Auth.php 20 KB

123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118119120121122123124125126127128129130131132133134135136137138139140141142143144145146147148149150151152153154155156157158159160161162163164165166167168169170171172173174175176177178179180181182183184185186187188189190191192193194195196197198199200201202203204205206207208209210211212213214215216217218219220221222223224225226227228229230231232233234235236237238239240241242243244245246247248249250251252253254255256257258259260261262263264265266267268269270271272273274275276277278279280281282283284285286287288289290291292293294295296297298299300301302303304305306307308309310311312313314315316317318319320321322323324325326327328329330331332333334335336337338339340341342343344345346347348349350351352353354355356357358359360361362363364365366367368369370371372373374375376377378379380381382383384385386387388389390391392393394395396397398399400401402403404405406407408409410411412413414415416417418419420421422423424425426427428429430431432433434435436437438439440441442443444445446447448449450451452453454455456457458459460461462463464465466467468469470471472473474475476477478479480481482483484485486487488489490491492493494495496497498499500501502503504505506507508509510511512513514515516517518519520521522523524525526527528529530531532533534535536537538539540541542543544545546547548549550551552553554555556557558559560561562563564565566567568569570571572573574575576577578579580581582583584585586587588589590591592593594595596597598599600601602603604605606607608609610611612613614615616617618619620621622623624625626627628629630631632633634635636637638639640641642643644645646647648649650651652653654655656657658659660661662663664665666667668669670671672673674675676677678679680681682683684685686687688689690691692693694695696697698699700701702703704705706707708709710711712713714715716717718719720721
  1. <?php
  2. namespace app\common\library;
  3. use app\common\model\User;
  4. use app\common\model\UserRule;
  5. use fast\Random;
  6. use think\Config;
  7. use think\Db;
  8. use think\Exception;
  9. use think\Hook;
  10. use think\Request;
  11. use think\Validate;
  12. class Auth
  13. {
  14. protected static $instance = null;
  15. protected $_error = '';
  16. protected $_logined = false;
  17. protected $_user = null;
  18. protected $_token = '';
  19. //Token默认有效时长
  20. protected $keeptime = 2592000;
  21. protected $requestUri = '';
  22. protected $rules = [];
  23. //默认配置
  24. protected $config = [];
  25. protected $options = [];
  26. protected $allowFields = ['id', 'username', 'nickname', 'mobile', 'avatar', 'gender', 'createtime' ,'idcard_status'];
  27. public function __construct($options = [])
  28. {
  29. if ($config = Config::get('user')) {
  30. $this->config = array_merge($this->config, $config);
  31. }
  32. $this->options = array_merge($this->config, $options);
  33. }
  34. /**
  35. *
  36. * @param array $options 参数
  37. * @return Auth
  38. */
  39. public static function instance($options = [])
  40. {
  41. if (is_null(self::$instance)) {
  42. self::$instance = new static($options);
  43. }
  44. return self::$instance;
  45. }
  46. /**
  47. * 获取User模型
  48. * @return User
  49. */
  50. public function getUser()
  51. {
  52. return $this->_user;
  53. }
  54. /**
  55. * 兼容调用user模型的属性
  56. *
  57. * @param string $name
  58. * @return mixed
  59. */
  60. public function __get($name)
  61. {
  62. return $this->_user ? $this->_user->$name : null;
  63. }
  64. /**
  65. * 兼容调用user模型的属性
  66. */
  67. public function __isset($name)
  68. {
  69. return isset($this->_user) ? isset($this->_user->$name) : false;
  70. }
  71. /**
  72. * 根据Token初始化
  73. *
  74. * @param string $token Token
  75. * @return boolean
  76. */
  77. public function init($token)
  78. {
  79. if ($this->_logined) {
  80. return true;
  81. }
  82. if ($this->_error) {
  83. return false;
  84. }
  85. $data = Token::get($token);
