69 lines
2.2 KiB
PHP
69 lines
2.2 KiB
PHP
<?php
|
|
namespace app\middleware;
|
|
|
|
|
|
use app\admin\model\Admin;
|
|
use app\console\model\AdminsModel;
|
|
use app\model\User;
|
|
use app\mzl\common\utils\JwtUtil;
|
|
use app\util\Util;
|
|
use ReflectionClass;
|
|
use support\Redis;
|
|
use Webman\Http\Request;
|
|
use Webman\Http\Response;
|
|
use Webman\MiddlewareInterface;
|
|
use support\exception\BusinessException;
|
|
|
|
class ConsoleAuthMiddleware implements MiddlewareInterface
|
|
{
|
|
public function process(Request $request, callable $handler): Response
|
|
{
|
|
if (strpos($request->path(), '/console/') !== 0) {
|
|
return $handler($request);
|
|
}
|
|
// 通过反射获取控制器哪些方法不需要登录
|
|
$controller = new ReflectionClass($request->controller);
|
|
$noNeedLogin = $controller->getDefaultProperties()['noNeedJwt'] ?? [];
|
|
|
|
$isLogin = !in_array($request->action, $noNeedLogin);
|
|
|
|
// 从 Header 获取 Token
|
|
$token = $request->header('Authorization');
|
|
|
|
//需要登录并且未提供token
|
|
$body = [
|
|
'status' => 'error',
|
|
'code' => 401,
|
|
'message' => 'Please log in.',
|
|
'data' => [],
|
|
];
|
|
if ($isLogin && (!$token || !str_starts_with($token, 'Bearer '))) {
|
|
return response(json_encode($body, JSON_UNESCAPED_UNICODE), 401, ['Content-Type' => 'application/json']);
|
|
}elseif(!$isLogin){
|
|
return $handler($request);
|
|
}
|
|
|
|
|
|
$token = substr($token, 7);
|
|
try {
|
|
// 验证 Token 并获取用户ID
|
|
$decoded = JwtUtil::verifyToken($token);
|
|
|
|
if (!isset($decoded->sub)) {
|
|
return response(json_encode($body, JSON_UNESCAPED_UNICODE), 401, ['Content-Type' => 'application/json']);
|
|
}
|
|
|
|
$userId = $decoded->sub;
|
|
$user = AdminsModel::find($userId);
|
|
if(!$user){
|
|
return response(json_encode($body, JSON_UNESCAPED_UNICODE), 401, ['Content-Type' => 'application/json']);
|
|
}
|
|
|
|
// 将用户ID存入请求对象，供后续使用
|
|
$request->user = $user;
|
|
return $handler($request);
|
|
} catch (BusinessException $e) {
|
|
return json(['code' => 401, 'msg' => $e->getMessage()]);
|
|
}
|
|
}
|
|
} |