358 lines
13 KiB
PHP
358 lines
13 KiB
PHP
|
<?php
|
||
|
|
declare(strict_types=1);
|
||
|
|
|
||
|
|
namespace app\api\controller\auth;
|
||
|
|
|
||
|
|
use app\api\controller\Base;
|
||
|
|
use app\api\validate\auth\LoginValidate;
|
||
|
|
use app\api\validate\auth\RegisterValidate;
|
||
|
|
use app\service\api\auth\AuthService;
|
||
|
|
use core\captcha\Captcha;
|
||
|
|
use core\tool\Json;
|
||
|
|
use Exception;
|
||
|
|
use madong\swagger\annotation\response\SimpleResponse;
|
||
|
|
use madong\swagger\attribute\AllowAnonymous;
|
||
|
|
use OpenApi\Attributes as OA;
|
||
|
|
use support\Container;
|
||
|
|
use Webman\Http\Request;
|
||
|
|
use Webman\Http\Response;
|
||
|
|
|
||
|
|
/**
|
||
|
|
* 认证控制器
|
||
|
|
*/
|
||
|
|
#[OA\Tag(name: '认证模块')]
|
||
|
|
final class AuthController extends Base
|
||
|
|
{
|
||
|
|
public function __construct(AuthService $service)
|
||
|
|
{
|
||
|
|
$this->service = $service;
|
||
|
|
}
|
||
|
|
|
||
|
|
#[OA\Post(
|
||
|
|
path: '/auth/login',
|
||
|
|
summary: '用户登录',
|
||
|
|
requestBody: new OA\RequestBody(
|
||
|
|
required: true,
|
||
|
|
content: new OA\JsonContent(
|
||
|
|
required: ['username', 'password'],
|
||
|
|
properties: [
|
||
|
|
new OA\Property(property: 'username', description: '用户名/手机号/邮箱', type: 'string'),
|
||
|
|
new OA\Property(property: 'password', description: '密码', type: 'string'),
|
||
|
|
new OA\Property(property: 'captcha', description: '验证码', type: 'string'),
|
||
|
|
]
|
||
|
|
)
|
||
|
|
),
|
||
|
|
tags: ['认证'],
|
||
|
|
responses: [
|
||
|
|
new OA\Response(response: 200, description: '登录成功'),
|
||
|
|
new OA\Response(response: 400, description: '参数错误'),
|
||
|
|
new OA\Response(response: 401, description: '登录失败'),
|
||
|
|
]
|
||
|
|
)]
|
||
|
|
#[SimpleResponse(schema: [], example: ['token' => 'string'])]
|
||
|
|
#[AllowAnonymous(requireToken: false, requirePermission: false, description: '公共接口')]
|
||
|
|
public function login(Request $request): Response
|
||
|
|
{
|
||
|
|
try {
|
||
|
|
/** @var LoginValidate $validate */
|
||
|
|
$validate = Container::make(LoginValidate::class);
|
||
|
|
if (!$validate->scene('login')->check($request->post())) {
|
||
|
|
throw new Exception($validate->getError());
|
||
|
|
}
|
||
|
|
$data = $request->all();
|
||
|
|
$result = $this->service->login($data);
|
||
|
|
return Json::success($result);
|
||
|
|
|
||
|
|
} catch (Exception $e) {
|
||
|
|
return Json::fail($e->getMessage());
|
||
|
|
}
|
||
|
|
}
|
||
|
|
|
||
|
|
/**
|
||
|
|
* 手机验证码登录
|
||
|
|
*/
|
||
|
|
#[OA\Post(
|
||
|
|
path: '/auth/login/mobile',
|
||
|
|
summary: '手机验证码登录',
|
||
|
|
requestBody: new OA\RequestBody(
|
||
|
|
required: true,
|
||
|
|
content: new OA\JsonContent(
|
||
|
|
required: ['mobile', 'code'],
|
||
|
|
properties: [
|
||
|
|
new OA\Property(property: 'mobile', description: '手机号', type: 'string'),
|
||
|
|
new OA\Property(property: 'code', description: '验证码', type: 'string'),
|
||
|
|
]
|
||
|
|
)
|
||
|
|
),
|
||
|
|
tags: ['认证'],
|
||
|
|
)]
|
||
|
|
#[SimpleResponse(schema: [], example: ['token' => 'string'])]
|
||
|
|
#[AllowAnonymous(requireToken: false, requirePermission: false, description: '公共接口')]
|
