Lin-CMS-TP5
### 微信公众号
微信搜索：林间有风
================================================
FILE: application/.htaccess
================================================
deny from all
================================================
FILE: application/api/behavior/Logger.php
================================================
'日志信息不能为空'
]);
}
if (is_array($params)) {
list('uid' => $uid, 'username' => $username, 'msg' => $message) = $params;
} else {
$tokenService = LoginToken::getInstance();
$uid = $tokenService->getCurrentUid();
$username = $tokenService->getCurrentUserName();
$message = $params;
}
$data = [
'message' => $username . $message,
'user_id' => $uid,
'username' => $username,
'status_code' => Response::getCode(),
'method' => Request::method(),
'path' => '/' . Request::path(),
'permission' => null
];
LinLog::create($data);
}
}
================================================
FILE: application/api/controller/cms/Admin.php
================================================
get('page/d', 0);
$count = $request->get('count/d', 10);
$groupId = $request->get('group_id/d');
return AdminService::getUsers($page, $count, $groupId);
}
/**
* @adminRequired
* @permission('修改用户密码','管理员','hidden')
* @validate('ResetPasswordValidator')
* @param Request $request
* @param $id
* @return Json
* @throws NotFoundException
*/
public function changeUserPassword(Request $request, $id)
{
$newPassword = $request->put('new_password');
AdminService::changeUserPassword($id, $newPassword);
Hook::listen('logger', "修改了用户ID为{$id}的密码");
return writeJson(200, null, '修改成功', 4);
}
/**
* @adminRequired
* @permission('删除用户','管理员','hidden')
* @param int $id
* @param('id','用户id','require|integer')
* @return Json
* @throws NotFoundException
* @throws OperationException
*/
public function deleteUser(int $id)
{
AdminService::deleteUser($id);
Hook::listen('logger', "删除了用户ID为：{$id}的用户");
return writeJson(201, $id, '删除用户成功', 5);
}
/**
* @adminRequired
* @permission('管理员更新用户信息','管理员','hidden')
* @param Request $request
* @param('id','用户id','require|integer')
* @param('group_ids','分组id','require|array|min:1')
* @return Json
* @throws NotFoundException
* @throws OperationException
* @throws ForbiddenException
* @throws DataNotFoundException
* @throws ModelNotFoundException
* @throws DbException
*/
public function updateUser(Request $request, $id)
{
$groupIds = $request->put('group_ids');
AdminService::updateUserInfo($id, $groupIds);
Hook::listen('logger', "更新了用户：{$id}的所属分组");
return writeJson(201, $id, '更新用户成功', 6);
}
/**
* @adminRequired
* @permission('查询所有分组','管理员','hidden')
* @return array|PDOStatement|string|\think\Collection|Collection
* @throws DataNotFoundException
* @throws DbException
* @throws ModelNotFoundException
* @throws NotFoundException
*/
public function getGroupAll()
{
return AdminService::getAllGroups();
}
/**
* @adminRequired
* @permission('查询一个权限组及其权限','管理员','hidden')
* @param int $id
* @param('id','分组id','require|integer')
* @return Query
* @throws DbException
* @throws NotFoundException
*/
public function getGroup(int $id)
{
return AdminService::getGroup($id);
}
/**
* @adminRequired
* @permission('新建一个权限组','管理员','hidden')
* @param Request $request
* @param('name','分组名字','require')
* @param('permission_ids','权限id','require|array|min:1')
* @return Json
* @throws DataNotFoundException
* @throws DbException
* @throws ModelNotFoundException
* @throws NotFoundException
* @throws OperationException
*/
public function createGroup(Request $request)
{
$name = $request->post('name');
$info = $request->post('info');
$permissionIds = $request->post('permission_ids');
$groupId = AdminService::createGroup($name, $info, $permissionIds);
Hook::listen('logger', "创建了分组：{$name}");
return writeJson(201, $groupId, '新增分组成功', 15);
}
/**
* @adminRequired
* @permission('更新一个权限组','管理员','hidden')
* @param Request $request
* @param int $id
* @param('id','分组id','require|integer')
* @param('info','分组信息','require')
* @param('name','分组名字','require')
* @return Json
* @throws DataNotFoundException
* @throws DbException
* @throws ModelNotFoundException
* @throws NotFoundException
*/
public function updateGroup(Request $request, int $id)
{
$name = $request->put('name');
$info = $request->put('info');
$res = AdminService::updateGroup($id, $name, $info);
Hook::listen('logger', "更新了id为{$id}的分组");
