jiaoyi-webman/app/controller/api/Auth.php

<?php

namespace app\controller\api;

use app\extra\basic\Base;
use app\extra\dyLife\Crypt;
use app\extra\tools\CodeExtend;
use app\middleware\AuthMiddleware;
use app\model\saas\SaasUserOpen;
use DI\Attribute\Inject;
use LinFly\Annotation\Attributes\Route\Controller;
use LinFly\Annotation\Attributes\Route\GetMapping;
use LinFly\Annotation\Attributes\Route\Middleware;
use LinFly\Annotation\Attributes\Route\PostMapping;
use support\Request;
use Shopwwi\WebmanAuth\Facade\Auth as AuthFacade;
use support\Response;


#[Controller("/dy/auth"),Middleware(AuthMiddleware::class)]
class Auth extends Base
{

    protected array $noNeedLogin = ["log2mobile","log2nickname","loginMobileAuth",'loginNicknameAuth'];

    #[Inject]
    protected SaasUserOpen $model;

    /**
     * 授权获取手机号-非登录
     * @param Request $request
     * @return Response
     */
    #[PostMapping("mobile/auth")]
    public function loginMobileAuth(Request $request): Response
    {
        try {
            $param = $this->_valid([
                "login.require"     => '获取登录参数失败',
                "code.default"      => '',
                "encryptedData.default"      => '',
                "iv.default"        => '',
            ],$request->method());
            if (!is_array($param)) return error($param);
            $sessionKey = (new Crypt)->config($this->getDyConfig())->getSessionKey($param['login']);
            if (empty($sessionKey)) return error("授权登录失败-m");
            if (!empty($param['code'])) {
                $mobileStr = (new Crypt)->config($this->getDyConfig())->token()->getMobile($param['code']);
            } else {
                $data = $this->decrypt($param['encryptedData'],$sessionKey['session_key'],$param['iv']);
                $mobileStr = $data['purePhoneNumber'];
            }
            if (empty($mobileStr)) return error("授权信息获取失败");
            return $this->encode("success",['mobile' => $mobileStr,'openid' => $sessionKey['openid']]);
        } catch (\Throwable $throwable) {
            return error($throwable->getMessage());
        }
    }

    /**
     * 授权昵称等信息-实际登录
     * @param Request $request
     * @return Response
     */
    #[PostMapping("nickname/auth")]
    public function loginNicknameAuth(Request $request): Response
    {
        try {
            $param = $this->_valid([
                "avatar.require"        => trans("empty.require"),
                "nickname.require"      => trans("empty.require"),
                "mobile.require"        => trans("empty.require"),
            ],$request->method());
            if (!is_array($param)) return error($param);
            $mobileData = json_decode($param['mobile'],true);
            $mobile = [];
            if (!empty($param['mobile'])) {
                if (!isset($mobileData['openid'])) return error("授权失败");
                if (isValidMobile($mobileData['mobile'])) {
                    $mobile = ["purePhoneNumber" => $mobileData['mobile']];
                } else {
                    $mobile = $this->decrypt2code(sConf('wechat.min_private_key'), $mobileData['mobile']);
                }
            }
            if (empty($mobile)) return error("授权登录失败-u");
            $userInfo = [
                "openid"    => $mobileData['openid'],
                "nickname"  => $param['nickname']?removeEmoji2($param['nickname']):'',
                "avatar"    => $param['avatar']
            ];
            $map = ["openid" => $mobileData['openid']];
            if (!empty($mobile['purePhoneNumber'])) {
                $userInfo['mobile'] = $mobile['purePhoneNumber'];
            }
            $user = $this->model->where($map)->findOrEmpty();
            if ($user->isEmpty()) {
                $userInfo["create_ip"] = $request->getRealIp();
                $user->insertGetId($userInfo);
            }
            $userAuth = get_object_vars(AuthFacade::guard("user")->login(['openid' => $mobileData['openid']]));
            return success("ok",$userAuth);

        } catch (\Throwable $throwable) {
            return error($throwable->getMessage());
        }
    }

    #[PostMapping("nickname")]
    public function log2nickname(Request $request): Response
    {
        try {
            $param = $request->post();
            $sessionKey = (new Crypt)->config($this->getDyConfig())->getSessionKey($param['login']);
            if (empty($sessionKey)) return error("授权登录失败");
            $userInfo = [
                "openid"    => $sessionKey['openid'],
                "nickname"  => $param['nickname']?removeEmoji2($param['nickname']):'',
                "avatar"    => $param['avatar']??'',
                "create_ip" => $request->getRealIp()
            ];
            $map = ["openid" => $sessionKey['openid']];
            $user = $this->model->where($map)->findOrEmpty();
            if ($user->isEmpty()) {
                $user->insertGetId($userInfo);
            } else {
                $user->nickname = $param['nickname']?removeEmoji2($param['nickname']):'';
                $user->avatar = $param['avatar']??'';
                $user->save();
            }
            $userAuth = get_object_vars(AuthFacade::guard("user")->login(['openid' => $sessionKey['openid']]));
            return success("ok",$userAuth);
        } catch (\Throwable $th) {
            return error($th->getMessage());
        }
    }

    #[PostMapping("mobile")]
    public function log2mobile(Request $request): Response
    {
        try {
            $param = $request->post();
            $sessionKey = (new Crypt)->config($this->getDyConfig())->getSessionKey($param['login']);
            if (empty($sessionKey)) return error("授权登录失败");
            $mobile = [];
            if (!empty($param['code'])) {
                $mobileStr = (new Crypt)->config($this->getDyConfig())->token()->getMobile($param['code']);
                if (!empty($mobileStr)) {
                    $mobile = $this->decrypt2code(sConf('wechat.min_private_key'), $mobileStr);
                }
            }
            $userInfo = [
                "openid"    => $sessionKey['openid'],
                "create_ip" => $request->getRealIp()
            ];
            $map = ["openid" => $sessionKey['openid']];
            if (!empty($mobile['purePhoneNumber'])) {
                $userInfo['mobile'] = $mobile['purePhoneNumber'];
            }
            $user = $this->model->where($map)->findOrEmpty();
            if ($user->isEmpty()) {
                $user->insertGetId($userInfo);
            }
            $userAuth = get_object_vars(AuthFacade::guard("user")->login(['openid' => $sessionKey['openid']]));
            return success("ok",$userAuth);
        } catch (\Throwable $th) {
            return error($th->getMessage());
        }
    }

    protected function decrypt2code($private_key, $ciphertext_str) {
        // 解码 base64 密文
        $ciphertext = base64_decode($ciphertext_str);

        // 使用私钥解密
        openssl_private_decrypt($ciphertext, $plaintext, $private_key, OPENSSL_PKCS1_PADDING);

        if ($plaintext === false) {
            return [];
        }
        return json_decode($plaintext,true);
    }


    protected function decrypt($encrypted_data, $session_key, $iv) {
        $data = base64_decode($encrypted_data);
        $key = base64_decode($session_key);
        $iv_decoded = base64_decode($iv);
        // 使用 AES-256-CBC 模式解密
        $decrypted = openssl_decrypt($data, 'AES-128-CBC', $key, OPENSSL_RAW_DATA, $iv_decoded);

        return json_decode($decrypted,true);
    }
}