fastadmin_tailored/addons/cos/controller/Index.php

<?php

namespace addons\cos\controller;

use addons\cos\library\Auth;
use app\common\exception\UploadException;
use app\common\library\Upload;
use app\common\model\Attachment;
use Qcloud\Cos\Client;
use Qcloud\Cos\Signature;
use think\addons\Controller;
use think\Config;

/**
 * COS云储存
 *
 */
class Index extends Controller
{
    protected $cosConfig = [];

    public function _initialize()
    {
        //跨域检测
        check_cors_request();

        parent::_initialize();
        Config::set('default_return_type', 'json');

        $config = get_addon_config('cos');
        $this->cosConfig = array(
            'region'      => $config['region'],
            'schema'      => 'https', //协议头部，默认为http
            'credentials' => array(
                'secretId'  => $config['secretId'],
                'secretKey' => $config['secretKey']
            )
        );
    }

    public function index()
    {
        Config::set('default_return_type', 'html');
        $this->error("当前插件暂无前台页面");
    }

    public function params()
    {
        $this->check();

        $config = get_addon_config('cos');
        $name = $this->request->post('name');
        $md5 = $this->request->post('md5');
        $chunk = $this->request->post('chunk');
        $name = xss_clean($name);

        // 检查文件后缀
        $extension = strtolower(pathinfo($name, PATHINFO_EXTENSION));
        $allowedExtensions = explode(',', strtolower($config['mimetype']));
        if (!in_array($extension, $allowedExtensions) || in_array($extension, ['php', 'html', 'htm', 'phar', 'phtml']) || preg_match("/^php(.*)/i", $extension)) {
            $this->error('不允许的文件类型');
        }

        // 检查文件大小
        $fileSize = $this->request->post('size');
        preg_match('/([0-9\.]+)(\w+)/', $config['maxsize'], $matches);
        $configMaxSize = $matches ? $matches[1] : $config['maxsize'];
        $type = $matches ? strtolower($matches[2]) : 'b';
        $typeDict = ['b' => 0, 'k' => 1, 'kb' => 1, 'm' => 2, 'mb' => 2, 'gb' => 3, 'g' => 3];
        $maxSize = (int)($configMaxSize * pow(1024, $typeDict[$type] ?? 0));
        if ($fileSize > $maxSize) {
            $this->error('文件大小超出限制');
        }

        $key = (new Upload())->getSavekey($config['savekey'], $name, $md5);
        $key = ltrim($key, "/");
        $params = [
            'key' => $key,
            'md5' => $md5
        ];
        if ($chunk) {
            $fileSize = $this->request->post('size');
            $oss = new Client($this->cosConfig);

            $result = $oss->createMultipartUpload(array(
                'Bucket' => $config['bucket'],
                'Key'    => $key,
            ));
            $uploadId = $result['UploadId'];

            $sig = new Signature($config['secretId'], $config['secretKey'], ['signHost' => true]);

            $partSize = $this->request->post("chunksize");
            $i = 0;
            $size_count = $fileSize;
            $values = array();
            while ($size_count > 0) {
                $size_count -= $partSize;
                $values[] = array(
                    $partSize * $i,
                    ($size_count > 0) ? $partSize : ($size_count + $partSize),
                );
                $i++;
            }

            $params['key'] = $key;
            $params['uploadId'] = $uploadId;
            $params['partsAuthorization'] = [];
            $date = gmdate('D, d M Y H:i:s \G\M\T');
            foreach ($values as $index => $part) {
                $partNumber = $index + 1;
                $options = array(
                    'Bucket'     => $config['bucket'],
                    'Key'        => $key,
                    'UploadId'   => $uploadId,
                    'PartNumber' => $partNumber,
                    'Body'       => ''
                );
                $command = $oss->getCommand('uploadPart', $options);
                $request = $oss->commandToRequestTransformer($command);
                $authorization = $sig->createAuthorization($request);

