molong/sentcms
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

接口基类完善

Browse Source
This commit is contained in:
molong
2017-11-10 11:31:22 +08:00
parent 4b020b8710
commit 477cd0b3ef
3 changed files with 88 additions and 25 deletions
Download Patch File Download Diff File Expand all files Collapse all files

69
application/common/controller/Api.php
View File

@@ -11,30 +11,41 @@ namespace app\common\controller;
class Api {
protected $data;
protected $data = array('code' => 0, 'msg' => '', 'time' => 0, 'data' => '');
protected $mustToken = false; //是否检查用户行为
protected $user = array(); //用户信息
protected $client; //客户端信息
protected $request;
public function __construct() {
header("Access-Control-Allow-Origin: *");
header("Access-Control-Allow-Methods: GET, POST, PUT, DELETE, OPTIONS");
header("Access-Control-Allow-Headers: Origin, X-Requested-With, Content-Type, Accept, Authorization");
$header = getallheaders();
$this->data = array('code' => 0, 'msg' => '', 'time' => time(), 'data' => '');
$isCheck = $this->checkToken($header);
$url = request()->module() . '/' . request()->controller() . '/' . request()->action();
if (!$isCheck && 'api/index/gettoken' !== strtolower($url)) {
public function __construct(\think\Request $request) {
$this->setHeader();
$this->request = $request;
$this->data['time'] = time();
if ($this->request->isOptions()){
exit('OK');
}
$header = $this->request->header();
if (!$this->checkAuthor($header)) { //检查客户端接口是否可接入
$this->data['code'] = '301';
$this->data['data'] = '非法请求！';
echo json_encode($this->data);
exit();
echo json_encode($this->data);exit();
}
if ($this->mustToken) {
if ($this->checkToken($header)) {
$this->data['code'] = '201';
$this->data['data'] = '用户登录信息失效，请重登！';
echo json_encode($this->data);exit();
}
}
}
protected function checkToken($header){
if (isset($header['Authorization']) && $header['Authorization']) {
$token = authcode($header['Authorization']);
list($appid, $appsecret, $currentTime) = explode('|', $token);
$client = db('Client')->where('appid', $appid)->where('appsecret', $appsecret)->value('id');
if ($client && ($currentTime+86400) < time()) {
protected function checkAuthor($header){
if (isset($header['authorization']) && $header['authorization']) {
list($appid, $sign) = explode('{|}', $header['authorization']);
$this->client = db('Client')->where('appid', $appid)->find();
if ($sign == md5($this->client['appid'].$this->client['appsecret'])) {
return true;
}else{
return false;
@@ -43,4 +54,26 @@ class Api {
return false;
}
}
protected function checkToken($header){
if (isset($header['access_token']) && $header['access_token']) {
$token = authcode($header['access_token']);
list($uid, $username, $password) = explode('|', $token);
$this->user = model('User')->where('uid', $uid)->where('username', $username)->find();
if ($this->user && $password === $this->user['password']) {
return true;
}else{
$this->user = array();
return false;
}
}else{
return false;
}
}
protected function setHeader(){
header("Access-Control-Allow-Origin: *");
header("Access-Control-Allow-Methods: GET, POST, PUT, DELETE, OPTIONS");
header("Access-Control-Allow-Headers: Origin, X-Requested-With, Content-Type, Accept, Authorization, access_token");
}
}