Karlcarlo
c9a98f342c
添加大量图片、字体、音频等静态资源文件，包括用户界面图片、模板文件和安装界面素材 添加系统版本配置文件(.version)和常量定义文件(.constant) 更新供应商依赖文件，包括Symfony VarDumper组件和相关许可证文件 添加验证码配置文件(captcha.php)和.gitignore规则
115 lines
3.2 KiB
PHP
115 lines
3.2 KiB
PHP
<?php
|
||
// +----------------------------------------------------------------------
|
||
// | CRMEB [ CRMEB赋能开发者，助力企业发展 ]
|
||
// +----------------------------------------------------------------------
|
||
// | Copyright (c) 2016~2026 https://www.crmeb.com All rights reserved.
|
||
// +----------------------------------------------------------------------
|
||
// | Licensed CRMEB并不是自由软件，未经许可不能去掉CRMEB相关版权
|
||
// +----------------------------------------------------------------------
|
||
// | Author: CRMEB Team <admin@crmeb.com>
|
||
// +----------------------------------------------------------------------
|
||
|
||
namespace crmeb\utils;
|
||
|
||
|
||
use crmeb\exceptions\AdminException;
|
||
use crmeb\services\CacheService;
|
||
use Firebase\JWT\JWT;
|
||
use Firebase\JWT\Key;
|
||
use think\facade\Env;
|
||
|
||
/**
|
||
* Jwt
|
||
* Class JwtAuth
|
||
* @package crmeb\utils
|
||
*/
|
||
class JwtAuth
|
||
{
|
||
|
||
/**
|
||
* token
|
||
* @var string
|
||
*/
|
||
protected $token;
|
||
|
||
/**
|
||
* @var string
|
||
*/
|
||
protected $app_key = 'crmeb_app_key';
|
||
|
||
/**
|
||
* 获取token
|
||
* @param int $id
|
||
* @param string $type
|
||
* @param array $params
|
||
* @return array
|
||
*/
|
||
public function getToken(int $id, string $type, array $params = []): array
|
||
{
|
||
$host = app()->request->host();
|
||
$time = time();
|
||
$exp_time = strtotime('+ 7day');
|
||
if (app()->request->isApp()) {
|
||
$exp_time = strtotime('+ 30day');
|
||
}
|
||
if ($type == 'out') {
|
||
$exp_time = strtotime('+ 1day');
|
||
}
|
||
$params += [
|
||
'iss' => $host,
|
||
'aud' => $host,
|
||
'iat' => $time,
|
||
'nbf' => $time,
|
||
'exp' => $exp_time,
|
||
];
|
||
$params['jti'] = compact('id', 'type');
|
||
$token = JWT::encode($params, Env::get('app.app_key', $this->app_key) ?: $this->app_key, 'HS256');
|
||
|
||
return compact('token', 'params');
|
||
}
|
||
|
||
/**
|
||
* 解析token
|
||
* @param string $jwt
|
||
* @return array
|
||
*/
|
||
public function parseToken(string $jwt): array
|
||
{
|
||
$this->token = $jwt;
|
||
[, $bodyb64,] = explode('.', $this->token);
|
||
$payload = JWT::jsonDecode(JWT::urlsafeB64Decode($bodyb64));
|
||
return [$payload->jti->id, $payload->jti->type, $payload->auth ?? ''];
|
||
}
|
||
|
||
/**
|
||
* 验证token
|
||
*/
|
||
public function verifyToken()
|
||
{
|
||
JWT::$leeway = 60;
|
||
|
||
$key = Env::get('app.app_key', $this->app_key) ?: $this->app_key;
|
||
JWT::decode($this->token, new Key($key, 'HS256'));
|
||
|
||
$this->token = null;
|
||
}
|
||
|
||
/**
|
||
* 获取token并放入令牌桶
|
||
* @param int $id
|
||
* @param string $type
|
||
* @param array $params
|
||
* @return array
|
||
*/
|
||
public function createToken(int $id, string $type, array $params = [])
|
||
{
|
||
$tokenInfo = $this->getToken($id, $type, $params);
|
||
$exp = $tokenInfo['params']['exp'] - $tokenInfo['params']['iat'] + 60;
|
||
$res = CacheService::setTokenBucket(md5($tokenInfo['token']), ['uid' => $id, 'type' => $type, 'token' => $tokenInfo['token'], 'exp' => $exp], (int)$exp, $type);
|
||
if (!$res) {
|
||
throw new AdminException(ApiErrorCode::ERR_SAVE_TOKEN);
|
||
}
|
||
return $tokenInfo;
|
||
}
|
||
}
|