nk-lihaink-cn/app/api/controller/User.php

<?php

namespace app\api\controller;

use Firebase\JWT\JWT;
use think\facade\Validate;
use think\facade\Config;
use app\common\library\Ems;
use app\common\library\Sms;
use app\api\BaseController;
use app\api\middleware\Auth;
use think\facade\Db;
use Firebase\JWT\Key;
use app\admin\model\ShopUser;

/**
 * 会员接口.
 */
class User extends BaseController
{
    /**
     * 控制器中间件 [不需要鉴权]
     * @var array
     */
    protected $middleware = [
        Auth::class => ['except' 	=> ['login', 'mobilelogin', 'register', 'resetpwd', 'changeemail', 'changemobile', 'third'] ]
    ];


    /**
     * 会员中心.
     */
    public function index()
    {   
        $user = ShopUser::find($this->request->uid); // 获取用户信息
        
        // 获取用户关联信息
        $user_msg = Db::table('fa_szxc_information_usermsg')
            ->where('user_id', $this->request->uid)
            ->field('id,name,address_name,phone')
            ->find();

        $this->apiSuccess('', [
            'nickname' => $user['nickname'],
            'phone' => $user['phone'],
            'avatar' => $user['avatar'],
            'address_name' => $user_msg['address_name'],
            'name' => $user_msg['name']
        ]);
    }

    /**
     * 会员登录.
     *
     * @param string $account  账号
     * @param string $password 密码
     */
    public function login()
    {
        $account = $this->request->request('account');
        $password = $this->request->request('password');
        if (! $account || ! $password) {
            $this->apiError('参数不正确');
        }
        $ret = $this->auth->login($account, $password);
        if ($ret) {
            $data = ['userinfo' => $this->auth->getUserinfo()];
            $this->apiSuccess('Logged in successful', $data);
        } else {
            $this->apiError($this->auth->getError());
        }
    }

    /**
     * 手机验证码登录.
     *
     * @param string $mobile  手机号
     * @param string $captcha 验证码
     */
    public function mobilelogin()
    {
        $param = get_params();
        if(empty($param['mobile']) || empty($param['captcha'])){
            $this->apiError('参数错误');
        }
        $mobile = $param['mobile'];
        $captcha = $param['captcha'];
        if (! $mobile ) {
            $this->apiError('参数不正确');
        }
        if (! Validate::regex($mobile, "^1\d{10}$")) {
            $this->apiError('手机格式不正确');
        }
//        if (! Sms::check($mobile, $captcha, 'mobilelogin')) {
//            $this->apiError('验证码错误'));
//        }

        $user = Db::table('fa_user')->where('mobile',$mobile)->find();
        if ($user) {
            if ($user['status'] != 'normal') {
                $this->apiError('账户已经被锁定');
            }
            //如果已经有账号则直接登录
            $token = self::getToken($user['id']);
            $data = [
                'prevtime' => time(),
                'loginip' => request()->ip(),
                'token' => $token
            ];
            $ret = Db::table('fa_user')->where(['id' => $user['id']])->update($data);
            add_user_log('api', '登录');

        } else {
            $ret = $this->reg($mobile,'123456');
        }
        if ($ret) {
//            Sms::flush($mobile, 'mobilelogin');
            $data = ['userinfo' => Db::table('fa_user')->where(['id' => $user['id']])->field('id,id as user_id, username, nickname, mobile, avatar,score,group_id,token,createtime')->find()];
            $find=Db::table('fa_szxc_information_usermsg')->where('user_id',$user['id'])->find();
            $group=Db::table('fa_user_group')->where('id',$data['userinfo']['group_id'])->find();
            $data['userinfo']['group_name']=$group['name'];
            if ($find){
                $data['userinfo']['name']=$find['name'];
                $data['userinfo']['no_update']=0;
                $data['userinfo']['address_name']=$find['address_name'];
            }else{
                $data['userinfo']['no_update']=1;
                $data['userinfo']['address_name']='';
            }

