Auth.php 7.6 KB

123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118119120121122123124125126127128129130131132133134135136137138139140141142143144145146147148149150151152153154155156157158159160161162163164165166167168169170171172173174175176177178179180181182183184185186187188189190191192193194195196197198199200201202203204205206207208209210211212213214215216217218219220221222223224225226227228229230231232233234235236237238239240241242243244245246247248249250251252253254255256257258259260261262263264265266267268269270271272273274275276277278279280281282283284285286287288289290291292293294295
  1. <?php
  2. namespace app\admin\library;
  3. use app\admin\model\Admin;
  4. use fast\Random;
  5. use fast\Tree;
  6. use think\Cookie;
  7. use think\Request;
  8. use think\Session;
  9. class Auth extends \fast\Auth
  10. {
  11. protected $requestUri = '';
  12. protected $breadcrumb = [];
  13. public function __construct()
  14. {
  15. parent::__construct();
  16. }
  17. public function __get($name)
  18. {
  19. return Session::get('admin.' . $name);
  20. }
  21. public function login($username, $password, $keeptime = 0)
  22. {
  23. $admin = Admin::get(['username' => $username]);
  24. if (!$admin)
  25. {
  26. return false;
  27. }
  28. if ($admin->password != md5(md5($password) . $admin->salt))
  29. {
  30. $admin->loginfailure++;
  31. $admin->save();
  32. return false;
  33. }
  34. $admin->loginfailure = 0;
  35. $admin->logintime = time();
  36. $admin->token = Random::uuid();
  37. $admin->save();
  38. Session::set("admin", $admin);
  39. $this->keeplogin($keeptime);
  40. return true;
  41. }
  42. /**
  43. * 注销登录
  44. */
  45. public function logout()
  46. {
  47. $admin = Admin::get(intval($this->id));
  48. if (!$admin)
  49. {
  50. return true;
  51. }
  52. $admin->token = '';
  53. $admin->save();
  54. Session::delete("admin");
  55. Cookie::delete("keeplogin");
  56. return true;
  57. }
  58. /**
  59. * 自动登录
  60. * @return boolean
  61. */
  62. public function autologin()
  63. {
  64. $keeplogin = Cookie::get('keeplogin');
  65. if (!$keeplogin)
  66. {
  67. return false;
  68. }
  69. list($id, $keeptime, $expiretime, $key) = explode('|', $keeplogin);
  70. if ($id && $keeptime && $expiretime && $key && $expiretime > time())
  71. {
  72. $admin = Admin::get($id);
  73. if (!$admin)
  74. {
  75. return false;
  76. }
  77. //token有变更
  78. if ($key != md5(md5($id) . md5($keeptime) . md5($expiretime) . $admin->token))
  79. {
  80. return false;
  81. }
  82. Session::set("admin", $admin);
  83. //刷新自动登录的时效
  84. $this->keeplogin($keeptime);
  85. return true;
  86. }
  87. else
  88. {
  89. return false;
  90. }
  91. }
  92. /**
  93. * 刷新保持登录的Cookie
  94. * @param int $keeptime
  95. * @return boolean
  96. */
  97. protected function keeplogin($keeptime = 0)
  98. {
  99. if ($keeptime)
  100. {
  101. $expiretime = time() + $keeptime;
  102. $key = md5(md5($this->id) . md5($keeptime) . md5($expiretime) . $this->token);
  103. $data = [$this->id, $keeptime, $expiretime, $key];
  104. Cookie::set('keeplogin', implode('|', $data));
  105. return true;
  106. }
  107. return false;
  108. }
  109. public function check($name, $uid = '', $relation = 'or', $mode = 'url')
  110. {
  111. return parent::check($name, $this->id, $relation, $mode);
  112. }
  113. /**
  114. * 检测当前控制器和方法是否匹配传递的数组
  115. *
  116. * @param array $arr 需要验证权限的数组
  117. */
  118. public function match($arr = [])
  119. {
  120. $request = Request::instance();
  121. $arr = is_array($arr) ? $arr : explode(',', $arr);
  122. if (!$arr)
  123. {
  124. return FALSE;
  125. }
  126. // 是否存在
  127. if (in_array(strtolower($request->action()), $arr) || in_array('*', $arr))
  128. {
  129. return TRUE;
  130. }
  131. // 没找到匹配
  132. return FALSE;
  133. }
  134. /**
  135. * 检测是否登录
  136. *
  137. * @return boolean
  138. */
