<?php
// +----------------------------------------------------------------------
// | SentCMS [ WE CAN DO IT JUST THINK IT ]
// +----------------------------------------------------------------------
// | Copyright (c) 2013 http://www.tensent.cn All rights reserved.
// +----------------------------------------------------------------------
// | Author: molong <molong@tensent.cn> <http://www.tensent.cn>
// +----------------------------------------------------------------------

namespace app\common\controller;

class Api {

	protected $data = array('code' => 0, 'msg' => '', 'time' => 0, 'data' => '');
	public $mustToken = false;     //是否检查用户行为
	protected $user      = array();    //用户信息
	protected $client;                //客户端信息
	protected $request;

	public function __construct(\think\Request $request) {
		$this->setHeader();
		$this->request = $request;
		$this->data['time'] = time();
		if ($this->request->isOptions()){
			exit('OK');
		}
		$header = $this->request->header();

		if (!$this->checkAuthor($header)) {    //检查客户端接口是否可接入
			$this->data['code'] = '301';
			$this->data['data'] = '非法请求！';
			echo json_encode($this->data);exit();
		}

		if ($this->mustToken) {
			if (!$this->checkToken($header)) {
				$this->data['code'] = '203';
				$this->data['data'] = '用户登录信息失效，请重登！';
				echo json_encode($this->data);exit();
			}
		}
	}

	public function _empty(){
		$this->data['msg'] = '空操作！';
		return $this->data;
	}

	protected function checkAuthor($header){return true;
		if (isset($header['authorization']) && $header['authorization']) {
			list($appid, $sign) = explode('{|}', $header['authorization']);
			$this->client = db('Client')->where('appid', $appid)->find();
			if ($sign == md5($this->client['appid'].$this->client['appsecret'])) {
				return true;
			}else{
				return false;
			}
		}else{
			return false;
		}
	}

	protected function checkToken($header){
		if (isset($header['access_token']) && $header['access_token']) {
			$token = authcode($header['access_token']);
			list($uid, $username, $password) = explode('|', $token);
			$this->user = model('User')->where('uid', $uid)->where('username', $username)->find();
			if ($this->user && $password === $this->user['password']) {
				return true;
			}else{
				$this->user = array();
				return false;
			}
		}else{
			return false;
		}
	}

	protected function setHeader(){
		header("Access-Control-Allow-Origin: *");
		header("Access-Control-Allow-Methods: GET, POST, PUT, DELETE, OPTIONS");
		header("Access-Control-Allow-Headers: Origin, X-Requested-With, Content-Type, Accept, Authorization, access_token");
	}
}