mirror of
https://github.com/crmeb/CRMEB.git
synced 2026-10-28 21:40:50 +00:00
255 lines
10 KiB
PHP
255 lines
10 KiB
PHP
<?php
|
||
// +----------------------------------------------------------------------
|
||
// | CRMEB [ CRMEB赋能开发者，助力企业发展 ]
|
||
// +----------------------------------------------------------------------
|
||
// | Copyright (c) 2016~2026 https://www.crmeb.com All rights reserved.
|
||
// +----------------------------------------------------------------------
|
||
// | Licensed CRMEB并不是自由软件，未经许可不能去掉CRMEB相关版权
|
||
// +----------------------------------------------------------------------
|
||
// | Author: CRMEB Team <admin@crmeb.com>
|
||
// +----------------------------------------------------------------------
|
||
declare(strict_types=1);
|
||
|
||
namespace modules\channel\wechat_mini\service;
|
||
|
||
use app\services\other\QrcodeServices;
|
||
use app\services\user\UserWechatAuthServices;
|
||
use crmeb\basic\BaseService;
|
||
use crmeb\exceptions\ApiException;
|
||
use crmeb\services\CacheService;
|
||
|
||
/**
|
||
* 小程序渠道认证器
|
||
* 封装小程序所有登录方式的认证逻辑，返回 uid 由统一入口 AuthController 调用 createToken
|
||
* 不调用现有 RoutineServices 的登录方法（避免重复 createToken），直接调用底层组件完成认证
|
||
* @package modules\channel\wechat_mini\service
|
||
*/
|
||
class Authenticator extends BaseService
|
||
{
|
||
/**
|
||
* 渠道登录认证
|
||
* @param string $loginType 登录方式（wechat_code_init/wechat_code/wechat_code_with_phone/mobile）
|
||
* @param array $credentials 凭证
|
||
* @return array 认证结果 ['uid'=>int, 'user_info'=>array, 'isbind'=>bool, 'bind_key'=>string, 'extra'=>array]
|
||
* @throws \Psr\SimpleCache\InvalidArgumentException
|
||
*/
|
||
public function login(string $loginType, array $credentials): array
|
||
{
|
||
switch ($loginType) {
|
||
case 'wechat_code_init':
|
||
// 两步式第一步：code 换 session，返回缓存 key + 是否需要绑定手机号
|
||
return $this->authType($credentials);
|
||
case 'wechat_code':
|
||
// 两步式第二步：根据缓存 key 认证
|
||
return $this->authLogin($credentials);
|
||
case 'wechat_code_with_phone':
|
||
// 授权 + 绑定手机号一步到位
|
||
return $this->authBindingPhone($credentials);
|
||
case 'mobile':
|
||
// 手机号登录（验证码）
|
||
return $this->phoneLogin($credentials);
|
||
default:
|
||
throw new ApiException('不支持的登录方式: ' . $loginType);
|
||
}
|
||
}
|
||
|
||
/**
|
||
* 两步式第一步：code 换 session，缓存用户数据，返回是否需要绑定手机号
|
||
* 复用 RoutineServices::authType（该方法不调 createToken）
|
||
* @param array $credentials ['code'=>string, 'spread'=>int, 'spid'=>string]
|
||
* @return array
|
||
*/
|
||
protected function authType(array $credentials): array
|
||
{
|
||
$code = $credentials['code'] ?? '';
|
||
$spread = $credentials['spread'] ?? 0;
|
||
$spid = $credentials['spid'] ?? '';
|
||
if (!$code) {
|
||
throw new ApiException('缺少授权code');
|
||
}
|
||
// 复用现有 authType 方法（不调 createToken，只返回 key + bindPhone）
|
||
$result = app()->make(RoutineServices::class)->authType($code, $spread, $spid);
|
||
return [
|
||
'uid' => 0,
|
||
'user_info' => [],
|
||
'isbind' => (bool)$result['bindPhone'],
|
||
