存客宝应用接口初始化

2026-01-05 10:25:32 +08:00
parent fa37227954
commit 02797ba50a
414 changed files with 85530 additions and 75 deletions
--- a/application/superadmin/controller/auth/AuthLoginController.php
+++ b/application/superadmin/controller/auth/AuthLoginController.php
@@ -0,0 +1,166 @@
+<?php
+
+namespace app\superadmin\controller\auth;
+
+use app\common\model\Administrator as AdministratorModel;
+use app\superadmin\controller\administrator\DeleteAdministratorController;
+use library\ResponseHelper;
+use think\Controller;
+use think\Validate;
+use think\facade\Cookie;
+
+class AuthLoginController extends Controller
+{
+    /**
+     * 创建登录令牌
+     * @param DeleteAdministratorController $admin
+     * @return string
+     */
+    protected function createToken(AdministratorModel $admin): string
+    {
+        return md5($admin->id . '|' . $admin->account . 'cunkebao_admin_secret');
+    }
+
+    /**
+     * 数据验证
+     *
+     * @param array $params
+     * @return $this
+     * @throws \Exception
+     */
+    protected function dataValidate(array $params): self
+    {
+        $validate = Validate::make([
+            'account'  => 'require|/\S+/',
+            'password' => 'require|/\S+/',
+        ]);
+
+        if (!$validate->check($params)) {
+            throw new \Exception($validate->getError(), 400);
+        }
+
+        return $this;
+    }
+
+    /**
+     * 获取管理员信息
+     *
+     * @param array $params
+     * @return object|AdministratorModel
+     * @throws \Exception
+     */
+    protected function getAdministrator(array $params): AdministratorModel
+    {
+        extract($params);
+
+        $admin = AdministratorModel::where(['account' => $account])->find();
+
+        if (!$admin ||
+            $admin->password !== $password ||
+            $admin->deleteTime
+        ) {
+            throw new \Exception('账号不存在或密码错误', 404);
+        }
+
+        if (!$admin->status) {
+            throw new \Exception('账号已禁用', 404);
+        }
+
+        return $admin;
+    }
+
+    /**
+     * 更新登录信息
+     *
+     * @param AdministratorModel $admin
+     * @return $this
+     */
+    protected function saveLoginInfo(AdministratorModel $admin): self
+    {
+        $admin->lastLoginTime = time();
+        $admin->lastLoginIp = $this->request->ip();
+
+        if (!$admin->save()) {
+            throw new \Exception('拒绝登录', 403);
+        }
+
+        return $this;
+    }
+
+    /**
+     * 设置登录Cookie，有效期24小时
+     *
+     * @param AdministratorModel $admin
+     * @return void
+     */
+    protected function setCookie(AdministratorModel $admin): void
+    {
+        // 获取当前环境
+        $env = app()->env->get('APP_ENV', 'production');
+
+        // 获取请求的域名
+        $origin = $this->request->header('origin');
+        $domain = '';
+
+        if ($origin) {
+            // 解析域名
+            $parsedUrl = parse_url($origin);
+            if (isset($parsedUrl['host'])) {
+                // 如果是测试环境，使用完整的域名
+                if ($env === 'testing') {
+                    $domain = $parsedUrl['host'];
+                } else {
+                    // 生产环境使用顶级域名
+                    $parts = explode('.', $parsedUrl['host']);
+                    if (count($parts) > 1) {
+                        $domain = '.' . $parts[count($parts) - 2] . '.' . $parts[count($parts) - 1];
+                    }
+                }
+            }
+        }
+
+        // 设置cookie选项
+        $options = [
+            'expire'   => 86400,
+            'path'     => '/',
+            'httponly' => true,
+            'samesite' => 'None',   // 允许跨域
+            'secure'   => true      // 仅 HTTPS 下有效
+        ];
+
+        // 如果有域名，添加到选项
+        if ($domain) {
+            $options['domain'] = $domain;
+        }
+
+        // 设置cookies
+        Cookie::set('admin_id', $admin->id, $options);
+        Cookie::set('admin_token', $this->createToken($admin), $options);
+    }
+
+    /**
+     * 管理员登录
+     *
+     * @return \think\response\Json
+     */
+    public function index()
+    {
+        try {
+            $params = $this->request->only(['account', 'password']);
+
+            $admin = $this->dataValidate($params)->getAdministrator($params);
+            $this->saveLoginInfo($admin)->setCookie($admin);
+
+            return ResponseHelper::success(
+                [
+                    'id'      => $admin->id,
+                    'name'    => $admin->username,
+                    'account' => $admin->account,
+                    'token'   => Cookie::get('admin_token')
+                ]
+            );
+        } catch (\Exception $e) {
+            return ResponseHelper::error($e->getMessage(), $e->getCode());
+        }
+    }
+}