huahuibao/app-ghs/controllers/AuthController.php

<?php

namespace ghs\controllers;

use biz\admin\classes\AdminClass;
use biz\shop\classes\ShopClass;
use bizHd\admin\classes\ShopAdminClass;
use bizGhs\shop\services\ShopAdminService;
use bizGhs\admin\services\AdminService;
use bizHd\user\classes\UserClass;
use bizHd\wx\classes\WxOpenClass;
use common\components\dict;
use common\components\httpUtil;
use common\components\imgUtil;
use common\components\jwt;
use common\components\util;
use Yii;
use common\components\stringUtil;
use biz\sj\services\MerchantService;
use bizHd\user\services\UserService;
use common\services\xhMerchantService;
use common\components\wxUtil;
use linslin\yii2\curl;
use yii\helpers\Json;

//用户登陆
class AuthController extends PublicController
{

    //本机号码一键登录 shish 20210117
    public function actionPhoneLogin()
    {
        $get = Yii::$app->request->get();
        $access_token = $get['access_token'] ?? '';
        $openid = $get['openid'] ?? '';
        if (empty($access_token) || empty($openid)) {
            util::fail('参数错误');
        }
        //密钥，需要和uniCloud里的一致
        $secret = 'XHB2021198819640123';
        $params = ['access_token' => $access_token, 'openid' => $openid];
        $stringSignTemp = '';
        foreach ($params as $k => $v) {
            $stringSignTemp .= $k . '=' . $v . '&';
        }
        $stringSignTemp = rtrim($stringSignTemp, '&');
        $sign = hash_hmac('sha256', $stringSignTemp, $secret);
        $url = Yii::$app->params['ghsUniCloudHost'] . "/getMobileNumber?access_token=" . $access_token . "&sign=" . $sign . "&" . $stringSignTemp;
        $curl = new curl\Curl();
        $respond = $curl->get($url);
        Yii::info($respond);
        $result = json_decode($respond, true);
        if (isset($result['code']) == false || $result['code'] != 1) {
            util::fail('获取手机号失败');
        }
        $phoneNumber = $result['data']['phoneNumber'] ?? '';
        if (empty($phoneNumber)) {
            util::fail('获取手机号失败..');
        }

        $ptStyle = dict::getDict('ptStyle', 'ghs');
        $admin = AdminClass::getByCondition(['mobile' => $phoneNumber, 'style' => $ptStyle]);
        if (empty($admin)) {
            $adminInfo = [
                'name' => $phoneNumber,
                'mobile' => $phoneNumber,
                'style' => $ptStyle,
            ];
            $fromApp = dict::getDict('userSourceGetId', 'app', 'id');
            $admin = AdminService::replaceAdmin($adminInfo, $fromApp);
        }
        $currentShopId = $admin['currentShopId'] ?? 0;
        $adminId = $admin['id'] ?? 0;
        //1没有开店 2已申请待审核 3已开店
        $openShop = $admin['openShop'] ?? 1;
        if (!empty($currentShopId)) {
            $shopAdmin = ShopAdminClass::getByCondition(['shopId' => $currentShopId, 'adminId' => $adminId], true);
            if (empty($shopAdmin)) {
                util::fail('没有找到员工哦');
            }
            $shopAdmin->lastLogin = date("Y-m-d H:i:s");
            $shopAdmin->save();
            $shopAdminId = $shopAdmin->id ?? 0;
            //是否有切换门店的权限
            $switchShop = \biz\shop\classes\ShopAdminClass::hasSwitchShopRight($shopAdmin->attributes);

            $admin['avatar'] = imgUtil::getPrefix() . '/retail/default-img.png';
            $token = jwt::getNewToken($adminId);
            $showDemo = 1;
            $remind = getenv('GHS_UPDATE_REMIND') == false ? 0 : getenv('GHS_UPDATE_REMIND');
            $shop = ShopClass::getById($currentShopId, true);
            $skCustomId = $shop->skCustomId ?? 0;
            $apiHost = Yii::$app->params['ghsHost'];
            $imgUploadApi = $apiHost . '/upload/save-file';
            //使用手册
            $cacheKey = 'close_book_' . $shopAdminId;
            $hasClose = Yii::$app->redis->executeCommand('GET', [$cacheKey]);
            $showBook = !empty($hasClose) ? 0 : 1;

            $cacheKey = 'has_hit_navigate_' . $shopAdminId;
            $hasHit = Yii::$app->redis->executeCommand('GET', [$cacheKey]);
            $hasHitNavigate = !empty($hasHit) ? 1 : 0;

