blackteay/ApiAdmin
1
0
Fork 0
mirror of https://gitee.com/apiadmin/ApiAdmin.git synced 2025-04-06 03:58:00 +08:00
Code Issues Projects Releases Wiki Activity

added 权限类

Browse Source
This commit is contained in:
zhaoxiang 2016-11-10 11:30:05 +08:00
parent 3775abb0ff
commit 8e461ed4c8
1 changed files with 174 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

174
extend/Permission.php Normal file
View File

@ -0,0 +1,174 @@
<?php
/**
* 权限认证类
* @since 2016-08-31
* @author zhaoxiang <zhaoxiang051405@gmail.com>
*/
/**
* 这里的权限认证主要是针对管理员的,访客权限保存在菜单内
* AuthGroup表中存储的rules字段的格式为 Index/index:8,User/index:6....
* :后面的数字代表当前组对于这个URL拥有的权限细节
* 8 的二进制表示为 00001000, 拆分成 0000 1000
* 后面的1000 分别表示管理员的 查(GET) 增(PUT) 改(POST) 删(DELETE) 四个权限
* 前面的0000 只是为了补位 0表示没有权限,1表示有权限
*
* 一个用户可以存在于多个组中,如果两个组存在相同的URL权限,那么权限会叠加.
* 例:组A User/index:8 组B User/index:16 如果用户X同时处于组A和组B中,那么X的User/index权限为24(8|16)
*/
class Permission {
const AUTH_TYPE_NOW = 0;
const AUTH_TYPE_CACHE = 1;
const AUTH_TYPE_SESSION = 2;
/**
* 权限位定义
*/
const AUTH_GET = 8;
const AUTH_PUT = 4;
const AUTH_POST = 2;
const AUTH_DELETE = 1;
protected $_config = [
'AUTH_ON' => true, //认证开关
'AUTH_TYPE' => 0, //认证方式，0为时时认证；1为登录认证[Cache缓存]；2为登录认证[SESSION缓存]。
'AUTH_GROUP' => 'AuthGroup', //用户组数据表名
'AUTH_GROUP_ACCESS' => 'AuthGroupAccess', //用户组明细表
'AUTH_RULE' => 'AuthRule', //权限规则表
'AUTH_USER' => 'User' //用户信息表
];
public function __construct() {
$options = [
'AUTH_ON' => config('AUTH_ON'),
'AUTH_TYPE' => config('AUTH_TYPE'),
'AUTH_GROUP' => config('AUTH_GROUP'),
'AUTH_GROUP_ACCESS' => config('AUTH_GROUP_ACCESS'),
'AUTH_RULE' => config('AUTH_RULE'),
'AUTH_USER' => config('AUTH_USER')
];
if ( $options ) {
$this->_config = array_merge($this->_config, $options);
}
}
/**
* 权限检测
* @param string | array $name 获得权限 可以是字符串或数组或逗号分割，只要数组中有一个条件通过则通过
* @param string $uid 认证的用户id
* @param string $rule 认证的规则,如果有值,那么将不会去检测用户组等信息
* @return int
*/
public function check($name, $uid, $rule = '') {
if (!$this->_config['AUTH_ON']){
return true;
}
if (!empty($rule) && empty($uid)){
$authList[$name] = $rule;
}else{
$authList = $this->getAuthList($uid);
}
$method = $_SERVER['REQUEST_METHOD'];
switch ( strtoupper($method) ){
case 'GET':
$action = self::AUTH_GET;
break;
case 'PUT':
$action = self::AUTH_PUT;
break;
case 'POST':
$action = self::AUTH_POST;
break;
case 'DELETE':
$action = self::AUTH_DELETE;
break;
default:
$action = 0;
break;
}
return $authList[$name] & $action;
}
/**
* 获取用户组信息
* @param $uid
* @return mixed
*/
protected function getGroups( $uid ) {
static $groups = array();
if ( isset($groups[$uid]) ) {
return $groups[$uid];
}
$userGroups = \think\Db::table($this->_config['AUTH_GROUP_ACCESS'])->where(['uid' => $uid])->select();
foreach( $userGroups as &$value ){
$groupInfo = \think\Db::table($this->_config['AUTH_GROUP'])->where(['id' => $value['groupId']])->find()->toArray();
if( $groupInfo['status'] != 1 ){
unset($value);
}else{
$value = $groupInfo;
}
}
$groups[$uid]=$userGroups?$userGroups:[];
return $groups[$uid];
}
/**
* 获取权限列表
* @param $uid
* @return array
*/
public function getAuthList( $uid ) {
static $_authList = [];
if (isset($_authList[$uid])) {
return $_authList[$uid];
} elseif ($this->_config['AUTH_TYPE'] == self::AUTH_TYPE_SESSION){
if(isset($_SESSION[$uid]['_AUTH_LIST_'])){
return $_SESSION[$uid]['_AUTH_LIST_'];
}
} elseif ( $this->_config['AUTH_TYPE'] == self::AUTH_TYPE_CACHE ){
$authList = cache('AuthList:' . $uid);
if( $authList ){
return cache('AuthList:' . $uid);
}
}
$groups = $this->getGroups($uid);
$ids = [];
foreach ($groups as $g) {
$ids = array_merge($ids, explode(',', trim($g['rules'], ',')));
}
$ids = array_unique($ids);
if ( empty($ids) ) {
$_authList[$uid] = [];
return [];
}
$authList = [];
foreach ($ids as $IValue){
$tmp = explode(':',$IValue);
if( isset($authList[$tmp[0]]) ){
$authList[$tmp[0]] = $authList[1] | $authList[1];
}else{
$authList[$tmp[0]] = $authList[1];
}
}
$_authList[$uid] = $authList;
if($this->_config['AUTH_TYPE'] == self::AUTH_TYPE_SESSION){
$_SESSION[$uid]['_AUTH_LIST_'] = $authList;
} elseif ( $this->_config['AUTH_TYPE'] == self::AUTH_TYPE_CACHE ){
cache('AuthList:' . $uid, $authList);
}
return $_authList[$uid];
}
}