            $this->apiSuccess('登录成功', $data);
        } else {
            $this->apiError('登录失败');
        }
    }

    /**
     * @param $user_id
     * @return string
     */
    public function getToken($user_id){
        $time = time(); //当前时间
        $conf = $this->jwt_conf;
        $token = [
            'iss' => $conf['iss'], //签发者 可选
            'aud' => $conf['aud'], //接收该JWT的一方，可选
            'iat' => $time, //签发时间
            'nbf' => $time-1 , //(Not Before)：某个时间点后才能访问，比如设置time+30，表示当前时间30秒后才能使用
            'exp' => $time+$conf['exptime'], //过期时间,这里设置2个小时
            'data' => [
                //自定义信息，不要定义敏感信息
                'userid' =>$user_id,
            ]
        ];
        return JWT::encode($token, $conf['secrect'], 'HS256'); //输出Token  默认'HS256'
    }

    /**
     * @api {post} /index/reg 会员注册
     * @apiDescription  系统注册接口，返回是否成功的提示，需再次登录

     * @apiParam (请求参数：) {string}             username 用户名
     * @apiParam (请求参数：) {string}             password 密码

     * @apiSuccessExample {json} 成功示例
     * {"code":0,"msg":"注册成功","time":1627375117,"data":[]}
     * @apiErrorExample {json} 失败示例
     * {"code":1,"msg":"该账户已经存在","time":1627374899,"data":[]}
     */
    public function reg($mobile,$pwd)
    {
        $param = [];
        if($mobile || $pwd){
            $this->apiError('参数错误');
        }
        $user = Db::table('fa_user')->where(['username' => $mobile])->find();
        if (!empty($user)) {
            $this->apiError('该账户已经存在');
        }
        $param['salt'] = set_salt(20);
        $param['password'] = set_password($param['pwd'], $param['salt']);
        $param['register_time'] = time();
        $param['headimgurl'] = '/static/admin/images/icon.png';
        $param['register_ip'] = request()->ip();
        $char = mb_substr($mobile, 0, 1, 'utf-8');
        $uid = Db::table('fa_user')->strict(false)->field(true)->insertGetId($param);
        if($uid){
            add_user_log('api', '注册');
            return true;
        }else{
            return false;
        }
    }

    /**
     * 注册会员.
     *
     * @param string $username 用户名
     * @param string $password 密码
     * @param string $email    邮箱
     * @param string $mobile   手机号
     * @param string $code   验证码
     */
    public function register()
    {
        $username = $this->request->request('username');
        $password = $this->request->request('password');
        $email = $this->request->request('email');
        $mobile = $this->request->request('mobile');
        $code = $this->request->request('code');
        if (! $username || ! $password) {
            $this->apiError('参数不正确');
        }
        if ($email && ! Validate::is($email, 'email')) {
            $this->apiError('Email is incorrect');
        }
        if ($mobile && ! Validate::regex($mobile, "^1\d{10}$")) {
            $this->apiError('手机格式不正确');
        }
        $ret = Sms::check($mobile, $code, 'register');
        if (!$ret) {
            $this->apiError('Captcha is incorrect');
        }
        if (empty($email)) {
            $email = $username;
        }
        if (empty($mobile)) {
            $mobile = $username;
        }
        $ret = $this->auth->register($username, $password, $email, $mobile, []);
        if ($ret) {
            $data = ['userinfo' => $this->auth->getUserinfo()];
            $this->apiSuccess('Sign up successful', $data);
        } else {
            $this->apiError($this->auth->getError());
        }
    }

    /**
     * 注销登录.
     */
    public function logout()
    {
        $this->auth->logout();
        $this->apiSuccess('Logout successful');
    }

