first push

app/common/controller/AuthController.php

@@ -0,0 +1,76 @@
+<?php
+
+namespace app\common\controller;
+
+use app\common\service\AuthService;
+use app\common\validate\UserValidate;
+use support\Request;
+
+class AuthController extends BaseController
+{
+    
+    public function login(Request $request)
+    {
+        try {
+            $data = $this->validate(new UserValidate(), $request->post(), 'upwd_login');
+            $result = (new AuthService())->login($data);
+            return $this->success($result, '登录成功');
+        } catch (\Throwable $e) {
+            return $this->error($e->getMessage());
+        }
+    }
+
+    public function register(Request $request)
+    {
+        try {
+            $data = $this->validate(new UserValidate(), $request->post(), 'upwd_register');
+            $result = (new AuthService())->register($data);
+            return $this->success($result, '注册成功');
+        } catch (\Throwable $e) {
+            return $this->error($e->getMessage().'|'.$e->getFile().'|'.$e->getLine());
+        }
+    }
+
+    public function verify(Request $request)
+    {
+        try {
+            $token = $request->post('access_token') ?: $request->header('authorization');
+            $systemCode = $request->post('system_code');
+            if (!$token || !$systemCode) return $this->error('参数缺失', 422);
+            $payload = (new AuthService())->verifyToken($token, $systemCode);
+            return $this->success($payload, '验证成功');
+        } catch (\Throwable $e) {
+            return $this->error($e->getMessage() ?: '无效或过期的token', 401);
+        }
+    }
+
+    public function refresh(Request $request)
+    {
+        try {
+            $refresh_token = $request->post('refresh_token');
+            $systemCode = $request->post('system_code');
+            if (!$refresh_token || !$systemCode) return $this->error('参数缺失', 422);
+            $result = (new AuthService())->refreshToken($refresh_token, $systemCode);
+            return $this->success($result, '刷新成功');
+        } catch (\Throwable $e) {
+            return $this->error($e->getMessage(), 401);
+        }
+    }
+
+    public function logout(Request $request)
+    {
+        $token = $request->post('access_token') ?: $request->header('Authorization');
+        $systemCode = $request->post('system_code') ?: $request->header('system_code');
+        (new AuthService())->logout($token, $systemCode);
+        return $this->success([], '已登出');
+    }
+
+    public function blockToken(Request $request)
+    {
+        $token = $request->post('token');
+        $systemCode = $request->post('system_code');
+        if (!$token || !$systemCode) return $this->error('参数缺失', 422);
+        (new AuthService())->blockToken($token, $systemCode);
+        return $this->success([], '已强制停用该token');
+    }
+}

app/common/controller/BaseController.php

@@ -0,0 +1,40 @@
+<?php
+
+namespace app\common\controller;
+
+use support\Request;
+use support\Response;
+use support\exception\BusinessException;
+use app\common\traits\ResponseTrait;
+use think\Validate;
+
+abstract class BaseController
+{
+    use ResponseTrait;
+
+    protected mixed $validator = null;
+
+    /**
+     * 验证数据
+     *
+     * @param Validate $validator 验证器实例
+     * @param array $data 待验证的数据
+     * @param string $scene 验证场景
+     * @return array 验证后的数据
+     * @throws BusinessException 验证失败时抛出业务异常
+     */
+    public function validate(Validate $validator, array $data, string $scene = ''): array
+    {
+        // 如果指定了验证场景，并且验证器支持场景方法，则设置验证场景
+        if ($scene && method_exists($validator, 'scene')) {
+            $validator->scene($scene);
+        }
+        // 执行数据验证
+        if (!$validator->check($data)) {
+            // 验证失败，抛出业务异常，异常信息为验证器返回的错误信息
+            throw new BusinessException($validator->getError());
+        }
+        // 验证成功，返回原始数据
+        return $data;
+    }
+}