yunzerwebsite/yunzer
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

修复token验证和左侧表单问题

Browse Source
This commit is contained in:
hero920103
2025-08-19 17:48:53 +08:00
parent 1ceaeb9214
commit 2d44b8764d
39 changed files with 1461 additions and 554 deletions
Download Patch File Download Diff File Expand all files Collapse all files
app/api/controller/AdminController.php
+227 -14
View File
@@ -2,8 +2,8 @@
namespace app\api\controller;
use app\api\controller\BaseController;
use app\admin\model\AdminUser;
use app\index\model\AdminUserGroup;
use app\api\model\AdminUser;
use app\api\model\AdminSysMenu;
use think\facade\Log;
use think\facade\Cache;
@@ -12,9 +12,9 @@ use think\Response;
class AdminController extends BaseController
{
/**
* 生成用户token
* 生成管理员token
*
* @param int $userId 用户ID
* @param int $userId 管理员ID
* @return string
*/
private function generateToken($userId)
@@ -31,7 +31,27 @@ class AdminController extends BaseController
}
/**
* 用户登录接口
* 从token中获取管理员ID
*
* @param string $token
* @return int|null
*/
private function getUserIdFromToken($token)
{
try {
$data = json_decode(base64_decode($token), true);
if ($data && isset($data['user_id'])) {
return $data['user_id'];
}
} catch (\Exception $e) {
return null;
}
return null;
}
/**
* 管理员登录接口
*
* @return \think\Response
*/
@@ -58,10 +78,10 @@ class AdminController extends BaseController
return json(['code' => 1, 'msg' => $validate->getError()]);
}
// 查询用户
// 查询管理员
$user = AdminUser::where('account', $data['account'])->find();
if (!$user) {
return json(['code' => 1, 'msg' => '用户不存在']);
return json(['code' => 1, 'msg' => '管理员不存在']);
}
// 验证密码
@@ -69,23 +89,23 @@ class AdminController extends BaseController
return json(['code' => 1, 'msg' => '密码错误']);
}
// 生成JWT token（这里使用简单的token，实际项目中建议使用JWT）
$token = $this->generateToken($user->id);
// 生成token
$token = $this->generateToken($user->uid);
// 将token存储到缓存中，设置过期时间
Cache::set('user_token_' . $user->id, $token, 7 * 24 * 3600);
Cache::set('admin_token_' . $user->uid, $token, 7 * 24 * 3600);
// 记录登录日志
Log::record('用户登录成功：' . $user->account, 'info');
Log::record('管理员登录成功：' . $user->account, 'info');
// 返回用户信息和token
// 返回管理员信息和token
return json([
'code' => 0,
'msg' => '登录成功',
'data' => [
'token' => $token,
'user_info' => [
'id' => $user->id,
'id' => $user->uid,
'account' => $user->account,
'name' => $user->name,
'avatar' => $user->avatar ?? '/static/images/avatar.png',
@@ -99,8 +119,201 @@ class AdminController extends BaseController
]);
} catch (\Exception $e) {
Log::record('登录失败：' . $e->getMessage(), 'error');
Log::record('管理员登录失败：' . $e->getMessage(), 'error');
return json(['code' => 1, 'msg' => '登录失败：' . $e->getMessage()]);
}
}
/**
* 退出登录接口
*
* @return \think\Response
*/
public function logout()
{
try {
$token = $this->request->header('Authorization');
if ($token) {
// 去掉Bearer前缀
if (strpos($token, 'Bearer ') === 0) {
$token = substr($token, 7);
}
// 从token中获取管理员ID
$userId = $this->getUserIdFromToken($token);
if ($userId) {
// 清除token缓存
Cache::delete('admin_token_' . $userId);
}
}
Log::record('管理员退出登录', 'info');
// 增加前端刷新指示
return json([
'code' => 0,
'msg' => '退出成功',
'refresh' => true // 前端可根据此字段判断是否需要刷新
]);
} catch (\Exception $e) {
