123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118119120121122123124125126127128129130131132133134135136137138139140141142143144145146147148149150151152153154155156157158159160161162163164165166167168169170171172173174175176177178179180181182183184185186187188189190191192193194195196197198199200201202203204205206207208209210211 |
- <?php
- namespace App\Http\Controllers\Passport;
- use App\Http\Controllers\Controller;
- use App\Http\Requests\Passport\AuthRegister;
- use App\Http\Requests\Passport\AuthForget;
- use App\Http\Requests\Passport\AuthLogin;
- use Illuminate\Http\Request;
- use Illuminate\Support\Facades\Cache;
- use App\Models\Plan;
- use App\Models\User;
- use App\Models\InviteCode;
- use App\Utils\Helper;
- use App\Utils\Dict;
- class AuthController extends Controller
- {
- public function register(AuthRegister $request)
- {
- if ((int)config('v2board.email_whitelist_enable', 0)) {
- if (!Helper::emailSuffixVerify(
- $request->input('email'),
- config('v2board.email_whitelist_suffix', Dict::EMAIL_WHITELIST_SUFFIX_DEFAULT))
- ) {
- abort(500, '邮箱后缀不处于白名单中');
- }
- }
- if ((int)config('v2board.stop_register', 0)) {
- abort(500, '本站已关闭注册');
- }
- if ((int)config('v2board.invite_force', 0)) {
- if (empty($request->input('invite_code'))) {
- abort(500, '必须使用邀请码才可以注册');
- }
- }
- if ((int)config('v2board.email_verify', 0)) {
- $redisKey = 'sendEmailVerify:' . $request->input('email');
- if (empty($request->input('email_code'))) {
- abort(500, '邮箱验证码不能为空');
- }
- if (Cache::get($redisKey) !== $request->input('email_code')) {
- abort(500, '邮箱验证码有误');
- }
- }
- $email = $request->input('email');
- $password = $request->input('password');
- $exist = User::where('email', $email)->first();
- if ($exist) {
- abort(500, '邮箱已存在系统中');
- }
- $user = new User();
- $user->email = $email;
- $user->password = password_hash($password, PASSWORD_DEFAULT);
- $user->v2ray_uuid = Helper::guid(true);
- $user->token = Helper::guid();
- if ($request->input('invite_code')) {
- $inviteCode = InviteCode::where('code', $request->input('invite_code'))
- ->where('status', 0)
- ->first();
- if (!$inviteCode) {
- if ((int)config('v2board.invite_force', 0)) {
- abort(500, '邀请码无效');
- }
- } else {
- $user->invite_user_id = $inviteCode->user_id ? $inviteCode->user_id : null;
- if (!(int)config('v2board.invite_never_expire', env('V2BOARD_INVITE_NEVER_EXPIRE'))) {
- $inviteCode->status = 1;
- $inviteCode->save();
- }
- }
- }
- // try out
- if ((int)config('v2board.try_out_plan_id', 0)) {
- $plan = Plan::find(config('v2board.try_out_plan_id'));
- if ($plan) {
- $user->transfer_enable = $plan->transfer_enable * 1073741824;
- $user->plan_id = $plan->id;
- $user->group_id = $plan->group_id;
- $user->expired_at = time() + (config('v2board.try_out_hour', 1) * 3600);
- }
- }
- if (!$user->save()) {
- abort(500, '注册失败');
- }
- if ((int)config('v2board.email_verify', 0)) {
- Cache::forget($redisKey);
- }
- $request->session()->put('email', $user->email);
- $request->session()->put('id', $user->id);
- return response()->json([
- 'data' => true
- ]);
- }
- public function login(AuthLogin $request)
- {
- $email = $request->input('email');
- $password = $request->input('password');
- $user = User::where('email', $email)->first();
- if (!$user) {
- abort(500, '用户名或密码错误');
- }
- if (!Helper::multiPasswordVerify(
- $user->password_algo,
- $password,
- $user->password)
- ) {
- abort(500, '用户名或密码错误');
- }
- if ($user->banned) {
- abort(500, '该账户已被停止使用');
- }
- $data = [
- 'token' => $user->token
- ];
- $request->session()->put('email', $user->email);
- $request->session()->put('id', $user->id);
- if ($user->is_admin) {
- $request->session()->put('is_admin', true);
- $data['is_admin'] = true;
- }
- return response([
- 'data' => $data
- ]);
- }
- public function token2Login(Request $request)
- {
- if ($request->input('token')) {
- $user = User::where('token', $request->input('token'))->first();
- if (!$user) {
- return header('Location:' . config('v2board.app_url'));
- }
- $code = Helper::guid();
- $key = 'token2Login_' . $code;
- Cache::put($key, $user->id, 600);
- $redirect = '/#/login?verify=' . $code . '&redirect=' . ($request->input('redirect') ? $request->input('redirect') : 'dashboard');
- if (config('v2board.app_url')) {
- $location = config('v2board.app_url') . $redirect;
- } else {
- $location = url($redirect);
- }
- return header('Location:' . $location);
- }
- if ($request->input('verify')) {
- $key = 'token2Login_' . $request->input('verify');
- $userId = Cache::get($key);
- if (!$userId) {
- abort(500, '令牌有误');
- }
- $user = User::find($userId);
- if (!$user) {
- abort(500, '用户不存在');
- }
- if ($user->banned) {
- abort(500, '该账户已被停止使用');
- }
- $request->session()->put('email', $user->email);
- $request->session()->put('id', $user->id);
- if ($user->is_admin) {
- $request->session()->put('is_admin', true);
- }
- Cache::forget($key);
- return response([
- 'data' => true
- ]);
- }
- }
- public function check(Request $request)
- {
- $data = [
- 'is_login' => $request->session()->get('id') ? true : false
- ];
- if ($request->session()->get('is_admin')) {
- $data['is_admin'] = true;
- }
- return response([
- 'data' => $data
- ]);
- }
- public function forget(AuthForget $request)
- {
- $redisKey = 'sendEmailVerify:' . $request->input('email');
- if (Cache::get($redisKey) !== $request->input('email_code')) {
- abort(500, '邮箱验证码有误');
- }
- $user = User::where('email', $request->input('email'))->first();
- if (!$user) {
- abort(500, '该邮箱不存在系统中');
- }
- $user->password = password_hash($request->input('password'), PASSWORD_DEFAULT);
- $user->password_algo = NULL;
- if (!$user->save()) {
- abort(500, '重置失败');
- }
- Cache::forget($redisKey);
- return response([
- 'data' => true
- ]);
- }
- }
|