zhuishuyun_quickapp/app/Http/Controllers/Xchengxu/Oauth/UsersController.php

<?php

namespace App\Http\Controllers\Xchengxu\Oauth;

use App\Modules\User\Services\UserService;
use App\Modules\Xcx\Services\XcxSendOrderService;
use Illuminate\Http\Request;
use App\Http\Controllers\Controller;
use App\Modules\User\Models\User;
use App\Modules\User\Models\Xcxuser;
use Log;
use JWTAuth;
use GuzzleHttp\Client;

class UsersController extends Controller
{


    /**
     * @apiDefine Login 登录
     */


    /**
     * @apiVersion 1.0.0
     * @apiDescription 登录
     * @api {post} login 登录
     * @apiParam  {String}  js_code js_code
     * @apiParam  {Int}     distribution_channel_id distribution_channel_id
     * @apiParam  {String}  sign    签名
     * @apiGroup Login
     * @apiName index
     * @apiSuccess {int}         code 状态码
     * @apiSuccess {String}      msg  信息
     * @apiSuccess {object}      data 结果集
     * @apiSuccess {String}      data.token token
     * @apiSuccess {Int}         data.time 过期时间
     * @apiSuccessExample {json} Success-Response:
     *     HTTP/1.1 200 OK
     *     {
     *       code: 0,
     *       msg: "",
     *       data:  {
     *            token:xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx,
     *            time:123455
     *           }
     *       }
     */
    public function index(Request $request)
    {
        Log::info($request->all());
        //$distribution_channel_id = $request->input('distribution_channel_id', '');
        //海报推广的参数
        $scene = $request->input('scene', '');
        $js_code = $request->input('js_code');
        $sign = $request->input('sign');
        $encryptedData = $request->input('encryptedData');
        $iv = $request->input('iv');
        //参数推广的参数
        $channel_key = $request->input('channel_key',0);
        $sign = 1;
        if (empty($js_code)  || empty($sign)) {
            return response()->error('PARAM_ERROR');
        }
        $distribution_channel_id = 14;
        $uid = 0;
        $u = 0;
        //解析海报推广的参数
        if($scene){
            $scene_arr = explode('_',$scene);
            $distribution_channel_id = (int)$scene_arr[0];
            $uid = $scene_arr[1];
            $u = $scene_arr[2];
        }
        //解析参数推广的参数
        if($channel_key){
            $channel_key =(int)$channel_key;
            $channel_info = XcxSendOrderService::getChannelIdBySendOrderId($channel_key);
            if($channel_info){
                $distribution_channel_id = $channel_info->distribution_channel_id;
                $u = $channel_key;
            }
        }
        if ($sign !== _sign(compact('openid', 'distribution_channel_id', 'unionid'), 'Uv%vkPI5K8Opqoww')) {
            //return response()->error('PARAM_ERROR');
        }
        $login_info = $this->getUserWeixinInfo($js_code);
        $appid = 'wxa0c8331eba3b34d5';
        $status = $this->decryptData($appid,$login_info['session_key'],$encryptedData,$iv,$user_info);

        if($status != ErrorCode::$OK){
            return response()->error('PARAM_ERROR');
        }

        if (!$user_info) response()->error('PARAM_ERROR');
        $user_info = json_decode($user_info,1);
        if (!isset($user_info['openId']) || !isset($user_info['unionId'])) {
            return response()->error('PARAM_ERROR');
        }
        $openid = $user_info['openId'];
        $unionid = $user_info['unionId'];
        $user = $this->createUser(compact('openid', 'distribution_channel_id', 'unionid','uid','u'),$user_info);
        if ($user) {
            $uid = $user->id;
            $time = time() + 7200;
            $token = JWTAuth::fromUser($user);
            return response()->success(compact('token', 'time','uid'));
        } else {
            return response()->error('PARAM_ERROR');
        }
    }

    /**
     * 授权用户信息
     * @param $data
     * @return bool
     */
    protected function createUser($data,$user_info)
    {
        //compact('openid', 'distribution_channel_id', 'unionid','uid','u')
        //用户已经是小程序用户了
        $xcx_user = Xcxuser::where('unionid',$data['unionid'])
            ->where('distribution_channel_id',$data['distribution_channel_id'])
            ->select('uid')
            ->first();
        if($xcx_user){
            return User::find($xcx_user->uid);
        }
        $info = [];
        if(isset($user_info['city']) && !empty($user_info['city'])) {$info['city'] = $user_info['city'];}
        if(isset($user_info['province']) && !empty($user_info['province'])){ $info['province'] = $user_info['province'];}
        if(isset($user_info['country']) && !empty($user_info['country'])){ $info['country'] = $user_info['country'];}
        if(isset($user_info['gender']) && !empty($user_info['gender'])) {$info['sex'] = $user_info['gender'];}
        if(isset($user_info['nickName']) && !empty($user_info['nickName'])) {$info['nickname'] = $user_info['nickName'];}
        if(isset($user_info['avatarUrl']) && !empty($user_info['avatarUrl'])) {$info['head_img'] = $user_info['avatarUrl'];}
        //从推广进来的一般会有uid
        if($data['uid']){
            Xcxuser::create([
                'uid'=>$data['uid'],
                'openid'=>$data['openid'],
                'unionid'=>$data['unionid'],
                'distribution_channel_id'=>$data['distribution_channel_id'],
                'u'=>$data['u']
            ]);

