root
ad6984d22a
手机端扫码成功后直接关闭并返回飞书，不显示任何页面内容。 Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
287 lines
8.6 KiB
PHP
287 lines
8.6 KiB
PHP
<?php
|
||
|
||
namespace app\controller;
|
||
|
||
use app\service\FeishuService;
|
||
use app\util\JwtUtil;
|
||
use app\model\User;
|
||
use app\model\Company;
|
||
use Webman\Http\Request;
|
||
use Webman\Http\Response;
|
||
|
||
class AuthController extends BaseController
|
||
{
|
||
/**
|
||
* 用户登录
|
||
*/
|
||
public function login(Request $request): Response
|
||
{
|
||
$username = $request->post('username');
|
||
$password = $request->post('password');
|
||
|
||
// TODO: 实现真实的登录逻辑
|
||
if (!$username || !$password) {
|
||
return $this->error('用户名或密码不能为空');
|
||
}
|
||
|
||
// 模拟用户数据（用于测试）
|
||
$user = User::first();
|
||
|
||
if (!$user) {
|
||
return $this->error('用户不存在');
|
||
}
|
||
|
||
$token = JwtUtil::encode([
|
||
'user_id' => $user->id,
|
||
'company_id' => $user->company_id,
|
||
'username' => $user->name,
|
||
]);
|
||
|
||
return $this->success([
|
||
'token' => $token,
|
||
'user' => $user,
|
||
]);
|
||
}
|
||
|
||
/**
|
||
* 飞书免登
|
||
*/
|
||
public function feishuLogin(Request $request): Response
|
||
{
|
||
$authCode = $request->post('auth_code');
|
||
$tenantKey = $request->post('tenant_key');
|
||
|
||
if (!$authCode) {
|
||
return $this->error('缺少授权码');
|
||
}
|
||
|
||
try {
|
||
$feishuService = new FeishuService();
|
||
|
||
// 根据 tenant_key 获取公司
|
||
$company = $feishuService->getCompanyByTenantKey($tenantKey);
|
||
|
||
if (!$company) {
|
||
return $this->error('公司不存在');
|
||
}
|
||
|
||
// 设置公司并获取用户信息
|
||
$feishuService->setCompany($company->id);
|
||
$feishuData = $feishuService->getUserInfo($authCode);
|
||
|
||
// 创建或更新用户
|
||
$user = $feishuService->createOrUpdateUser($feishuData, $company->id);
|
||
|
||
// 生成 JWT Token
|
||
$token = JwtUtil::encode([
|
||
'user_id' => $user->id,
|
||
'company_id' => $user->company_id,
|
||
'feishu_user_id' => $user->feishu_user_id,
|
||
'union_id' => $user->union_id,
|
||
]);
|
||
|
||
return $this->success([
|
||
'token' => $token,
|
||
'user' => $user->load('company'),
|
||
]);
|
||
} catch (\Exception $e) {
|
||
return $this->error($e->getMessage());
|
||
}
|
||
}
|
||
|
||
/**
|
||
* 获取当前用户信息
|
||
*/
|
||
public function me(Request $request): Response
|
||
{
|
||
$userId = $this->getUserId($request);
|
||
|
||
if (!$userId) {
|
||
return $this->error('未登录', 401);
|
||
}
|
||
|
||
$user = User::with('company')->find($userId);
|
||
|
||
if (!$user) {
|
||
return $this->error('用户不存在');
|
||
}
|
||
|
||
return $this->success($user);
|
||
}
|
||
|
||
/**
|
||
* 生成飞书扫码登录二维码
|
||
*/
|
||
public function qrcodeLogin(Request $request): Response
|
||
{
|
||
$tenantKey = $request->post('tenant_key');
|
||
|
||
if (!$tenantKey) {
|
||
return $this->error('缺少租户密钥');
|
||
}
|
||
|
||
try {
|
||
$feishuService = new \app\service\FeishuService();
|
||
|
||
// 根据 tenant_key 获取公司
|
||
$company = $feishuService->getCompanyByTenantKey($tenantKey);
|
||
|
||
if (!$company) {
|
||
return $this->error('公司不存在');
|
||
}
|
||
|
||
$feishuService->setCompany($company->id);
|
||
|
||
// 生成登录会话
|
||
$loginSession = \app\model\FeishuLoginSession::create([
|
||
'company_id' => $company->id,
|
||
'tenant_key' => $tenantKey,
|
||
'status' => 'pending',
|
||
'expires_at' => date('Y-m-d H:i:s', time() + 300), // 5分钟过期
|
||
]);
|
||
|
||
// 构建扫码登录 URL（使用官方 passport 端点）
|
||
$appId = 'cli_a8033d607cba500d';
|
||
// 使用固定的 redirect_uri，session_id 通过 state 传递
|
||
$redirectUri = urlencode("https://xsm.dev.hnxinyouhe.com/login/callback");
|
||
$authUrl = "https://passport.feishu.cn/suite/passport/oauth/authorize?client_id={$appId}&redirect_uri={$redirectUri}&response_type=code&state={$loginSession->id}";
