DiverseYouthNightSchool/application/api/controller/User.php

<?php

namespace app\api\controller;

use addons\xilufitness\services\login\LoginService;
use app\common\controller\Api;
use app\common\library\Ems;
use app\common\library\Sms;
use fast\Random;
use think\Cache;
use think\Config;
use think\Db;
use think\Log;
use think\Validate;
use app\admin\library\Wechat;

/**
 * 会员接口
 */
class User extends Api
{
    protected $noNeedLogin = ["registerLogin",'getOpenid','decodeData','login', 'mobilelogin', 'register', 'resetpwd', 'changeemail', 'changemobile', 'third'];
    protected $noNeedRight = '*';

    protected $miniConfig;

    public function _initialize()
    {
        $this->miniConfig = (new Wechat)->getMiniConfig();
        parent::_initialize();
        if (!Config::get('fastadmin.usercenter')) {
            $this->error(__('User center already closed'));
        }
    }




    /**
     * @ApiTitle(获取小程序openid信息)
     * @ApiSummary(根据前端code换取openid信息)
     * @ApiRoute(/api/user/getOpenid)
     * @ApiMethod(GET)
     * @ApiParams(name="code",type="string",required=true,description="前端code值")
     * @ApiHeaders(name = "brand-key", type = "string",require = true, description = "应用key")
     * @ApiHeaders(name = "token", type = "string", require = true, description = "Token")
     * @ApiReturnParams(name="code", type="integer",required=true, sample="0")
     * @ApiReturnParams(name="msg", type="string",required=true, sample="获取成功")
     * @ApiReturnParams(name="data", type="bject",required=true, description= "扩展数据")
     * @ApiReturn({
    "code" => 1,
    "msg" => "获取成功",
    "data" => {}
     *})
     */

    public function getOpenid(){
        $code = $this->request->param('code/s');

        try {
            $result = LoginService::getInstance(['mini_config' => $this->miniConfig])->getOpenid($code);
        } catch (\WeChat\Exceptions\LocalCacheException $e){
            $this->error($e->getMessage());
        } catch (\Exception $e){
            $this->error($e->getMessage());
        }
        Cache::set('wechat_mini_code'.$code.$result['openid'],"1",60);
        $this->success('',$result);
    }

    /**
     * @ApiTitle(加密信息解密)
     * @ApiSummary(解密微信信息)
     * @ApiRoute(/api/user/decodeData)
     * @ApiMethod(POST)
     * @ApiParams(name = "iv", type = "string",required=true)
     * @ApiParams(name = "encryptedData", type = "string",required=true)
     * @ApiParams(name = "sessionKey", type = "string",required=true)
     * @ApiHeaders(name = "brand-key", type = "string",require = true, description = "应用key")
     * @ApiHeaders(name = "token", type = "string", require = true, description = "Token")
     * @ApiReturn({
    "code" => 1,
    "msg" => "获取成功",
    "data" => {}
     *})
     */
    public function decodeData() {
        $iv             = $this->request->param('iv/s');
        $encryptedData  = $this->request->param('encryptedData/s');
        $sessionKey     = $this->request->param('sessionKey/s');
        if(empty($iv) || empty($encryptedData) || empty($sessionKey)){
            $this->error(__('Params error'));
        }
        $result = LoginService::getInstance(['mini_config' => $this->miniConfig])->decodeData($iv,$sessionKey,$encryptedData);
        $this->success('',$result);
    }



    /**
     * @ApiTitle(微信小程序授权登录注册通用[支持静默登录])
     * @ApiSummary(登录注册通用-支持静默登录)
     * @ApiRoute(/api/user/registerLogin)
     * @ApiMethod(POST)
     * @ApiParams(name = "mobile", type = "string",required=false,description = "mobile 静默非必传,手机授权必传")
     * @ApiParams(name = "unionid", type = "string",required=false, description = "unionid 非必传")
     * @ApiParams(name = "apptype", type = "string",required=false, description = "应用类型默认miniapp")
     * @ApiParams(name = "platform", type = "string",require=false, description = "平台标识默认wechat")
     * @ApiParams(name = "openid", type = "string", require=true, description = "授权的openid")
     * @ApiParams(name = "keeptime", type = "string", require=false, description = "token保持时间，默认0永久")
     * @ApiParams(name = "code", type = "string", require=true, description = "授权的code")
     * @ApiReturn({
    "code" => 1,
    "msg" => "获取成功",
    "data" => {‘token’：xxxxx,'errcode':0(如果为30001则是需要重新授权)}
     *})
     */
    public function registerLogin(){
        $extend= $params = [];
        $extend['mobile'] = $this->request->param('mobile/s','');
        $params['unionid'] = $this->request->param('unionid/s','');
        $params['apptype']  = $this->request->param('apptype/s','miniapp');
        $params['openid']  = $this->request->param('openid/s','');
        $code = $this->request->param('code/s','');
        if(empty($code)){
            $this->error(__('缺少code'));
        }
        $wechat_mini_code = Cache::get('wechat_mini_code'.$code.$params['openid']);
        if(!$wechat_mini_code)$this->error("授权code已过期或已使用，请重新发起授权！",['errcode'=>30002]);


