110 lines
3.5 KiB
PHP
110 lines
3.5 KiB
PHP
<?php
|
|
|
|
namespace plugin\user\expose\middleware;
|
|
|
|
use app\expose\enum\ResponseCode;
|
|
use app\expose\enum\State;
|
|
use app\expose\trait\Json;
|
|
use Exception;
|
|
use loong\oauth\exception\LockException;
|
|
use loong\oauth\exception\TokenExpireException;
|
|
use Webman\MiddlewareInterface;
|
|
use Webman\Http\Response;
|
|
use Webman\Http\Request;
|
|
use loong\oauth\facade\Auth;
|
|
use plugin\user\app\model\PluginUser;
|
|
use support\Log;
|
|
|
|
/**
|
|
* 前台应用必须引用此中间件，否者无法获取用户信息
|
|
*/
|
|
class UserAuth implements MiddlewareInterface
|
|
{
|
|
use Json;
|
|
public function process(Request $request, callable $next): Response
|
|
{
|
|
if ($request->method() == 'OPTIONS') {
|
|
return response('', 204);
|
|
}
|
|
// 鉴权检测
|
|
try {
|
|
$this->Authorization($request);
|
|
$response = $next($request);
|
|
} catch (\Throwable $th) {
|
|
if ($request->expectsJson()) {
|
|
$response = $this->exception($th);
|
|
} else {
|
|
if (config('app.debug')) {
|
|
Log::error($th->getTraceAsString());
|
|
throw $th;
|
|
} else {
|
|
$response = response($th->getMessage(), 500);
|
|
}
|
|
}
|
|
}
|
|
return $response;
|
|
}
|
|
|
|
/**
|
|
* 业务逻辑
|
|
* @author 贵州猿创科技有限公司
|
|
* @Email unknown.renlong@gmail.com
|
|
* @DateTime 2023-03-11
|
|
*/
|
|
public function Authorization(Request $request)
|
|
{
|
|
# 无控制器地址
|
|
if (!$request->controller) {
|
|
return true;
|
|
}
|
|
# 获取控制器鉴权信息
|
|
$controller = new \ReflectionClass($request->controller);
|
|
$properties = $controller->getDefaultProperties();
|
|
# 无需登录方法
|
|
$notNeedLogin = $properties['notNeedLogin'] ?? [];
|
|
# 是否整个控制器都不需要登录
|
|
$notNeedLoginAll = $properties['notNeedLoginAll'] ?? false;
|
|
if ($notNeedLoginAll) {
|
|
$notNeedLogin = array_merge($notNeedLogin, [$request->action]);
|
|
}
|
|
# 是否强制登录
|
|
$isForceLogin = true;
|
|
if (in_array($request->action, $notNeedLogin)) {
|
|
$isForceLogin = false;
|
|
}
|
|
try {
|
|
# 令牌验证
|
|
$token = $request->header('authorization');
|
|
if (!$token) {
|
|
throw new Exception('请先登录', ResponseCode::NEED_LOGIN);
|
|
}
|
|
$user = Auth::setPrefix('CONTROL')->decrypt($token);
|
|
if (!$user) {
|
|
throw new TokenExpireException();
|
|
}
|
|
$request->token = $token;
|
|
$request->user = $user;
|
|
$request->channels_uid = $user['channels_uid'];
|
|
$request->uid = $user['uid'];
|
|
} catch (TokenExpireException $e) {
|
|
if ($isForceLogin) {
|
|
throw new Exception('登录已过期，请重新登录', ResponseCode::NEED_LOGIN);
|
|
}
|
|
} catch (LockException $e) {
|
|
if ($isForceLogin) {
|
|
throw new Exception($e->getMessage(), ResponseCode::LOCK);
|
|
}
|
|
} catch (\Throwable $th) {
|
|
if ($isForceLogin) {
|
|
throw new \Exception($th->getMessage(), ResponseCode::NEED_LOGIN);
|
|
}
|
|
}
|
|
if ($request->uid) {
|
|
$User = PluginUser::where('id', $request->uid)->find();
|
|
if ($User->state != State::YES['value']) {
|
|
throw new Exception("您的账号已被禁用", ResponseCode::NEED_LOGIN);
|
|
}
|
|
}
|
|
}
|
|
}
|