其余文件

app/api/http/middleware/Login.php

@@ -0,0 +1,135 @@
+<?php
+// +----------------------------------------------------------------------
+// | likeshop开源商城系统
+// +----------------------------------------------------------------------
+// | 欢迎阅读学习系统程序代码，建议反馈是我们前进的动力
+// | gitee下载：https://gitee.com/likeshop_gitee
+// | github下载：https://github.com/likeshop-github
+// | 访问官网：https://www.likeshop.cn
+// | 访问社区：https://home.likeshop.cn
+// | 访问手册：http://doc.likeshop.cn
+// | 微信公众号：likeshop技术社区
+// | likeshop系列产品在gitee、github等公开渠道开源版本可免费商用，未经许可不能去除前后端官方版权标识
+// |  likeshop系列产品收费版本务必购买商业授权，购买去版权授权后，方可去除前后端官方版权标识
+// | 禁止对系统程序代码以任何目的，任何形式的再发布
+// | likeshop团队版权所有并拥有最终解释权
+// +----------------------------------------------------------------------
+// | author: likeshop.cn.team
+// +----------------------------------------------------------------------
+
+namespace app\api\http\middleware;
+
+use app\api\cache\TokenCache;
+use think\exception\ValidateException;
+use app\api\validate\TokenValidate;
+use app\common\model\user\User;
+use app\common\server\JsonServer;
+
+class Login
+{
+    /**
+     * 登录验证
+     * @param $request
+     * @param \Closure $next
+     * @return mixed|\think\response\Redirect
+     */
+    public function handle($request, \Closure $next)
+    {
+        //允许跨域调用
+        header('Access-Control-Allow-Origin: *');
+        header("Access-Control-Allow-Headers: Authorization, Sec-Fetch-Mode, DNT, X-Mx-ReqToken, Keep-Alive, User-Agent, If-Match, If-None-Match, If-Unmodified-Since, X-Requested-With, If-Modified-Since, Cache-Control, Content-Type, Accept-Language, Origin, Accept-Encoding,Access-Token,token");
+        header('Access-Control-Allow-Methods: GET, POST, PATCH, PUT, DELETE');
+        header('Access-Control-Max-Age: 1728000');
+        header('Access-Control-Allow-Credentials:true');
+
+        if (strtoupper($request->method()) == "OPTIONS") {
+            return response();
+        }
+
+        $token = $request->header('token');
+
+        // 免登录
+        if ($this->isNotNeedLogin($request) && empty($token)) {
+            return $next($request);
+        }
+
+        // 根据token读取缓存
+        $token_cache = new TokenCache($token, ['token' => $token]);
+        if (!$token_cache->isEmpty()) {
+            $request->user_info = $token_cache->get();
+            return $next($request);
+        }
+
+        //token验证，并生成缓存
+        $validateError = '';
+        try{
+            validate(TokenValidate::class)->check(['token' => $token]);
+            $userInfo = User::alias('u')
+                ->join('session s', 'u.id=s.user_id')
+                ->where(['s.token' => $token])
+                ->field('u.*,s.token,s.client')
+                ->find();
+            $userInfo = $userInfo ? $userInfo->toArray() : [];
+            // 设置缓存
+            $token_cache->set(600);
+            // 设置用户信息
+            $request->user_info = $userInfo;
+            return $next($request);
+        }catch(ValidateException $e) {
+            $validateError = $e->getError();
+        }
+
+        //无需要登录，带token的情况
+        if ($this->isNotNeedLogin($request) && $token) {
+            return $next($request);
+        }
+
+        //登录失败
+        $result = array(
+            'code' => -1,
+            'show' => 1,
+            'msg'  => $validateError,
+            'data' => []
+        );
+        return json($result);
+
+    }
+
+
+    /**
+     * 是否免登录验证
+     * @param $request
+     * @return bool
+     */
+    private function isNotNeedLogin($request)
+    {
+        // 提取当前请求控制器名称
+        $baseUrl = $request->baseUrl(); //   /api/goods/test
+        $apperTwo = strpos($baseUrl, '/', 1);
+        $apperThird  = strpos($baseUrl, '/', $apperTwo + 1);
+        $len = $apperThird - $apperTwo - 1;
+        $controllerName = substr($baseUrl, $apperTwo + 1, $len);
+
+        // 控制名称处理(兼容下划线的情况 例：goods_columns 处理成 GoodsColumns)
+        $controllerNameArr = explode('_', $controllerName);
+        $controllerNameArr = array_map('ucfirst', $controllerNameArr);
+        $controllerName = implode($controllerNameArr);
+
+        // 实例化当前请求的控制器
+        $controllerObj = invoke('\\app\\api\\controller\\' . $controllerName);
+        $data = $controllerObj->like_not_need_login;
+        if (empty($data)) {
+            return false;
+        }
+
+        // 提取操作名称
+        $action = strtolower(substr($baseUrl, $apperThird + 1));
+
+        $data = array_map('strtolower', $data);
+
+        if (!in_array($action, $data)) {
+            return false;
+        }
+        return true;
+    }
+}