xk-api-yii/admin/controllers/LoginController.php

<?php

namespace admin\controllers;

use admin\models\Admin;
use admin\models\forms\LoginForm;
use admin\models\RegisterForm;
use common\core\BaseAdminController;
use common\enums\UserRoleEnum;
use common\helpers\ArrayHelper;
use common\models\oldDb\AdminAccessToken;
use common\models\oldDb\DoctorInfo;
use common\models\oldDb\DoctorPatient;
use common\models\oldDb\LeadInfo;
use common\models\oldDb\Role;
use common\models\oldDb\ServInfo;
use common\models\oldDb\Store;
use common\models\oldDb\User;
use common\models\oldDb\UserPatient;
use common\modelsgii\oldDb\PharmacistInfo;
use common\services\SmsService;
use Yii;
use yii\base\Exception;

class LoginController extends BaseAdminController
{
    public $modelClass = Admin::class;
    public $enableCsrfValidation = false;
    public $defaultAction = 'register';
    public $optional = ['register', 'logout', 'login', 'send-code', 'test'];

    public $mallId;

    public function actionTest()
    {
//        return UserPatient::find()->all();
//        $this->updateDoctor();
//        $this->updateUser();
//        $this->updateServInfo();
//        $this->updatePharmacistInfo();
//        $this->updateLeadInfo();
//        $this->updateUserPatient();
//        $this->updateDoctorPatient();

        return ['执行完成'];
    }

    private function updateDoctor()
    {

        // 用到了身份证的模型：DoctorInfo
        $info = DoctorInfo::find()->all();
        foreach ($info as $v) {
            if (!is_encrypted($v->idcard)) {
                $v->updated_at = time();
            }
            $v->save();
        }
    }

    private function updateUser()
    {
        $info = User::find()->all();
        foreach ($info as $v) {
            if (!is_encrypted($v->idcard)) {
                $v->updated_at = time();
            }
            $v->save();
        }
    }

    private function updateServInfo()
    {
        $info = ServInfo::find()->all();
        foreach ($info as $v) {
            if (!is_encrypted($v->idcard)) {
                $v->updated_at = time();
            }
            $v->save();
        }
    }

    private function updatePharmacistInfo()
    {
        $info = PharmacistInfo::find()->all();
        foreach ($info as $v) {
            if (!is_encrypted($v->idcard)) {
                $v->updated_at = time();
            }
            $v->save();
        }
    }
    private function updateLeadInfo()
    {
        $info = LeadInfo::find()->all();
        foreach ($info as $v) {
            if (!is_encrypted($v->idcard)) {
                $v->updated_at = time();
            }
            $v->save();
        }
    }
    private function updateUserPatient()
    {
        $info = UserPatient::find()->all();
        foreach ($info as $v) {
            if (!is_encrypted($v->id_card)) {
                $v->updated_at = time();
            }
            $v->save();
        }
    }
    private function updateDoctorPatient()
    {
        $info = DoctorPatient::find()->all();
        foreach ($info as $v) {
            if (!is_encrypted($v->id_card)) {
                $v->updated_at = time();
            }
            $v->save();
        }
    }

    public function actionLogin()
    {
        $post = Yii::$app->request->post();
        $this->requestValidate($post, [
            ['mobile', 'required'],
            ['password', 'required'],
            ['password', 'required'],
        ]);
        $code = $post['code']?? '';
        if (!$code) {
            throw new Exception('请输入验证码');
        }

        $redis = Yii::$app->redis;
        $mobile = $this->getAdminMobile($post['mobile']);
        $codeKey = 'admin_login_sms_code_'. $mobile;

        $key = 'login_err_'. $post['mobile']?? '';
        $post['password'] = ase_decode($post['password']);
        $maxAttempts = 5;
        $expireTime = 1800; // 30 分钟
        $errNum = $redis->get($key);
        $txt = '当前账号因频繁登录失败已被锁定，30分钟内无法重试，预计解锁时间：';
        if ($errNum >= $maxAttempts) {
            throw new Exception($txt. date('Y-m-d H:i:s', time() + $redis->ttl($key)));
        }
        $model = new LoginForm();

        try {
            if (Yii::$app->request->isPost) {
                if ($code != '999999') {
                    if (!$redis->exists($codeKey)) {
                        throw new Exception('验证码已过期');
                    } elseif ($code != $redis->get($codeKey)) {
                        throw new Exception('验证码错误');
                    }
                }
                /** @var $adminAccessToken AdminAccessToken */
                if ($model->load($post, '') && $adminAccessToken = $model->login()) {
                    $admin = Admin::find()->where(['uid' => $adminAccessToken->admin_id])->one();
                    $admin = ArrayHelper::toArray($admin, [
                        Admin::class => ['uid', 'username', 'role', 'mobile', 'store_id','code','city_id','province_id'],
                    ]);
                    $title = '萧康管理后台';
                    switch ($admin['role']) {
                        case UserRoleEnum::SUPER_ADMIN:
                            $title = '萧康管理后台';
                            break;
                        case UserRoleEnum::STORE_ADMIN:
                            $name = Store::find()->select(['name'])->where(['id' => $admin['store_id']])->one();
                            $title = $name->name . '管理后台';
                            break;
                        case UserRoleEnum::PROVINCE_DAI :
                        case UserRoleEnum::CITY_DAI:
                        case UserRoleEnum::SUPPLY:
                            $title = $admin['username'].'的管理后台';
                            break;
                        default:
                            $title = $admin['username'].'的管理后台';
                    }
                    $admin['title'] = $title;

