505 lines
19 KiB
PHP
505 lines
19 KiB
PHP
<?php
|
||
|
||
namespace app\api\controller;
|
||
|
||
use addons\xilufitness\services\login\LoginService;
|
||
use app\common\controller\Api;
|
||
use app\common\library\Ems;
|
||
use app\common\library\Sms;
|
||
use fast\Random;
|
||
use think\Cache;
|
||
use think\Config;
|
||
use think\Db;
|
||
use think\Log;
|
||
use think\Validate;
|
||
use app\admin\library\Wechat;
|
||
|
||
/**
|
||
* 会员接口
|
||
*/
|
||
class User extends Api
|
||
{
|
||
protected $noNeedLogin = ["registerLogin",'getOpenid','decodeData','login', 'mobilelogin', 'register', 'resetpwd', 'changeemail', 'changemobile', 'third'];
|
||
protected $noNeedRight = '*';
|
||
|
||
protected $miniConfig;
|
||
|
||
public function _initialize()
|
||
{
|
||
$this->miniConfig = (new Wechat)->getMiniConfig();
|
||
parent::_initialize();
|
||
if (!Config::get('fastadmin.usercenter')) {
|
||
$this->error(__('User center already closed'));
|
||
}
|
||
}
|
||
|
||
|
||
|
||
|
||
/**
|
||
* @ApiTitle(获取小程序openid信息)
|
||
* @ApiSummary(根据前端code换取openid信息)
|
||
* @ApiRoute(/api/user/getOpenid)
|
||
* @ApiMethod(GET)
|
||
* @ApiParams(name="code",type="string",required=true,description="前端code值")
|
||
* @ApiHeaders(name = "brand-key", type = "string",require = true, description = "应用key")
|
||
* @ApiHeaders(name = "token", type = "string", require = true, description = "Token")
|
||
* @ApiReturnParams(name="code", type="integer",required=true, sample="0")
|
||
* @ApiReturnParams(name="msg", type="string",required=true, sample="获取成功")
|
||
* @ApiReturnParams(name="data", type="bject",required=true, description= "扩展数据")
|
||
* @ApiReturn({
|
||
"code" => 1,
|
||
"msg" => "获取成功",
|
||
"data" => {}
|
||
*})
|
||
*/
|
||
|
||
public function getOpenid(){
|
||
$code = $this->request->param('code/s');
|
||
|
||
try {
|
||
$result = LoginService::getInstance(['mini_config' => $this->miniConfig])->getOpenid($code);
|
||
} catch (\WeChat\Exceptions\LocalCacheException $e){
|
||
$this->error($e->getMessage());
|
||
} catch (\Exception $e){
|
||
$this->error($e->getMessage());
|
||
}
|
||
Cache::set('wechat_mini_code'.$code.$result['openid'],"1",60);
|
||
$this->success('',$result);
|
||
}
|
||
|
||
/**
|
||
* @ApiTitle(加密信息解密)
|
||
* @ApiSummary(解密微信信息)
|
||
* @ApiRoute(/api/user/decodeData)
|
||
* @ApiMethod(POST)
|
||
* @ApiParams(name = "iv", type = "string",required=true)
|
||
* @ApiParams(name = "encryptedData", type = "string",required=true)
|
||
* @ApiParams(name = "sessionKey", type = "string",required=true)
|
||
* @ApiHeaders(name = "brand-key", type = "string",require = true, description = "应用key")
|
||
* @ApiHeaders(name = "token", type = "string", require = true, description = "Token")
|
||
* @ApiReturn({
|
||
"code" => 1,
|
||
"msg" => "获取成功",
|
||
"data" => {}
|
||
*})
|
||
*/
|
||
public function decodeData() {
|
||
$iv = $this->request->param('iv/s');
|
||
$encryptedData = $this->request->param('encryptedData/s');
|
||
$sessionKey = $this->request->param('sessionKey/s');
|
||
if(empty($iv) || empty($encryptedData) || empty($sessionKey)){
|
||
$this->error(__('Params error'));
|
||
}
|
||
$result = LoginService::getInstance(['mini_config' => $this->miniConfig])->decodeData($iv,$sessionKey,$encryptedData);
|
||
$this->success('',$result);
|
||
}
|
||
|
||
|
||
|
||
/**
|
||
* @ApiTitle(微信小程序授权登录注册通用[支持静默登录])
|
||
* @ApiSummary(登录注册通用-支持静默登录)
|
||
* @ApiRoute(/api/user/registerLogin)
|
||
* @ApiMethod(POST)
|
||
* @ApiParams(name = "mobile", type = "string",required=false,description = "mobile 静默非必传,手机授权必传")
