course-site/app/Http/Controllers/Api/Base/AuthController.php

<?php

/*
 * This file is part of the Jiannei/lumen-api-starter.
 *
 * (c) Jiannei <longjian.huang@foxmail.com>
 *
 * This source file is subject to the MIT license that is bundled
 * with this source code in the file LICENSE.
 */

namespace App\Http\Controllers\Api\Base;

use App\Http\Controllers\Controller;
use App\Http\Middleware\SingleLoginLimit;
use App\Repositories\Enums\ModelStatusEnum;
use App\Repositories\Enums\ResponseCodeEnum;
use App\Repositories\Models\Base\User;
use App\Repositories\Transformers\Base\UserTransformer;
use App\Support\Traits\LoginLimit;
use Carbon\Carbon;
use Illuminate\Http\Request;
use Illuminate\Support\Facades\Cache;
use Illuminate\Support\Facades\Hash;
use Jiannei\Response\Laravel\Support\Facades\Response;

class AuthController extends Controller
{
    use LoginLimit;

    /**
     * Create a new controller instance.
     */
    public function __construct()
    {
//        $this->middleware('throttle:10,1', ['only' => ['login', 'me']]);
    }

    /**
     * 登录
     * Author: Mead
     */
    public function login(Request $request)
    {
        $this->validate($request, [
            'username' => 'required',
            'password' => 'required|min:6'
        ]);

        $credentials = request(['username', 'password']);
        $credentials['password'] = base64_decode($credentials['password']);
        $credentials['status'] = ModelStatusEnum::OK;

        $username = $credentials['username'];
        $msg = $this->isCanLogin($request, $username, 'api');
        if ($msg) {
            return Response::fail($msg, ResponseCodeEnum::SERVICE_LOGIN_ERROR);
        }

        if (!$token = auth()->guard('api')->attempt($credentials)) {
            $this->storeLoginLog($request, $username, 'api');
            return Response::fail('账号或密码不对！', ResponseCodeEnum::SERVICE_LOGIN_ERROR);
        }

        $user = auth('api')->user();

        $this->clearLoginLogs($request, $username, 'api');
        SingleLoginLimit::setToken('api', $user->id, $token);

        $user = (new UserTransformer())->transform($user);
        $permissions = login_user()->getAllPermissions()->pluck('name');
        return Response::success(compact('token', 'user', 'permissions'));
    }

    /**
     * 退出
     * @return mixed
     * Author: Mead
     */
    public function logout()
    {
        auth('api')->logout();

        return Response::noContent();
    }

    /**
     * 注册
     * Author: Mead
     */
    public function store(Request $request)
    {
        $this->validate($request, [
            'name' => 'required',
//            'turename' => 'required',
            'mobile' => 'required',
            'username' => 'required|min:8|unique:base_users,username',
            'password' => 'required|min:6'
        ]);

        $data = $request->only(['turename', 'mobile', 'username', 'password']);

        $data['password'] = Hash::make($data['password']);

        User::query()->create($data);

        return Response::success(null);
    }

    /**
     * 用户
     * @return \Illuminate\Http\JsonResponse|\Illuminate\Http\Resources\Json\JsonResource
     * Author: Mead
     */
    public function me()
    {
        $me = (new UserTransformer())->transform(User::query()->find(login_user_id()));
        return Response::success($me);
    }

    /**
     * 修改个人信息
     * @param Request $request
     * @return \Illuminate\Http\JsonResponse|\Illuminate\Http\Resources\Json\Resource
     * @throws \Illuminate\Validation\ValidationException
     * Author: Mead
     */
    public function update(Request $request)
    {
        $this->validate($request, [
            'name' => 'required',
            'headimg' => 'sometimes',
            'sex' => 'nullable',
            'email' => 'nullable|email',
            'class' => 'nullable',
            'mobile' => 'nullable|mobile',
            'intro' => 'nullable',
            'personal_signature' => 'nullable',
            'userrate' => 'nullable',
        ]);

        try {
            $data = $request->only(['turename', 'headimg', 'email', 'mobile', 'class', 'intro', 'personal_signature', 'userrate', 'name', 'sex']);
            $re = User::query()->where('id', login_user_id())->update($data);
            if ($re) {
                return Response::success(null);
            }
            return $this->errorFail();
        } catch (\Exception $e) {
            $this->errorStore($e);
        }
    }

    /**
     * 修改密码
     * @param Request $request
     * @return \Illuminate\Http\JsonResponse|\Illuminate\Http\Resources\Json\Resource
     * @throws \Illuminate\Validation\ValidationException
     * Author: Mead
     */
    public function changePassword(Request $request)
    {
        $this->validate($request, [
            'password' => 'required|min:6|confirmed',
        ]);
        $password = $request->get('password');
        $data['password'] = Hash::make($password);
        $re = User::query()->where('id', login_user_id())->update($data);
        if ($re) {
            return Response::success(null);
        }
        return $this->errorFail();
    }

    /**
     * 手机验证码
     * @param Request $request
     * Author: Mead
     */
    public function verificationCode(Request $request)
    {
        $this->validate($request, [
            'mobile' => 'required|mobile',
        ]);

        $mobile = $request->get('mobile');