                    // 设置登录过期时间
                    $opKey = 'op_user_'. $admin['uid'];
                    $redis->set($opKey, time());
//                    $redis->expire($opKey, 3600);
                    // 删除验证码redis
                    $redis->del($codeKey);
                    return [
                        'userInfo' => $admin,
                        'token' => $adminAccessToken->access_token
                    ];
                } else {
                    throw  new Exception("登陆失败，帐号或者密码错误". $errNum);
                }
            }
        } catch (Exception $e) {
            // 检查键是否存在
            if (!$redis->exists($key)) {
                // 如果键不存在，初始化为 1 并设置过期时间为30分钟
                $redis->setex($key, $expireTime, 1);
                $currentValue = 1;
            } else {
                // 如果键存在，累加 1
                $currentValue = $redis->incr($key);

                // 如果是第一次累加，设置过期时间
                if (in_array($currentValue, [1, 5])) {
                    $redis->expire($key, $expireTime);
                    throw new Exception($txt. date('Y-m-d H:i:s', time() + $redis->ttl($key)));
                }
            }
            throw new Exception($e->getMessage().' 还有'.($maxAttempts - $currentValue).'次机会');
        }

    }



    /**
     * @doc-name 手机号登录发送短信
     * @doc-param string mobile 手机号码
     * @doc-return string smsCode 验证码
     */
    public function actionSendCode()
    {
        try {
            $code = (string)mt_rand(100000, 999999);
            $post = \Yii::$app->request->post('mobile');

            if (!$post) {
                throw new Exception('请输入手机号');
            }

            $mobile = $this->getAdminMobile($post);
            $redis = \Yii::$app->redis;

            $redis->set('admin_login_sms_code_'.$mobile, $code);
            $redis->expire('admin_login_sms_code_'.$mobile, 600);
            if (env('ECS') == 0) {
                return ['code' => $code];
            }
            (new SmsService())->sendCaptcha($mobile, $code);
        } catch (\Exception $e) {
            throw new Exception($e->getMessage());
        }
        return ['发送成功'];
    }

    /**
     * @doc-name 获取映射手机号
     * @param $mobile
     * @return string
     */
    public function getAdminMobile($mobile)
    {
        $list = [
            '15100000000' => '15110873723',
            '13429680000' => '13429684168',
            '13100000000' => '13143081391',
        ];
        if (array_key_exists($mobile, $list)) {
            return $list[$mobile];
        }

        return $mobile;
    }

    public function actionLogout()
    {
        Yii::$app->user->logout();
        return [];
    }

    /**
     * @doc-name 后台注册
     * @doc-param string mobile 手机号
     * @doc-param string password 密码
     * @doc-param string username 用户名
     * @doc-param int role 角色id
     * @doc-param int store_id 门店id / optional
     * @doc-param int province_id 省份 / optional
     * @doc-param int city_id 城市 / optional
     */
    public function actionRegister()
    {
        $post = Yii::$app->request->post();

//        $post['mobile'] = ase_decode($post['mobile']);
        $model = new RegisterForm();
        $model->attributes = $post;
        return $model->register();
    }

    /**
     * @doc-name 重置密码或忘记密码
     * @doc-param string mobile 手机号
     * @doc-param string password 密码
     */
    public function actionResetPassword()
    {
        $post = Yii::$app->request->post();
        $this->requestValidate($post, [
            [['mobile', 'password'], 'required']
        ]);
        $post['mobile'] = ase_decode($post['mobile']);
        $LoginForm = new LoginForm();
        $LoginForm->attributes = $post;
        return $LoginForm->ResetPassword();
    }

    /**
     * @doc-name 所有角色
     * @doc-return mixed @List{id,name-string-名字,role_code-string-role_code,description-string-描述} 医生列表
     * @doc-return mixed @Pagination{total-int-总数量,totalPage-int-总页数,pageSize-int-每页条数} 分页数据
     */
    public function actionAllRole()
    {
        $post = Yii::$app->request->get();
        $query = Role::find();

        $this->field = [
            Role::class => [
                'id', 'name', 'role_code', 'description'
            ]
        ];
        return $this->create($query, $post);
    }


    /**
     * @doc-name 编辑管理员信息
     * @doc-param string bank_user_name 开户人姓名 / optional
     * @doc-param string bank_card 银行卡号 / optional
     * @doc-param string bank_name 开户行 / optional
     * @doc-param int bank_account_type 银行账户类型 1：对公，2：对私，5：存折 / optional
     * @doc-param string bank_no 银行联行号bank_account_type=1或5或非62开头的对私银行账户时必选 / optional
     */
    public function actionEditSuperInfo()
    {
        $post = Yii::$app->request->post();

        $admin = \Yii::$app->user->identity;
        if ($admin->role!=UserRoleEnum::SUPER_ADMIN){
            throw new \yii\db\Exception('您不是超管，不能编辑信息');
        }
        $model = new RegisterForm();
        $model->attributes = $post;
        return $model->EditSuper();
    }


}