return writeJson(200, $res, '更新分组信息成功', 7);
}
/**
* @adminRequired
* @permission('更新一个权限组','管理员','hidden')
* @param int $id
* @param('id','分组id','require|integer')
* @return Json
* @throws ForbiddenException
* @throws NotFoundException
* @throws OperationException
*/
public function deleteGroup(int $id)
{
AdminService::deleteGroup($id);
Hook::listen('logger', "删除了id为{$id}的分组");
return writeJson(200, null, '删除分组成功', 8);
}
/**
* @adminRequired
* @permission('分配多个权限','管理员','hidden')
* @param Request $request
* @param('group_id','分组id','require|integer')
* @param('permission_ids','权限id','require|array|min:1')
* @return Json
* @throws DbException
* @throws NotFoundException
* @throws OperationException
*/
public function dispatchPermissions(Request $request)
{
$groupId = $request->post('group_id');
$permissionIds = $request->post('permission_ids');
AdminService::dispatchPermissions($groupId, $permissionIds);
Hook::listen('logger', "修改了分组ID为{$groupId}的权限");
return writeJson(200, null, '分配权限成功', 9);
}
/**
* @adminRequired
* @permission('删除多个权限','管理员','hidden')
* @param Request $request
* @param('group_id','分组id','require|integer')
* @param('permission_ids','权限id','require|array|min:1')
* @return Json
* @throws DbException
* @throws NotFoundException
*/
public function removePermissions(Request $request)
{
$groupId = $request->post('group_id');
$permissionIds = $request->post('permission_ids');
$deleted = AdminService::removePermissions($groupId, $permissionIds);
Hook::listen('logger', "修改了分组ID为{$groupId}的权限");
return writeJson(200, $deleted, '删除权限成功', 10);
}
}
================================================
FILE: application/api/controller/cms/File.php
================================================
'字段中含有非法字符',
]);
}
$file = (new LocalUploader($request))->upload();
return $file;
}
}
================================================
FILE: application/api/controller/cms/Log.php
================================================
get('start');
$end = $request->get('end');
$name = $request->get('name');
$page = $request->get('page/d', 0);
$count = $request->get('count/d', 10);
return LogService::getLogs($page, $count, $start, $end, $name);
}
/**
* @groupRequired
* @permission('搜索日志','日志')
* @param Request $request
* @param('page','分页数','integer')
* @param('count','分页值','integer')
* @param('start','开始日期','date')
* @param('end','结束日期','date')
* @return array
* @throws ParameterException
*/
public function getUserLogs(Request $request)
{
$start = $request->get('start');
$end = $request->get('end');
$name = $request->get('name');
$keyword = $request->get('keyword');
$page = $request->get('page/d', 0);
$count = $request->get('count/d', 10);
return LogService::searchLogs($page, $count, $start, $end, $name, $keyword);
}
/**
* @groupRequired
* @permission('查询日志记录的用户','日志')
* @param Request $request
* @param('page','分页数','integer')
* @param('count','分页值','integer')
* @return array
* @throws ParameterException
*/
public function getUsers(Request $request)
{
$page = $request->get('page/d', 0);
$count = $request->get('count/d', 10);
return LogService::getUserNames($page, $count);
}
}
================================================
FILE: application/api/controller/cms/User.php
================================================
loginTokenService = LoginToken::getInstance();
}
/**
* @adminRequired
* @permission('注册','管理员','hidden')
* @param Request $request
* @validate('RegisterForm')
* @return Json
* @throws NotFoundException
* @throws OperationException
* @throws RepeatException
* @throws ForbiddenException
* @throws DataNotFoundException
* @throws ModelNotFoundException
* @throws DbException
*/
public function register(Request $request)
{
$params = $request->post();
$user = UserService::createUser($params);
Hook::listen('logger', "新建了用户：{$user['username']}");
return writeJson(201, $user['id'], '注册用户成功');
}
/**
* @param Request $request
* @validate('LoginForm')
* @return array
* @throws DataNotFoundException
* @throws DbException
* @throws ModelNotFoundException
* @throws NotFoundException
* @throws AuthFailedException
*/
public function userLogin(Request $request)
{
$username = $request->post('username');
$password = $request->post('password');
$user = UserService::verify($username, $password);
$tokenExtend = UserService::generateTokenExtend($user);