  86. if (!$data) {
  87. return false;
  88. }
  89. $user_id = intval($data['user_id']);
  90. if ($user_id > 0) {
  91. $user = User::get($user_id);
  92. if (!$user) {
  93. $this->setError('Account not exist');
  94. return false;
  95. }
  96. if ($user['status'] == -1) {
  97. $this->setError('账号已注销');
  98. return false;
  99. }
  100. if ($user['status'] != 1) {
  101. $this->setError('Account is locked');
  102. return false;
  103. }
  104. $this->_user = $user;
  105. $this->_logined = true;
  106. $this->_token = $token;
  107. //初始化成功的事件
  108. Hook::listen("user_init_successed", $this->_user);
  109. return true;
  110. } else {
  111. $this->setError('You are not logged in');
  112. return false;
  113. }
  114. }
  115. /**
  116. * 注册用户
  117. *
  118. * @param string $username 用户名
  119. * @param string $password 密码
  120. * @param string $email 邮箱
  121. * @param string $mobile 手机号
  122. * @param array $extend 扩展参数
  123. * @return boolean
  124. */
  125. public function register($username, $password, $email = '', $mobile = '', $extend = [])
  126. {
  127. // 检测用户名、昵称、邮箱、手机号是否存在
  128. /*if (User::getByUsername($username)) {
  129. $this->setError('Username already exist');
  130. return false;
  131. }
  132. if (User::getByNickname($username)) {
  133. $this->setError('Nickname already exist');
  134. return false;
  135. }
  136. if ($email && User::getByEmail($email)) {
  137. $this->setError('Email already exist');
  138. return false;
  139. }*/
  140. if(empty($mobile)){
  141. $this->setError('手机号必填');
  142. return false;
  143. }
  144. if ($mobile && User::getByMobile($mobile)) {
  145. $this->setError('Mobile already exist');
  146. return false;
  147. }
  148. $ip = request()->ip();
  149. $time = time();
  150. $data = [
  151. // 'username' => $username,
  152. // 'password' => $password,
  153. // 'email' => $email,
  154. 'mobile' => $mobile,
  155. // 'level' => 1,
  156. // 'score' => 0,
  157. 'avatar' => config('site.user_default_avatar'),
  158. ];
  159. $params = array_merge($data, [
  160. // 'nickname' => preg_match("/^1[3-9]{1}\d{9}$/", $username) ? substr_replace($username, '****', 3, 4) : $username,
  161. 'nickname' => get_rand_nick_name(),
  162. // 'salt' => Random::alnum(),
  163. 'jointime' => $time,
  164. 'joinip' => $ip,
  165. 'logintime' => $time,
  166. 'loginip' => $ip,
  167. 'prevtime' => $time,
  168. 'status' => 1
  169. ]);
  170. // $params['password'] = $this->getEncryptPassword($password, $params['salt']);
  171. $params = array_merge($params, $extend);
  172. //账号注册时需要开启事务,避免出现垃圾数据
  173. Db::startTrans();
  174. try {
  175. $user = User::create($params, true);
  176. $this->_user = User::get($user->id);
  177. $this->_user->username = 'u' . (10000 + $user->id);
  178. $this->_user->save();
  179. //设置Token
  180. $this->_token = Random::uuid();
  181. Token::set($this->_token, $user->id, $this->keeptime);
  182. //设置登录状态
  183. $this->_logined = true;
  184. //注册钱包
  185. $wallet_id = Db::name('user_wallet')->insertGetId(['user_id'=>$user->id]);
  186. if(!$wallet_id){
  187. $this->setError('注册用户失败');
  188. Db::rollback();
  189. return false;
  190. }
  191. //[环信]注册用户。忽略失败
  192. /*$easemob = new Easemob();
  193. $rs = $easemob->user_create('user'.$user->id);
  194. if($rs === false){
  195. $this->setError('注册用户失败');
  196. Db::rollback();
  197. return false;
  198. }*/
  199. //腾讯im注册用户
  200. $tenim = new Tenim();
  201. $rs = $tenim->register('user'.$user->id,$params['nickname'],'');
  202. if($rs !== true){
  203. $this->setError($rs);
  204. Db::rollback();
  205. return false;
  206. }
  207. //注册成功的事件
  208. Hook::listen("user_register_successed", $this->_user, $data);
  209. Db::commit();
  210. } catch (Exception $e) {
  211. $this->setError($e->getMessage());
  212. Db::rollback();
  213. return false;
  214. }
  215. return true;
  216. }
  217. public function tv_register($tv_userid = '',$extend = [])
