563 lines
20 KiB
PHP
Executable File
563 lines
20 KiB
PHP
Executable File
<?php
|
||
|
||
namespace App\Http\Controllers\Api;
|
||
|
||
use App\Models\User;
|
||
use App\Module\Base;
|
||
use Arr;
|
||
use Cache;
|
||
use Captcha;
|
||
use Carbon\Carbon;
|
||
use Request;
|
||
|
||
/**
|
||
* @apiDefine users
|
||
*
|
||
* 会员
|
||
*/
|
||
class UsersController extends AbstractController
|
||
{
|
||
/**
|
||
* @api {get} api/users/login 01. 登录、注册
|
||
*
|
||
* @apiDescription 需要token身份
|
||
* @apiVersion 1.0.0
|
||
* @apiGroup users
|
||
* @apiName login
|
||
*
|
||
* @apiParam {String} type 类型
|
||
* - login:登录（默认）
|
||
* - reg:注册
|
||
* @apiParam {String} email 邮箱
|
||
* @apiParam {String} password 密码
|
||
* @apiParam {String} [code] 登录验证码
|
||
* @apiParam {String} [invite] 注册邀请码
|
||
*
|
||
* @apiSuccess {Number} ret 返回状态码（1正确、0错误）
|
||
* @apiSuccess {String} msg 返回信息（错误描述）
|
||
* @apiSuccess {Object} data 返回数据（同"获取我的信息"接口）
|
||
*/
|
||
public function login()
|
||
{
|
||
$type = trim(Request::input('type'));
|
||
$email = trim(Request::input('email'));
|
||
$password = trim(Request::input('password'));
|
||
if ($type == 'reg') {
|
||
$setting = Base::setting('system');
|
||
if ($setting['reg'] == 'close') {
|
||
return Base::retError('未开放注册');
|
||
} elseif ($setting['reg'] == 'invite') {
|
||
$invite = trim(Request::input('invite'));
|
||
if (empty($invite) || $invite != $setting['reg_invite']) {
|
||
return Base::retError('请输入正确的邀请码');
|
||
}
|
||
}
|
||
$user = User::reg($email, $password);
|
||
} else {
|
||
$needCode = !Base::isError(User::needCode($email));
|
||
if ($needCode) {
|
||
$code = trim(Request::input('code'));
|
||
if (empty($code)) {
|
||
return Base::retError('请输入验证码', ['code' => 'need']);
|
||
}
|
||
if (!Captcha::check($code)) {
|
||
return Base::retError('请输入正确的验证码', ['code' => 'need']);
|
||
}
|
||
}
|
||
//
|
||
$retError = function ($msg) use ($email) {
|
||
Cache::forever("code::" . $email, "need");
|
||
$needCode = !Base::isError(User::needCode($email));
|
||
$needData = [ 'code' => $needCode ? 'need' : 'no' ];
|
||
return Base::retError($msg, $needData);
|
||
};
|
||
$user = User::whereEmail($email)->first();
|
||
if (empty($user)) {
|
||
return $retError('账号或密码错误');
|
||
}
|
||
if ($user->password != Base::md52($password, $user->encrypt)) {
|
||
return $retError('账号或密码错误');
|
||
}
|
||
//
|
||
if (in_array('disable', $user->identity)) {
|
||
return $retError('帐号已停用...');
|
||
}
|
||
Cache::forget("code::" . $email);
|
||
}
|
||
//
|
||
$array = [
|
||
'login_num' => $user->login_num + 1,
|
||
'last_ip' => Base::getIp(),
|
||
'last_at' => Carbon::now(),
|
||
'line_ip' => Base::getIp(),
|
||
'line_at' => Carbon::now(),
|
||
];
|
||
$user->updateInstance($array);
|
||
$user->save();
|
||
User::token($user);
|
||
return Base::retSuccess($type == 'reg' ? "注册成功" : "登录成功", $user);
|
||
}
|
||
|
||
/**
|
||
* @api {get} api/users/login/needcode 02. 是否需要验证码
|
||
*
|
||
* @apiDescription 用于判断是否需要登录验证码
|
||
* @apiVersion 1.0.0
|
||
* @apiGroup users
|
||
* @apiName login__needcode
|
||
*
|
||
* @apiParam {String} email 用户名
|
||
*
|
||
* @apiSuccess {Number} ret 返回状态码（1需要、0不需要）
|
||
* @apiSuccess {String} msg 返回信息（错误描述）
|
||
* @apiSuccess {Object} data 返回数据