            //注意这里的输出内容有多个地方一样，要修改需要同步修改，请搜索关键词loginOK！！！！！！！！
            util::success([
                'token' => $token,
                'admin' => $admin,
                'shopAdminId' => $shopAdminId,
                'shopId' => $currentShopId,
                'switchShop' => $switchShop,
                'openShop' => $openShop,
                'showDemo' => $showDemo,
                //有小程序新版本提示更新
                'update' => $remind,
                'skCustomId' => $skCustomId,
                'apiHost' => $apiHost,
                'imgUploadApi' => $imgUploadApi,
                'showBook' => $showBook,
                'hasHitNavigate' => $hasHitNavigate,
            ]);
        }
        util::success(['admin' => $admin]);
    }

    //准备授权 ssh 2019.11.19
    public function actionPrepare()
    {
        $get = Yii::$app->request->get();
        $url = isset($get['url']) && !empty($get['url']) ? $get['url'] : '';
        if (empty($url)) {
            util::fail('没有网址');
        }
        $account = httpUtil::getAccount($url);
        if (empty($account)) {
            util::fail('没有商家帐号');
        }
        $merchant = MerchantService::getById($account);
        if (empty($merchant)) {
            util::fail('商家无效');
        }
        /**
         * authScope 参数的说明
         * 1.用户通过公众号菜单打开网页，因为已经关注过了公众号，已经生成过用户信息，所以只要使用snsapi_base静默方式拿到openid就可以
         * 2.为了保证付款页的访问速度，暂时只要通过snsapi_base静默方式拿到openid先生成可以用的用户信息即可
         * 3.其它情况需要获取用户完整信息的，使用snsapi_userinfo让用户授权获取信息即可
         * 4.snsapi_base静默方式使用的场景更多，所以参数authScope默认使用snsapi_base
         */
        $authScope = isset($get['authScope']) ? $get['authScope'] : 'snsapi_base';
        $urlEncode = stringUtil::urlSafeB64Encode($url);
        //微信授权获取code ssh 2019.11.24
        $isOpen = 2;
        wxUtil::getCode($urlEncode, $merchant, $authScope, $isOpen);
        util::end();
    }

    //微信授权获取用户信息 ssh 2019.11.20
    public function actionGetUserInfo()
    {
        $get = Yii::$app->request->get();
        $code = isset($get['code']) ? $get['code'] : '';
        if (empty($code)) {
            util::fail('没有获取用户code');
        }
        if (isset($get['state']) && $get['state'] == 'authdeny') {
            util::fail('auth fail');
        }
        $urlEncode = $get['url'];
        $url = stringUtil::urlSafeBase64Decode($urlEncode);
        $account = httpUtil::getAccount($url);
        if (empty($account)) {
            util::stop('商店ID无效！！');
        }
        $merchant = xhMerchantService::getByAccount($account);
        if (empty($merchant)) {
            util::stop('商店无效');
        }
        $sjId = $merchant['id'];
        $authScope = isset($get['authScope']) ? $get['authScope'] : '';
        if (empty($authScope)) {
            util::stop('没有授权类型');
        }
        $data = wxUtil::getOpenId($code, $merchant, 2);
        if ($data === false) {
            //微信授权获取code ssh 2019.11.24
            wxUtil::getCode($urlEncode, $merchant, $authScope, 2);
            util::end();
        }
        $openId = $data['openid'];
        $access_token = $data['access_token'];
        $user = UserService::getByOpenId($openId);
        //用户来源
        $userSource = Yii::$app->dict->getValue('userSourceGetId', 'official');
        $source = $userSource['name'];
        if (empty($user)) {
            //$authScope 默认是 snsapi_base 公众号菜单打开网页(已经关注公众号，有完整信息)、打开付款页(有些客户只付款，没有后续可以不用登记完整信息)，只需要获取openid
            $originalInfo = [];
            $originalInfo['openId'] = $openId;
            $originalInfo['sjId'] = $sjId;