  218. {
  219. if(empty($tv_userid)){
  220. $this->setError('盒子用户id必填');
  221. return false;
  222. }
  223. if ($tv_userid && User::getByTvUserid($tv_userid)) {
  224. $this->setError('tv user already exist');
  225. return false;
  226. }
  227. $ip = request()->ip();
  228. $time = time();
  229. $data = [
  230. 'tv_userid' => $tv_userid,
  231. 'nickname' => '电视盒子用户',
  232. 'comefrom' => 2,
  233. 'avatar' => config('site.user_default_avatar'),
  234. ];
  235. $params = array_merge($data, [
  236. 'jointime' => $time,
  237. 'joinip' => $ip,
  238. 'logintime' => $time,
  239. 'loginip' => $ip,
  240. 'prevtime' => $time,
  241. 'status' => 1
  242. ]);
  243. $params = array_merge($params, $extend);
  244. //账号注册时需要开启事务,避免出现垃圾数据
  245. Db::startTrans();
  246. try {
  247. $user = User::create($params, true);
  248. $this->_user = User::get($user->id);
  249. $this->_user->username = 'u' . (10000 + $user->id);
  250. $this->_user->save();
  251. //设置Token
  252. $this->_token = Random::uuid();
  253. Token::set($this->_token, $user->id, $this->keeptime);
  254. //设置登录状态
  255. $this->_logined = true;
  256. //注册钱包
  257. $wallet_id = Db::name('user_wallet')->insertGetId(['user_id'=>$user->id]);
  258. if(!$wallet_id){
  259. $this->setError('注册用户失败');
  260. Db::rollback();
  261. return false;
  262. }
  263. //[环信]注册用户。忽略失败
  264. /*$easemob = new Easemob();
  265. $rs = $easemob->user_create('user'.$user->id);
  266. if($rs === false){
  267. $this->setError('注册用户失败');
  268. Db::rollback();
  269. return false;
  270. }*/
  271. //腾讯im注册用户
  272. $tenim = new Tenim();
  273. $rs = $tenim->register('user'.$user->id,$params['nickname'],'');
  274. if($rs !== true){
  275. $this->setError($rs);
  276. Db::rollback();
  277. return false;
  278. }
  279. //注册成功的事件
  280. Hook::listen("user_register_successed", $this->_user, $data);
  281. Db::commit();
  282. } catch (Exception $e) {
  283. $this->setError($e->getMessage());
  284. Db::rollback();
  285. return false;
  286. }
  287. return true;
  288. }
  289. /**
  290. * 用户登录
  291. *
  292. * @param string $account 账号,用户名、邮箱、手机号
  293. * @param string $password 密码
  294. * @return boolean
  295. */
  296. public function login($account, $password)
  297. {
  298. // $field = Validate::is($account, 'email') ? 'email' : (Validate::regex($account, '/^1\d{10}$/') ? 'mobile' : 'username');
  299. $field = 'mobile';
  300. $user = User::get([$field => $account]);
  301. if (!$user) {
  302. $this->setError('Account is incorrect');
  303. return false;
  304. }
  305. if ($user->status == -1) {
  306. $this->setError('账户已注销');
  307. return false;
  308. }
  309. if ($user->status != 1) {
  310. $this->setError('Account is locked');
  311. return false;
  312. }
  313. if ($user->password != $this->getEncryptPassword($password, $user->salt)) {
  314. $this->setError('Password is incorrect');
  315. return false;
  316. }
  317. //直接登录会员
  318. return $this->direct($user->id);
  319. }
  320. /**
  321. * 退出
  322. *
  323. * @return boolean
  324. */
  325. public function logout()
  326. {
  327. if (!$this->_logined) {
  328. $this->setError('You are not logged in');
  329. return false;
  330. }
  331. //设置登录标识
  332. $this->_logined = false;
  333. //删除Token
  334. Token::delete($this->_token);
  335. //退出成功的事件
  336. Hook::listen("user_logout_successed", $this->_user);
  337. return true;
  338. }
  339. /**
  340. * 修改密码
  341. * @param string $newpassword 新密码
  342. * @param string $oldpassword 旧密码
  343. * @param bool $ignoreoldpassword 忽略旧密码
  344. * @return boolean
  345. */
  346. public function changepwd($newpassword, $oldpassword = '', $ignoreoldpassword = false)
  347. {
  348. if (!$this->_logined) {
  349. $this->setError('You are not logged in');
  350. return false;
  351. }
  352. //判断旧密码是否正确
  353. if ($this->_user->password == $this->getEncryptPassword($oldpassword, $this->_user->salt) || $ignoreoldpassword) {