        $code = rand(1000, 9999);
//        try {
//            app('easy_sms')->send($mobile, [
//                'template' => config('sms.template.verification_code'),
//                'data' => [
//                    'code' => $code
//                ]
//            ]);
//
//        } catch (\Exception $exception) {
//            Log::error($exception);
//            return Response::fail('发送失败');
//        }

        Cache::put("verification_code_{$mobile}", $code, Carbon::now()->addMinutes(5));

        return Response::success($code);
    }

    /**
     * 手机号登录
     * @param Request $request
     * Author: Mead
     */
    public function mobileLogin(Request $request)
    {
        $this->validate($request, [
            'mobile' => 'required|mobile',
            'code' => 'required|size:4',
        ]);

        $mobile = $request->get('mobile');
        $code = $request->get('code');

//        $cache_code = Cache::get("verification_code_{$mobile}", false);
//
//        if ((int)$cache_code !== (int)$code) {
//            return Response::fail('验证码错误');
//        }

        $user = User::query()->where('mobile', $mobile)->with('organization')->select(['id', 'name', 'mobile', 'headimg', 'sex', 'organization_id', 'status'])->where('status', ModelStatusEnum::OK)->orderByDesc('id')->first();
        if (!$user) {
            return Response::fail('找不到该用户');

//            $user = User::query()->create([
//                'name' => '圆圈导航-' . rand(99999, 10000),
//                'mobile' => $mobile,
//            ]);
        }

        $token = auth('api')->login($user);
        $user = (new UserTransformer())->transform($user);
        $permissions = login_user()->getAllPermissions()->pluck('name');
        return Response::success(compact('token', 'user', 'permissions'));
    }

    /**
     * 小程序登录
     * Author: Mead
     */
    public function weappLogin(Request $request)
    {
        $this->validate($request, [
            'appid' => 'required',
            'code' => 'required',
        ]);

        $code = $request->code;
        $appid = $request->appid;

        if ($appid !== config('wechat.mini_program.default.app_id')) {
            return $this->error('app_id is error');
        }

        $response = [];
        try {
//            $miniProgram = Factory::miniProgram(config('wechat'));
            $miniProgram = app('wechat.mini_program');
            $data = $miniProgram->auth->session($code);
        } catch (\Exception $exception) {
            return $this->error('code 不正确,请刷新重试');
        }
        if (isset($data['errcode'])) {
            return $this->error('code 不正确,请刷新重试');
        }

        $user = User::query()->where('credential', $data['openid'])->first();

        //response参数
        $response['session_key'] = $data['session_key'];

        $is_new_user = false;
        if (!$user) {
            //注册用户
            $userInfo['name'] = config('site.userName', '用户') . '-' . rand(10000, 99999);
            $userInfo['credential'] = $data['openid'];
            $user = User::query()->create($userInfo);
            $is_new_user = true;
        }

        $token = auth('api')->login($user);

        $response['token'] = 'Bearer ' . $token;
        $response['exp'] = Carbon::now()->getTimestamp();
        $response['user'] = $user;
        $response['is_new_user'] = $is_new_user;

        $permissions = login_user()->getAllPermissions()->pluck('name');
        $response['permissions'] = $permissions;

        return Response::success($response);
    }

    /**
     *  更新用户基本信息
     * User: Mead
     */
    public function weappUserInfoSync(Request $request)
    {
        $this->validate($request, [
            'nickName' => 'required',
            'gender' => 'required',
        ]);
        try {
            $user = auth('api')->user();

            User::query()->where('id', $user->id)->update([
                'name' => $request->get('nickName', $user->nickname),
                'sex' => $request->get('gender', 0),
//                'country' => $request->get('country', 'China'),
//                'province' => $request->get('province', 'Henan'),
//                'city' => $request->get('city', 'Zhengzhou'),
                'headimg' => $request->get('avatarUrl', config('filesystems.disks.qiniu.url') . '/logo.png') ?? config('filesystems.disks.qiniu.url') . "/logo.png",
//                'language' => $request->get('language', 'zh_CN'),
                'is_sync_info' => 1
            ]);
            $me = (new UserTransformer())->transform(User::query()->where('id', $user->id)->first());
            return Response::success($me);
        } catch (\Exception $exception) {
            return $this->error($exception);
        }
    }

    /**
     * 微信小程序绑定用户手机号
     * @param Request $request
     * @return \Illuminate\Http\JsonResponse|\Illuminate\Http\Resources\Json\Resource|void
     * Author: Mead
     */
    public function weappBindMobile(Request $request)
    {
        $this->validate($request, [
            'session_key' => 'required',
            'iv' => 'required',
            'encryptedData' => 'required',
        ]);
        try {
            //微信解析手机号
            $session = $request->get('session_key');
            $iv = $request->get('iv');
            $encryptedData = $request->get('encryptedData');
            if (!$iv) {
                return $this->error('授权失败');
            }

            $miniProgram = app('wechat.mini_program');
            $decryptedData = $miniProgram->encryptor->decryptData($session, $iv, $encryptedData);
            $mobile = $decryptedData['purePhoneNumber'];

            User::query()->where('id', login_user_id())->update([
                'mobile' => $mobile,
                'is_bind_mobile' => 1
            ]);
            return Response::success(null);
        } catch (\Exception $exception) {
            return $this->exception($exception);
        }
    }

}