||
|
|
public function loginWithMobile(Request $request): Response
|
||
|
|
{
|
||
|
|
$data = $request->post();
|
||
|
|
$result = $this->service->loginWithMobile($data);
|
||
|
|
return Json::success($result);
|
||
|
|
}
|
||
|
|
|
||
|
|
/**
|
||
|
|
* 用户退出登录
|
||
|
|
*/
|
||
|
|
#[OA\Post(
|
||
|
|
path: '/auth/logout',
|
||
|
|
summary: '用户退出登录',
|
||
|
|
tags: ['认证'],
|
||
|
|
responses: [
|
||
|
|
new OA\Response(response: 200, description: '退出成功'),
|
||
|
|
]
|
||
|
|
)]
|
||
|
|
#[SimpleResponse(schema: [], example: [])]
|
||
|
|
#[AllowAnonymous(requireToken: false, requirePermission: false, description: '公共接口')]
|
||
|
|
/** @Route(methods=["POST"], path="/auth/logout") */
|
||
|
|
public function logout(): Response
|
||
|
|
{
|
||
|
|
$result = $this->service->logout();
|
||
|
|
return Json::success($result);
|
||
|
|
}
|
||
|
|
|
||
|
|
/**
|
||
|
|
* 用户注册
|
||
|
|
*/
|
||
|
|
#[OA\Post(
|
||
|
|
path: '/auth/register',
|
||
|
|
summary: '用户注册',
|
||
|
|
requestBody: new OA\RequestBody(
|
||
|
|
required: true,
|
||
|
|
content: new OA\JsonContent(
|
||
|
|
required: ['username', 'password'],
|
||
|
|
properties: [
|
||
|
|
new OA\Property(property: 'username', description: '用户名', type: 'string'),
|
||
|
|
new OA\Property(property: 'password', description: '密码', type: 'string'),
|
||
|
|
new OA\Property(property: 'email', description: '邮箱', type: 'string'),
|
||
|
|
new OA\Property(property: 'mobile', description: '手机号', type: 'string'),
|
||
|
|
new OA\Property(property: 'pid', description: '推荐人ID', type: 'integer'),
|
||
|
|
]
|
||
|
|
)
|
||
|
|
),
|
||
|
|
tags: ['认证'],
|
||
|
|
)]
|
||
|
|
#[SimpleResponse(schema: [], example: [])]
|
||
|
|
#[AllowAnonymous(requireToken: false, requirePermission: false, description: '公共接口')]
|
||
|
|
public function register(Request $request): Response
|
||
|
|
{
|
||
|
|
try {
|
||
|
|
$validate = Container::make(RegisterValidate::class);
|
||
|
|
if (!$validate->scene('register')->check($request->post())) {
|
||
|
|
throw new Exception($validate->getError());
|
||
|
|
}
|
||
|
|
$captcha = Container::make(Captcha::class);
|
||
|
|
if (!$captcha->check($request->input('captcha_key', ''), $request->input('captcha_code', ''))) {
|
||
|
|
throw new Exception('验证码错误');
|
||
|
|
}
|
||
|
|
$data = $request->all();
|
||
|
|
$result = $this->service->register($data);
|
||
|
|
return Json::success($result);
|
||
|
|
} catch (Exception $e) {
|
||
|
|
return Json::fail($e->getMessage());
|
||
|
|
}
|
||
|
|
|
||
|
|
}
|
||
|
|
|
||
|
|
/**
|
||
|
|
* 手机号注册
|
||
|
|
*/
|
||
|
|
#[OA\Post(
|
||
|
|
path: '/auth/register/mobile',
|
||
|
|
summary: '手机号注册',
|
||
|
|
requestBody: new OA\RequestBody(
|
||
|
|
required: true,
|
||
|
|
content: new OA\JsonContent(
|
||
|
|
required: ['mobile', 'code', 'password'],
|
||
|
|
properties: [
|
||
|
|
new OA\Property(property: 'mobile', description: '手机号', type: 'string'),
|
||
|
|
new OA\Property(property: 'code', description: '验证码', type: 'string'),
|
||
|
|
new OA\Property(property: 'password', description: '密码', type: 'string'),
|
||
|
|
new OA\Property(property: 'pid', description: '推荐人ID', type: 'integer'),
|
||
|
|
]
|
||
|
|