|
||
* @ApiParams(name = "unionid", type = "string",required=false, description = "unionid 非必传")
|
||
* @ApiParams(name = "apptype", type = "string",required=false, description = "应用类型默认miniapp")
|
||
* @ApiParams(name = "platform", type = "string",require=false, description = "平台标识默认wechat")
|
||
* @ApiParams(name = "openid", type = "string", require=true, description = "授权的openid")
|
||
* @ApiParams(name = "keeptime", type = "string", require=false, description = "token保持时间，默认0永久")
|
||
* @ApiParams(name = "code", type = "string", require=true, description = "授权的code")
|
||
* @ApiReturn({
|
||
"code" => 1,
|
||
"msg" => "获取成功",
|
||
"data" => {‘token’：xxxxx,'errcode':0(如果为30001则是需要重新授权)}
|
||
*})
|
||
*/
|
||
public function registerLogin(){
|
||
$extend= $params = [];
|
||
$extend['mobile'] = $this->request->param('mobile/s','');
|
||
$params['unionid'] = $this->request->param('unionid/s','');
|
||
$params['apptype'] = $this->request->param('apptype/s','miniapp');
|
||
$params['openid'] = $this->request->param('openid/s','');
|
||
$code = $this->request->param('code/s','');
|
||
if(empty($code)){
|
||
$this->error(__('缺少code'));
|
||
}
|
||
$wechat_mini_code = Cache::get('wechat_mini_code'.$code.$params['openid']);
|
||
if(!$wechat_mini_code)$this->error("授权code已过期或已使用，请重新发起授权！",['errcode'=>30002]);
|
||
|
||
|
||
$platform = $this->request->param('platform/s','wechat');
|
||
//推荐人：逻辑未实现
|
||
$rec_user_id = $this->request->param('rec_user_id',0,'xilufitness_get_id_value');
|
||
$keeptime = $this->request->param('keeptime/d',0);
|
||
//access_token
|
||
|
||
try {
|
||
\addons\third\library\Service::loginAndRegisterByMobile($platform, $params, $extend, $keeptime);
|
||
} catch (\Exception $e){
|
||
Log::log($e->getMessage());
|
||
$this->error($e->getMessage(),['errcode'=>$e->getCode()]);
|
||
}
|
||
Cache::rm('wechat_mini_code'.$code.$params['openid']);
|
||
$this->success('获取成功', ['token' => $this->auth->getToken()]);
|
||
}
|
||
|
||
|
||
|
||
|
||
|
||
|
||
|
||
/**
|
||
* 会员中心
|
||
*/
|
||
public function index()
|
||
{
|
||
|
||
$data = [
|
||
'welcome' => $this->auth->nickname,
|
||
'user_info'=>$this->auth->getUserinfo()
|
||
];
|
||
//是否有核销按钮展示权
|
||
$data['have_auth'] = \app\common\model\User::verificationAuth($this->auth->id);
|
||
$data['have_teacher'] = \app\common\model\User::teacherAuth($this->auth->id);
|
||
|
||
$data['user_info']["avatar"] = $data['user_info']["avatar"]? cdnurl($data['user_info']["avatar"],true):$data['user_info']["avatar"];
|
||
$this->success('调用成功',$data);
|
||
}
|
||
|
||
/**
|
||
* 会员登录
|
||
*
|
||
* @ApiMethod (POST)
|
||
* @ApiParams (name="account", type="string", required=true, description="账号")
|
||
* @ApiParams (name="password", type="string", required=true, description="密码")
|
||
*/
|
||
public function login()
|
||
{
|
||
$account = $this->request->post('account');
|
||
$password = $this->request->post('password');
|
||
if (!$account || !$password) {
|
||
$this->error(__('Invalid parameters'));
|
||
}
|
||
$ret = $this->auth->login($account, $password);
|
||
if ($ret) {
|
||
$data = ['userinfo' => $this->auth->getUserinfo()];
|
||
$this->success(__('Logged in successful'), $data);
|
||
} else {
|
||
$this->error($this->auth->getError());
|
||
}
|
||
}
|
||
|
||
/**
|
||
* 手机验证码登录
|
||
*
|
||
* @ApiMethod (POST)
|
||
* @ApiParams (name="mobile", type="string", required=true, description="手机号")
|
||
* @ApiParams (name="captcha", type="string", required=true, description="验证码")
|
||
*/
|
||
public function mobilelogin()
|
||
{
|
||
$mobile = $this->request->post('mobile');
