config = array_merge($this->config, $config); } $this->options = array_merge($this->config, $options); } /** * @param array $options 参数 * @return Auth */ public static function instance($options = []) { if (is_null(self::$instance)) { self::$instance = new static($options); } return self::$instance; } /** * 获取User模型 * @return User */ public function getUser() { return $this->_user; } /** * 兼容调用user模型的属性 * @param string $name * @return mixed */ public function __get($name) { return $this->_user ? $this->_user->$name : null; } /** * 根据Token初始化 * @param string $token Token * @return boolean */ public function init($token) { if ($this->_logined) { return true; } if ($this->_error) { return false; } $data = Token::get($token,false,$this->options); if (!$data) { return false; } $login_id = trim($data['login_id']); $login_id = intval(substr($login_id, 5)); if ($login_id) { $staff = Staff::get($login_id); if (!$staff) { $this->setError('Account not exist'); return false; } $this->_user = $staff; $this->_logined = true; $this->_token = $token; //初始化成功的事件 Hook::listen("user_init_successed", $this->_user); return true; } else { $this->setError('You are not logged in'); return false; } } /** * 用户登录 * * @param string $account 账号,用户名、邮箱、手机号 * @param string $password 密码 * @return boolean */ public function login($account, $password) { $field = Validate::is($account, 'email') ? 'email' : (Validate::regex($account, '/^1\d{10}$/') ? 'mobile' : 'mobile'); $staff = Staff::get([$field => $account]); if (!$staff) { $this->setError('Account is incorrect'); return false; } if ($staff->status != 1) { $this->setError('Account is locked'); return false; } if ($staff->password != $this->getEncryptPassword($password, $staff->salt)) { $this->setError('Password is incorrect'); return false; } //直接登录会员 $this->direct($staff->id); return true; } /** * 注册用户 * @param string $nickname 用户名 * @param string $mobile 手机号 * @param array $extend 扩展参数 * @return boolean */ public function register($nickname, $mobile = '', $extend = []) { $data = [ 'nickname' => $nickname, 'mobile' => $mobile, ]; $params = array_merge($data, [ 'status' => 1 ]); $params = array_merge($params, $extend); //账号注册时需要开启事务,避免出现垃圾数据 Db::startTrans(); try { $staff = Staff::create($params, true); $this->_user = Staff::get($staff->id); //设置Token $this->_token = Random::uuid(); Token::set($this->_token, 'staff' . $staff->id, $this->keeptime, $this->options); //设置登录状态 $this->_logined = true; //注册成功的事件 Hook::listen("staff_register_successed", $this->_user, $data); Db::commit(); } catch (Exception $e) { $this->setError($e->getMessage()); Db::rollback(); return false; } return true; } /** * 直接登录账号 * @param int $staff_id * @return boolean */ public function direct($staff_id) { $staff = Staff::get($staff_id); if ($staff) { Db::startTrans(); try { $this->_user = $staff; $this->_token = Random::uuid(); Token::set($this->_token, 'staff' . $staff->id, $this->keeptime,$this->options); $this->_logined = true; //登录成功的事件 Hook::listen("staff_login_successed", $this->_user); Db::commit(); } catch (Exception $e) { Db::rollback(); $this->setError($e->getMessage()); return false; } return true; } else { return false; } } /** * 退出 * @return boolean */ public function logout() { if (!$this->_logined) { $this->setError('You are not logged in'); return false; } //设置登录标识 $this->_logined = false; //删除Token Token::delete($this->_token,$this->options); //退出成功的事件 Hook::listen("staff_logout_successed", $this->_user); return true; } /** * 判断是否登录 * @return boolean */ public function isLogin() { if ($this->_logined) { return true; } return false; } /** * 获取当前Token * @return string */ public function getToken() { return $this->_token; } /** * 获取员工基本信息 */ public function getUserinfo() { $data = $this->_user->toArray(); $allowFields = $this->getAllowFields(); $userinfo = array_intersect_key($data, array_flip($allowFields)); $userinfo = array_merge($userinfo, Token::get($this->_token,$this->options)); $group_ids=explode(',',$userinfo['group_ids']); $userinfo['role_type'] = 1;//基础和团队 if (in_array(1, $group_ids)) {//超级管理员 $userinfo['role_type'] = 9; } return $userinfo; } /** * 获取当前请求的URI * @return string */ public function getRequestUri() { return $this->requestUri; } /** * 设置当前请求的URI * @param string $uri */ public function setRequestUri($uri) { $this->requestUri = $uri; } /** * 获取允许输出的字段 * @return array */ public function getAllowFields() { return $this->allowFields; } /** * 设置允许输出的字段 * @param array $fields */ public function setAllowFields($fields) { $this->allowFields = $fields; } /** * 获取密码加密后的字符串 * @param string $password 密码 * @param string $salt 密码盐 * @return string */ public function getEncryptPassword($password, $salt = '') { return md5(md5($password) . $salt); } /** * 检测当前控制器和方法是否匹配传递的数组 * @param array $arr 需要验证权限的数组 * @return boolean */ public function match($arr = []) { $request = Request::instance(); $arr = is_array($arr) ? $arr : explode(',', $arr); if (!$arr) { return false; } $arr = array_map('strtolower', $arr); // 是否存在 if (in_array(strtolower($request->action()), $arr) || in_array('*', $arr)) { return true; } // 没找到匹配 return false; } /** * 设置会话有效时间 * @param int $keeptime 默认为永久 */ public function keeptime($keeptime = 0) { $this->keeptime = $keeptime; } /** * 设置错误信息 * @param $error 错误信息 * @return Auth */ public function setError($error) { $this->_error = $error; return $this; } /** * 获取错误信息 * @return string */ public function getError() { return $this->_error ? __($this->_error) : ''; } /** * 修改密码 * @param string $newpassword 新密码 * @param string $oldpassword 旧密码 * @param bool $ignoreoldpassword 忽略旧密码 * @return boolean */ public function changepwd($newpassword, $oldpassword = '', $ignoreoldpassword = false) { if (!$this->_logined) { $this->setError('你当前还未登录'); return false; } //判断旧密码是否正确 if ($this->_user->password == $this->getEncryptPassword($oldpassword, $this->_user->salt) || $ignoreoldpassword) { Db::startTrans(); try { $salt = Random::alnum(); $newpassword = $this->getEncryptPassword($newpassword, $salt); Staff::where(['id'=>$this->_user->id])->update([ 'password' => $newpassword, 'salt' => $salt, ]); Token::delete($this->_token); //修改密码成功的事件 Db::commit(); } catch (Exception $e) { Db::rollback(); $this->setError($e->getMessage()); return false; } return true; } else { $this->setError('旧密码不正确'); return false; } } }