)
|
||
|
|
),
|
||
|
|
tags: ['认证']
|
||
|
|
)]
|
||
|
|
#[SimpleResponse(schema: [], example: [])]
|
||
|
|
#[AllowAnonymous(requireToken: false, requirePermission: false, description: '公共接口')]
|
||
|
|
public function registerWithMobile(Request $request): Response
|
||
|
|
{
|
||
|
|
try {
|
||
|
|
$data = $request->post();
|
||
|
|
$result = $this->service->registerWithMobile($data);
|
||
|
|
return Json::success($result);
|
||
|
|
} catch (Exception $e) {
|
||
|
|
return Json::fail($e->getMessage());
|
||
|
|
}
|
||
|
|
}
|
||
|
|
|
||
|
|
/**
|
||
|
|
* 绑定手机号
|
||
|
|
*/
|
||
|
|
#[OA\Post(
|
||
|
|
path: '/auth/bind',
|
||
|
|
summary: '绑定手机号',
|
||
|
|
requestBody: new OA\RequestBody(
|
||
|
|
required: true,
|
||
|
|
content: new OA\JsonContent(
|
||
|
|
required: ['mobile', 'code'],
|
||
|
|
properties: [
|
||
|
|
new OA\Property(property: 'mobile', description: '手机号', type: 'string'),
|
||
|
|
new OA\Property(property: 'code', description: '验证码', type: 'string'),
|
||
|
|
new OA\Property(property: 'pid', description: '推荐人ID', type: 'integer'),
|
||
|
|
]
|
||
|
|
)
|
||
|
|
),
|
||
|
|
tags: ['认证']
|
||
|
|
)]
|
||
|
|
#[SimpleResponse(schema: [], example: [])]
|
||
|
|
#[AllowAnonymous(requireToken: false, requirePermission: false, description: '公共接口')]
|
||
|
|
public function bindMobile(Request $request): Response
|
||
|
|
{
|
||
|
|
$data = $request->post();
|
||
|
|
$result = $this->service->bindMobile($data);
|
||
|
|
return Json::success($result);
|
||
|
|
}
|
||
|
|
|
||
|
|
/**
|
||
|
|
* 验证邮箱和验证码（忘记密码第一步）
|
||
|
|
*/
|
||
|
|
#[OA\Post(
|
||
|
|
path: '/auth/verify-email',
|
||
|
|
summary: '验证邮箱和验证码',
|
||
|
|
requestBody: new OA\RequestBody(
|
||
|
|
required: true,
|
||
|
|
content: new OA\JsonContent(
|
||
|
|
required: ['email', 'code', 'captcha_key'],
|
||
|
|
properties: [
|
||
|
|
new OA\Property(property: 'email', description: '邮箱地址', type: 'string'),
|
||
|
|
new OA\Property(property: 'code', description: '邮箱验证码', type: 'string'),
|
||
|
|
new OA\Property(property: 'captcha_key', description: '验证码key', type: 'string'),
|
||
|
|
]
|
||
|
|
)
|
||
|
|
),
|
||
|
|
tags: ['认证']
|
||
|
|
)]
|
||
|
|
#[SimpleResponse(schema: [], example: [])]
|
||
|
|
#[AllowAnonymous(requireToken: false, requirePermission: false, description: '公共接口')]
|
||
|
|
public function verifyEmail(Request $request): Response
|
||
|
|
{
|
||
|
|
try {
|
||
|
|
$data = $request->post();
|
||
|
|
$result = $this->service->verifyEmail($data);
|
||
|
|
return Json::success($result);
|
||
|
|
} catch (Exception $e) {
|
||
|
|
return Json::fail($e->getMessage());
|
||
|
|
}
|
||
|
|
}
|
||
|
|
|
||
|
|
/**
|
||
|
|
* 发送邮箱验证码
|
||
|
|
*/
|
||
|
|
#[OA\Post(
|
||
|
|
path: '/auth/send-email-code',
|
||
|
|
summary: '发送邮箱验证码',
|
||
|
|
requestBody: new OA\RequestBody(
|
||
|
|
required: true,
|
||
|
|
content: new OA\JsonContent(
|
||
|
|
required: ['email', 'captcha_key', 'captcha_code'],
|
||
|
|
properties: [
|
||
|
|
new OA\Property(property: 'email', description: '邮箱地址', type: 'string'),
|
||
|
|
new OA\Property(property: 'captcha_key', description: '图片验证码key', type: 'string'),
|
||
|
|