                $params['partsAuthorization'][$index] = $authorization;
            }
            $params['date'] = $date;
        } else {
            if ($config['uploadmode'] == 'client') {
                $expiretime = time() + $config['expire'];
                $expiration = gmdate("Y-m-d\TH:i:s.414\Z", $expiretime);
                $keytime = (time() - 60) . ';' . $expiretime;
                $policy = json_encode([
                    'expiration' => $expiration,
                    'conditions' => [
                        ['q-sign-algorithm' => 'sha1'],
                        ['q-ak' => $config['secretId']],
                        ['q-sign-time' => $keytime],
                        ['content-length-range', 1, $maxSize]
                    ]
                ]);
                $signature = hash_hmac('sha1', sha1($policy), hash_hmac('sha1', $keytime, $config['secretKey']));
                $params = [
                    'key'              => $key,
                    'policy'           => base64_encode($policy),
                    'q-sign-algorithm' => 'sha1',
                    'q-ak'             => $config['secretId'],
                    'q-key-time'       => $keytime,
                    'q-sign-time'      => $keytime,
                    'q-signature'      => $signature
                ];
            }
        }

        $this->success('', null, $params);
    }

    /**
     * 服务器中转上传文件
     * 上传分片
     * 合并分片
     * @param bool $isApi
     */
    public function upload($isApi = false)
    {
        if ($isApi === true) {
            if (!Auth::isModuleAllow()) {
                $this->error("请登录后再进行操作");
            }
        } else {
            $this->check();
        }
        $config = get_addon_config('cos');
        $oss = new Client($this->cosConfig);

        //检测删除文件或附件
        $checkDeleteFile = function ($attachment, $upload, $force = false) use ($config) {
            //如果设定为不备份则删除文件和记录 或 强制删除
            if ((isset($config['serverbackup']) && !$config['serverbackup']) || $force) {
                if ($attachment && !empty($attachment['id'])) {
                    $attachment->delete();
                }
                if ($upload) {
                    //文件绝对路径
                    $filePath = $upload->getFile()->getRealPath() ?: $upload->getFile()->getPathname();
                    @unlink($filePath);
                }
            }
        };

        $chunkid = $this->request->post("chunkid");
        if ($chunkid) {
            $action = $this->request->post("action");
            $chunkindex = $this->request->post("chunkindex/d");
            $chunkcount = $this->request->post("chunkcount/d");
            $filesize = $this->request->post("filesize");
            $filename = $this->request->post("filename");
            $method = $this->request->method(true);
            $key = $this->request->post("key");
            $uploadId = $this->request->post("uploadId");

            if ($action == 'merge') {
                $attachment = null;
                $upload = null;
                //合并分片
                if ($config['uploadmode'] == 'server') {
                    //合并分片文件
                    try {
                        $upload = new Upload();
                        $attachment = $upload->merge($chunkid, $chunkcount, $filename);
                    } catch (UploadException $e) {
                        $this->error($e->getMessage());
                    }
                }

                $etags = $this->request->post("etags/a", []);
                if (count($etags) != $chunkcount) {
                    $checkDeleteFile($attachment, $upload, true);
                    $this->error("分片数据错误");
                }
                $listParts = [];
                for ($i = 0; $i < $chunkcount; $i++) {
                    $listParts[] = array("PartNumber" => $i + 1, "ETag" => $etags[$i]);
                }
                try {
                    $result = $oss->completeMultipartUpload(
                        array(
                            'Bucket'   => $config['bucket'],
                            'Key'      => $key,
                            'UploadId' => $uploadId,
                            'Parts'    => $listParts
                        )
                    );
                } catch (\Exception $e) {
                    $checkDeleteFile($attachment, $upload, true);
                    $this->error($e->getMessage());
                }

                if (!isset($result['Key'])) {
                    $checkDeleteFile($attachment, $upload, true);
                    $this->error("上传失败(1001)");
                } else {
                    $checkDeleteFile($attachment, $upload);
                    $this->success("上传成功", '', ['url' => "/" . $key, 'fullurl' => cdnurl("/" . $key, true)]);
                }
            } else {
                //默认普通上传文件
                $file = $this->request->file('file');
                try {
                    $upload = new Upload($file);
                    $file = $upload->chunk($chunkid, $chunkindex, $chunkcount);
                } catch (UploadException $e) {
                    $this->error($e->getMessage());
                }
                try {
                    $params = array(
                        'Bucket'     => $config['bucket'],
                        'Key'        => $key,
                        'UploadId'   => $uploadId,
                        'PartNumber' => $chunkindex + 1,
                        'Body'       => $file->fread($file->getSize())
                    );
                    $ret = $oss->uploadPart($params);
                    $etag = $ret['ETag'];
                } catch (\Exception $e) {
                    $this->error($e->getMessage());
                }

