!$token_result) {
            $this->error('您的网络开小差啦1~');
        }
        $token_result = json_decode($token_result, true);
        if ($token_result['code'] != 0) {
            $this->error('您的网络开小差啦2~');
        }
        $token = $token_result['access_token'];

        //获取签名鉴权参数ticket
        $ticket_url = 'https://miniprogram-kyc.tencentcloudapi.com/api/oauth2/api_ticket?app_id='.$sercrtId.'&access_token='.$token.'&type=SIGN&version=1.0.0';
        $ticket_result = file_get_contents($ticket_url);
        if (!$ticket_result) {
            $this->error('您的网络开小差啦3~');
        }
        $ticket_result = json_decode($ticket_result, true);
        if ($ticket_result['code'] != 0) {
            $this->error('您的网络开小差啦4~');
        }
        $ticket = $ticket_result['tickets'][0]['value'];

        //获取签名
        $sign_data = [
            'wbappid' => $sercrtId,
            'orderNo'  => $user_auth['out_trade_no'],
            'version' => '1.0.0',
            'ticket'  => $ticket,
            'nonce'   => Random::alnum(32)
        ];//p($sign_data);
        asort($sign_data); //p($sign_data);//排序
        $sign_string = join('', $sign_data);//p($sign_string);
        $sign = sha1($sign_string);//p($sign);

        //人脸核身结果查询
        $url = 'https://miniprogram-kyc.tencentcloudapi.com/api/v2/base/queryfacerecord?orderNo=' . $user_auth['out_trade_no'];
        $data = [
            'appId' => $sercrtId,
            'version' => '1.0.0',
            'nonce' => $sign_data['nonce'],
            'orderNo' => $user_auth['out_trade_no'],
            'sign' => $sign
        ];

        $rs = curl_post($url,json_encode($data, 320), ['Content-Type: application/json']);
        if (!$rs) {
            $this->error('您的网络开小差啦5~');
        }
        $rs = json_decode($rs, true);
        if (!$rs || $rs['code'] != 0) {
            $this->error($rs['msg']);
        }
        if ($rs['result']['liveRate'] >= 90 && $rs['result']['similarity'] >= 90) {
            $edit_data['status'] = 2;
            $msg = '真人认证成功';
        } else {
            $edit_data['status'] = -1;
            $edit_data['certify_id'] = '';
            $edit_data['out_trade_no'] = '';
            $msg = '真人认证失败';
        }

        $edit_data['updatetime'] = time();
        //开启事务
        Db::startTrans();
        //修改认证信息
        $result = Db::name('user_auth')->where(['user_id' => $this->auth->id, 'status' => $user_auth['status']])->setField($edit_data);
        if (!$result) {
            Db::rollback();
            $this->error('查询认证结果失败2');
        }
        //修改用户信息
        $rs = Db::name('user')->where(['id' => $this->auth->id])->setField('is_auth', $edit_data['status']);
        if (!$rs) {
            Db::rollback();
            $this->error('查询认证结果失败3');
        }
        if ($edit_data['status'] == 2) { //通过
            //tag任务赠送金币
            //真人认证奖励
            /*$task_rs = \app\common\model\TaskLog::tofinish($this->auth->id,20);
            if($task_rs === false){
                Db::rollback();
                $this->error('完成任务赠送奖励失败');
            }*/
            //系统消息
            $msg_id = \app\common\model\Message::addMessage($this->auth->id,'真人认证','真人认证已经审核通过');
        } else {
            //系统消息
            $msg_id = \app\common\model\Message::addMessage($this->auth->id,'真人认证','真人认证审核不通过');
        }

        Db::commit();
        $this->success($msg);
    }

    /**
     * 微信注册来的，绑定手机号
     *
     * @ApiMethod (POST)
     * @param string $mobile   手机号
     * @param string $captcha 验证码
     */
    public function bindmobile()
    {
        Db::startTrans();
        try {
            $code = $this->request->param('code');
            $mobile = $this->request->param('mobile');
            $captcha = $this->request->param('captcha');

            if (!$mobile || !$captcha || !$code) {
                throw new Exception(__('Invalid parameters'));
            }
            if (!Validate::regex($mobile, "^1\d{10}$")) {
                throw new Exception(__('Mobile is incorrect'));
            }
            $result = Sms::check($mobile, $captcha, 'changemobile');
            if (!$result) {
                throw new Exception(__('Captcha is incorrect'));
            }
            $where['mobile'] = $mobile;
            $userData = model('User')->where($where)->find();//老用户
            $wechatCodeWhere['code'] = $code;
            $wechatCode = Db::name('wechat_code')->where($wechatCodeWhere)->find();
            if (empty($wechatCode)) {
                throw new Exception('请先微信登录');
            }
            if (!empty($userData)) {
                if (empty($userData['openid'])) {
                    model('User')->update(['openid' => $wechatCode['openid']],$where);//老用户更新openid
                } else {
                    if ($userData['openid'] != $wechatCode['openid']) {
                        throw new Exception('该手机号已被其他用户绑定');
                    }
                }
                $ret = $this->auth->direct($userData['id']);
            } else {
                $extend = [
                    'openid' => $wechatCode['openid'],
                ];
                $ret = $this->auth->register($mobile, Random::alnum(), $mobile, $extend);
            }
            if (!$ret) {
                throw new Exception($this->auth->getError());
            }

            Sms::flush($mobile, 'changemobile');
            Db::commit();
            $this->success('success',$this->userInfo('return'));
        } catch (Exception $e) {
            Db::rollback();
            $this->error($e->getMessage());
        }
    }

    /**
     * 手机注册来的，绑定微信
     *
     * @ApiMethod (POST)
     * @param string $wechat_openid
     */
    public function bindopenid()
    {
        Db::startTrans();
        try {
            $code =  $this->request->param('code','');
            if(!$code){
                throw new Exception(__('Invalid parameters'));
            }
            //微信
            $wechat = new Wechat();
            $openid = $wechat->getOpenid($code);

            if(!$openid){
                throw new Exception('openid获取失败');
            }

            $user = model('User')->find($this->auth->id);
            if(!empty($user['openid']) && $openid != $user['openid']){
                throw new Exception('已经绑定了微信号');
            }
            $otherUserWhere['openid'] = $openid;
            $otherUserWhere['id'] = ['neq',$this->auth->id];
            $otherUser = model('User')->where($otherUserWhere)->find();
            if (!empty($otherUser)) {
                throw new Exception('该微信已被其他用户绑定过');
            }

            $user->openid = $openid;
            $userRes = $user->save();
            if (!$userRes) {
                throw new Exception('绑定微信失败');
            }
            Db::commit();
            $this->success('success',$this->userInfo('return'));
        } catch (Exception $e) {
            Db::rollback();
            $this->error($e->getMessage());
        }
    }

    //用户详细资料
    public function userInfo($type = 1){
        $info = $this->auth->getUserinfo();
        if($type == 'return'){
            return $info;
        }
        $this->success(__('success'),$info);
    }
    
    /**
     * 微信解绑
     * @return void
     */
    public function clearopenid()
    {
        try {
            $userId = $this->auth->id;
            $where['id'] = $userId;
            $data['openid'] = '';
            $user = model('User')->update($data,$where);
            
            $this->success('解绑成功');
        } catch (Exception $e) {
            $this->error($e->getMessage());
        }
    }
}