toupiaoh5_hyperf/app/Middleware/ApiAgent.php

<?php

declare(strict_types=1);

namespace App\Middleware;

use App\Master\Enum\RedisKeyEnum;
use App\Model\Arts\UserModel;
use App\Service\SystemService;
use App\Utils\AppResult;
use App\Utils\Control\ActionUtil;
use App\Utils\Control\AuthUser;
use App\Utils\Encrypt\Token;
use App\Utils\Encrypt\TokenUtil;
use App\Utils\LogUtil;
use App\Utils\RedisUtil;
use Hyperf\Coroutine\Coroutine;
use Hyperf\HttpServer\Contract\RequestInterface;
use Hyperf\HttpServer\Contract\ResponseInterface as HttpResponse;
use Hyperf\HttpServer\Router\Dispatched;
use Psr\Container\ContainerInterface;
use Psr\Http\Message\ResponseInterface;
use Psr\Http\Message\ServerRequestInterface;
use Psr\Http\Server\MiddlewareInterface;
use Psr\Http\Server\RequestHandlerInterface;

class ApiAgent implements MiddlewareInterface
{
    // 日志模块名称
    const LOG_MODULE = 'ApiAgent-Middleware-Log';
    const LOG_ACTION = 'verifyToken';
    const PROJECT    = 'Api';

    /**
     * @var ContainerInterface
     */
    protected $container;

    /**
     * @var RequestInterface
     */
    protected $request;

    /**
     * @var HttpResponse
     */
    protected $response;

    protected $action;

    public function __construct(ContainerInterface $container, HttpResponse $response, RequestInterface $request)
    {
        $this->container = $container;
        $this->response  = $response;
        $this->request   = $request;
    }

    public function process(ServerRequestInterface $request, RequestHandlerInterface $handler): ResponseInterface
    {
        //日志统一写入
        LogUtil::getInstance(self::PROJECT . "/");//设置日志存入通道

        Coroutine::defer(function () {
            LogUtil::close();// 协程结束后统一写入
        });

        $this->action = $action = ActionUtil::actions($request);
        $params = $this->request->all();
        // 记录用户请求参数
        LogUtil::info('请求参数', $action['controller'], $action['action'], $params);

        //接口限流，写到中间件中
        if (!RedisUtil::getInstance(RedisKeyEnum::API_REQUEST_TRAFFIC)->requestLimit("{$action['controller']}/{$action['action']}", 1, 20000)) {
            LogUtil::info('当前访问人数过多，请稍后再试', $action['controller'], $action['action']);
            return $this->response206();
        }

        $token = $this->request->header('token');
        if (empty($token)) $token = $params['token'] ?? '';
        if (!empty($token) && !in_array("{$action['controller']}/{$action['action']}", self::tokenWhiteList())) {
            LogUtil::info('token 验证开始', self::LOG_MODULE, self::LOG_ACTION, (string)$token);

            // 校验token
            if (!$user_id = $this->checkToken($token)){
                return $this->response401();
            }

            // 查询并记录用户信息
            $user = (new UserModel())->authUserInfo($user_id);
            if (!$user) {
                LogUtil::warning('账号不存在', self::LOG_MODULE, self::LOG_ACTION, ['user_id', $user_id]);
                return $this->response401();
            }

            LogUtil::info('用户编号', $action['controller'], $action['action'], $user_id);
            AuthUser::getInstance()->set(json_decode(json_encode($user), true));
        }

        return $handler->handle($request);
    }

    /**
     * 校验token
     *
     * @param string $token
     * @return false|int
     */
    public function checkToken(string $token): false|int
    {
        $checkToken = Token::get($token);
        if (!$checkToken) {
            LogUtil::warning('token 验证失败', self::LOG_MODULE, self::LOG_ACTION, $checkToken);
            return false;
        }

        //验证参数信息
        if (empty($checkToken['user_id'])) {
            LogUtil::warning('token 参数不全', self::LOG_MODULE, self::LOG_ACTION, $checkToken);
            return false;
        }

        return (int)$checkToken['user_id'];
    }

    /**
     * 令牌失效
     *
     * @param string $message
     * @param $result
     * @return ResponseInterface
     */
    private function response401(string $message = '令牌失效，请稍后重试！', $result = null): ResponseInterface
    {
        // 记录令牌校验
        $action = $this->action;
        LogUtil::info($message, $action['controller'], $action['action'], $result);
        return AppResult::response401($message, $result);
    }

    /**
     * 请求频繁
     *
     * @param string $message
     * @param $result
     * @return ResponseInterface
     */
    private function response206(string $message = '当前访问人数过多，请稍后再试！', $result = null): ResponseInterface
    {
        // 记录令牌校验
        $action = $this->action;
        LogUtil::info($message, $action['controller'], $action['action'], $result);
        return AppResult::response206($message, $result);
    }

    /**
     * token校验黑名单
     * @return string[]
     */
    public function tokenWhiteList(): array
    {
        return [
            'v1/Common/PassportController/login',
            'v1/Common/PassportController/wxLogin',
        ];
    }
}