|
||
*/
|
||
public function login__needcode()
|
||
{
|
||
return User::needCode(trim(Request::input('email')));
|
||
}
|
||
|
||
/**
|
||
* @api {get} api/users/login/codeimg 03. 验证码图片
|
||
*
|
||
* @apiDescription 用于判断是否需要登录验证码
|
||
* @apiVersion 1.0.0
|
||
* @apiGroup users
|
||
* @apiName login__codeimg
|
||
*
|
||
* @apiParam {String} email 用户名
|
||
*
|
||
* @apiSuccess {Image} data 返回数据（直接输出图片）
|
||
*/
|
||
public function login__codeimg()
|
||
{
|
||
return Captcha::create();
|
||
}
|
||
|
||
/**
|
||
* @api {get} api/users/login/codejson 04. 验证码json
|
||
*
|
||
* @apiDescription 用于判断是否需要登录验证码
|
||
* @apiVersion 1.0.0
|
||
* @apiGroup users
|
||
* @apiName login__codejson
|
||
*
|
||
* @apiSuccess {Number} ret 返回状态码（1正确、0错误）
|
||
* @apiSuccess {String} msg 返回信息（错误描述）
|
||
* @apiSuccess {Object} data 返回数据
|
||
*/
|
||
public function login__codejson()
|
||
{
|
||
$captcha = Captcha::create('default', true);
|
||
return Base::retSuccess('请求成功', $captcha);
|
||
}
|
||
|
||
/**
|
||
* @api {get} api/users/reg/needinvite 05. 是否需要邀请码
|
||
*
|
||
* @apiDescription 用于判断注册是否需要邀请码
|
||
* @apiVersion 1.0.0
|
||
* @apiGroup users
|
||
* @apiName reg__needinvite
|
||
*
|
||
* @apiSuccess {Number} ret 返回状态码（1正确、0错误）
|
||
* @apiSuccess {String} msg 返回信息（错误描述）
|
||
* @apiSuccess {Object} data 返回数据
|
||
*/
|
||
public function reg__needinvite()
|
||
{
|
||
return Base::retSuccess('success', [
|
||
'need' => Base::settingFind('system', 'reg') == 'invite'
|
||
]);
|
||
}
|
||
|
||
/**
|
||
* @api {get} api/users/info 06. 获取我的信息
|
||
*
|
||
* @apiDescription 需要token身份
|
||
* @apiVersion 1.0.0
|
||
* @apiGroup users
|
||
* @apiName info
|
||
*
|
||
* @apiSuccess {Number} ret 返回状态码（1正确、0错误）
|
||
* @apiSuccess {String} msg 返回信息（错误描述）
|
||
* @apiSuccess {Object} data 返回数据
|
||
* @apiSuccessExample {json} data:
|
||
{
|
||
"userid": 1,
|
||
"identity": [ ],
|
||
"az": "",
|
||
"email": "admin@admin.com",
|
||
"nickname": "admin",
|
||
"userimg": "",
|
||
"login_num": 10,
|
||
"changepass": 0,
|
||
"last_ip": "127.0.0.1",
|
||
"last_at": "2021-06-01 12:00:00",
|
||
"line_ip": "127.0.0.1",
|
||
"line_at": "2021-06-01 12:00:00",
|
||
"created_ip": "",
|
||
}
|
||
*/
|
||
public function info()
|
||
{
|
||
$user = User::auth();
|
||
User::token($user);
|
||
//
|
||
return Base::retSuccess('success', $user);
|
||
}
|
||
|
||
/**
|
||
* @api {get} api/users/editdata 07. 修改自己的资料
|
||
*
|
||
* @apiDescription 需要token身份
|
||
* @apiVersion 1.0.0
|
||
* @apiGroup users
|
||
* @apiName editdata
|
||
*
|
||
* @apiParam {Object} [userimg] 会员头像（地址）
|
||
* @apiParam {String} [nickname] 昵称
|
||
* @apiParam {String} [profession] 职位/职称
|
||
*
|
||
* @apiSuccess {Number} ret 返回状态码（1正确、0错误）
|
||
* @apiSuccess {String} msg 返回信息（错误描述）
|
||
* @apiSuccess {Object} data 返回数据（同"获取我的信息"接口）
|
||
*/
|
||
public function editdata()
|
||
{
|
||
$user = User::auth();
|
||
$data = Request::all();
|
||
$user->checkSystem(1);
|
||
//头像
|
||
if (Arr::exists($data, 'userimg')) {
|
||
$userimg = Request::input('userimg');
|
||
if ($userimg) {
|
||
$userimg = is_array($userimg) ? $userimg[0]['path'] : $userimg;
|
||
$user->userimg = Base::unFillUrl($userimg);
|
||
} else {
|
||
$user->userimg = $user->getUserimgAttribute(null);