|
||
|
||
// 生成二维码内容（返回 URL，前端生成二维码）
|
||
return $this->success([
|
||
'session_id' => $loginSession->id,
|
||
'auth_url' => $authUrl,
|
||
'expires_at' => $loginSession->expires_at,
|
||
]);
|
||
} catch (\Exception $e) {
|
||
return $this->error($e->getMessage());
|
||
}
|
||
}
|
||
|
||
/**
|
||
* 轮询扫码登录状态
|
||
*/
|
||
public function qrcodeLoginStatus(Request $request): Response
|
||
{
|
||
$sessionId = $request->get('session_id');
|
||
|
||
if (!$sessionId) {
|
||
return $this->error('缺少会话ID');
|
||
}
|
||
|
||
$session = \app\model\FeishuLoginSession::find($sessionId);
|
||
|
||
if (!$session) {
|
||
return $this->error('登录会话不存在');
|
||
}
|
||
|
||
// 检查是否过期
|
||
if (strtotime($session->expires_at) < time()) {
|
||
$session->status = 'expired';
|
||
$session->save();
|
||
return $this->error('二维码已过期，请刷新重试');
|
||
}
|
||
|
||
// 返回当前状态
|
||
if ($session->status === 'success') {
|
||
// 生成 token
|
||
$user = \app\model\User::find($session->user_id);
|
||
if (!$user) {
|
||
return $this->error('用户不存在');
|
||
}
|
||
|
||
$token = \app\util\JwtUtil::encode([
|
||
'user_id' => $user->id,
|
||
'company_id' => $user->company_id,
|
||
'feishu_user_id' => $user->feishu_user_id,
|
||
'union_id' => $user->feishu_union_id,
|
||
]);
|
||
|
||
// 清除会话
|
||
$session->delete();
|
||
|
||
return $this->success([
|
||
'status' => 'success',
|
||
'token' => $token,
|
||
'user' => $user->load('company'),
|
||
]);
|
||
} else if ($session->status === 'expired') {
|
||
return $this->error('二维码已过期，请刷新重试');
|
||
} else {
|
||
// pending 或 scanning
|
||
return $this->success([
|
||
'status' => $session->status,
|
||
]);
|
||
}
|
||
}
|
||
|
||
/**
|
||
* 飞书扫码登录回调（飞书授权后的回调）
|
||
*/
|
||
public function qrcodeLoginCallback(Request $request): Response
|
||
{
|
||
// 从 state 参数获取 session_id
|
||
$sessionId = $request->get('state');
|
||
// OAuth 2.0 标准参数是 code
|
||
$authCode = $request->get('code');
|
||
|
||
if (!$sessionId) {
|
||
return $this->error('缺少会话ID');
|
||
}
|
||
|
||
if (!$authCode) {
|
||
return $this->error('缺少授权码');
|
||
}
|
||
|
||
try {
|
||
$session = \app\model\FeishuLoginSession::find($sessionId);
|
||
|
||
if (!$session) {
|
||
return $this->error('登录会话不存在');
|
||
}
|
||
|
||
// 检查是否过期
|
||
if (strtotime($session->expires_at) < time()) {
|
||
$session->status = 'expired';
|
||
$session->save();
|
||
return $this->error('二维码已过期');
|
||
}
|
||
|
||
// 使用 session 的公司信息
|
||
$feishuService = new \app\service\FeishuService();
|
||
$feishuService->setCompany($session->company_id);
|
||
|
||
// 获取用户信息
|
||
$feishuData = $feishuService->getUserInfo($authCode);
|
||
|
||
// 创建或更新用户
|
||
$user = $feishuService->createOrUpdateUser($feishuData, $session->company_id);
|
||
|
||
// 更新会话状态
|
||
$session->status = 'success';
|
||
$session->user_id = $user->id;
|
||
$session->save();
|
||
|
||
// 返回空页面，自动关闭（飞书APP内会自动返回）
|
||
return new \Webman\Http\Response(200, ['Content-Type' => 'text/html; charset=utf-8'], '<!DOCTYPE html>
|
||
<html>
|
||
<head>
|
||
<meta charset="UTF-8">
|
||
<meta name="viewport" content="width=device-width, initial-scale=1.0">
|
||
<script>
|
||
// 尝试关闭窗口（飞书APP内会自动返回）
|
||
window.close();
|
||
// 备用：如果无法关闭，显示简单提示
|
||
setTimeout(function() {
|
||
document.body.innerHTML = "<div style=\'display:flex;align-items:center;justify-content:center;min-height:100vh;margin:0;font-family:sans-serif;text-align:center;color:#666;\'><p>登录成功<br>您可以关闭此页面</p></div>";
|
||
}, 100);
|
||
</script>
|
||
</head>
|
||
<body>
|
||
</body>
|
||
</html>');
|
||
} catch (\Exception $e) {
|
||
return $this->error($e->getMessage());
|
||
}
|
||
}
|
||
}
|