            //没有关注公众号，需要获取用户完整信息的情况，则通过弹框授权
            if ($authScope == 'snsapi_userinfo') {
                $baseInfo = wxUtil::authGetUserInfo($openId, $access_token);
                $originalInfo = array_merge($baseInfo, $originalInfo);
                $originalInfo['isFull'] = 1;
                $originalInfo['unionId'] = $baseInfo['unionid'];
                $originalInfo['headImgUrl'] = $baseInfo['headimgurl'];
                $originalInfo['nickName'] = $baseInfo['nickName'];
            }
            $user = UserService::replaceUser($originalInfo, $source, $sjId);
        } else {
            if ($user['isFull'] == 0) {
                if ($authScope == 'snsapi_userinfo') {
                    $baseInfo = wxUtil::authGetUserInfo($openId, $access_token);
                    $originalInfo = $baseInfo;
                    $originalInfo['isFull'] = 1;
                    $originalInfo['unionId'] = $baseInfo['unionid'];
                    $originalInfo['headImgUrl'] = $baseInfo['headimgurl'];
                    $originalInfo['openId'] = $baseInfo['openid'];
                    $originalInfo['nickName'] = $baseInfo['nickName'];
                    $originalInfo['sjId'] = $sjId;
                    $user = UserService::replaceUser($originalInfo, $source, $sjId);
                }
            }
        }
        //这个的基类没有设置统一的全局变量，这里进行设置一次
        $userId = $user['id'];
        $admin = AdminService::getByCondition(['userId' => $userId]);
        if (empty($admin)) {
            util::fail('您没有权限访问');
        }
        $adminId = $admin['id'];
        //获取token
        $token = jwt::getNewToken($adminId);
        $url = strpos($url, '?') === false ? $url . '?token=' . $token : $url . '&token=' . $token;
        $this->redirect($url);
    }

    //登陆并拿到token ssh 2019.11.23
    public function actionLogin()
    {
        $get = Yii::$app->request->get();
        $mobile = isset($get['mobile']) ? $get['mobile'] : 0;
        if (stringUtil::isMobile($mobile) == false) {
            util::fail('请填写正常的手机号');
        }
        $password = isset($get['password']) && !empty($get['password']) ? $get['password'] : '';
        if (empty($password)) {
            util::fail('请输入密码');
        }
        $admin = AdminService::getByCondition(['mobile' => $mobile, 'style' => AdminClass::STYLE_GHS]);
        if (password_verify($password, $admin['password']) == false) {
            util::fail('密码错误');
        }
        $adminId = $admin['id'];
        $shopAdmin = ShopAdminService::getByCondition(['adminId' => $adminId, 'delStatus' => 0]);
        if ($shopAdmin['status'] == 0) {
            util::fail("您的账号还未激活");
        }
        $sjId = isset($shopAdmin['sjId']) ? $shopAdmin['sjId'] : 0;
        $shopId = $shopAdmin['shopId'] ?? 0;
        if (empty($shopId)) {
            util::fail('您不是管理员');
        }
        //获取token
        $token = jwt::getNewToken($adminId);
        util::success(['token' => $token, 'account' => $sjId, 'shopId' => $shopId]);
    }

    //静默获取小程序用户信息
    public function actionMiniInfo()
    {
        //供应商平台
        Yii::$app->params['ptStyle'] = dict::getDict('ptStyle', 'ghs');
        $code = Yii::$app->request->get('code', '');
        $wxMiniBase = WxOpenClass::getGhsWxInfo();
        $appId = $wxMiniBase['miniAppId'];
        $appSecret = $wxMiniBase['miniAppSecret'];
        if (empty($appSecret)) {
            //没有管理店铺不允许登录
            util::success(['token' => '']);
        }
        $url = "https://api.weixin.qq.com/sns/jscode2session?appid={$appId}&secret={$appSecret}&js_code={$code}&grant_type=authorization_code";
        $curl = new curl\Curl();
        $curl->setOption(CURLOPT_SSL_VERIFYPEER, false);
        $result = $curl->get($url);
        $arr = Json::decode($result);
        $sessionKey = isset($arr['session_key']) ? $arr['session_key'] : '';
        $openid = $arr['openid'] ?? '';
        if (empty($openid)) {
            //没有管理店铺不允许登录
            util::success(['token' => '']);
        }
        $cacheKey = 'GHS_SHOP_MINI_SESSION_KEY_' . $openid;
        Yii::$app->redis->executeCommand('SET', [$cacheKey, $sessionKey]);
        $admin = AdminService::getByMiniOpenId($openid);
        if (empty($admin)) {
            //没有管理店铺不允许登录
            util::success(['token' => '']);
        }
        $adminId = $admin['id'];
        //1没有开店 2已申请待审核 3已开店
        $openShop = $admin['openShop'] ?? 1;
        $currentShopId = $admin['currentShopId'] ?? 0;
        if (empty($currentShopId)) {
            //没有管理店铺不允许登录
            util::success(['token' => '']);
        }
        $shopAdmin = ShopAdminClass::getByCondition(['shopId' => $currentShopId, 'adminId' => $adminId], true);
        if (empty($shopAdmin)) {
            //没有管理店铺不允许登录
            util::success(['token' => '']);
        }
        $shopAdmin->lastLogin = date("Y-m-d H:i:s");
        $shopAdmin->save();
        $shopAdminId = $shopAdmin->id ?? 0;
        //是否有切换门店的权限
        $switchShop = \biz\shop\classes\ShopAdminClass::hasSwitchShopRight($shopAdmin->attributes);
        $admin['avatar'] = imgUtil::getPrefix() . '/retail/default-img.png';
        $token = jwt::getNewToken($adminId);
        $showDemo = 1;
        $remind = getenv('GHS_UPDATE_REMIND') == false ? 0 : getenv('GHS_UPDATE_REMIND');
        $shop = ShopClass::getById($currentShopId, true);
        $skCustomId = $shop->skCustomId ?? 0;
        $apiHost = Yii::$app->params['ghsHost'];
        $imgUploadApi = $apiHost . '/upload/save-file';
        //使用手册
        $cacheKey = 'close_book_' . $shopAdminId;
        $hasClose = Yii::$app->redis->executeCommand('GET', [$cacheKey]);
        $showBook = !empty($hasClose) ? 0 : 1;

