xinyouhe/x-server-mobile
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

jsapi

Browse Source
This commit is contained in:
WIN-C27C5MSVTPO\16961
2026-03-06 13:51:25 +08:00
parent 43022b8ff6
commit 3ad6b05bf8
5 changed files with 218 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files
backend/app/controller/AuthController.php
+135
View File
@@ -609,4 +609,139 @@ HTML;
return $this->error($e->getMessage());
}
}
/**
* 获取飞书 JS API 鉴权签名
* 用于前端初始化飞书 JS SDK
*
* company 参数可选，如果未提供则从登录 token 中获取用户所属公司
*/
public function feishuJsapiSignature(Request $request): Response
{
$url = $request->get('url');
$companyParam = $request->get('company');
if (!$url) {
return $this->error('缺少 url 参数');
}
try {
$companyId = null;
// 优先使用传入的 company 参数
if ($companyParam) {
$company = \app\model\Company::find($companyParam);
if (!$company) {
return $this->error('公司不存在');
}
$companyId = $company->id;
error_log("✅ 使用参数中的 company: {$companyId}");
}
// 从 token 中获取用户所属公司
else {
$companyId = $this->getCompanyId($request);
if (!$companyId) {
return $this->error('未登录且未指定公司', 401);
}
error_log("✅ 从 token 获取 company: {$companyId}");
}
// 获取该公司的默认飞书应用
$feishuApp = \app\model\CompanyFeishuApp::where('company_id', $companyId)
->where('system_id', 1)
->where('status', 1)
->first();
if (!$feishuApp) {
return $this->error('该公司未配置飞书应用');
}
// 生成 JS API 签名
$signatureData = $this->generateJsapiSignature($feishuApp->id, $url);
return $this->success([
'app_id' => $feishuApp->app_id,
'company_id' => $companyId,
'jsapi_ticket' => $signatureData['jsapi_ticket'],
'noncestr' => $signatureData['noncestr'],
'timestamp' => $signatureData['timestamp'],
'url' => $signatureData['url'],
'signature' => $signatureData['signature'],
]);
} catch (\Exception $e) {
error_log("❌ feishuJsapiSignature 失败: " . $e->getMessage());
return $this->error($e->getMessage());
}
}
/**
* 生成 JS API 鉴权签名
*
* @param int $feishuAppId 飞书应用配置ID
* @param string $url 当前页面URL
* @return array 签名数据
*/
private function generateJsapiSignature(int $feishuAppId, string $url): array
{
// 获取 jsapi_ticket
$jsapiTicket = \app\util\FeishuUtil::getJsapiTicket($feishuAppId);
// 清理 URL：移除 # 和 ? 后面的参数
$url = $this->cleanUrl($url);
// 生成随机字符串
$noncestr = $this->generateNonceStr();
// 获取毫秒级时间戳
$timestamp = (int)round(microtime(true) * 1000);
// 拼接签名字符串
$verifyStr = "jsapi_ticket={$jsapiTicket}&noncestr={$noncestr}&timestamp={$timestamp}&url={$url}";
// 生成 SHA1 签名
$signature = sha1($verifyStr);
error_log("✅ JS API 签名生成成功: url={$url}");
return [
'jsapi_ticket' => $jsapiTicket,
'noncestr' => $noncestr,
'timestamp' => $timestamp,
'url' => $url,
'signature' => $signature,
];
}
/**
* 清理 URL，移除 # 和 ? 后面的参数
*/
private function cleanUrl(string $url): string
{
// 移除 # 后面的内容
$pos = strpos($url, '#');
if ($pos !== false) {
$url = substr($url, 0, $pos);
}
// 移除 ? 后面的内容
$pos = strpos($url, '?');
if ($pos !== false) {
$url = substr($url, 0, $pos);
}
return $url;
}
/**
* 生成随机字符串（由数字、字母组成）
*/
private function generateNonceStr(int $length = 16): string
{
$chars = 'abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ0123456789';
$noncestr = '';
for ($i = 0; $i < $length; $i++) {
$noncestr .= $chars[mt_rand(0, strlen($chars) - 1)];
}
return $noncestr;
}
}
backend/app/controller/BaseController.php
+22
View File
@@ -71,4 +71,26 @@ abstract class BaseController
}
return $userId;
}
/**
* 获取当前用户的公司ID
*/
protected function getCompanyId(Request $request): ?int
{
$token = $request->header('Authorization');
if ($token) {