|
||
}
|
||
}
|
||
//昵称
|
||
if (Arr::exists($data, 'nickname')) {
|
||
$nickname = trim(Request::input('nickname'));
|
||
if ($nickname && mb_strlen($nickname) < 2) {
|
||
return Base::retError('昵称不可以少于2个字');
|
||
} elseif (mb_strlen($nickname) > 20) {
|
||
return Base::retError('昵称最多只能设置20个字');
|
||
} else {
|
||
$user->nickname = $nickname;
|
||
}
|
||
}
|
||
//职位/职称
|
||
if (Arr::exists($data, 'profession')) {
|
||
$profession = trim(Request::input('profession'));
|
||
if ($profession && mb_strlen($profession) < 2) {
|
||
return Base::retError('职位/职称不可以少于2个字');
|
||
} elseif (mb_strlen($profession) > 20) {
|
||
return Base::retError('职位/职称最多只能设置20个字');
|
||
} else {
|
||
$user->profession = $profession;
|
||
}
|
||
}
|
||
//
|
||
$user->save();
|
||
User::token($user);
|
||
User::AZUpdate($user->userid);
|
||
return Base::retSuccess('修改成功', $user);
|
||
}
|
||
|
||
/**
|
||
* @api {get} api/users/editpass 08. 修改自己的密码
|
||
*
|
||
* @apiDescription 需要token身份
|
||
* @apiVersion 1.0.0
|
||
* @apiGroup users
|
||
* @apiName editpass
|
||
*
|
||
* @apiParam {String} oldpass 旧密码
|
||
* @apiParam {String} newpass 新密码
|
||
*
|
||
* @apiSuccess {Number} ret 返回状态码（1正确、0错误）
|
||
* @apiSuccess {String} msg 返回信息（错误描述）
|
||
* @apiSuccess {Object} data 返回数据（同"获取我的信息"接口）
|
||
*/
|
||
public function editpass()
|
||
{
|
||
$user = User::auth();
|
||
$user->checkSystem();
|
||
//
|
||
$oldpass = trim(Request::input('oldpass'));
|
||
$newpass = trim(Request::input('newpass'));
|
||
if ($oldpass == $newpass) {
|
||
return Base::retError('新旧密码一致');
|
||
}
|
||
User::passwordPolicy($newpass);
|
||
//
|
||
$verify = User::whereUserid($user->userid)->wherePassword(Base::md52($oldpass, User::token2encrypt()))->count();
|
||
if (empty($verify)) {
|
||
return Base::retError('请填写正确的旧密码');
|
||
}
|
||
//
|
||
$user->encrypt = Base::generatePassword(6);
|
||
$user->password = Base::md52($newpass, $user->encrypt);
|
||
$user->changepass = 0;
|
||
$user->save();
|
||
User::token($user);
|
||
return Base::retSuccess('修改成功', $user);
|
||
}
|
||
|
||
/**
|
||
* @api {get} api/users/search 09. 搜索会员列表
|
||
*
|
||
* @apiDescription 搜索会员列表
|
||
* @apiVersion 1.0.0
|
||
* @apiGroup users
|
||
* @apiName searchinfo
|
||
*
|
||
* @apiParam {Object} keys 搜索条件
|
||
* - keys.key 昵称、邮箱关键字
|
||
* - keys.disable 0-排除禁止（默认），1-含禁止，2-仅禁止
|
||
* - keys.project_id 在指定项目ID
|
||
* - keys.no_project_id 不在指定项目ID
|
||
* @apiParam {Object} sorts 排序方式
|
||
* - sorts.az 按字母：asc|desc
|
||
*
|
||
* @apiParam {Number} [take] 获取数量，10-100
|
||
* @apiParam {Number} [page] 当前页，默认:1（赋值分页模式，take参数无效）
|
||
* @apiParam {Number} [pagesize] 每页显示数量，默认:10，最大:100
|
||
*
|
||
* @apiSuccess {Number} ret 返回状态码（1正确、0错误）
|
||
* @apiSuccess {String} msg 返回信息（错误描述）
|
||
* @apiSuccess {Object} data 返回数据
|
||
*/
|
||
public function search()
|
||
{
|
||
$builder = User::select(['userid', 'email', 'nickname', 'profession', 'userimg', 'az']);
|
||
//
|
||
$keys = Request::input('keys');
|
||
$sorts = Request::input('sorts');
|
||
$keys = is_array($keys) ? $keys : [];
|
||
$sorts = is_array($sorts) ? $sorts : [];
|
||
//
|
||
if ($keys['key']) {
|
||
$builder->where(function($query) use ($keys) {
|
||
$query->where("email", "like", "%{$keys['key']}%")