new OA\Property(property: 'captcha_code', description: '图片验证码', type: 'string'),
|
||
|
|
]
|
||
|
|
)
|
||
|
|
),
|
||
|
|
tags: ['认证']
|
||
|
|
)]
|
||
|
|
#[SimpleResponse(schema: [], example: [])]
|
||
|
|
#[AllowAnonymous(requireToken: false, requirePermission: false, description: '公共接口')]
|
||
|
|
public function sendEmailCode(Request $request): Response
|
||
|
|
{
|
||
|
|
try {
|
||
|
|
$email = $request->post('email');
|
||
|
|
$captchaKey = $request->post('captcha_key');
|
||
|
|
$captchaCode = $request->post('captcha_code');
|
||
|
|
|
||
|
|
// 验证图片验证码
|
||
|
|
if (empty($captchaKey) || empty($captchaCode)) {
|
||
|
|
throw new Exception('图片验证码不能为空', 400);
|
||
|
|
}
|
||
|
|
|
||
|
|
$captcha = new Captcha();
|
||
|
|
if (!$captcha->check($captchaKey, $captchaCode)) {
|
||
|
|
throw new Exception('图片验证码错误', 400);
|
||
|
|
}
|
||
|
|
$this->service->sendEmailCode($email);
|
||
|
|
return Json::success('success', []);
|
||
|
|
} catch (Exception $e) {
|
||
|
|
return Json::fail($e->getMessage());
|
||
|
|
}
|
||
|
|
}
|
||
|
|
|
||
|
|
/**
|
||
|
|
* 重置密码（忘记密码第二步）
|
||
|
|
*/
|
||
|
|
#[OA\Post(
|
||
|
|
path: '/auth/forget-password',
|
||
|
|
summary: '重置密码',
|
||
|
|
requestBody: new OA\RequestBody(
|
||
|
|
required: true,
|
||
|
|
content: new OA\JsonContent(
|
||
|
|
required: ['email', 'code', 'new_password'],
|
||
|
|
properties: [
|
||
|
|
new OA\Property(property: 'email', description: '邮箱地址', type: 'string'),
|
||
|
|
new OA\Property(property: 'code', description: '邮箱验证码', type: 'string'),
|
||
|
|
new OA\Property(property: 'new_password', description: '新密码', type: 'string'),
|
||
|
|
new OA\Property(property: 'confirm_password', description: '确认密码', type: 'string'),
|
||
|
|
]
|
||
|
|
)
|
||
|
|
),
|
||
|
|
tags: ['认证']
|
||
|
|
)]
|
||
|
|
#[SimpleResponse(schema: [], example: [])]
|
||
|
|
#[AllowAnonymous(requireToken: false, requirePermission: false, description: '公共接口')]
|
||
|
|
public function forgetPassword(Request $request): Response
|
||
|
|
{
|
||
|
|
try {
|
||
|
|
$data = $request->post();
|
||
|
|
$this->service->forgetPassword($data);
|
||
|
|
return Json::success('操作成功', []);
|
||
|
|
} catch (Exception $e) {
|
||
|
|
return Json::fail($e->getMessage());
|
||
|
|
}
|
||
|
|
}
|
||
|
|
|
||
|
|
/**
|
||
|
|
* 刷新 token
|
||
|
|
*/
|
||
|
|
#[OA\Post(
|
||
|
|
path: '/auth/refresh',
|
||
|
|
summary: '刷新 token',
|
||
|
|
tags: ['认证'],
|
||
|
|
responses: [
|
||
|
|
new OA\Response(response: 200, description: '刷新成功'),
|
||
|
|
new OA\Response(response: 401, description: '刷新失败'),
|
||
|
|
]
|
||
|
|
)]
|
||
|
|
#[SimpleResponse(schema: [], example: ['access_token' => 'string', 'refresh_token' => 'string'])]
|
||
|
|
#[AllowAnonymous(requireToken: false, requirePermission: false, description: '公共接口')]
|
||
|
|
public function refresh(): Response
|
||
|
|
{
|
||
|
|
try {
|
||
|
|
$jwt = new \core\jwt\JwtToken();
|
||
|
|
$token = $jwt->refresh();
|
||
|
|
return Json::success('ok', [
|
||
|
|
'access_token' => $token->accessToken,
|
||
|
|
'refresh_token' => $token->refreshToken,
|
||
|
|
]);
|
||
|
|
} catch (\Throwable $e) {
|
||
|
|
return Json::fail($e->getMessage(), [], 401);
|
||
|
|
}
|
||
|
|
}
|
||
|
|
}
|