$token = $this->loginTokenService->getToken($tokenExtend);
Hook::listen('logger', array('uid' => $user->id, 'username' => $user->identifier, 'msg' => '登陆成功获取了令牌'));
return [
'access_token' => $token['accessToken'],
'refresh_token' => $token['refreshToken']
];
}
/**
* @return array
* @throws TokenException
*/
public function refreshToken()
{
$token = $this->loginTokenService->getTokenFromHeaders();
$token = $this->loginTokenService->refresh($token);
return [
'access_token' => $token['accessToken']
];
}
/**
* @loginRequired
*/
public function getAllowedApis()
{
$uid = $this->loginTokenService->getCurrentUid();
return UserService::getPermissions($uid);
}
/**
* @loginRequired
* @return mixed
*/
public function getInformation()
{
$uid = $this->loginTokenService->getCurrentUid();
return UserService::getInformation($uid);
}
/**
* @loginRequired
* @param Request $request
* @validate('UpdateUserForm')
* @return Json
* @throws RepeatException
*/
public function update(Request $request)
{
$params = $request->put();
$row = UserService::updateUser($params);
return writeJson(200, $row, '用户信息更新成功');
}
/**
* @loginRequired
* @validate('ChangePasswordForm')
* @param Request $request
* @return Json
* @throws AuthFailedException
* @throws NotFoundException
*/
public function changePassword(Request $request)
{
$oldPassword = $request->put('old_password');
$newPassword = $request->put('new_password');
$row = UserService::changePassword($oldPassword, $newPassword);
Hook::listen('logger', '修改了自己的密码');
return writeJson(200, $row, '密码修改成功');
}
}
================================================
FILE: application/api/controller/v1/Book.php
================================================
post();
BookModel::create($params);
return writeJson(201, '', '新建图书成功');
}
public function update(Request $request)
{
$params = $request->put();
$bookModel = new BookModel();
$bookModel->save($params, ['id' => $params['id']]);
return writeJson(201, '', '更新图书成功');
}
/**
* @groupRequired
* @permission('删除图书','图书')
* @param $bid
* @return Json
*/
public function delete($bid)
{
BookModel::destroy($bid);
Hook::listen('logger', '删除了id为' . $bid . '的图书');
return writeJson(201, '', '删除图书成功');
}
}
================================================
FILE: application/api/model/BaseModel.php
================================================
belongsToMany('LinUser', 'Lin_user_group', 'user_id', 'group_id');
}
public function permissions()
{
return $this->belongsToMany('LinPermission', 'lin_group_permission', 'permission_id', 'group_id');
}
}
================================================
FILE: application/api/model/admin/LinGroupPermission.php
================================================
count();
$logList = $logList->limit($start, $count)
->order('create_time desc')
->select();
return [
'logList' => $logList,
'total' => $total
];
}
public static function searchLogs(int $start, int $count, $params = [])
{
$logList = self::withSearch(['name', 'start', 'end', 'keyword'], $params);
$total = $logList->count();
$logList = $logList->limit($start, $count)
->order('create_time desc')
->select();
return [
'logList' => $logList,
'total' => $total
];
}
public static function getUserNames(int $start, int $count)
{
$users = self::field('username');
$total = $users->count();
$users = $users->limit($start, $count)
->group('username')
->select();
return [
'userList' => $users,
'total' => $total
];
}
public function searchNameAttr($query, $value)
{
if ($value) {
$query->where('username', $value);
}
}
public
function searchStartAttr($query, $value)
{
if ($value) {
$query->where('create_time', '>= time', $value);
}
}
public
function searchEndAttr($query, $value)
{
if ($value) {
$query->where('create_time', '<= time', $value);
}
}
public
function searchKeywordAttr($query, $value)
{
if ($value) {
$query->whereLike('message', "%{$value}%");
}
}
}
================================================
FILE: application/api/model/admin/LinPermission.php
================================================
where('username', '<>', 'root');
$total = $userList->count();
$userList = $userList
->limit($start, $count)
->with('groups')
->select();
return [
'userList' => $userList,
'total' => $total
];
}
public function groups()
{
return $this->belongsToMany('LinGroup', 'lin_user_group', 'group_id', 'user_id');
}
public function identity()