    /**
     * 修改会员个人信息.
     *
     * @param string $avatar   头像地址
     * @param string $username 用户名
     * @param string $nickname 昵称
     * @param string $bio      个人简介
     */
    public function profile()
    {
        $user = Db::table('fa_user')->where(['id' => $this->request->uid])->find();
//        $username = $this->request->request('username');
        $params = get_params();
        $nickname = $params['nickname'];
//        $bio = $this->request->request('bio');
        $avatar = $params['avatar'];
//        if ($username) {
//            $exists = \app\common\model\User::where('username', $username)->where('id', '<>', $this->auth->id)->find();
//            if ($exists) {
//                $this->apiError('Username already exists'));
//            }
//            $user->username = $username;
//        }
        if($nickname){
            $data['nickname'] = $nickname;
        }
        if($avatar){
            $data['avata'] = $avatar;
        }
//        $user->bio = $bio;
//        $user->save();
        if($data){
            Db::table('fa_user')->where(['id' => $this->request->uid])->update($data);
        }
        $user = Db::table('fa_user')->where(['id' => $this->request->uid])->find();
        $new_user['nickname'] = $user['nickname'];
        $new_user['avatar'] = $user['avatar'];
        $this->apiSuccess('修改成功',$new_user);
    }

    /**
     * 修改邮箱.
     *
     * @param string $email   邮箱
     * @param string $captcha 验证码
     */
    public function changeemail()
    {
        $user = $this->auth->getUser();
        $email = $this->request->post('email');
        $captcha = $this->request->request('captcha');
        if (! $email || ! $captcha) {
            $this->apiError('参数不正确');
        }
        if (! Validate::is($email, 'email')) {
            $this->apiError('Email is incorrect');
        }
        if (\app\common\model\User::where('email', $email)->where('id', '<>', $user->id)->find()) {
            $this->apiError('Email already exists');
        }
        $result = Ems::check($email, $captcha, 'changeemail');
        if (! $result) {
            $this->apiError('Captcha is incorrect');
        }
        $verification = $user->verification;
        $verification->email = 1;
        $user->verification = $verification;
        $user->email = $email;
        $user->save();

        Ems::flush($email, 'changeemail');
        $this->apiSuccess();
    }

    /**
     * 修改手机号.
     *
     * @param string $mobile   手机号
     * @param string $captcha 验证码
     */
    public function changemobile()
    {
        $user = $this->auth->getUser();
        $mobile = $this->request->request('mobile');
        $captcha = $this->request->request('captcha');
        if (! $mobile || ! $captcha) {
            $this->apiError('参数不正确');
        }
        if (! Validate::regex($mobile, "^1\d{10}$")) {
            $this->apiError('手机格式不正确');
        }
        if (\app\common\model\User::where('mobile', $mobile)->where('id', '<>', $user->id)->find()) {
            $this->apiError('Mobile already exists');
        }
        $result = Sms::check($mobile, $captcha, 'changemobile');
        if (! $result) {
            $this->apiError('Captcha is incorrect');
        }
        $verification = $user->verification;
        $verification->mobile = 1;
        $user->verification = $verification;
        $user->mobile = $mobile;
        $user->save();

        Sms::flush($mobile, 'changemobile');
        $this->apiSuccess();
    }

    /**
     * 第三方登录.
     *
     * @param string $platform 平台名称
     * @param string $code     Code码
     */
    public function third()
    {
        $url = url('user/index');
        $platform = $this->request->request('platform');
        $code = $this->request->request('code');
        $config = get_addon_config('third');
        if (! $config || ! isset($config[$platform])) {
            $this->apiError('参数不正确');
        }
        $app = new \addons\third\library\Application($config);
        //通过code换access_token和绑定会员
        $result = $app->{$platform}->getUserInfo(['code' => $code]);
        if ($result) {
            $loginret = \addons\third\library\Service::connect($platform, $result);
            if ($loginret) {
                $data = [
                    'userinfo'  => $this->auth->getUserinfo(),
                    'thirdinfo' => $result,
                ];
                $this->apiSuccess('Logged in successful', $data);
            }
        }
        $this->apiError('Operation failed', $url);
    }

