FastMovieAI 二开基线 v1.0 (完整源码)

fastmovie-admin/plugin/user/expose/middleware/Twofa.php

@@ -0,0 +1,79 @@
+<?php
+
+namespace plugin\user\expose\middleware;
+
+use app\expose\enum\ResponseCode;
+use app\expose\trait\Json;
+use Webman\MiddlewareInterface;
+use Webman\Http\Response;
+use Webman\Http\Request;
+use app\expose\exception\Exception;
+use support\Log;
+
+/**
+ * 前台应用必须引用此中间件，否者无法验证用户两步验证
+ */
+class Twofa implements MiddlewareInterface
+{
+    use Json;
+    public function process(Request $request, callable $next): Response
+    {
+        if ($request->method() == 'OPTIONS') {
+            return response('', 204);
+        }
+        // 鉴权检测
+        try {
+            $this->Authorization($request);
+            $response = $next($request);
+        } catch (\Throwable $th) {
+            if ($request->expectsJson()) {
+                $response = $this->exception($th);
+            } else {
+                if (config('app.debug')) {
+                    Log::error($th->getTraceAsString());
+                    throw $th;
+                } else {
+                    $response = response($th->getMessage(), 500);
+                }
+            }
+        }
+        return $response;
+    }
+    public function Authorization(Request $request)
+    {
+        # 无控制器地址
+        if (!$request->controller) {
+            return true;
+        }
+        # 获取控制器鉴权信息
+        $controller = new \ReflectionClass($request->controller);
+        $properties = $controller->getDefaultProperties();
+        $notNeedLogin = $properties['notNeedLogin'] ?? [];
+        $notNeedTwofa = array_merge($notNeedLogin, $properties['notNeedTwofa'] ?? []);
+        $notNeedTwofaAll = $properties['notNeedTwofaAll'] ?? false;
+        if ($notNeedTwofaAll) {
+            $notNeedTwofa = array_merge($notNeedTwofa, [$request->action]);
+        }
+        # 是否强制登录
+        if (in_array($request->action, $notNeedTwofa)) {
+            return true;
+        }
+        if ($request->source === 'saas') {
+            return true;
+        }
+        if (!$request->user) {
+            return true;
+        }
+        if (empty($request->user['twofa_state'])) {
+            return true;
+        }
+        if (empty($request->user['twofa']['expire'])) {
+            throw new Exception('需要两步验证', ResponseCode::NEED_TWOFA,['action'=>'logout']);
+        }
+        if (time() > $request->user['twofa']['expire']) {
+            throw new Exception('需要两步验证', ResponseCode::NEED_TWOFA,['action'=>'logout']);
+        }
+        $request->twofa_state = true;
+        $request->twofa = $request->user['twofa'];
+    }
+}

fastmovie-admin/plugin/user/expose/middleware/UserAuth.php

@@ -0,0 +1,109 @@
+<?php
+
+namespace plugin\user\expose\middleware;
+
+use app\expose\enum\ResponseCode;
+use app\expose\enum\State;
+use app\expose\trait\Json;
+use Exception;
+use loong\oauth\exception\LockException;
+use loong\oauth\exception\TokenExpireException;
+use Webman\MiddlewareInterface;
+use Webman\Http\Response;
+use Webman\Http\Request;
+use loong\oauth\facade\Auth;
+use plugin\user\app\model\PluginUser;
+use support\Log;
+
+/**
+ * 前台应用必须引用此中间件，否者无法获取用户信息
+ */
+class UserAuth implements MiddlewareInterface
+{
+    use Json;
+    public function process(Request $request, callable $next): Response
+    {
+        if ($request->method() == 'OPTIONS') {
+            return response('', 204);
+        }
+        // 鉴权检测
+        try {
+            $this->Authorization($request);
+            $response = $next($request);
+        } catch (\Throwable $th) {
+            if ($request->expectsJson()) {
+                $response = $this->exception($th);
+            } else {
+                if (config('app.debug')) {
+                    Log::error($th->getTraceAsString());
+                    throw $th;
+                } else {
+                    $response = response($th->getMessage(), 500);
+                }
+            }
+        }
+        return $response;
+    }
+
+    /**
+     * 业务逻辑
+     * @author 贵州猿创科技有限公司
+     * @Email unknown.renlong@gmail.com
+     * @DateTime 2023-03-11
+     */
+    public function Authorization(Request $request)
+    {
+        # 无控制器地址
+        if (!$request->controller) {
+            return true;
+        }
+        # 获取控制器鉴权信息
+        $controller = new \ReflectionClass($request->controller);
+        $properties = $controller->getDefaultProperties();
+        # 无需登录方法
+        $notNeedLogin = $properties['notNeedLogin'] ?? [];
+        # 是否整个控制器都不需要登录
+        $notNeedLoginAll = $properties['notNeedLoginAll'] ?? false;
+        if ($notNeedLoginAll) {
+            $notNeedLogin = array_merge($notNeedLogin, [$request->action]);
+        }
+        # 是否强制登录
+        $isForceLogin = true;
+        if (in_array($request->action, $notNeedLogin)) {
+            $isForceLogin = false;
+        }
+        try {
+            # 令牌验证
+            $token = $request->header('authorization');
+            if (!$token) {
+                throw new Exception('请先登录', ResponseCode::NEED_LOGIN);
+            }
+            $user = Auth::setPrefix('CONTROL')->decrypt($token);
+            if (!$user) {
+                throw new TokenExpireException();
+            }
+            $request->token         = $token;
+            $request->user          = $user;
+            $request->channels_uid  = $user['channels_uid'];
+            $request->uid           = $user['uid'];
+        } catch (TokenExpireException $e) {
+            if ($isForceLogin) {
+                throw new Exception('登录已过期，请重新登录', ResponseCode::NEED_LOGIN);
+            }
+        } catch (LockException $e) {
+            if ($isForceLogin) {
+                throw new Exception($e->getMessage(), ResponseCode::LOCK);
+            }
+        } catch (\Throwable $th) {
+            if ($isForceLogin) {
+                throw new \Exception($th->getMessage(), ResponseCode::NEED_LOGIN);
+            }
+        }
+        if ($request->uid) {
+            $User = PluginUser::where('id', $request->uid)->find();
+            if ($User->state != State::YES['value']) {
+                throw new Exception("您的账号已被禁用", ResponseCode::NEED_LOGIN);
+            }
+        }
+    }
+}