                $this->success("上传成功", "", [], 3, ['ETag' => $etag]);
            }
        } else {
            $attachment = null;
            //默认普通上传文件
            $file = $this->request->file('file');
            try {
                $upload = new Upload($file);
                $attachment = $upload->upload();
            } catch (UploadException $e) {
                $this->error($e->getMessage());
            }

            //文件绝对路径
            $filePath = $upload->getFile()->getRealPath() ?: $upload->getFile()->getPathname();

            $url = $attachment->url;

            try {
                $ret = $oss->upload($config['bucket'], ltrim($attachment->url, "/"), $upload->getFile());
                //成功不做任何操作
            } catch (\Exception $e) {
                $checkDeleteFile($attachment, $upload, true);
                \think\Log::write($e->getMessage());
                $this->error("上传失败(1002)");
            }
            $checkDeleteFile($attachment, $upload);

            // 记录云存储记录
            $data = $attachment->toArray();
            unset($data['id']);
            $data['storage'] = 'cos';
            Attachment::create($data, true);

            $this->success("上传成功", '', ['url' => $url, 'fullurl' => cdnurl($url, true)]);
        }
        return;
    }

    /**
     * 回调
     */
    public function notify()
    {
        $this->check();
        $config = get_addon_config('cos');
        if ($config['uploadmode'] != 'client') {
            $this->error("无需执行该操作");
        }
        $this->request->filter('trim,strip_tags,htmlspecialchars,xss_clean');

        $size = $this->request->post('size/d');
        $name = $this->request->post('name', '');
        $md5 = $this->request->post('md5', '');
        $type = $this->request->post('type', '');
        $url = $this->request->post('url', '');
        $width = $this->request->post('width/d');
        $height = $this->request->post('height/d');
        $category = $this->request->post('category', '');
        $category = array_key_exists($category, config('site.attachmentcategory') ?? []) ? $category : '';
        $suffix = strtolower(pathinfo($name, PATHINFO_EXTENSION));
        $suffix = $suffix && preg_match("/^[a-zA-Z0-9]+$/", $suffix) ? $suffix : 'file';
        $attachment = Attachment::where('url', $url)->where('storage', 'cos')->find();
        if (!$attachment) {
            $params = array(
                'category'    => $category,
                'admin_id'    => (int)session('admin.id'),
                'user_id'     => (int)$this->auth->id,
                'filesize'    => $size,
                'filename'    => $name,
                'imagewidth'  => $width,
                'imageheight' => $height,
                'imagetype'   => $suffix,
                'imageframes' => 0,
                'mimetype'    => $type,
                'url'         => $url,
                'uploadtime'  => time(),
                'storage'     => 'cos',
                'sha1'        => $md5,
            );
            Attachment::create($params, true);
        }
        $this->success();
    }

    /**
     * 检查签名是否正确或过期
     */
    protected function check()
    {
        $costoken = $this->request->post('costoken', '', 'trim');
        if (!$costoken) {
            $this->error("参数不正确(code:1)");
        }
        $config = get_addon_config('cos');
        list($appId, $sign, $data) = explode(':', $costoken);
        if (!$appId || !$sign || !$data) {
            $this->error("参数不正确(code:2)");
        }
        if ($appId !== $config['appId']) {
            $this->error("参数不正确(code:3)");
        }
        if ($sign !== base64_encode(hash_hmac('sha1', base64_decode($data), $config['secretKey'], true))) {
            $this->error("签名不正确");
        }
        $json = json_decode(base64_decode($data), true);
        if ($json['deadline'] < time()) {
            $this->error("请求已经超时");
        }
    }
}