Merge branch 'develop'

2025-07-11 18:01:23 +08:00
parent 642c25503d
commit 925c5501f7
83 changed files with 4869 additions and 1162 deletions
@@ -0,0 +1,26 @@
+<?php
+
+namespace app\middleware;
+
+use Webman\MiddlewareInterface;
+use Webman\Http\Response;
+use Webman\Http\Request;
+
+class AccessControl implements MiddlewareInterface
+{
+    public function process(Request $request, callable $handler) : Response
+    {
+        // 如果是options请求则返回一个空响应，否则继续向洋葱芯穿越，并得到一个响应
+        $response = $request->method() == 'OPTIONS' ? response('') : $handler($request);
+
+        // 给响应添加跨域相关的http头
+        $response->withHeaders([
+            'Access-Control-Allow-Credentials' => 'true',
+            'Access-Control-Allow-Origin' => $request->header('origin', '*'),
+            'Access-Control-Allow-Methods' => $request->header('access-control-request-method', '*'),
+            'Access-Control-Allow-Headers' => $request->header('access-control-request-headers', '*'),
+        ]);
+
+        return $response;
+    }
+}
@@ -0,0 +1,46 @@
+<?php
+namespace app\middleware;
+
+use app\common\utils\Jwt;
+use ReflectionClass;
+use Webman\MiddlewareInterface;
+use Webman\Http\Response;
+use Webman\Http\Request;
+
+class AuthCheck implements MiddlewareInterface
+{
+    public function process(Request $request, callable $handler) : Response
+    {
+        $controller = new ReflectionClass($request->controller);
+        $noNeedLogin = $controller->getDefaultProperties()['noNeedLogin'] ?? [];
+
+        if (in_array($request->action, $noNeedLogin)) {
+            // 白名单
+            return $handler($request);
+        } else {
+            try {
+                $authHeader = $request->header('Fdesk-Auth-Token');
+                if (!$authHeader || !preg_match('/Bearer\s(\S+)/', $authHeader, $matches)) {
+                    $body = [
+                        'status'  => 'fail',
+                        'code'    => 401,
+                        'message' => '未授权',
+                        'data'    => [],
+                    ];
+                    return response(json_encode($body, JSON_UNESCAPED_UNICODE), 401, ['Content-Type' => 'application/json']);
+                }
+                $token = $matches[1];
+                $request->user = (new Jwt())->verifyToken($token);
+            } catch (\Throwable $e) {
+                $body = [
+                    'status'  => 'fail',
+                    'code'    => 401,
+                    'message' => $e->getMessage(),
+                    'data'    => [],
+                ];
+                return response(json_encode($body, JSON_UNESCAPED_UNICODE), 401, ['Content-Type' => 'application/json']);
+            }
+            return $handler($request);
+        }
+    }
+}
@@ -0,0 +1,42 @@
+<?php
+namespace app\middleware;
+
+use Webman\MiddlewareInterface;
+use Webman\Http\Response;
+use Webman\Http\Request;
+use app\common\service\BasicDataService;
+use ReflectionClass;
+
+class BasicData implements MiddlewareInterface
+{
+    public function process(Request $request, callable $handler): Response
+    {
+        $controller = new ReflectionClass($request->controller);
+        $noNeedHeader = $controller->getDefaultProperties()['noNeedHeader'] ?? [];
+
+        if (in_array($request->action, $noNeedHeader) || in_array($request->path(), config('whitelist.basi_cdata'))) {
+            // 白名单
+            return $handler($request);
+        } else {
+            try {
+                $corpAbbr = $request->header('Fdesk-Corp-Abbr');
+                $systemCode = $request->header('Fdesk-System-Code');
+                $loginType = $request->header('Fdesk-Login-Type');
+                $basicDataService = new BasicDataService();
+                if ($basicDataService->checkAndCacheBaseParams($loginType, $systemCode, $corpAbbr)) {
+                    $request->login_type = $loginType;
+                    $request->system_code = $systemCode;
+                    $request->corp_abbr = $corpAbbr;
+                    $request->basic_data = [
+                        'login_type' => $loginType,
+                        'system_code' => $systemCode,
+                        'corp_abbr' => $corpAbbr
+                    ];
+                }
+                return $handler($request);
+            } catch (\Throwable $th) {
+                throw $th;
+            }
+        }
+    }
+}