'bind_key' => $result['key'] ?? '',
|
||
'extra' => [],
|
||
];
|
||
}
|
||
|
||
/**
|
||
* 两步式第二步：根据缓存 key 取用户数据，调 wechatOauthAfter 完成认证
|
||
* @param array $credentials ['key'=>string]
|
||
* @return array
|
||
* @throws \Psr\SimpleCache\InvalidArgumentException
|
||
*/
|
||
protected function authLogin(array $credentials): array
|
||
{
|
||
$key = $credentials['key'] ?? '';
|
||
if (!$key) {
|
||
throw new ApiException('缺少缓存key');
|
||
}
|
||
$createData = CacheService::get($key);
|
||
if (!$createData) {
|
||
throw new ApiException('授权已过期，请重新登录');
|
||
}
|
||
$user = $this->wechatOauthAfter($createData);
|
||
return [
|
||
'uid' => (int)$user['uid'],
|
||
'user_info' => $user,
|
||
'isbind' => false,
|
||
'extra' => [
|
||
'bindName' => (int)sys_config('get_avatar') && $user['avatar'] == sys_config('h5_avatar'),
|
||
],
|
||
];
|
||
}
|
||
|
||
/**
|
||
* 授权 + 绑定手机号一步到位
|
||
* 用 code 换 session + 解密手机号，调 wechatOauthAfter 完成认证
|
||
* @param array $credentials ['code'=>string, 'iv'=>string, 'encryptedData'=>string, 'spread'=>int, 'spid'=>string, 'key'=>string]
|
||
* @return array
|
||
* @throws \Psr\SimpleCache\InvalidArgumentException
|
||
*/
|
||
protected function authBindingPhone(array $credentials): array
|
||
{
|
||
$code = $credentials['code'] ?? '';
|
||
$iv = $credentials['iv'] ?? '';
|
||
$encryptedData = $credentials['encryptedData'] ?? '';
|
||
$spread = $credentials['spread'] ?? 0;
|
||
$spid = $credentials['spid'] ?? '';
|
||
$key = $credentials['key'] ?? '';
|
||
|
||
if (!$code || !$iv || !$encryptedData) {
|
||
throw new ApiException('缺少授权参数');
|
||
}
|
||
|
||
$wechatInfo = [];
|
||
$agent_id = 0;
|
||
$userType = $login_type = 'routine';
|
||
// 若有缓存 key，从缓存恢复已授权数据
|
||
if ($key) {
|
||
$cachedData = CacheService::get($key);
|
||
if (!$cachedData) {
|
||
throw new ApiException('授权已过期，请重新登录');
|
||
}
|
||
[$openid, $wechatInfo, $spreadId, $agent_id, $login_type, $userType] = $cachedData;
|
||
}
|
||
|
||
// 用 code 换 session + 解密手机号
|
||
/** @var MiniProgram $oauth */
|
||
$oauth = app()->make(MiniProgram::class);
|
||
[$userInfoCong, $userInfo] = $oauth->oauth($code, [
|
||
'iv' => $iv,
|
||
'encryptedData' => $encryptedData,
|
||
]);
|
||
if (!$userInfo || !isset($userInfo['purePhoneNumber'])) {
|
||
throw new ApiException('获取用户信息失败');
|
||
}
|
||
|
||
// 处理推广关系
|
||
$spreadId = $spid ?? 0;
|
||
if ($spread && ($info = app()->make(QrcodeServices::class)->getOne(['id' => $spread, 'status' => 1]))) {
|
||
$spreadId = $info['third_id'];
|
||
}
|
||
|
||
$openid = $userInfoCong['openid'];
|
||
$wechatInfo['openid'] = $openid;
|
||
$wechatInfo['unionid'] = $userInfoCong['unionid'] ?? '';
|
||
$wechatInfo['spid'] = $spreadId;
|
||
$wechatInfo['code'] = $spread;
|
||
$wechatInfo['session_key'] = $userInfoCong['session_key'];
|
||
$wechatInfo['phone'] = $userInfo['purePhoneNumber'];
|
||
|
||
$user = $this->wechatOauthAfter([$openid, $wechatInfo, $spreadId, $agent_id, $login_type, $userType]);
|
||
return [
|
||
'uid' => (int)$user['uid'],
|
