|
|
<?php
|
|
|
|
|
|
namespace app\common\util;
|
|
|
|
|
|
use app\common\util\JwtUtil;
|
|
|
use app\common\CommonConstant;
|
|
|
use \think\Db;
|
|
|
|
|
|
/**
|
|
|
* 权限认证
|
|
|
* @author hardphp@163.com
|
|
|
*
|
|
|
*/
|
|
|
class AuthUtil
|
|
|
{
|
|
|
/**
|
|
|
* 签名验证,校验数据
|
|
|
*/
|
|
|
public static function checkSign()
|
|
|
{
|
|
|
|
|
|
$appid = request()->header('x-access-appid');
|
|
|
if (empty($appid)) {
|
|
|
my_exception(null, CommonConstant::e_app_miss);
|
|
|
}
|
|
|
// 实时数据
|
|
|
$app = Db::name('app')->where(['appId' => $appid])->find();
|
|
|
//认证：状态
|
|
|
if ($app ['isEnabled'] != CommonConstant::db_true) {
|
|
|
my_exception(null, CommonConstant::e_app_disabled);
|
|
|
}
|
|
|
|
|
|
// 接口签名认证
|
|
|
if (config("system.app_sign_auth_on") === true) {
|
|
|
$signature = input("signature"); // app端生成的签名
|
|
|
$param = input("param.");
|
|
|
unset($param['signature']);
|
|
|
if (empty($signature)) {
|
|
|
my_exception(null, CommonConstant::e_api_sign_miss);
|
|
|
}
|
|
|
//数组排序
|
|
|
ksort($param);
|
|
|
$str = http_build_query($param);
|
|
|
$signature1 = md5(sha1($str) . $app['appSecret']);
|
|
|
|
|
|
if ($signature != $signature1) {
|
|
|
my_exception(null, CommonConstant::e_api_sign_wrong);
|
|
|
}
|
|
|
}
|
|
|
return msg_return(1, 'ok');
|
|
|
}
|
|
|
|
|
|
/**
|
|
|
* 验证用户身份
|
|
|
* @param string $type user 普通用户，admin 管理员，seller 商家
|
|
|
* @return multitype:
|
|
|
*/
|
|
|
public static function checkUser($type = 'user')
|
|
|
{
|
|
|
// JWT用户令牌认证，令牌内容获取
|
|
|
$userToken = request()->header('x-access-token');
|
|
|
if (empty($userToken)) {
|
|
|
my_exception(null, CommonConstant::e_api_user_token_miss);
|
|
|
}
|
|
|
$userToken = think_decrypt($userToken);
|
|
|
$payload = JwtUtil::decode($userToken);
|
|
|
if ($payload === false || empty($payload->uid) || empty($payload->loginTime)) {
|
|
|
my_exception(null, CommonConstant::e_api_user_token_miss);
|
|
|
}
|
|
|
//用户登录有效期
|
|
|
$userLoginTime = config('system.user_login_time');
|
|
|
if ($payload->loginTime < time() - $userLoginTime) {
|
|
|
my_exception(null, CommonConstant::e_api_user_token_expire);
|
|
|
}
|
|
|
// 实时用户数据
|
|
|
$user = Db::name($type)->getById($payload->uid);
|
|
|
//是否多设备登录
|
|
|
if (!empty($user ['loginTime']) && $user ['loginTime'] != $payload->loginTime) {
|
|
|
my_exception(null, CommonConstant::e_api_multiple_device_login);
|
|
|
}
|
|
|
//认证：状态
|
|
|
if ($user ['isEnabled'] != CommonConstant::db_true) {
|
|
|
my_exception(null, CommonConstant::e_user_disabled);
|
|
|
}
|
|
|
return msg_return(1, $user);
|
|
|
}
|
|
|
|
|
|
}
|
