<?php
namespace app\api\controller;

use think\Exception;
use think\facade\Request;
use think\facade\Cache;

/**
 * API鉴权验证
 */
class OauthController
{
    use SendController;

    /**
     * accessToken存储前缀
     *
     * @var string
     */
    public static $accessTokenPrefix = 'accessToken_';

    /**
     * 过期时间秒数
     *
     * @var int
     */
    public static $expires = 7200;

    /**
     * 认证授权 通过用户信息和路由
     */
    final function authenticate()
    {
		return self::certification(self::getClient());
    }

    /**
     * 获取用户信息
     * @param  Request  $request
     * @return $this
     * @throws Exception
     */
    public static function getClient()
    {
        //获取头部信息
        try {
			$request = Request::instance();
            $authorization = $request->header('authentication');   //获取请求中的authentication字段，值形式为USERID asdsajh..这种形式
            $authorization = explode(" ", $authorization);        //explode分割，获取后面一窜base64加密数据
            $authorizationInfo  = explode("-", base64_decode($authorization[1]));  //对base_64解密，获取到用:拼接的自字符串，然后分割，可获取appid、accesstoken、uid这三个参数
			$clientInfo['appid'] = $authorizationInfo[0];
            $clientInfo['uid'] = $authorizationInfo[1];
            $clientInfo['access_token'] = $authorizationInfo[2];
			$clientInfo['refresh_token'] = $authorizationInfo[3];
            return $clientInfo;
        } catch (Exception $e) {
			return null;
        }
    }

    /**
     * 获取用户信息后 验证权限
     * @return mixed
     */
    public static function certification($data = []){
        $getCacheAccessToken = Cache::get(TokenController::$accessTokenPrefix . $data['access_token']);  //获取缓存access_token
        return $getCacheAccessToken;
    }

    /**
     * 获取用户信息后 验证权限
     * @return mixed
     */
    public static function certificationToken($data = []){
        $token  = Cache::get(TokenController::$refreshAccessTokenPrefix.$data['refresh_token']);
        return $token ? $token : '';
    }

    /**
     * 检测当前控制器和方法是否匹配传递的数组
     *
     * @param array $arr 需要验证权限的数组
     * @return boolean
     */
    public static function match($arr = [])
    {
        $request = Request::instance();
        $arr = is_array($arr) ? $arr : explode(',', $arr);
        if (!$arr)
        {
            return false;
        }
        $arr = array_map('strtolower', $arr);
        // 是否存在
        if (in_array(strtolower($request->action()), $arr) || in_array('*', $arr))
        {
            return true;
        }

        // 没找到匹配
        return false;
    }

    /**
     * 生成签名
     * _字符开头的变量不参与签名
     */
    public static function makeSign ($data = [],$app_secret = '')
    {
		$clientInfo['appid'] 		= $data['appid'];
		$clientInfo['phone'] 		= $data['phone'];
		$clientInfo['password'] 	= $data['password'];
		$clientInfo['timestamp'] 	= $data['timestamp'];
        return self::_getOrderMd5($clientInfo,$app_secret);
    }

    /**
     * 计算ORDER的MD5签名
     */
    private static function _getOrderMd5($params = [] , $app_secret = '') {
        $str = $app_secret . $params['appid'] . $params['phone'] . md5($params['password']). $params['timestamp'];
        return strtolower(md5($str));
    }

}