||
'user_info' => $user,
|
||
'isbind' => false,
|
||
'extra' => [
|
||
'bindName' => (int)sys_config('get_avatar') && $user['avatar'] == sys_config('h5_avatar'),
|
||
],
|
||
];
|
||
}
|
||
|
||
/**
|
||
* 手机号登录（验证码）
|
||
* @param array $credentials ['key'=>string, 'phone'=>string, 'spread'=>int, 'agent_id'=>int, 'spid'=>string, 'code'=>string]
|
||
* @return array
|
||
* @throws \Psr\SimpleCache\InvalidArgumentException
|
||
*/
|
||
protected function phoneLogin(array $credentials): array
|
||
{
|
||
$key = $credentials['key'] ?? '';
|
||
$phone = $credentials['phone'] ?? '';
|
||
$spread = $credentials['spread'] ?? '';
|
||
$agent_id = $credentials['agent_id'] ?? '';
|
||
$spid = $credentials['spid'] ?? '';
|
||
$code = $credentials['code'] ?? '';
|
||
|
||
if (!$phone) {
|
||
throw new ApiException('缺少手机号');
|
||
}
|
||
|
||
if ($code === '') {
|
||
// 从缓存取已授权数据
|
||
if (!$key) {
|
||
throw new ApiException('缺少缓存key或授权code');
|
||
}
|
||
$cachedData = CacheService::get($key);
|
||
if (!$cachedData) {
|
||
throw new ApiException('授权已过期，请重新登录');
|
||
}
|
||
[$openid, $routineInfo, $spid, $agent_id, $login_type, $userType] = $cachedData;
|
||
$routineInfo['phone'] = $phone;
|
||
$createData = [$openid, $routineInfo, $spid, $agent_id, $login_type, $userType];
|
||
} else {
|
||
// 用 code 重新换 session
|
||
$userInfoConfig = app()->make(MiniProgram::class)->oauth($code, ['silence' => true]);
|
||
if (!isset($userInfoConfig['openid'])) {
|
||
throw new ApiException('静默授权失败');
|
||
}
|
||
$routineInfo = ['unionid' => $userInfoConfig['unionid'] ?? ''];
|
||
$info = app()->make(QrcodeServices::class)->getOne(['id' => $spread, 'status' => 1]);
|
||
if ($spread && $info) {
|
||
$spid = $info['third_id'];
|
||
}
|
||
$openid = $userInfoConfig['openid'];
|
||
$routineInfo['openid'] = $openid;
|
||
$routineInfo['spid'] = $spid;
|
||
$routineInfo['code'] = $spread;
|
||
$routineInfo['session_key'] = $userInfoConfig['session_key'];
|
||
$routineInfo['headimgurl'] = sys_config('h5_avatar');
|
||
$routineInfo['phone'] = $phone;
|
||
$createData = [$openid, $routineInfo, $spid, $agent_id, 'routine', 'routine'];
|
||
}
|
||
|
||
$user = $this->wechatOauthAfter($createData);
|
||
return [
|
||
'uid' => (int)$user['uid'],
|
||
'user_info' => $user,
|
||
'isbind' => false,
|
||
'extra' => [
|
||
'bindName' => (int)sys_config('get_avatar') && $user['avatar'] == sys_config('h5_avatar'),
|
||
],
|
||
];
|
||
}
|
||
|
||
/**
|
||
* 完成小程序用户创建/更新，返回 user 数组。
|
||
* @param array $createData [$openid, $wechatInfo, $spreadId, $agent_id, $login_type, $userType]
|
||
* @return array
|
||
*/
|
||
protected function wechatOauthAfter(array $createData): array
|
||
{
|
||
/** @var UserWechatAuthServices $wechatAuthServices */
|
||
$wechatAuthServices = app()->make(UserWechatAuthServices::class);
|
||
$user = $wechatAuthServices->wechatOauthAfter($createData);
|
||
if (!$user || !isset($user['uid'])) {
|
||
throw new ApiException('用户认证失败');
|
||
}
|
||
return $user;
|
||
}
|
||
}
|