first commit

2024-09-27 01:32:49 +08:00
commit 28ebe05a64
7399 changed files with 1174529 additions and 0 deletions
--- a/金壶/ydyd_service/application/api/controller/OauthController.php
+++ b/金壶/ydyd_service/application/api/controller/OauthController.php
@@ -0,0 +1,125 @@
+<?php
+namespace app\api\controller;
+
+use think\Exception;
+use think\facade\Request;
+use think\facade\Cache;
+
+/**
+ * API鉴权验证
+ */
+class OauthController
+{
+    use SendController;
+
+    /**
+     * accessToken存储前缀
+     *
+     * @var string
+     */
+    public static $accessTokenPrefix = 'accessToken_';
+
+    /**
+     * 过期时间秒数
+     *
+     * @var int
+     */
+    public static $expires = 7200;
+
+    /**
+     * 认证授权 通过用户信息和路由
+     */
+    final function authenticate()
+    {
+		return self::certification(self::getClient());
+    }
+
+    /**
+     * 获取用户信息
+     * @param  Request  $request
+     * @return $this
+     * @throws Exception
+     */
+    public static function getClient()
+    {
+        //获取头部信息
+        try {
+			$request = Request::instance();
+            $authorization = $request->header('authentication');   //获取请求中的authentication字段，值形式为USERID asdsajh..这种形式
+            $authorization = explode(" ", $authorization);        //explode分割，获取后面一窜base64加密数据
+            $authorizationInfo  = explode("-", base64_decode($authorization[1]));  //对base_64解密，获取到用:拼接的自字符串，然后分割，可获取appid、accesstoken、uid这三个参数
+			$clientInfo['appid'] = $authorizationInfo[0];
+            $clientInfo['uid'] = $authorizationInfo[1];
+            $clientInfo['access_token'] = $authorizationInfo[2];
+			$clientInfo['refresh_token'] = $authorizationInfo[3];
+            return $clientInfo;
+        } catch (Exception $e) {
+			return null;
+        }
+    }
+
+    /**
+     * 获取用户信息后 验证权限
+     * @return mixed
+     */
+    public static function certification($data = []){
+        $getCacheAccessToken = Cache::get(TokenController::$accessTokenPrefix . $data['access_token']);  //获取缓存access_token
+        return $getCacheAccessToken;
+    }
+
+    /**
+     * 获取用户信息后 验证权限
+     * @return mixed
+     */
+    public static function certificationToken($data = []){
+        $token  = Cache::get(TokenController::$refreshAccessTokenPrefix.$data['refresh_token']);
+        return $token ? $token : '';
+    }
+
+    /**
+     * 检测当前控制器和方法是否匹配传递的数组
+     *
+     * @param array $arr 需要验证权限的数组
+     * @return boolean
+     */
+    public static function match($arr = [])
+    {
+        $request = Request::instance();
+        $arr = is_array($arr) ? $arr : explode(',', $arr);
+        if (!$arr)
+        {
+            return false;
+        }
+        $arr = array_map('strtolower', $arr);
+        // 是否存在
+        if (in_array(strtolower($request->action()), $arr) || in_array('*', $arr))
+        {
+            return true;
+        }
+
+        // 没找到匹配
+        return false;
+    }
+
+    /**
+     * 生成签名
+     * _字符开头的变量不参与签名
+     */
+    public static function makeSign ($data = [],$app_secret = '')
+    {
+		$clientInfo['appid'] 		= $data['appid'];
+		$clientInfo['phone'] 		= $data['phone'];
+		$clientInfo['password'] 	= $data['password'];
+		$clientInfo['timestamp'] 	= $data['timestamp'];
+        return self::_getOrderMd5($clientInfo,$app_secret);
+    }
+
+    /**
+     * 计算ORDER的MD5签名
+     */
+    private static function _getOrderMd5($params = [] , $app_secret = '') {
+        $str = $app_secret . $params['appid'] . $params['phone'] . md5($params['password']). $params['timestamp'];
+        return strtolower(md5($str));
+    }
+
+}