            if($info){
                UserService::updateInfo($data['uid'],$info);
            }
            return User::find($data['uid']);
        }else{
            //直接进入的
            $info['openid'] =$data['openid'];
            $info['unionid'] =$data['openid'];
            $info['distribution_channel_id'] =$data['distribution_channel_id'];
            $info['send_order_id'] =$data['u'];
            $user =  User::addUser($info);

            Xcxuser::create([
                'uid'=>$user->id,
                'openid'=>$data['openid'],
                'unionid'=>$data['unionid'],
                'distribution_channel_id'=>$user->distribution_channel_id,
                'u'=>$data['u']
            ]);
            return $user;
        }
    }

    /**
     * @apiVersion 1.0.0
     * @apiDescription 刷新token
     * @api {get} RefreshToken 刷新token
     * @apiParam {String}  [token]  token
     * @apiHeader {String} [Authorization]  token 两个token任选其一
     * @apiGroup Login
     * @apiName RefreshToken
     * @apiSuccess {int}         code 状态码
     * @apiSuccess {String}      msg  信息
     * @apiSuccess {object}      data 结果集
     * @apiSuccess {String}      data.token token
     * @apiSuccess {Int}         data.time 过期时间
     * @apiSuccessExample {json} Success-Response:
     *     HTTP/1.1 200 OK
     *     {
     *       code: 0,
     *       msg: "",
     *       data:  {
     *            token:xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx,
     *            time:123455
     *           }
     *       }
     */
    public function RefreshToken()
    {
        try{
            $old_token = JWTAuth::getToken();
            $token = JWTAuth::refresh($old_token);
            $time = time() + 7200;
            return response()->success(compact('token', 'time'));
        }catch (\Exception $e){

        }
        return response()->error('XCX_NOT_LOGIN');
    }


    private function getUserWeixinInfo($js_code)
    {
        if (empty($js_code)) {
            return false;
        }
        $url = 'https://api.weixin.qq.com/sns/jscode2session?';
        $client = new Client([
            'timeout' => 2.0,
        ]);
        $appid = 'wxa0c8331eba3b34d5';
        $secret = '17c01c26dd7873e557710601436774c7';
        $grant_type = 'authorization_code';
        try {
            $res = $client->get($url . http_build_query(compact('js_code', 'appid', 'secret', 'grant_type')))->getBody()->getContents();
            Log::info('code 换取 session_key is :');
            Log::info($res);
            $res = json_decode($res, true);
            if (isset($res['errcode'])) {
                return false;
            }
            return $res;
        } catch (\Exception $e) {
            Log::info($e);
            return false;
        }
    }


    /**
     * 检验数据的真实性，并且获取解密后的明文.
     * @param $encryptedData string 加密的用户数据
     * @param $iv string 与用户数据一同返回的初始向量
     * @param $data string 解密后的原文
     *
     * @return int 成功0，失败返回对应的错误码
     */
    private function decryptData($appid, $sessionKey,$encryptedData, $iv, &$data )
    {
        if (strlen($sessionKey) != 24) {
            return ErrorCode::$IllegalAesKey;
        }
        $aesKey=base64_decode($sessionKey);


        if (strlen($iv) != 24) {
            return ErrorCode::$IllegalIv;
        }
        $aesIV=base64_decode($iv);

        $aesCipher=base64_decode($encryptedData);

        $result=openssl_decrypt( $aesCipher, "AES-128-CBC", $aesKey, 1, $aesIV);

        $dataObj=json_decode( $result );
        if( $dataObj  == NULL )
        {
            return ErrorCode::$IllegalBuffer;
        }
        if( $dataObj->watermark->appid !=$appid )
        {
            return ErrorCode::$IllegalBuffer;
        }
        $data = $result;
        return ErrorCode::$OK;
    }



}
class ErrorCode
{
    public static $OK = 0;
    public static $IllegalAesKey = -41001;
    public static $IllegalIv = -41002;
    public static $IllegalBuffer = -41003;
    public static $DecodeBase64Error = -41004;
}