|
||
$captcha = $this->request->post('captcha');
|
||
if (!$mobile || !$captcha) {
|
||
$this->error(__('Invalid parameters'));
|
||
}
|
||
if (!Validate::regex($mobile, "^1\d{10}$")) {
|
||
$this->error(__('Mobile is incorrect'));
|
||
}
|
||
if (!Sms::check($mobile, $captcha, 'mobilelogin')) {
|
||
$this->error(__('Captcha is incorrect'));
|
||
}
|
||
$user = \app\common\model\User::getByMobile($mobile);
|
||
if ($user) {
|
||
if ($user->status != 'normal') {
|
||
$this->error(__('Account is locked'));
|
||
}
|
||
//如果已经有账号则直接登录
|
||
$ret = $this->auth->direct($user->id);
|
||
} else {
|
||
$ret = $this->auth->register($mobile, Random::alnum(), '', $mobile, []);
|
||
}
|
||
if ($ret) {
|
||
Sms::flush($mobile, 'mobilelogin');
|
||
$data = ['userinfo' => $this->auth->getUserinfo()];
|
||
$this->success(__('Logged in successful'), $data);
|
||
} else {
|
||
$this->error($this->auth->getError());
|
||
}
|
||
}
|
||
|
||
/**
|
||
* 注册会员
|
||
*
|
||
* @ApiMethod (POST)
|
||
* @ApiParams (name="username", type="string", required=true, description="用户名")
|
||
* @ApiParams (name="password", type="string", required=true, description="密码")
|
||
* @ApiParams (name="email", type="string", required=true, description="邮箱")
|
||
* @ApiParams (name="mobile", type="string", required=true, description="手机号")
|
||
* @ApiParams (name="code", type="string", required=true, description="验证码")
|
||
*/
|
||
public function register()
|
||
{
|
||
$username = $this->request->post('username');
|
||
$password = $this->request->post('password');
|
||
$email = $this->request->post('email');
|
||
$mobile = $this->request->post('mobile');
|
||
$code = $this->request->post('code');
|
||
if (!$username || !$password) {
|
||
$this->error(__('Invalid parameters'));
|
||
}
|
||
if ($email && !Validate::is($email, "email")) {
|
||
$this->error(__('Email is incorrect'));
|
||
}
|
||
if ($mobile && !Validate::regex($mobile, "^1\d{10}$")) {
|
||
$this->error(__('Mobile is incorrect'));
|
||
}
|
||
$ret = Sms::check($mobile, $code, 'register');
|
||
if (!$ret) {
|
||
$this->error(__('Captcha is incorrect'));
|
||
}
|
||
$ret = $this->auth->register($username, $password, $email, $mobile, []);
|
||
if ($ret) {
|
||
$data = ['userinfo' => $this->auth->getUserinfo()];
|
||
$this->success(__('Sign up successful'), $data);
|
||
} else {
|
||
$this->error($this->auth->getError());
|
||
}
|
||
}
|
||
|
||
/**
|
||
* 退出登录
|
||
* @ApiMethod (POST)
|
||
*/
|
||
public function logout()
|
||
{
|
||
if (!$this->request->isPost()) {
|
||
$this->error(__('Invalid parameters'));
|
||
}
|
||
$this->auth->logout();
|
||
$this->success(__('Logout successful'));
|
||
}
|
||
|
||
/**
|
||
* 修改会员个人信息
|
||
*
|
||
* @ApiMethod (POST)
|
||
* @ApiParams (name="update_fields", type="json", required=true, description="本次需要更新的用户字段json格式：更新谁传谁的字段名，比如：只更新头像和昵称 则 json=['avatar','nickname']")
|
||
* @ApiParams (name="avatar", type="string", required=true, description="头像地址")
|
||
* @ApiParams (name="username", type="string", required=true, description="用户名")
|
||
* @ApiParams (name="nickname", type="string", required=true, description="昵称")
|
||
* @ApiParams (name="realname", type="string", required=true, description="姓名")
|
||
* @ApiParams (name="gender", type="string", required=true, description="性别：0女 1男")
|
||
* @ApiParams (name="birthday", type="string", required=true, description="出生日期：日期字符串 比如”1995-9-20")
|
||
* @ApiParams (name="work", type="string", required=true, description="职业")
|
||
* @ApiParams (name="bio", type="string", required=true, description="个人简介")