{
return $this->hasMany('LinUserIdentity', 'user_id');
}
public function searchGroupIdAttr($query, $value)
{
if ($value) {
$query->join('lin_group g', 'g.id=' . $value)->where('g.id', '<>', 1);
}
}
public function getAvatarAttr($value)
{
if ($value) {
$host = Config::get('file.host') ?? "http://127.0.0.1:5000/";
$dir = Config::get('file.store_dir');
return $host . $dir . '/' . $value;
}
return $value;
}
}
================================================
FILE: application/api/model/admin/LinUserGroup.php
================================================
where('identifier', $currentUser->getAttr('username'))
->find();
if (!$user) {
throw new NotFoundException();
}
$user->credential = md5($newPassword);
$user->save();
}
public function checkPassword(string $password): bool
{
return $this->getAttr('credential') === md5($password);
}
}
================================================
FILE: application/api/service/admin/Admin.php
================================================
run();
foreach ($permissionList as $permission) {
$model = LinPermissionModel::where('name', $permission['name'])
->where('module', $permission['module'])
->find();
if (!$model) {
self::createPermission($permission['name'], $permission['module']);
}
}
$permissions = LinPermissionModel::where('mount', MountTypeEnum::MOUNT)
->select()->toArray();
$result = [];
foreach ($permissions as $permission) {
$result[$permission['module']][] = $permission;
}
return $result;
}
/**
* @param int $page
* @param int $count
* @param int $groupId
* @return array
* @throws ParameterException
*/
public static function getUsers(int $page, int $count, int $groupId = null): array
{
list($start, $count) = paginate($count, $page);
$params = $groupId ? ['group_id' => $groupId] : [];
$users = LinUserModel::getUsers($start, $count, $params);
return [
'items' => $users['userList'],
'count' => $count,
'page' => $page,
'total' => $users['total']
];
}
/**
* @param int $uid
* @param string $newPassword
* @throws NotFoundException
*/
public static function changeUserPassword(int $uid, string $newPassword): void
{
$user = LinUserModel::get($uid);
if (!$user) {
throw new NotFoundException();
}
LinUserIdentityModel::resetPassword($user, $newPassword);
}
/**
* @param int $uid
* @throws NotFoundException
* @throws OperationException
*/
public static function deleteUser(int $uid): void
{
$user = LinUserModel::get($uid, 'identity');
if (!$user) {
throw new NotFoundException();
}
Db::startTrans();
try {
$user->groups()->detach();
$user->together('identity')->delete();
Db::commit();
} catch (Exception $ex) {
DB::rollback();
throw new OperationException(['msg' => "删除用户失败"]);
}
}
/**
* @param int $uid
* @param array $groupIds
* @throws ForbiddenException
* @throws NotFoundException
* @throws OperationException
* @throws DataNotFoundException
* @throws ModelNotFoundException
* @throws DbException
*/
public static function updateUserInfo(int $uid, array $groupIds): void
{
$user = LinUserModel::get($uid);
if (!$user) {
throw new NotFoundException();
}
$userGroupIds = LinUserGroupModel::where('user_id', $uid)->column('group_id');
$isAdmin = LinGroupModel::where('level', GroupLevelEnum::ROOT)
->whereIn('id', $userGroupIds)
->find();
if ($isAdmin) {
throw new ForbiddenException(['code' => 10078, 'msg' => '不允许调整root分组信息']);
}
foreach ($userGroupIds as $groupId) {
$group = LinGroupModel::get($groupId);
if ($group['level'] === GroupLevelEnum::ROOT) {
throw new ForbiddenException(['code' => 10073, 'msg' => '不允许添加用户到root分组']);
}
if (!$group) {
throw new NotFoundException(['code' => 10077]);
}
}
Db::startTrans();
try {
$user->groups()->detach();
$user->groups()->attach($groupIds);
Db::commit();
} catch (Exception $ex) {
DB::rollback();
throw new OperationException(['msg' => "更新用户分组失败"]);
}
}
/**
* @return array|PDOStatement|string|\think\Collection|Collection
* @throws DataNotFoundException
* @throws DbException
* @throws ModelNotFoundException
* @throws NotFoundException
*/
public static function getAllGroups()
{
$groups = LinGroupModel::where('level', '<>', GroupLevelEnum::ROOT)->select();
if ($groups->isEmpty()) {
throw new NotFoundException();
}
return $groups;
}
/**
* @param int $id
* @return \think\db\Query
* @throws DbException
* @throws NotFoundException
*/
public static function getGroup(int $id)