    /**
     * 重置密码
     *
     * @param string $mobile      手机号
     * @param string $newpassword 新密码
     * @param string $captcha     验证码
     */
    public function resetpwd()
    {
        $type = $this->request->request('type');
        $mobile = $this->request->request('mobile');
        $email = $this->request->request('email');
        $newpassword = $this->request->request('newpassword');
        $captcha = $this->request->request('captcha');
        if (! $newpassword || ! $captcha) {
            $this->apiError('参数不正确');
        }
        if ($type == 'mobile') {
            if (! Validate::regex($mobile, "^1\d{10}$")) {
                $this->apiError('手机格式不正确');
            }
            $user = \app\common\model\User::where('mobile',$mobile)->find();
            if (! $user) {
                $this->apiError('User not found');
            }
            $ret = Sms::check($mobile, $captcha, 'resetpwd');
            if (! $ret) {
                $this->apiError('Captcha is incorrect');
            }
            Sms::flush($mobile, 'resetpwd');
        } else {
            if (! Validate::is($email, 'email')) {
                $this->apiError('Email is incorrect');
            }
            $user = \app\common\model\User::where('email',$email)->find();
            if (! $user) {
                $this->apiError('User not found');
            }
            $ret = Ems::check($email, $captcha, 'resetpwd');
            if (! $ret) {
                $this->apiError('Captcha is incorrect');
            }
            Ems::flush($email, 'resetpwd');
        }
        //模拟一次登录
        $this->auth->direct($user->id);
        $ret = $this->auth->changepwd($newpassword, '', true);
        if ($ret) {
            $this->apiSuccess('Reset password successful');
        } else {
            $this->apiError($this->auth->getError());
        }
    }

//    用户实名认证
    public function realname(){
        $params = get_params();
        $uid = $this->request->uid;
        $params['user_id'] = $uid;
        $is_have = Db::table('cms_szxc_user_authentication')->where('user_id',$uid)->find();

        $adds=Db::table('fa_szxc_information_useraddress')->where('user_id',$this->request->uid)->find();
        $params['area_id']=$adds['area_id'];
        $params['street_id']=$adds['street_id'];
        $params['village_id']=$adds['village_id'];

        if($is_have){
            if($is_have['status'] == 0){
                $this->apiError('您的实名认证正在审核中','您的实名认证正在审核中');
            }elseif ($is_have['status'] == 1){
                $this->apiError('您的实名认证已通过','您的实名认证已通过');
            }elseif ($is_have['status'] == 2){
                $params['status'] = 0;
                $params['create_time'] = time();
                $res = Db::table('cms_szxc_user_authentication')->where('user_id',$uid)->strict(false)->field(true)->update($params);
                if($res){
                    $this->apiSuccess('提交成功');
                }else {
                    $this->apiError('提交失败');
                }
            }else{
                $this->apiError('数据出错了','数据出错了');
            }
        }else{
            $params['create_time'] = time();
            $res = Db::table('cms_szxc_user_authentication')->strict(false)->field(true)->insert($params);
            if($res){
                $this->apiSuccess('提交成功');
            }else {
                $this->apiError('提交失败');
            }
        }
    }

//    获取实名认证信息
    public function get_shiming(){
        $uid = $this->request->uid;
        $is_have = Db::table('cms_szxc_user_authentication')->where('user_id',$uid)->find();
        if($is_have){
            $this->apiSuccess('获取成功',$is_have);
        }else{
            $this->apiError('您还没有提交实名认证','您还没有提交实名认证');
        }
    }

    //    获取后台账号信息
    public function get_backstage(){
        $uid = $this->request->uid;
        $admin = Db::table('cms_admin')->where('user_id',$uid)->find();
        if($admin){
            $data['url'] = 'https://nk.lihaink.cn';
            $data['username'] = $admin['username'];
            $pwd = set_password('123456', $admin['salt']);
            if($pwd == $admin['pwd']){
                $data['pwd'] = '123456';
            }else{
                $data['pwd'] = '密码已改';
            }
            $this->apiSuccess('获取成功',$data);
        }else{
            $this->apiError('没有后台权限','没有后台权限');
        }
    }


}