        $platform = $this->request->param('platform/s','wechat');
        //推荐人：逻辑未实现
        $rec_user_id = $this->request->param('rec_user_id',0,'xilufitness_get_id_value');
        $keeptime = $this->request->param('keeptime/d',0);
        //access_token

        try {
            \addons\third\library\Service::loginAndRegisterByMobile($platform, $params, $extend, $keeptime);
        } catch (\Exception $e){
            Log::log($e->getMessage());
            $this->error($e->getMessage(),['errcode'=>$e->getCode()]);
        }
        Cache::rm('wechat_mini_code'.$code.$params['openid']);
        $this->success('获取成功', ['token' => $this->auth->getToken()]);
    }







    /**
     * 会员中心
     */
    public function index()
    {

        $data =  [
            'welcome' => $this->auth->nickname,
            'user_info'=>$this->auth->getUserinfo()
        ];
        //是否有核销按钮展示权
        $data['have_auth'] = \app\common\model\User::verificationAuth($this->auth->id);
        $data['have_teacher'] = \app\common\model\User::teacherAuth($this->auth->id);

        $data['user_info']["avatar"] = $data['user_info']["avatar"]? cdnurl($data['user_info']["avatar"],true):$data['user_info']["avatar"];
        $this->success('调用成功',$data);
    }

    /**
     * 会员登录
     *
     * @ApiMethod (POST)
     * @ApiParams (name="account", type="string", required=true, description="账号")
     * @ApiParams (name="password", type="string", required=true, description="密码")
     */
    public function login()
    {
        $account = $this->request->post('account');
        $password = $this->request->post('password');
        if (!$account || !$password) {
            $this->error(__('Invalid parameters'));
        }
        $ret = $this->auth->login($account, $password);
        if ($ret) {
            $data = ['userinfo' => $this->auth->getUserinfo()];
            $this->success(__('Logged in successful'), $data);
        } else {
            $this->error($this->auth->getError());
        }
    }

    /**
     * 手机验证码登录
     *
     * @ApiMethod (POST)
     * @ApiParams (name="mobile", type="string", required=true, description="手机号")
     * @ApiParams (name="captcha", type="string", required=true, description="验证码")
     */
    public function mobilelogin()
    {
        $mobile = $this->request->post('mobile');
        $captcha = $this->request->post('captcha');
        if (!$mobile || !$captcha) {
            $this->error(__('Invalid parameters'));
        }
        if (!Validate::regex($mobile, "^1\d{10}$")) {
            $this->error(__('Mobile is incorrect'));
        }
        if (!Sms::check($mobile, $captcha, 'mobilelogin')) {
            $this->error(__('Captcha is incorrect'));
        }
        $user = \app\common\model\User::getByMobile($mobile);
        if ($user) {
            if ($user->status != 'normal') {
                $this->error(__('Account is locked'));
            }
            //如果已经有账号则直接登录
            $ret = $this->auth->direct($user->id);
        } else {
            $ret = $this->auth->register($mobile, Random::alnum(), '', $mobile, []);
        }
        if ($ret) {
            Sms::flush($mobile, 'mobilelogin');
            $data = ['userinfo' => $this->auth->getUserinfo()];
            $this->success(__('Logged in successful'), $data);
        } else {
            $this->error($this->auth->getError());
        }
    }