  139. public function isLogin()
  140. {
  141. return Session::get('admin') ? true : false;
  142. }
  143. /**
  144. * 获取当前请求的URI
  145. * @return string
  146. */
  147. public function getRequestUri()
  148. {
  149. return $this->requestUri;
  150. }
  151. /**
  152. * 设置当前请求的URI
  153. * @param string $uri
  154. */
  155. public function setRequestUri($uri)
  156. {
  157. $this->requestUri = $uri;
  158. }
  159. public function getGroups($uid = null)
  160. {
  161. $uid = is_null($uid) ? $this->id : $uid;
  162. return parent::getGroups($uid);
  163. }
  164. public function getRuleList($uid = null)
  165. {
  166. $uid = is_null($uid) ? $this->id : $uid;
  167. return parent::getRuleList($uid);
  168. }
  169. public function getUserInfo($uid = null)
  170. {
  171. $uid = is_null($uid) ? $this->id : $uid;
  172. return $uid != $this->id ? Admin::get(intval($uid)) : Session::get('admin');
  173. }
  174. public function getRuleIds($uid = null)
  175. {
  176. $uid = is_null($uid) ? $this->id : $uid;
  177. return parent::getRuleIds($uid);
  178. }
  179. public function isSuperAdmin()
  180. {
  181. return in_array('*', $this->getRuleIds()) ? TRUE : FALSE;
  182. }
  183. /**
  184. * 获得面包屑导航
  185. * @param string $path
  186. * @return array
  187. */
  188. public function getBreadCrumb($path = '')
  189. {
  190. if ($this->breadcrumb || !$path)
  191. return $this->breadcrumb;
  192. $path_rule_id = 0;
  193. foreach ($this->rules as $rule)
  194. {
  195. $path_rule_id = $rule['name'] == $path ? $rule['id'] : $path_rule_id;
  196. }
  197. if ($path_rule_id)
  198. {
  199. $this->breadcrumb = Tree::instance()->init($this->rules)->getParents($path_rule_id, true);
  200. }
  201. return $this->breadcrumb;
  202. }
  203. /**
  204. * 获取左侧菜单栏
  205. *
  206. * @param array $params URL对应的badge数据
  207. * @return string
  208. */
  209. public function getSidebar($params = [])
  210. {
  211. $colorArr = ['red', 'green', 'yellow', 'blue', 'teal', 'orange', 'purple'];
  212. $colorNums = count($colorArr);
  213. $badgeList = [];
  214. $module = request()->module();
  215. // 生成菜单的badge
  216. foreach ($params as $k => $v)
  217. {
  218. if (stripos($k, '/') === false)
  219. {
  220. $url = '/' . $module . '/' . $k;
  221. }
  222. else
  223. {
  224. $url = url($k);
  225. }
  226. if (is_array($v))
  227. {
  228. $nums = isset($v[0]) ? $v[0] : 0;
  229. $color = isset($v[1]) ? $v[1] : $colorArr[(is_numeric($nums) ? $nums : strlen($nums)) % $colorNums];
  230. $class = isset($v[2]) ? $v[2] : 'label';
  231. }
  232. else
  233. {
  234. $nums = $v;
  235. $color = $colorArr[(is_numeric($nums) ? $nums : strlen($nums)) % $colorNums];
  236. $class = 'label';
  237. }
  238. //必须nums大于0才显示
  239. if ($nums)
  240. {
  241. $badgeList[$url] = '<small class="' . $class . ' pull-right bg-' . $color . '">' . $nums . '</small>';
  242. }
  243. }
  244. // 读取管理员当前拥有的权限节点
  245. $userRule = $this->getRuleList();
  246. $select_id = 0;
  247. $dashboard = '/' . $module . '/dashboard';
  248. // 必须将结果集转换为数组
  249. $ruleList = collection(model('AuthRule')->where('ismenu', 1)->order('weigh', 'desc')->cache("__menu__")->select())->toArray();
  250. foreach ($ruleList as $k => &$v)
  251. {
  252. if (!in_array($v['name'], $userRule))
  253. {
  254. unset($ruleList[$k]);
  255. continue;
  256. }
  257. $select_id = $v['name'] == $dashboard ? $v['id'] : $select_id;
  258. $v['url'] = $v['name'];
  259. $v['badge'] = isset($badgeList[$v['name']]) ? $badgeList[$v['name']] : '';
  260. }
  261. // 构造菜单数据
  262. Tree::instance()->init($ruleList);
  263. $menu = Tree::instance()->getTreeMenu(0, '<li class="@class"><a href="@url" addtabs="@id" url="@url"><i class="@icon"></i> <span>@title</span> <span class="pull-right-container">@caret @badge</span></a> @childlist</li>', $select_id, '', 'ul', 'class="treeview-menu"');
  264. return $menu;
  265. }
  266. }