|
||
->orWhere("nickname", "like", "%{$keys['key']}%");
|
||
});
|
||
}
|
||
if (intval($keys['disable']) == 0) {
|
||
$builder->whereNull("disable_at");
|
||
} elseif (intval($keys['disable']) == 2) {
|
||
$builder->whereNotNull("disable_at");
|
||
}
|
||
if (intval($keys['project_id']) > 0) {
|
||
$builder->whereIn('userid', function ($query) use ($keys) {
|
||
$query->select('userid')->from('project_users')->where('project_id', $keys['project_id']);
|
||
});
|
||
}
|
||
if (intval($keys['no_project_id']) > 0) {
|
||
$builder->whereNotIn('userid', function ($query) use ($keys) {
|
||
$query->select('userid')->from('project_users')->where('project_id', $keys['no_project_id']);
|
||
});
|
||
}
|
||
if (in_array($sorts['az'], ['asc', 'desc'])) {
|
||
$builder->orderBy('az', $sorts['az']);
|
||
}
|
||
//
|
||
if (Request::exists('page')) {
|
||
$list = $builder->orderBy('userid')->paginate(Base::getPaginate(100, 10));
|
||
} else {
|
||
$list = $builder->orderBy('userid')->take(Base::getPaginate(100, 10, 'take'))->get();
|
||
}
|
||
return Base::retSuccess('success', $list);
|
||
}
|
||
|
||
/**
|
||
* @api {get} api/users/basic 10. 获取指定会员基础信息
|
||
*
|
||
* @apiDescription 需要token身份
|
||
* @apiVersion 1.0.0
|
||
* @apiGroup users
|
||
* @apiName basic
|
||
*
|
||
* @apiParam {Number} userid 会员ID(多个格式：jsonArray，一次最多50个)
|
||
*
|
||
* @apiSuccess {Number} ret 返回状态码（1正确、0错误）
|
||
* @apiSuccess {String} msg 返回信息（错误描述）
|
||
* @apiSuccess {Object} data 返回数据
|
||
*/
|
||
public function basic()
|
||
{
|
||
$userid = Request::input('userid');
|
||
$array = Base::json2array($userid);
|
||
if (empty($array)) {
|
||
$array[] = $userid;
|
||
}
|
||
if (count($array) > 50) {
|
||
return Base::retError('一次最多只能获取50条数据');
|
||
}
|
||
$retArray = [];
|
||
foreach ($array AS $id) {
|
||
$basic = User::userid2basic($id);
|
||
if ($basic) {
|
||
$retArray[] = $basic;
|
||
}
|
||
}
|
||
return Base::retSuccess('success', $retArray);
|
||
}
|
||
|
||
/**
|
||
* @api {get} api/users/lists 11. 会员列表（限管理员）
|
||
*
|
||
* @apiDescription 需要token身份
|
||
* @apiVersion 1.0.0
|
||
* @apiGroup users
|
||
* @apiName lists
|
||
*
|
||
* @apiParam {Object} [keys] 搜索条件
|
||
* - keys.email 邮箱
|
||
* - keys.nickname 昵称
|
||
* - keys.profession 职位
|
||
* @apiParam {Number} [page] 当前页，默认:1
|
||
* @apiParam {Number} [pagesize] 每页显示数量，默认:20，最大:50
|
||
*
|
||
* @apiSuccess {Number} ret 返回状态码（1正确、0错误）
|
||
* @apiSuccess {String} msg 返回信息（错误描述）
|
||
* @apiSuccess {Object} data 返回数据
|
||
*/
|
||
public function lists()
|
||
{
|
||
User::auth('admin');
|
||
//
|
||
$builder = User::select(['*', 'nickname as nickname_original']);
|
||
//
|
||
$keys = Request::input('keys');
|
||
if (is_array($keys)) {
|
||
if ($keys['email']) {
|
||
$builder->where("email", "like", "%{$keys['email']}%");
|
||
}
|
||
if ($keys['nickname']) {
|
||
$builder->where("nickname", "like", "%{$keys['nickname']}%");
|
||
}
|
||
if ($keys['profession']) {
|
||
$builder->where("profession", "like", "%{$keys['profession']}%");
|
||
}
|
||
if ($keys['identity']) {
|
||
if (Base::leftExists($keys['identity'], "no")) {
|
||
$builder->where("identity", "not like", "%," . Base::leftDelete($keys['identity'], 'no') . ",%");
|
||
} else {
|
||