Log::record('退出登录失败：' . $e->getMessage(), 'error');
return json(['code' => 1, 'msg' => '退出失败：' . $e->getMessage()]);
}
}
/**
* 获取管理员信息接口
*
* @return \think\Response
*/
public function info()
{
try {
$token = $this->request->header('Authorization');
if (!$token) {
return json(['code' => 1, 'msg' => '请先登录']);
}
// 去掉Bearer前缀
if (strpos($token, 'Bearer ') === 0) {
$token = substr($token, 7);
}
$userId = $this->getUserIdFromToken($token);
if (!$userId) {
return json(['code' => 1, 'msg' => 'token无效']);
}
// 验证token是否在缓存中
$cachedToken = Cache::get('admin_token_' . $userId);
if (!$cachedToken || $cachedToken !== $token) {
return json(['code' => 1, 'msg' => 'token已过期']);
}
// 获取管理员信息
$user = AdminUser::where('uid', $userId)->find();
if (!$user) {
return json(['code' => 1, 'msg' => '管理员不存在']);
}
return json([
'code' => 0,
'msg' => '获取成功',
'data' => [
'id' => $user->uid,
'account' => $user->account,
'name' => $user->name,
'avatar' => $user->avatar ?? '/static/images/avatar.png',
'phone' => $user->phone ?? '',
'sex' => $user->sex ?? 0,
'qq' => $user->qq ?? '',
'wechat' => $user->wechat ?? '',
'create_time' => $user->create_time
]
]);
} catch (\Exception $e) {
Log::record('获取管理员信息失败：' . $e->getMessage(), 'error');
return json(['code' => 1, 'msg' => '获取管理员信息失败：' . $e->getMessage()]);
}
}
/**
* 修改密码接口
*
* @return \think\Response
*/
public function changePassword()
{
if (!$this->request->isPost()) {
return json(['code' => 1, 'msg' => '请求方法错误']);
}
try {
$token = $this->request->header('Authorization');
if (!$token) {
return json(['code' => 1, 'msg' => '请先登录']);
}
// 去掉Bearer前缀
if (strpos($token, 'Bearer ') === 0) {
$token = substr($token, 7);
}
$userId = $this->getUserIdFromToken($token);
if (!$userId) {
return json(['code' => 1, 'msg' => 'token无效']);
}
// 验证token是否在缓存中
$cachedToken = Cache::get('admin_token_' . $userId);
if (!$cachedToken || $cachedToken !== $token) {
return json(['code' => 1, 'msg' => 'token已过期']);
}
$data = $this->request->post();
// 验证数据
$validate = validate([
'oldPassword' => 'require',
'newPassword' => 'require|min:6'
], [
'oldPassword.require' => '原密码不能为空',
'newPassword.require' => '新密码不能为空',
'newPassword.min' => '新密码长度不能少于6位'
]);
if (!$validate->check($data)) {
return json(['code' => 1, 'msg' => $validate->getError()]);
}
// 获取管理员信息
$user = AdminUser::where('uid', $userId)->find();
if (!$user) {
return json(['code' => 1, 'msg' => '管理员不存在']);
}
// 验证原密码
if ($user->password !== md5($data['oldPassword'])) {
return json(['code' => 1, 'msg' => '原密码错误']);
}
// 更新密码
$user->password = md5($data['newPassword']);
$user->save();
Log::record('管理员修改密码成功：' . $user->account, 'info');
return json(['code' => 0, 'msg' => '密码修改成功']);
} catch (\Exception $e) {
Log::record('修改密码失败：' . $e->getMessage(), 'error');
return json(['code' => 1, 'msg' => '修改密码失败：' . $e->getMessage()]);
}
}
/**
* 获取管理员菜单接口
*
* @return \think\Response
*/
public function menus()
{
try {
// 取消token验证，直接获取菜单数据
$menus = AdminSysMenu::getMenuTree();
return json([
'code' => 0,
'msg' => '获取成功',
'data' => $menus
]);
} catch (\Exception $e) {
Log::record('获取菜单失败：' . $e->getMessage(), 'error');
return json(['code' => 1, 'msg' => '获取菜单失败：' . $e->getMessage()]);
}
}
}