{
$group = LinGroupModel::where('level', '<>', GroupLevelEnum::ROOT)
->get($id, 'permissions');
if (!$group) {
throw new NotFoundException();
}
return $group;
}
/**
* @param string $name
* @param string $info
* @param array $permissionIds
* @return int
* @throws DataNotFoundException
* @throws DbException
* @throws ModelNotFoundException
* @throws NotFoundException
* @throws OperationException
*/
public static function createGroup(string $name, string $info, array $permissionIds): int
{
$isExist = LinGroupModel::where('name', $name)->find();
if ($isExist) {
throw new OperationException(['msg' => '分组名已存在']);
}
foreach ($permissionIds as $permissionId) {
$permission = LinPermissionModel::where('mount', MountTypeEnum::MOUNT)
->get($permissionId);
if (!$permission) {
throw new NotFoundException(['error_code' => 10231, 'msg' => '分配了不存在的权限']);
}
}
Db::startTrans();
try {
$group = LinGroupModel::create(['name' => $name, 'info' => $info], true);
$group->permissions()->saveAll($permissionIds);
Db::commit();
return $group->getAttr('id');
} catch (\Exception $ex) {
Db::rollback();
throw new OperationException(['msg' => "新增分组失败:{$ex->getMessage()}"]);
}
}
/**
* @param int $id
* @param string $name
* @param string $info
* @return int
* @throws DataNotFoundException
* @throws DbException
* @throws ModelNotFoundException
* @throws NotFoundException
*/
public static function updateGroup(int $id, string $name, string $info): int
{
$group = LinGroupModel::where('level', '<>', GroupLevelEnum::ROOT)
->find($id);
if (!$group) {
throw new NotFoundException();
}
return $group->save(['name' => $name, 'info' => $info]);
}
/**
* @param int $id
* @throws ForbiddenException
* @throws NotFoundException
* @throws OperationException
*/
public static function deleteGroup(int $id): void
{
$group = LinGroupModel::find($id);
if (!$group) {
throw new NotFoundException();
}
if ($group->getAttr('level') === GroupLevelEnum::ROOT) {
throw new ForbiddenException(['msg' => '不允许删除root分组']);
}
if ($group->getAttr('level') === GroupLevelEnum::GUEST) {
throw new ForbiddenException(['msg' => '不允许删除guest分组']);
}
Db::startTrans();
try {
$group->permissions()->detach();
$group->users()->detach();
Db::commit();
} catch (Exception $ex) {
Db::rollback();
throw new OperationException(['msg' => "删除分组失败:{$ex->getMessage()}"]);
}
}
/**
* @param int $id
* @param array $permissionIds
* @throws DbException
* @throws NotFoundException
* @throws OperationException
*/
public static function dispatchPermissions(int $id, array $permissionIds)
{
$group = LinGroupModel::where('level', '<>', GroupLevelEnum::ROOT)
->get($id);
if (!$group) {
throw new NotFoundException();
}
foreach ($permissionIds as $permissionId) {
$permission = LinPermissionModel::where('mount', MountTypeEnum::MOUNT)
->get($permissionId);
if (!$permission) {
throw new NotFoundException(['error_code' => 10231, 'msg' => '分配了不存在的权限']);
}
}
try {
$group->permissions()->attach($permissionIds);
} catch (Exception $ex) {
throw new OperationException(['msg' => '权限分配失败']);
}
}
/**
* @param int $id
* @param array $permissionIds
* @return int
* @throws DbException
* @throws NotFoundException
*/
public static function removePermissions(int $id, array $permissionIds): int
{
$group = LinGroupModel::where('level', '<>', GroupLevelEnum::ROOT)
->get($id);
if (!$group) {
throw new NotFoundException();
}
foreach ($permissionIds as $permissionId) {
$permission = LinPermissionModel::where('mount', MountTypeEnum::MOUNT)
->get($permissionId);
if (!$permission) {
throw new NotFoundException(['error_code' => 10231, 'msg' => '分配了不存在的权限']);
}
}
return $group->permissions()->detach($permissionIds);
}
public static function createPermission(string $name, string $module): LinPermissionModel
{
return LinPermissionModel::create(['name' => $name, 'module' => $module, 'mount' => 1]);
}
}
================================================
FILE: application/api/service/admin/Log.php
================================================
$start, 'end' => $end, 'name' => $name];
$logsRes = LinLogModel::getLogs($offset, $count, $params);
return [
'items' => $logsRes['logList'],
'count' => $count,
'page' => $page,
'total' => $logsRes['total']
];
}
/**
* @param int $page
* @param int $count
* @param string|null $start
* @param string|null $end
* @param string|null $name