  354. Db::startTrans();
  355. try {
  356. $salt = Random::alnum();
  357. $newpassword = $this->getEncryptPassword($newpassword, $salt);
  358. $this->_user->save(['loginfailure' => 0, 'password' => $newpassword, 'salt' => $salt]);
  359. Token::delete($this->_token);
  360. //修改密码成功的事件
  361. Hook::listen("user_changepwd_successed", $this->_user);
  362. Db::commit();
  363. } catch (Exception $e) {
  364. Db::rollback();
  365. $this->setError($e->getMessage());
  366. return false;
  367. }
  368. return true;
  369. } else {
  370. $this->setError('Password is incorrect');
  371. return false;
  372. }
  373. }
  374. /**
  375. * 直接登录账号
  376. * @param int $user_id
  377. * @return boolean
  378. */
  379. public function direct($user_id)
  380. {
  381. $user = User::get($user_id);
  382. if ($user) {
  383. Db::startTrans();
  384. try {
  385. $ip = request()->ip();
  386. $time = time();
  387. //判断连续登录和最大连续登录
  388. if ($user->logintime < \fast\Date::unixtime('day')) {
  389. // $user->successions = $user->logintime < \fast\Date::unixtime('day', -1) ? 1 : $user->successions + 1;
  390. // $user->maxsuccessions = max($user->successions, $user->maxsuccessions);
  391. }
  392. $user->prevtime = $user->logintime;
  393. //记录本次登录的IP和时间
  394. $user->loginip = $ip;
  395. $user->logintime = $time;
  396. //重置登录失败次数
  397. $user->loginfailure = 0;
  398. $user->save();
  399. $this->_user = $user;
  400. $this->_token = Random::uuid();
  401. Token::set($this->_token, $user->id, $this->keeptime);
  402. $this->_logined = true;
  403. //登录成功的事件
  404. Hook::listen("user_login_successed", $this->_user);
  405. Db::commit();
  406. } catch (Exception $e) {
  407. Db::rollback();
  408. $this->setError($e->getMessage());
  409. return false;
  410. }
  411. return true;
  412. } else {
  413. return false;
  414. }
  415. }
  416. /**
  417. * 检测是否是否有对应权限
  418. * @param string $path 控制器/方法
  419. * @param string $module 模块 默认为当前模块
  420. * @return boolean
  421. */
  422. public function check($path = null, $module = null)
  423. {
  424. if (!$this->_logined) {
  425. return false;
  426. }
  427. $ruleList = $this->getRuleList();
  428. $rules = [];
  429. foreach ($ruleList as $k => $v) {
  430. $rules[] = $v['name'];
  431. }
  432. $url = ($module ? $module : request()->module()) . '/' . (is_null($path) ? $this->getRequestUri() : $path);
  433. $url = strtolower(str_replace('.', '/', $url));
  434. return in_array($url, $rules);
  435. }
  436. /**
  437. * 判断是否登录
  438. * @return boolean
  439. */
  440. public function isLogin()
  441. {
  442. if ($this->_logined) {
  443. return true;
  444. }
  445. return false;
  446. }
  447. /**
  448. * 获取当前Token
  449. * @return string
  450. */
  451. public function getToken()
  452. {
  453. return $this->_token;
  454. }
  455. public function getUserinfo_simple(){
  456. $userinfo = Token::get($this->_token);
  457. return $userinfo;
  458. }
  459. /**
  460. * 获取会员基本信息
  461. */
  462. public function getUserinfo()
  463. {
  464. $data = $this->_user->toArray();
  465. $allowFields = $this->getAllowFields();
  466. $userinfo = array_intersect_key($data, array_flip($allowFields));
  467. $userinfo = array_merge($userinfo, Token::get($this->_token));
  468. $userinfo['avatar'] = localpath_to_netpath($userinfo['avatar']);
  469. //实名信息
  470. $userinfo['realname'] = '';
  471. $realname = Db::name('user_idconfirm')->where('user_id',$this->id)->where('status',1)->value('realname');
  472. if(!empty($realname)){
  473. $userinfo['realname'] = $realname;
  474. }
  475. //待审核好友申请
  476. $userinfo['friend_apply_number'] = Db::name('friend_apply')->where('to_user_id',$this->id)->where('status',0)->count();
  477. return $userinfo;
  478. }
  479. /**
  480. * 获取会员组别规则列表
  481. * @return array|bool|\PDOStatement|string|\think\Collection
  482. */
  483. public function getRuleList()
  484. {
  485. if ($this->rules) {
  486. return $this->rules;
  487. }
