76 lines
1.9 KiB
PHP
76 lines
1.9 KiB
PHP
<?php
|
||
|
||
namespace app\api\controller\openapi;
|
||
|
||
use app\common\controller\Api;
|
||
|
||
class Base extends Api
|
||
{
|
||
protected $noNeedLogin = '*';
|
||
protected $noNeedRight = '*';
|
||
|
||
protected $decrypt_data = [];
|
||
|
||
|
||
|
||
/**
|
||
* 初始化操作
|
||
* @access protected
|
||
*/
|
||
protected function _initialize()
|
||
{
|
||
parent::_initialize();
|
||
|
||
$this->checkToken();
|
||
|
||
|
||
|
||
}
|
||
public function checkToken()
|
||
{
|
||
// token
|
||
$key = $this->request->param('key/s',"");
|
||
$encryption_data = $this->request->param('encryption_data/s',"");
|
||
$sign = $this->request->param('sign/s',"");
|
||
if (!$encryption_data) {
|
||
$this->error('异常的调用');
|
||
}
|
||
//根据key查询公钥库
|
||
$public_key = \app\common\model\auth\api\Key::where('key', $key)->value("public_key");
|
||
if (!$public_key) {
|
||
$this->error('非法访问！');
|
||
}
|
||
$decrypted = '';
|
||
if (!openssl_public_decrypt(base64_decode($sign), $decrypted, $public_key)) {
|
||
$this->error('非法访问！');
|
||
}
|
||
$sign_data = json_decode($decrypted, true);
|
||
//取出时间戳
|
||
$timestamp = $sign_data['timestamp'];
|
||
//授权有效时间只有3分钟
|
||
if (time() - $timestamp > 180) {
|
||
$this->error('授权已过期');
|
||
}
|
||
//公钥解密加密数据
|
||
if($encryption_data){
|
||
$decrypt_data = '';
|
||
if (!openssl_public_decrypt(base64_decode($encryption_data), $decrypt_data, $public_key)) {
|
||
$this->error('非法访问！');
|
||
}
|
||
$this->decrypt_data = json_decode($decrypt_data, true);
|
||
|
||
//如果有当前服务器的token，塞入当前服务，重新加载父类_initialize方法
|
||
if(!empty($this->decrypt_data['token'])){
|
||
$token = $this->decrypt_data['token'];
|
||
$this->auth->init($token);
|
||
}
|
||
|
||
}
|
||
|
||
|
||
|
||
}
|
||
|
||
|
||
|
||
} |