* @param string|null $keyword
* @return array
* @throws ParameterException
*/
public static function searchLogs(int $page, int $count, string $start = null,
string $end = null, string $name = null, string $keyword = null)
{
list($offset, $count) = paginate($count, $page);
$params = ['start' => $start, 'end' => $end, 'name' => $name, 'keyword' => $keyword];
$logsRes = LinLogModel::searchLogs($offset, $count, $params);
return [
'items' => $logsRes['logList'],
'count' => $count,
'page' => $page,
'total' => $logsRes['total']
];
}
/**
* @param int $page
* @param int $count
* @return array
* @throws ParameterException
*/
public static function getUserNames(int $page, int $count)
{
list($start, $count) = paginate($count, $page);
$usersRes = LinLogModel::getUserNames($start, $count);
$items = array_map(function ($item) {
return $item['username'];
}, $usersRes['userList']->toArray());
return [
'items' => $items,
'count' => $count,
'page' => $page,
'total' => $usersRes['total']
];
}
}
================================================
FILE: application/api/service/admin/User.php
================================================
find();
if ($user) {
throw new RepeatException(['msg' => '用户名已存在']);
}
if (isset($params['email'])) {
$user = LinUserModel::where('email', $params['email'])->find();
if ($user) {
throw new RepeatException(['msg' => '邮箱地址已存在']);
}
}
if (isset($params['group_ids'])) {
$groups = LinGroupModel::select($params['group_ids']);
foreach ($groups as $group) {
if ($group['level'] === GroupLevelEnum::ROOT) {
throw new ForbiddenException(['msg' => '不允许分配用户到root分组']);
}
}
if ($groups->isEmpty()) {
throw new NotFoundException();
}
}
return self::registerUser($params);
}
/**
* @param string $username
* @param string $password
* @return Model
* @throws AuthFailedException
* @throws DataNotFoundException
* @throws DbException
* @throws ModelNotFoundException
* @throws NotFoundException
*/
public static function verify(string $username, string $password): Model
{
$user = new LinUserIdentityModel();
$user = $user->where('identifier', $username)
->where('identity_type', IdentityTypeEnum::PASSWORD)
->find();
if (!$user) {
throw new NotFoundException(['msg' => '用户不存在']);
}
if (!$user->checkPassword($password)) {
throw new AuthFailedException();
}
return $user;
}
public static function generateTokenExtend(Model $linUserIdentityModel)
{
$user = LinUserModel::get($linUserIdentityModel['user_id']);
$userPermissions = self::getPermissions($user->getAttr('id'));
return [
'id' => $user->getAttr('id'),
'identifier' => $linUserIdentityModel->getAttr('identifier'),
'email' => $user->getAttr('email'),
'admin' => $userPermissions['admin'],
'permissions' => $userPermissions['permissions'],
];
}
public static function getPermissions(int $uid): array
{
$user = LinUserModel::get($uid);
$groupIds = LinUserGroupModel::where('user_id', $uid)
->column('group_id');
$root = LinGroupModel::where('level', GroupLevelEnum::ROOT)
->whereIn('id', $groupIds)->find();
$user = $user->hidden(['username'])->toArray();
$user['admin'] = $root ? true : false;
if ($root) {
$permissions = LinPermissionModel::where('mount', MountTypeEnum::MOUNT)
->select()
->toArray();
$user['permissions'] = formatPermissions($permissions);
} else {
$permissionIds = LinGroupPermissionModel::whereIn('group_id', $groupIds)
->column('permission_id');
$permissions = LinPermissionModel::where('mount', MountTypeEnum::MOUNT)
->select($permissionIds)->toArray();
$user['permissions'] = formatPermissions($permissions);
}
return $user;
}
public static function getInformation(int $uid)
{
return LinUser::get($uid, 'groups');
}
public static function updateUser(array $params): int
{
$user = LoginToken::getInstance()->getTokenExtend();
if (isset($params['username']) && $params['username'] !== $user['username']) {
$isExit = LinUserModel::where('username', $params['username'])
->find();
if ($isExit) {
throw new RepeatException(['msg' => "用户名已被占用"]);
}
}
if (isset($params['email']) && $params['email'] !== $user['email']) {
$isExit = LinUserModel::where('email', $params['email'])
->find();
if ($isExit) {
throw new RepeatException(['msg' => "邮箱已被占用"]);
}
}
$user = LinUserModel::get($user['id']);
return $user->allowField(true)->save($params);
}
public static function changePassword(string $oldPassword, string $newPassword): int
