147 lines
4.1 KiB
PHP
147 lines
4.1 KiB
PHP
<?php
|
|
namespace app\api\controller\asset;
|
|
|
|
use app\api\controller\BaseApiController;
|
|
use app\common\model\AssetUser;
|
|
use app\common\model\AssetResource;
|
|
use app\common\model\AssetUserResource;
|
|
use think\facade\Db;
|
|
|
|
class AssetAppController extends BaseApiController
|
|
{
|
|
// 所有接口都免框架登录验证（使用独立 asset_token 体系，在方法内自行校验）
|
|
public array $notNeedLogin = ['login', 'getResourceList', 'changePassword'];
|
|
|
|
/** token 有效期：7 天 */
|
|
const TOKEN_EXPIRE = 86400 * 7;
|
|
|
|
/**
|
|
* @notes 通过 token 获取当前用户（数据库校验）
|
|
*/
|
|
private function getAssetUser(): ?AssetUser
|
|
{
|
|
$token = $this->request->header('token');
|
|
if (empty($token)) {
|
|
return null;
|
|
}
|
|
$user = AssetUser::where('token', $token)
|
|
->where('token_expire_time', '>', time())
|
|
->where('status', 1)
|
|
->find();
|
|
return $user ?: null;
|
|
}
|
|
|
|
/**
|
|
* @notes 小程序端登录
|
|
*/
|
|
public function login()
|
|
{
|
|
$phone = $this->request->post('phone');
|
|
$password = $this->request->post('password');
|
|
|
|
if (empty($phone) || empty($password)) {
|
|
return $this->fail('手机号或密码不能为空');
|
|
}
|
|
|
|
$user = AssetUser::where('phone', $phone)->find();
|
|
if (!$user) {
|
|
return $this->fail('账号不存在');
|
|
}
|
|
|
|
if ($user->status != 1) {
|
|
return $this->fail('账号已被禁用');
|
|
}
|
|
|
|
if (!password_verify($password, $user->password)) {
|
|
return $this->fail('密码错误');
|
|
}
|
|
|
|
// 生成 token 并持久化到数据库
|
|
$token = md5($user->id . time() . uniqid('asset', true));
|
|
$user->token = $token;
|
|
$user->token_expire_time = time() + self::TOKEN_EXPIRE;
|
|
$user->save();
|
|
|
|
return $this->success('登录成功', [
|
|
'token' => $token,
|
|
'user' => [
|
|
'id' => $user->id,
|
|
'phone' => $user->phone
|
|
]
|
|
]);
|
|
}
|
|
|
|
/**
|
|
* @notes 获取用户关联的资源列表
|
|
*/
|
|
public function getResourceList()
|
|
{
|
|
$user = $this->getAssetUser();
|
|
if (!$user) {
|
|
return $this->fail('登录已过期，请重新登录', [], -1);
|
|
}
|
|
|
|
$type = $this->request->get('type', 1);
|
|
$pageNo = $this->request->get('page_no', 1);
|
|
$pageSize = $this->request->get('page_size', 20);
|
|
|
|
$resourceIds = AssetUserResource::where('user_id', $user->id)->column('resource_id');
|
|
|
|
if (empty($resourceIds)) {
|
|
return $this->data([
|
|
'lists' => [],
|
|
'count' => 0,
|
|
'page_no' => $pageNo,
|
|
'page_size' => $pageSize,
|
|
]);
|
|
}
|
|
|
|
$count = AssetResource::whereIn('id', $resourceIds)->where('type', $type)->count();
|
|
$lists = AssetResource::whereIn('id', $resourceIds)
|
|
->where('type', $type)
|
|
->order('id', 'desc')
|
|
->page($pageNo, $pageSize)
|
|
->select();
|
|
|
|
return $this->data([
|
|
'lists' => $lists,
|
|
'count' => $count,
|
|
'page_no' => $pageNo,
|
|
'page_size' => $pageSize,
|
|
]);
|
|
}
|
|
|
|
/**
|
|
* @notes 修改密码
|
|
*/
|
|
public function changePassword()
|
|
{
|
|
$user = $this->getAssetUser();
|
|
if (!$user) {
|
|
return $this->fail('登录已过期，请重新登录', [], -1);
|
|
}
|
|
|
|
$oldPassword = $this->request->post('old_password');
|
|
$password = $this->request->post('password');
|
|
|
|
if (empty($oldPassword)) {
|
|
return $this->fail('请输入原密码');
|
|
}
|
|
if (empty($password)) {
|
|
return $this->fail('请输入新密码');
|
|
}
|
|
if (strlen($password) < 6) {
|
|
return $this->fail('新密码至少6位');
|
|
}
|
|
|
|
if (!password_verify($oldPassword, $user->password)) {
|
|
return $this->fail('原密码不正确');
|
|
}
|
|
|
|
$user->password = password_hash($password, PASSWORD_DEFAULT);
|
|
$user->save();
|
|
|
|
return $this->success('密码修改成功');
|
|
}
|
|
}
|