    /**
     * 注册会员
     *
     * @ApiMethod (POST)
     * @ApiParams (name="username", type="string", required=true, description="用户名")
     * @ApiParams (name="password", type="string", required=true, description="密码")
     * @ApiParams (name="email", type="string", required=true, description="邮箱")
     * @ApiParams (name="mobile", type="string", required=true, description="手机号")
     * @ApiParams (name="code", type="string", required=true, description="验证码")
     */
    public function register()
    {
        $username = $this->request->post('username');
        $password = $this->request->post('password');
        $email = $this->request->post('email');
        $mobile = $this->request->post('mobile');
        $code = $this->request->post('code');
        if (!$username || !$password) {
            $this->error(__('Invalid parameters'));
        }
        if ($email && !Validate::is($email, "email")) {
            $this->error(__('Email is incorrect'));
        }
        if ($mobile && !Validate::regex($mobile, "^1\d{10}$")) {
            $this->error(__('Mobile is incorrect'));
        }
        $ret = Sms::check($mobile, $code, 'register');
        if (!$ret) {
            $this->error(__('Captcha is incorrect'));
        }
        $ret = $this->auth->register($username, $password, $email, $mobile, []);
        if ($ret) {
            $data = ['userinfo' => $this->auth->getUserinfo()];
            $this->success(__('Sign up successful'), $data);
        } else {
            $this->error($this->auth->getError());
        }
    }

    /**
     * 退出登录
     * @ApiMethod (POST)
     */
    public function logout()
    {
        if (!$this->request->isPost()) {
            $this->error(__('Invalid parameters'));
        }
        $this->auth->logout();
        $this->success(__('Logout successful'));
    }

    /**
     * 修改会员个人信息
     *
     * @ApiMethod (POST)
     * @ApiParams (name="update_fields", type="json", required=true, description="本次需要更新的用户字段json格式：更新谁传谁的字段名，比如：只更新头像和昵称 则 json=['avatar','nickname']")
     * @ApiParams (name="avatar", type="string", required=true, description="头像地址")
     * @ApiParams (name="username", type="string", required=true, description="用户名")
     * @ApiParams (name="nickname", type="string", required=true, description="昵称")
     * @ApiParams (name="realname", type="string", required=true, description="姓名")
     * @ApiParams (name="gender", type="string", required=true, description="性别：0女 1男")
     * @ApiParams (name="birthday", type="string", required=true, description="出生日期：日期字符串 比如”1995-9-20")
     * @ApiParams (name="work", type="string", required=true, description="职业")
     * @ApiParams (name="bio", type="string", required=true, description="个人简介")
     */
    public function profile()
    {
        $user = $this->auth->getUser();
        $update_fields = $this->request->post('update_fields/a',[]);
//        var_dump($update_fields);die;

        if(!$update_fields)$this->error(__('请指定要更新的字段！'));
        $username = $this->request->post('username/s');
        $nickname = $this->request->post('nickname/s');
        $realname = $this->request->post('realname/s');
        $gender = $this->request->post('gender/d');
        $birthday = $this->request->post('birthday/s');
        $work = $this->request->post('work/s');
        $bio = $this->request->post('bio/s',null);
        $avatar = $this->request->post('avatar', null, 'trim,strip_tags,htmlspecialchars');


        if ($username && in_array('username', $update_fields)) {
            $exists = \app\common\model\User::where('username', $username)->where('id', '<>', $this->auth->id)->find();
            if ($exists) {
                $this->error(__('Username already exists'));
            }
            $user->username = $username;
        }
        if ($nickname && in_array('nickname', $update_fields)) {
            $exists = \app\common\model\User::where('nickname', $nickname)->where('id', '<>', $this->auth->id)->find();
            if ($exists) {
                $this->error(__('Nickname already exists'));
            }
            $user->nickname = $nickname;
        }
        if(in_array('bio', $update_fields))$user->bio = $bio;
        if($avatar!==null && in_array('avatar', $update_fields))$user->avatar = $avatar;
        if(in_array('realname', $update_fields))$user->realname = $realname;
        if(in_array('gender', $update_fields)){
            if(!in_array($gender, [1,2]))$this->error(__('请输入正确的性别！'));
            $user->gender = $gender;
        }
        if(in_array('birthday', $update_fields))$user->birthday = $birthday;
        if(in_array('work', $update_fields))$user->work = $work;
        $user->save();
        $this->success();
    }

    /**
     * 修改邮箱
     *
     * @ApiMethod (POST)
     * @ApiParams (name="email", type="string", required=true, description="邮箱")
     * @ApiParams (name="captcha", type="string", required=true, description="验证码")
     */
    public function changeemail()
    {
        $user = $this->auth->getUser();
        $email = $this->request->post('email');
        $captcha = $this->request->post('captcha');
        if (!$email || !$captcha) {
            $this->error(__('Invalid parameters'));
        }
        if (!Validate::is($email, "email")) {
            $this->error(__('Email is incorrect'));
        }
        if (\app\common\model\User::where('email', $email)->where('id', '<>', $user->id)->find()) {
            $this->error(__('Email already exists'));
        }
        $result = Ems::check($email, $captcha, 'changeemail');
        if (!$result) {
            $this->error(__('Captcha is incorrect'));
        }
        $verification = $user->verification;
        $verification->email = 1;
        $user->verification = $verification;
        $user->email = $email;
        $user->save();

