108 lines
3.0 KiB
PHP
Executable File
108 lines
3.0 KiB
PHP
Executable File
<?php
|
||
|
||
# @Author: 嗨噜客(三亚) <fm453>
|
||
# @Date: 2022-04-15 20:22:03
|
||
# @Email: fm453@lukegzs.com
|
||
# @Last modified by: fm453
|
||
# @Last modified time: 2024-08-09T09:20:31+08:00
|
||
# @Copyright: www.hiluker.cn
|
||
//DataApi站点用户专入口
|
||
|
||
namespace api\controllers\client\v1;
|
||
|
||
use Yii;
|
||
use yii\helpers\Url;
|
||
use common\models\User;
|
||
|
||
class UserController extends Common
|
||
{
|
||
public function beforeAction($action)
|
||
{
|
||
if (!$this->pid) {
|
||
$this->result('您正使用本系统内部接口，禁止非法链接使用！');
|
||
}
|
||
return parent::beforeAction($action);
|
||
}
|
||
|
||
public function actionIndex()
|
||
{
|
||
$apis = [
|
||
'login' => '登陆'
|
||
];
|
||
$this->result('您正使用DACMS系统用户管理接口！', $apis, 200);
|
||
}
|
||
|
||
public function actionLogin()
|
||
{
|
||
$pid = $this->pid;
|
||
$post = $this->postdata;
|
||
$search = $post['search'] ?? NULL;
|
||
|
||
$username = $search['username'] ?? NULL;
|
||
$username = $post['username'] ?? $username;
|
||
|
||
$passwd = $search['passwd'] ?? NULL;
|
||
$passwd = $post['passwd'] ?? $passwd;
|
||
|
||
$return = [];
|
||
if (!$username && !$passwd) {
|
||
$this->result('登陆参数错误！', NULL, 400);
|
||
}
|
||
if (!$username) {
|
||
$this->result('请输入您的账号！', NULL, 400);
|
||
}
|
||
if (!$passwd) {
|
||
$this->result('请输入您的密码！', NULL, 400);
|
||
}
|
||
$username = trim(htmlspecialchars_decode($username));
|
||
$passwd = trim(htmlspecialchars_decode($passwd));
|
||
if (!$username) {
|
||
$this->result('输入错误，请检查您的账号！', NULL, 400);
|
||
}
|
||
if (!$passwd) {
|
||
$this->result('输入有误，请检查您的密码！', NULL, 400);
|
||
}
|
||
|
||
$model = new User();
|
||
$user = $model->findOne(['mobile' => $username]);
|
||
if (!$user) {
|
||
$this->result('查无此人！', NULL, 404);
|
||
}
|
||
|
||
if ($user->status != User::STATUS_ACTIVE) {
|
||
$this->result('账户异常，禁止登陆！', NULL, 403);
|
||
}
|
||
//安全校验，登陆密码
|
||
$isPwdRight = $user->validatePassword($passwd);
|
||
|
||
if (!$isPwdRight) {
|
||
$this->result('密码错误，禁止登陆！', NULL, 400);
|
||
}
|
||
//用户主信息校验结束
|
||
|
||
$_user = $this->userLogin($user, TRUE);
|
||
$this->result('登陆成功！', ['user' => $_user], 200);
|
||
}
|
||
|
||
private function userLogin($user, $hasExt = FALSE)
|
||
{
|
||
// 使用指定用户名获取用户身份实例
|
||
$identity = $user;
|
||
// 登录用户，有效期30d
|
||
$duration = 3600 * 24 * 30;
|
||
$_login = Yii::$app->user->login($identity, $duration);
|
||
if (!$_login) {
|
||
$this->result('登陆失败！', NULL, 400);
|
||
}
|
||
//登陆成功，返回用户信息
|
||
$_user = ['id' => $user->id, 'username' => $user->username, 'mobile' => $user->mobile, 'email' => $user->email, 'avatar' => Url::to($user->avatar)];
|
||
$_user['employee_id'] = $this->employee_id;
|
||
|
||
//生成token（用户数据，是否强制更新，过期时间
|
||
$isLong = $this->postdata['isLong'] ?? FALSE;
|
||
$expire = $isLong ? '+1 Month' : FALSE;
|
||
$_user = $this->userToken($_user, $refresh = TRUE, $expire);
|
||
return $_user;
|
||
}
|
||
}
|