webman
您最多选择25个主题 主题必须以字母或数字开头,可以包含连字符 (-),并且长度不得超过35个字符

BaseController.php 4.3KB

123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118119120121122123124125126127128129130131132133134135136137138139140141142143144145146147
  1. <?php
  2. namespace app;
  3. class BaseController
  4. {
  5. /**
  6. * 无需签名
  7. * @var array
  8. */
  9. protected $noSize = [];
  10. /**
  11. * 用户信息
  12. * @var array
  13. */
  14. protected $userInfo = [];
  15. /**
  16. * 无需登录的方法,同时也就不需要鉴权了
  17. * @var array
  18. */
  19. protected $noNeedLogin = [];
  20. /**
  21. * 无需安全验证
  22. * @var array
  23. */
  24. protected $noSecure = [];
  25. protected $param = [];
  26. //是否需要登录
  27. private static function checklogin($arr, $action)
  28. {
  29. $arr = is_array($arr) ? $arr : explode(',', $arr);
  30. if (!$arr) {
  31. return false;
  32. }
  33. $arr = array_map('strtolower', $arr);
  34. // 是否存在
  35. if (in_array(strtolower($action), $arr) || in_array('*', $arr)) {
  36. return true;
  37. }
  38. // 没找到匹配
  39. return false;
  40. }
  41. private static function getParam($method, $request)
  42. {
  43. $arr = [];
  44. switch ($method) {
  45. case 'post':
  46. $arr = $request->post();
  47. break;
  48. case 'get':
  49. $arr = $request->get();
  50. break;
  51. case 'delete':
  52. $arr = $request->get();
  53. break;
  54. case 'put':
  55. parse_str($request->rawBody(), $arr);
  56. break;
  57. case 'patch':
  58. parse_str($request->rawBody(), $arr);
  59. break;
  60. }
  61. return $arr;
  62. }
  63. // 初始化
  64. public function initialize($request)
  65. {
  66. try {
  67. $function = $request->action;
  68. $controller = $request->controller;
  69. $directory = new $controller();
  70. if (!self::checklogin($directory->noNeedLogin, $function)) {//true为不用验证
  71. if (method_exists($directory, $function)) {
  72. $token = $request->header();//获取请求头token
  73. if (!isset($token['token'])) {
  74. return tojson(10000, 'token不存在');
  75. } else {
  76. $this->userInfo = getToken($token['token']);
  77. if (!is_array($this->userInfo)) {
  78. return $this->userInfo;
  79. }
  80. }
  81. }
  82. }
  83. $method = $request->method();
  84. $method = strtolower($method);
  85. $param = self::getParam($method, $request);
  86. $module = $request->app;
  87. $controller2 = substr($controller, strpos($controller, 'controller') + 11);
  88. $validate_classname = "\app\\$module\\validate\\$controller2";
  89. if (class_exists($validate_classname)) {
  90. $validate = new $validate_classname;
  91. if ($validate->hasScene($function)) {//验证场景
  92. if (!$validate->scene($function)->check($param)) {//验证器
  93. return tojson('10000', $validate->getError());
  94. }
  95. }
  96. }
  97. //安全验证
  98. $nosecure = nosecure($method, $directory->noSecure, $function, $param);
  99. if (!is_array($nosecure)) {
  100. return $nosecure;
  101. }
  102. //验签
  103. $param2 = $param;
  104. $verifysign = verifysign($param2, $directory->noSize, $request);//加上验签
  105. if ($verifysign) {
  106. if (!is_array($verifysign)) {
  107. return $verifysign;
  108. }
  109. }
  110. if (isset($param['page']) && !empty($param['page'])) {
  111. $param['page'] = $param['page'] - 1;
  112. if (!isset($param['pageSize'])) {
  113. $page = 0;
  114. $pageSize = 0;
  115. } else {
  116. $page = $param['pageSize'] * $param['page'];
  117. $pageSize = $param['pageSize'];
  118. }
  119. } else {
  120. $page = 0;
  121. $pageSize = 0;
  122. }
  123. $request->page = $page;
  124. $request->pageSize = $pageSize;
  125. $request->param = $param;
  126. $request->userInfo = $this->userInfo;
  127. } catch (\Exception $e) {
  128. return tojson(10000, $e->getMessage());
  129. } catch (\Throwable $e) {
  130. return tojson(10000, $e->getMessage());
  131. }
  132. }
  133. }