$builder->where("identity", "like", "%,{$keys['identity']},%");
|
||
}
|
||
}
|
||
}
|
||
$list = $builder->orderByDesc('userid')->paginate(Base::getPaginate(50, 20));
|
||
//
|
||
return Base::retSuccess('success', $list);
|
||
}
|
||
|
||
/**
|
||
* @api {get} api/users/operation 12. 操作会员（限管理员）
|
||
*
|
||
* @apiDescription 需要token身份
|
||
* @apiVersion 1.0.0
|
||
* @apiGroup users
|
||
* @apiName operation
|
||
*
|
||
* @apiParam {Number} userid 会员ID
|
||
* @apiParam {String} [type] 操作
|
||
* - setadmin 设为管理员
|
||
* - clearadmin 取消管理员
|
||
* - setdisable 设为禁用
|
||
* - cleardisable 取消禁用
|
||
* - delete 删除会员
|
||
* @apiParam {String} [password] 新的密码
|
||
* @apiParam {String} [nickname] 昵称
|
||
* @apiParam {String} [profession] 职位
|
||
*
|
||
* @apiSuccess {Number} ret 返回状态码（1正确、0错误）
|
||
* @apiSuccess {String} msg 返回信息（错误描述）
|
||
* @apiSuccess {Object} data 返回数据
|
||
*/
|
||
public function operation()
|
||
{
|
||
User::auth('admin');
|
||
//
|
||
$data = Request::all();
|
||
$userid = intval($data['userid']);
|
||
$type = $data['type'];
|
||
//
|
||
$userInfo = User::find($userid);
|
||
if (empty($userInfo)) {
|
||
return Base::retError('会员不存在或已被删除');
|
||
}
|
||
$userInfo->checkSystem(1);
|
||
//
|
||
$upArray = [];
|
||
switch ($type) {
|
||
case 'setadmin':
|
||
$upArray['identity'] = array_diff($userInfo->identity, ['admin']);
|
||
$upArray['identity'][] = 'admin';
|
||
break;
|
||
|
||
case 'clearadmin':
|
||
$upArray['identity'] = array_diff($userInfo->identity, ['admin']);
|
||
break;
|
||
|
||
case 'setdisable':
|
||
$upArray['identity'] = array_diff($userInfo->identity, ['disable']);
|
||
$upArray['identity'][] = 'disable';
|
||
$upArray['disable_at'] = Carbon::now();
|
||
break;
|
||
|
||
case 'cleardisable':
|
||
$upArray['identity'] = array_diff($userInfo->identity, ['disable']);
|
||
$upArray['disable_at'] = null;
|
||
break;
|
||
|
||
case 'delete':
|
||
$userInfo->delete();
|
||
break;
|
||
}
|
||
if (isset($upArray['identity'])) {
|
||
$upArray['identity'] = "," . implode(",", $upArray['identity']) . ",";
|
||
}
|
||
// 密码
|
||
if (Arr::exists($data, 'password')) {
|
||
$password = trim($data['password']);
|
||
User::passwordPolicy($password);
|
||
$upArray['encrypt'] = Base::generatePassword(6);
|
||
$upArray['password'] = Base::md52($password, $upArray['encrypt']);
|
||
$upArray['changepass'] = 1;
|
||
}
|
||
// 昵称
|
||
if (Arr::exists($data, 'nickname')) {
|
||
$nickname = trim($data['nickname']);
|
||
if ($nickname && mb_strlen($nickname) < 2) {
|
||
return Base::retError('昵称不可以少于2个字');
|
||
} elseif (mb_strlen($nickname) > 20) {
|
||
return Base::retError('昵称最多只能设置20个字');
|
||
} else {
|
||
$upArray['nickname'] = $nickname;
|
||
}
|
||
}
|
||
// 职位/职称
|
||
if (Arr::exists($data, 'profession')) {
|
||
$profession = trim($data['profession']);
|
||
if ($profession && mb_strlen($profession) < 2) {
|
||
return Base::retError('职位/职称不可以少于2个字');
|
||
} elseif (mb_strlen($profession) > 20) {
|
||
return Base::retError('职位/职称最多只能设置20个字');
|
||
} else {
|
||
$upArray['profession'] = $profession;
|
||
}
|
||
}
|
||
if ($upArray) {
|
||
$userInfo->updateInstance($upArray);
|
||
$userInfo->save();
|
||
}
|
||
//
|
||
return Base::retSuccess('修改成功', $userInfo);
|
||
}
|
||
}
|