  488. $group = $this->_user->group;
  489. if (!$group) {
  490. return [];
  491. }
  492. $rules = explode(',', $group->rules);
  493. $this->rules = UserRule::where('status', 1)->where('id', 'in', $rules)->field('id,pid,name,title,ismenu')->select();
  494. return $this->rules;
  495. }
  496. /**
  497. * 获取当前请求的URI
  498. * @return string
  499. */
  500. public function getRequestUri()
  501. {
  502. return $this->requestUri;
  503. }
  504. /**
  505. * 设置当前请求的URI
  506. * @param string $uri
  507. */
  508. public function setRequestUri($uri)
  509. {
  510. $this->requestUri = $uri;
  511. }
  512. /**
  513. * 获取允许输出的字段
  514. * @return array
  515. */
  516. public function getAllowFields()
  517. {
  518. return $this->allowFields;
  519. }
  520. /**
  521. * 设置允许输出的字段
  522. * @param array $fields
  523. */
  524. public function setAllowFields($fields)
  525. {
  526. $this->allowFields = $fields;
  527. }
  528. /**
  529. * 删除一个指定会员
  530. * @param int $user_id 会员ID
  531. * @return boolean
  532. */
  533. public function delete($user_id)
  534. {
  535. $user = User::get($user_id);
  536. if (!$user) {
  537. return false;
  538. }
  539. Db::startTrans();
  540. try {
  541. // 删除会员
  542. User::destroy($user_id);
  543. // 删除会员指定的所有Token
  544. Token::clear($user_id);
  545. Hook::listen("user_delete_successed", $user);
  546. Db::commit();
  547. } catch (Exception $e) {
  548. Db::rollback();
  549. $this->setError($e->getMessage());
  550. return false;
  551. }
  552. return true;
  553. }
  554. /**
  555. * 获取密码加密后的字符串
  556. * @param string $password 密码
  557. * @param string $salt 密码盐
  558. * @return string
  559. */
  560. public function getEncryptPassword($password, $salt = '')
  561. {
  562. return md5(md5($password) . $salt);
  563. }
  564. /**
  565. * 检测当前控制器和方法是否匹配传递的数组
  566. *
  567. * @param array $arr 需要验证权限的数组
  568. * @return boolean
  569. */
  570. public function match($arr = [])
  571. {
  572. $request = Request::instance();
  573. $arr = is_array($arr) ? $arr : explode(',', $arr);
  574. if (!$arr) {
  575. return false;
  576. }
  577. $arr = array_map('strtolower', $arr);
  578. // 是否存在
  579. if (in_array(strtolower($request->action()), $arr) || in_array('*', $arr)) {
  580. return true;
  581. }
  582. // 没找到匹配
  583. return false;
  584. }
  585. /**
  586. * 设置会话有效时间
  587. * @param int $keeptime 默认为永久
  588. */
  589. public function keeptime($keeptime = 0)
  590. {
  591. $this->keeptime = $keeptime;
  592. }
  593. /**
  594. * 渲染用户数据
  595. * @param array $datalist 二维数组
  596. * @param mixed $fields 加载的字段列表
  597. * @param string $fieldkey 渲染的字段
  598. * @param string $renderkey 结果字段
  599. * @return array
  600. */
  601. public function render(&$datalist, $fields = [], $fieldkey = 'user_id', $renderkey = 'userinfo')
  602. {
  603. $fields = !$fields ? ['id', 'nickname', 'level', 'avatar'] : (is_array($fields) ? $fields : explode(',', $fields));
  604. $ids = [];
  605. foreach ($datalist as $k => $v) {
  606. if (!isset($v[$fieldkey])) {
  607. continue;
  608. }
  609. $ids[] = $v[$fieldkey];
  610. }
  611. $list = [];
  612. if ($ids) {
  613. if (!in_array('id', $fields)) {
  614. $fields[] = 'id';
  615. }
  616. $ids = array_unique($ids);
  617. $selectlist = User::where('id', 'in', $ids)->column($fields);
  618. foreach ($selectlist as $k => $v) {
  619. $list[$v['id']] = $v;
  620. }
  621. }
  622. foreach ($datalist as $k => &$v) {
  623. $v[$renderkey] = $list[$v[$fieldkey]] ?? null;
  624. }
  625. unset($v);
  626. return $datalist;
  627. }
  628. /**
  629. * 设置错误信息
  630. *
  631. * @param string $error 错误信息
  632. * @return Auth
  633. */
  634. public function setError($error)
  635. {
  636. $this->_error = $error;
  637. return $this;
  638. }
  639. /**
  640. * 获取错误信息
  641. * @return string
  642. */
  643. public function getError()
  644. {
  645. return $this->_error ? __($this->_error) : '';
  646. }
  647. }