|
||
*/
|
||
public function profile()
|
||
{
|
||
$user = $this->auth->getUser();
|
||
$update_fields = $this->request->post('update_fields/a',[]);
|
||
// var_dump($update_fields);die;
|
||
|
||
if(!$update_fields)$this->error(__('请指定要更新的字段！'));
|
||
$username = $this->request->post('username/s');
|
||
$nickname = $this->request->post('nickname/s');
|
||
$realname = $this->request->post('realname/s');
|
||
$gender = $this->request->post('gender/d');
|
||
$birthday = $this->request->post('birthday/s');
|
||
$work = $this->request->post('work/s');
|
||
$bio = $this->request->post('bio/s',null);
|
||
$avatar = $this->request->post('avatar', null, 'trim,strip_tags,htmlspecialchars');
|
||
|
||
|
||
if ($username && in_array('username', $update_fields)) {
|
||
$exists = \app\common\model\User::where('username', $username)->where('id', '<>', $this->auth->id)->find();
|
||
if ($exists) {
|
||
$this->error(__('Username already exists'));
|
||
}
|
||
$user->username = $username;
|
||
}
|
||
if ($nickname && in_array('nickname', $update_fields)) {
|
||
$exists = \app\common\model\User::where('nickname', $nickname)->where('id', '<>', $this->auth->id)->find();
|
||
if ($exists) {
|
||
$this->error(__('Nickname already exists'));
|
||
}
|
||
$user->nickname = $nickname;
|
||
}
|
||
if(in_array('bio', $update_fields))$user->bio = $bio;
|
||
if($avatar!==null && in_array('avatar', $update_fields))$user->avatar = $avatar;
|
||
if(in_array('realname', $update_fields))$user->realname = $realname;
|
||
if(in_array('gender', $update_fields)){
|
||
if(!in_array($gender, [1,2]))$this->error(__('请输入正确的性别！'));
|
||
$user->gender = $gender;
|
||
}
|
||
if(in_array('birthday', $update_fields))$user->birthday = $birthday;
|
||
if(in_array('work', $update_fields))$user->work = $work;
|
||
$user->save();
|
||
$this->success();
|
||
}
|
||
|
||
/**
|
||
* 修改邮箱
|
||
*
|
||
* @ApiMethod (POST)
|
||
* @ApiParams (name="email", type="string", required=true, description="邮箱")
|
||
* @ApiParams (name="captcha", type="string", required=true, description="验证码")
|
||
*/
|
||
public function changeemail()
|
||
{
|
||
$user = $this->auth->getUser();
|
||
$email = $this->request->post('email');
|
||
$captcha = $this->request->post('captcha');
|
||
if (!$email || !$captcha) {
|
||
$this->error(__('Invalid parameters'));
|
||
}
|
||
if (!Validate::is($email, "email")) {
|
||
$this->error(__('Email is incorrect'));
|
||
}
|
||
if (\app\common\model\User::where('email', $email)->where('id', '<>', $user->id)->find()) {
|
||
$this->error(__('Email already exists'));
|
||
}
|
||
$result = Ems::check($email, $captcha, 'changeemail');
|
||
if (!$result) {
|
||
$this->error(__('Captcha is incorrect'));
|
||
}
|
||
$verification = $user->verification;
|
||
$verification->email = 1;
|
||
$user->verification = $verification;
|
||
$user->email = $email;
|
||
$user->save();
|
||
|
||
Ems::flush($email, 'changeemail');
|
||
$this->success();
|
||
}
|
||
|
||
/**
|
||
* 修改手机号
|
||
*
|
||
* @ApiMethod (POST)
|
||
* @ApiParams (name="mobile", type="string", required=true, description="手机号")
|
||
* @ApiParams (name="captcha", type="string", required=true, description="验证码")
|
||
*/
|
||
public function changemobile()
|
||
{
|
||
$user = $this->auth->getUser();
|
||
$mobile = $this->request->post('mobile');
|
||
$captcha = $this->request->post('captcha');
|
||
if (!$mobile || !$captcha) {
|
||
$this->error(__('Invalid parameters'));
|
||
}
|
||
if (!Validate::regex($mobile, "^1\d{10}$")) {
|
||
$this->error(__('Mobile is incorrect'));
|
||
}
|