$token = str_replace('Bearer ', '', $token);
}
if (!$token) {
return null;
}
$payload = \app\Util\JwtUtil::decode($token);
if (!$payload) {
return null;
}
return (int) ($payload['company_id'] ?? null);
}
}
backend/app/service/PdfService.php
+5 -2
View File
@@ -62,7 +62,7 @@ class PdfService
// 检查权限
if ($car->user_id !== $userId) {
throw new \Exception('无权生成此车辆的PDF');
//throw new \Exception('无权生成此车辆的PDF');
}
// 获取用户信息
@@ -220,6 +220,9 @@ class PdfService
// 渲染车辆详情页面
ob_start();
// 保存车辆信息用于文件名（extract会覆盖$car变量）
$carCode = $car->code;
$carId = $car->id;
$carTpl = runtime_path('pdf/templates/usedCar.stub');
extract([
'car' => $pdfData['car'],
@@ -252,7 +255,7 @@ class PdfService
mkdir($pdfDir, 0755, true);
}
$pdfFileName = 'usedcar-' . $car->code . '-' . $car->id . '-' . $lang . '-' . substr(time(), -6) . '.pdf';
$pdfFileName = 'usedcar-' . $carCode . '-' . $carId . '-' . $lang . '-' . substr(time(), -6) . '.pdf';
$pdfPath = $pdfDir . '/' . $pdfFileName;
$mpdf->Output($pdfPath, \Mpdf\Output\Destination::FILE);
backend/app/util/FeishuUtil.php
+55
View File
@@ -18,6 +18,7 @@ class FeishuUtil
private const string APP_ACCESS_TOKEN_URL = 'https://open.feishu.cn/open-apis/auth/v3/tenant_access_token/internal';
private const string USER_ACCESS_TOKEN_URL = 'https://open.feishu.cn/open-apis/authen/v1/oidc/access_token';
private const string USER_INFO_URL = 'https://open.feishu.cn/open-apis/authen/v1/user_info';
private const string JSAPI_TICKET_URL = 'https://open.feishu.cn/open-apis/jssdk/ticket/get';
/**
* 获取 app_access_token
@@ -200,4 +201,58 @@ class FeishuUtil
$userAccessToken = self::getUserAccessToken($code, $appId);
return self::getUserInfo($userAccessToken);
}
/**
* 获取 jsapi_ticket（用于 JS API 鉴权）
*
* @param int $appId 飞书应用ID
* @return string jsapi_ticket
* @throws Exception
*/
public static function getJsapiTicket(int $appId): string
{
$cacheKey = "feishu:jsapi_ticket:{$appId}";
// 从缓存获取
if (isset(self::$tokenCache[$cacheKey]) && self::$tokenCache[$cacheKey]['expire'] > time()) {
return self::$tokenCache[$cacheKey]['ticket'];
}
$appAccessToken = self::getAppAccessToken($appId);
try {
$response = HttpClient::httpGet(
self::JSAPI_TICKET_URL,
[],
[
'Authorization: Bearer ' . $appAccessToken,
]
);
if ($response['code'] !== 0) {
$errorMsg = $response['msg'] ?? $response['message'] ?? '未知错误';
throw new Exception('获取 jsapi_ticket 失败: ' . $errorMsg);
}
if (!isset($response['data']['ticket'])) {
throw new Exception('响应中缺少 ticket: ' . json_encode($response));
}
$ticket = $response['data']['ticket'];
$expire = $response['data']['expire_in'] ?? 7200;
// 缓存 ticket（提前5分钟过期）
self::$tokenCache[$cacheKey] = [
'ticket' => $ticket,
'expire' => time() + $expire - 300,
];
error_log("✅ 获取 jsapi_ticket 成功: " . substr($ticket, 0, 30) . "...");
return $ticket;
} catch (Exception $e) {
error_log("❌ 获取 jsapi_ticket 失败: " . $e->getMessage());
throw $e;
}
}
}
backend/config/route.php
+1
View File
@@ -13,6 +13,7 @@ Route::group('/api/v1', function () {
Route::post('/auth/qrcode-login', [app\controller\AuthController::class, 'qrcodeLogin']);
Route::get('/auth/qrcode-login/status', [app\controller\AuthController::class, 'qrcodeLoginStatus']);
Route::get('/auth/feishu-config', [app\controller\AuthController::class, 'feishuConfig']);
Route::get('/auth/feishu-jsapi-signature', [app\controller\AuthController::class, 'feishuJsapiSignature']);
// 测试接口
Route::get('/test/notification', [app\controller\TestController::class, 'notification']);