{
$currentUser = LoginToken::getInstance()->getTokenExtend();
$user = new LinUserIdentityModel();
$user = $user::where('identity_type', IdentityTypeEnum::PASSWORD)
->where('identifier', $currentUser['identifier'])
->find();
if (!$user) {
throw new NotFoundException();
}
if (!$user->checkPassword($oldPassword)) {
throw new AuthFailedException();
}
$user->credential = md5($newPassword);
return $user->save();
}
/**
* @param array $params
* @return LinUserModel
* @throws OperationException
*/
private static function registerUser(array $params): LinUserModel
{
Db::startTrans();
try {
$user = LinUserModel::create($params, true);
$user->identity()->save([
'identity_type' => IdentityTypeEnum::PASSWORD,
'identifier' => $user['username'],
'credential' => md5($params['password'])
]);
// 判断是否同时分配了分组
if (isset($params['group_ids']) && count($params['group_ids']) > 0) {
$user->groups()->attach($params['group_ids']);
} else {
// 没有分配分组，添加到游客分组
$group = LinGroupModel::where('level', GroupLevelEnum::GUEST)->find();
$user->groups()->attach([$group['id']]);
}
Db::commit();
return $user;
} catch (Exception $ex) {
Db::rollback();
throw new OperationException(['msg' => "注册用户失败：{$ex->getMessage()}"]);
}
}
// private static function formatPermissions(array $permissions)
// {
// $groupPermission = [];
// foreach ($permissions as $permission) {
// $item = [
// 'name' => $permission['name'],
// 'module' => $permission['module']
// ];
// $groupPermission[$permission['module']][] = $item;
// }
//
// $result[] = array_map(function ($item) {
// return $item;
// }, $groupPermission);
// return $result;
// }
}
================================================
FILE: application/api/service/token/LoginToken.php
================================================
tokenConfig = (new TokenConfig())
->dualToken($config['enable_dual_token'])
->setAlgorithms($config['algorithms'])
->setIat(time())
->setIss($config['issuer'])
->setAccessSecretKey($config['access_secret_key'])
->setAccessExp($config['access_expire_time'])
->setRefreshSecretKey($config['refresh_secret_key'])
->setRefreshExp($config['refresh_expire_time']);
}
public static function getInstance(): LoginToken
{
if (!self::$instance instanceof self) {
self::$instance = new self();
}
return self::$instance;
}
/**
* 获取令牌
* @param array $extend 要插入到令牌扩展字段中的信息
* @return array
* @throws \Exception
*/
public function getToken(array $extend): array
{
$this->tokenConfig->setExtend($extend);
return TokenUtils::makeToken($this->tokenConfig);
}
/**
* 令牌刷新
* @param string $refreshToken 当开启了双令牌后颁发的refreshToken,用于刷新accessToken
* @return array
* @throws TokenException
*/
public function refresh(string $refreshToken): array
{
try {
return TokenUtils::refresh($refreshToken, $this->tokenConfig);
} catch (SignatureInvalidException $signatureInvalidException) {
throw new TokenException(['msg' => '令牌签名错误']);
} catch (BeforeValidException $beforeValidException) {
throw new TokenException();
} catch (ExpiredException $expiredException) {
throw new TokenException(['error_code' => 10042, 'msg' => '令牌已过期，请重新登录']);
} catch (UnexpectedValueException $unexpectedValueException) {
throw new TokenException();
}
}
/**
* @param string|null $token
* @param string $tokenType
* @return array
* @throws TokenException
*/
public function verify(string $token = null, string $tokenType = 'access')
{
$token = $token ?: $this->getTokenFromHeaders();
try {
return TokenUtils::verifyToken($token, $tokenType, $this->tokenConfig);
} catch (SignatureInvalidException $signatureInvalidException) {
throw new TokenException(['msg' => '令牌签名错误']);
} catch (BeforeValidException $beforeValidException) {
throw new TokenException();
} catch (ExpiredException $expiredException) {
throw new TokenException(['error_code' => 10041, 'msg' => '令牌已过期']);
} catch (UnexpectedValueException $unexpectedValueException) {
throw new TokenException();
}
}
/**
* 获取令牌扩展字段内容
* @param string|null $token
* @param string $tokenType
* @return array
* @throws TokenException
*/
public function getTokenExtend(string $token = null, string $tokenType = 'access'): array
{
return (array)$this->verify($token, $tokenType)['extend'];
}
/**
* 获取指定令牌扩展内容字段的值
* @param string $val
* @return mixed
* @throws TokenException
*/
public function getExtendVal(string $val)
{
return $this->getTokenExtend()[$val];