        Ems::flush($email, 'changeemail');
        $this->success();
    }

    /**
     * 修改手机号
     *
     * @ApiMethod (POST)
     * @ApiParams (name="mobile", type="string", required=true, description="手机号")
     * @ApiParams (name="captcha", type="string", required=true, description="验证码")
     */
    public function changemobile()
    {
        $user = $this->auth->getUser();
        $mobile = $this->request->post('mobile');
        $captcha = $this->request->post('captcha');
        if (!$mobile || !$captcha) {
            $this->error(__('Invalid parameters'));
        }
        if (!Validate::regex($mobile, "^1\d{10}$")) {
            $this->error(__('Mobile is incorrect'));
        }
        if (\app\common\model\User::where('mobile', $mobile)->where('id', '<>', $user->id)->find()) {
            $this->error(__('Mobile already exists'));
        }
        $result = Sms::check($mobile, $captcha, 'changemobile');
        if (!$result) {
            $this->error(__('Captcha is incorrect'));
        }
        $verification = $user->verification;
        $verification->mobile = 1;
        $user->verification = $verification;
        $user->mobile = $mobile;
        $user->save();

        Sms::flush($mobile, 'changemobile');
        $this->success();
    }

    /**
     * 第三方登录
     *
     * @ApiMethod (POST)
     * @ApiParams (name="platform", type="string", required=true, description="平台名称")
     * @ApiParams (name="code", type="string", required=true, description="Code码")
     */
    public function third()
    {
        $url = url('user/index');
        $platform = $this->request->post("platform");
        $code = $this->request->post("code");
        $config = get_addon_config('third');
        if (!$config || !isset($config[$platform])) {
            $this->error(__('Invalid parameters'));
        }
        $app = new \addons\third\library\Application($config);
        //通过code换access_token和绑定会员
        $result = $app->{$platform}->getUserInfo(['code' => $code]);
        if ($result) {
            $loginret = \addons\third\library\Service::connect($platform, $result);
            if ($loginret) {
                $data = [
                    'userinfo'  => $this->auth->getUserinfo(),
                    'thirdinfo' => $result
                ];
                $this->success(__('Logged in successful'), $data);
            }
        }
        $this->error(__('Operation failed'), $url);
    }

    /**
     * 重置密码
     *
     * @ApiMethod (POST)
     * @ApiParams (name="mobile", type="string", required=true, description="手机号")
     * @ApiParams (name="newpassword", type="string", required=true, description="新密码")
     * @ApiParams (name="captcha", type="string", required=true, description="验证码")
     */
    public function resetpwd()
    {
        $type = $this->request->post("type", "mobile");
        $mobile = $this->request->post("mobile");
        $email = $this->request->post("email");
        $newpassword = $this->request->post("newpassword");
        $captcha = $this->request->post("captcha");
        if (!$newpassword || !$captcha) {
            $this->error(__('Invalid parameters'));
        }
        //验证Token
        if (!Validate::make()->check(['newpassword' => $newpassword], ['newpassword' => 'require|regex:\S{6,30}'])) {
            $this->error(__('Password must be 6 to 30 characters'));
        }
        if ($type == 'mobile') {
            if (!Validate::regex($mobile, "^1\d{10}$")) {
                $this->error(__('Mobile is incorrect'));
            }
            $user = \app\common\model\User::getByMobile($mobile);
            if (!$user) {
                $this->error(__('User not found'));
            }
            $ret = Sms::check($mobile, $captcha, 'resetpwd');
            if (!$ret) {
                $this->error(__('Captcha is incorrect'));
            }
            Sms::flush($mobile, 'resetpwd');
        } else {
            if (!Validate::is($email, "email")) {
                $this->error(__('Email is incorrect'));
            }
            $user = \app\common\model\User::getByEmail($email);
            if (!$user) {
                $this->error(__('User not found'));
            }
            $ret = Ems::check($email, $captcha, 'resetpwd');
            if (!$ret) {
                $this->error(__('Captcha is incorrect'));
            }
            Ems::flush($email, 'resetpwd');
        }
        //模拟一次登录
        $this->auth->direct($user->id);
        $ret = $this->auth->changepwd($newpassword, '', true);
        if ($ret) {
            $this->success(__('Reset password successful'));
        } else {
            $this->error($this->auth->getError());
        }
    }
}