||
if (\app\common\model\User::where('mobile', $mobile)->where('id', '<>', $user->id)->find()) {
|
||
$this->error(__('Mobile already exists'));
|
||
}
|
||
$result = Sms::check($mobile, $captcha, 'changemobile');
|
||
if (!$result) {
|
||
$this->error(__('Captcha is incorrect'));
|
||
}
|
||
$verification = $user->verification;
|
||
$verification->mobile = 1;
|
||
$user->verification = $verification;
|
||
$user->mobile = $mobile;
|
||
$user->save();
|
||
|
||
Sms::flush($mobile, 'changemobile');
|
||
$this->success();
|
||
}
|
||
|
||
/**
|
||
* 第三方登录
|
||
*
|
||
* @ApiMethod (POST)
|
||
* @ApiParams (name="platform", type="string", required=true, description="平台名称")
|
||
* @ApiParams (name="code", type="string", required=true, description="Code码")
|
||
*/
|
||
public function third()
|
||
{
|
||
$url = url('user/index');
|
||
$platform = $this->request->post("platform");
|
||
$code = $this->request->post("code");
|
||
$config = get_addon_config('third');
|
||
if (!$config || !isset($config[$platform])) {
|
||
$this->error(__('Invalid parameters'));
|
||
}
|
||
$app = new \addons\third\library\Application($config);
|
||
//通过code换access_token和绑定会员
|
||
$result = $app->{$platform}->getUserInfo(['code' => $code]);
|
||
if ($result) {
|
||
$loginret = \addons\third\library\Service::connect($platform, $result);
|
||
if ($loginret) {
|
||
$data = [
|
||
'userinfo' => $this->auth->getUserinfo(),
|
||
'thirdinfo' => $result
|
||
];
|
||
$this->success(__('Logged in successful'), $data);
|
||
}
|
||
}
|
||
$this->error(__('Operation failed'), $url);
|
||
}
|
||
|
||
/**
|
||
* 重置密码
|
||
*
|
||
* @ApiMethod (POST)
|
||
* @ApiParams (name="mobile", type="string", required=true, description="手机号")
|
||
* @ApiParams (name="newpassword", type="string", required=true, description="新密码")
|
||
* @ApiParams (name="captcha", type="string", required=true, description="验证码")
|
||
*/
|
||
public function resetpwd()
|
||
{
|
||
$type = $this->request->post("type", "mobile");
|
||
$mobile = $this->request->post("mobile");
|
||
$email = $this->request->post("email");
|
||
$newpassword = $this->request->post("newpassword");
|
||
$captcha = $this->request->post("captcha");
|
||
if (!$newpassword || !$captcha) {
|
||
$this->error(__('Invalid parameters'));
|
||
}
|
||
//验证Token
|
||
if (!Validate::make()->check(['newpassword' => $newpassword], ['newpassword' => 'require|regex:\S{6,30}'])) {
|
||
$this->error(__('Password must be 6 to 30 characters'));
|
||
}
|
||
if ($type == 'mobile') {
|
||
if (!Validate::regex($mobile, "^1\d{10}$")) {
|
||
$this->error(__('Mobile is incorrect'));
|
||
}
|
||
$user = \app\common\model\User::getByMobile($mobile);
|
||
if (!$user) {
|
||
$this->error(__('User not found'));
|
||
}
|
||
$ret = Sms::check($mobile, $captcha, 'resetpwd');
|
||
if (!$ret) {
|
||
$this->error(__('Captcha is incorrect'));
|
||
}
|
||
Sms::flush($mobile, 'resetpwd');
|
||
} else {
|
||
if (!Validate::is($email, "email")) {
|
||
$this->error(__('Email is incorrect'));
|
||
}
|
||
$user = \app\common\model\User::getByEmail($email);
|
||
if (!$user) {
|
||
$this->error(__('User not found'));
|
||
}
|
||
$ret = Ems::check($email, $captcha, 'resetpwd');
|
||
if (!$ret) {
|
||
$this->error(__('Captcha is incorrect'));
|
||
}
|
||
Ems::flush($email, 'resetpwd');
|
||
}
|
||
//模拟一次登录
|
||
$this->auth->direct($user->id);
|
||
$ret = $this->auth->changepwd($newpassword, '', true);
|
||
if ($ret) {
|
||
$this->success(__('Reset password successful'));
|
||
} else {
|
||
$this->error($this->auth->getError());
|
||
}
|
||
}
|
||
}
|