}
public function getCurrentUid()
{
return $this->getExtendVal('id');
}
public function getCurrentUserName()
{
return $this->getExtendVal('identifier');
}
public function getTokenFromHeaders(): string
{
$authorization = Request::header('authorization');
if (!$authorization) {
throw new TokenException(['msg' => '请求未携带Authorization信息']);
}
list($type, $token) = explode(' ', $authorization);
if ($type !== 'Bearer') throw new TokenException(['msg' => '接口认证方式需为Bearer']);
if (!$token || $token === 'undefined') {
throw new TokenException(['msg' => '尝试获取的Authorization信息不存在']);
}
return $token;
}
}
================================================
FILE: application/api/validate/user/ChangePasswordForm.php
================================================
'require',
'new_password|新密码' => 'require|confirm:confirm_password',
'confirm_password|确认密码' => 'require',
];
}
================================================
FILE: application/api/validate/user/LoginForm.php
================================================
'require',
'password' => 'require',
];
protected $message = [
'username' => '用户名不能为空',
'password' => '密码不能为空'
];
}
================================================
FILE: application/api/validate/user/RegisterForm.php
================================================
'require|confirm:confirm_password',
'confirm_password' => 'require',
'username' => 'require|length:2,10',
'group_ids' => 'array',
'email' => 'email'
];
}
================================================
FILE: application/api/validate/user/ResetPasswordValidator.php
================================================
'require|integer',
'new_password|新密码' => 'require|confirm:confirm_password',
'confirm_password|确认密码' => 'require',
];
}
================================================
FILE: application/api/validate/user/UpdateUserForm.php
================================================
'length:2,10',
'email' => 'email',
'nickname' => 'length:2,10',
];
}
================================================
FILE: application/command.php
================================================
// +----------------------------------------------------------------------
return [];
================================================
FILE: application/common.php
================================================
// +----------------------------------------------------------------------
// 应用公共文件
use LinCmsTp5\exception\ParameterException;
use think\response\Json;
/**
* 统一响应包装函数
* @param $code
* @param $errorCode
* @param $data
* @param $msg
* @return Json
*/
function writeJson($code, $data, $msg = 'ok', $errorCode = 0)
{
$data = [
'code' => $errorCode,
'result' => $data,
'message' => $msg
];
return json($data, $code);
}
/**
* 分页参数处理函数
* @param int $count
* @param int $page
* @return array
* @throws ParameterException
*/
function paginate(int $count = 10, int $page = 0)
{
// $count = intval(Request::get('count', $count));
// $start = intval(Request::get('page', $page));
// $page = $start;
$count = $count >= 15 ? 15 : $count;
$start = $page * $count;
if ($start < 0 || $count < 0) throw new ParameterException();
return [$start, $count];
}
/**
* 权限数组格式化函数
* @param array $permissions
* @return array
*/
function formatPermissions(array $permissions)
{
$groupPermission = [];
foreach ($permissions as $permission) {
$item = [
'permission' => $permission['name'],
'module' => $permission['module']
];
$groupPermission[$permission['module']][] = $item;
}
$result = [];
foreach ($groupPermission as $key => $item) {
array_push($result, [$key => $item]);
}
return $result;
}
================================================
FILE: application/http/middleware/Authentication.php
================================================
check();
if (!$auth) {
throw new ForbiddenException();
}
return $next($request);
}
}
================================================
FILE: application/index/controller/Index.php
================================================
*{ padding: 0; margin: 0; } div{ padding: 4px 48px;} a{color:#2E5CD5;cursor:
pointer;text-decoration: none} a:hover{text-decoration:underline; } body{ background: #fff; font-family:
"Century Gothic","Microsoft yahei"; color: #333;font-size:18px;} h1{ font-size: 100px; font-weight: normal;
margin-bottom: 12px; } p{ line-height: 1.6em; font-size: 42px }
Lin
心上无垢，林间有风。