        $cacheKey = 'has_hit_navigate_' . $shopAdminId;
        $hasHit = Yii::$app->redis->executeCommand('GET', [$cacheKey]);
        $hasHitNavigate = !empty($hasHit) ? 1 : 0;

        //注意这里的输出内容有多个地方一样，要修改需要同步修改，请搜索关键词loginOK！！！！！！！！
        util::success([
            'token' => $token,
            'admin' => $admin,
            'shopAdminId' => $shopAdminId,
            'shopId' => $currentShopId,
            'switchShop' => $switchShop,
            'openShop' => $openShop,
            'showDemo' => $showDemo,
            //有小程序新版本提示更新
            'update' => $remind,
            'skCustomId' => $skCustomId,
            'apiHost' => $apiHost,
            'imgUploadApi' => $imgUploadApi,
            'showBook' => $showBook,
            'hasHitNavigate' => $hasHitNavigate,
        ]);
    }

    //app登陆 shish 20211219
    public function actionAppLogin()
    {
        $get = Yii::$app->request->get();
        $mobile = isset($get['mobile']) ? $get['mobile'] : 0;
        if (stringUtil::isMobile($mobile) == false) {
            util::fail('请填写正确手机号');
        }
        $password = isset($get['password']) && !empty($get['password']) ? $get['password'] : '';
        if (empty($password)) {
            util::fail('请输入密码');
        }
        $admin = AdminService::getByCondition(['mobile' => $mobile, 'style' => AdminClass::STYLE_GHS]);
        if (password_verify($password, $admin['password']) == false) {
            util::fail('密码错误');
        }
        $adminId = $admin['id'];
        $shopAdmin = ShopAdminService::getByCondition(['adminId' => $adminId, 'delStatus' => 0], true);
        if ($shopAdmin->status == 0) {
            util::fail("您的账号还未激活");
        }
        $shopId = $shopAdmin->shopId ?? 0;
        if (empty($shopId)) {
            util::fail('您不是管理员');
        }
        $token = jwt::getNewToken($adminId);
        $shopAdminId = $shopAdmin->id ?? 0;
        $currentShopId = $admin['currentShopId'] ?? 0;
        //是否有切换门店的权限
        $switchShop = \biz\shop\classes\ShopAdminClass::hasSwitchShopRight($shopAdmin->attributes);
        //1没有开店 2已申请待审核 3已开店
        $openShop = $admin['openShop'] ?? 1;
        $showDemo = 1;
        $shop = ShopClass::getById($currentShopId, true);
        $skCustomId = $shop->skCustomId ?? 0;
        $apiHost = Yii::$app->params['ghsHost'];
        $imgUploadApi = $apiHost . '/upload/save-file';
        //使用手册
        $cacheKey = 'close_book_' . $shopAdminId;
        $hasClose = Yii::$app->redis->executeCommand('GET', [$cacheKey]);
        $showBook = !empty($hasClose) ? 0 : 1;

        $cacheKey = 'has_hit_navigate_' . $shopAdminId;
        $hasHit = Yii::$app->redis->executeCommand('GET', [$cacheKey]);
        $hasHitNavigate = !empty($hasHit) ? 1 : 0;

        //注意这里的输出内容有多个地方一样，要修改需要同步修改，请搜索关键词loginOK！！！！！！！！
        util::success([
            'token' => $token,
            'admin' => $admin,
            'shopAdminId' => $shopAdminId,
            'shopId' => $currentShopId,
            'switchShop' => $switchShop,
            'openShop' => $openShop,
            'showDemo' => $showDemo,
            //有小程序新版本提示更新
            'update' => 0,
            'skCustomId' => $skCustomId,
            'apiHost' => $apiHost,
            'imgUploadApi' => $imgUploadApi,
            'showBook' => $showBook,
            'hasHitNavigate' => $hasHitNavigate,
        ]);
    }

}