*/ namespace app\admin\controller; use app\model\AdminAuthGroupAccess; use app\model\AdminAuthRule; use app\model\AdminMenu; use app\model\AdminUser; use app\model\AdminUserData; use app\util\ReturnCode; use app\util\Tools; class Login extends Base { /** * 用户登录 * @return array * @throws \think\Exception * @throws \think\exception\DbException * @author zhaoxiang */ public function index() { $username = $this->request->post('username'); $password = $this->request->post('password'); if (!$username) { return $this->buildFailed(ReturnCode::LOGIN_ERROR, '缺少用户名!'); } if (!$password) { return $this->buildFailed(ReturnCode::LOGIN_ERROR, '缺少密码!'); } else { $password = Tools::userMd5($password); } $userInfo = AdminUser::get(['username' => $username, 'password' => $password]); if (!empty($userInfo)) { if ($userInfo['status']) { //更新用户数据 $userData = AdminUserData::get(['uid' => $userInfo['id']]); $data = []; if ($userData) { $userData->login_times ++; $userData->last_login_ip = $this->request->ip(1); $userData->last_login_time = time(); $return['head_img'] = $userData['head_img']; $userData->save(); } else { $data['login_times'] = 1; $data['uid'] = $userInfo['id']; $data['last_login_ip'] = $this->request->ip(1); $data['last_login_time'] = time(); $data['head_img'] = ''; $return['head_img'] = ''; AdminUserData::create($data); } } else { return $this->buildFailed(ReturnCode::LOGIN_ERROR, '用户已被封禁,请联系管理员'); } } else { return $this->buildFailed(ReturnCode::LOGIN_ERROR, '用户名密码不正确'); } $apiAuth = md5(uniqid() . time()); cache('Login:' . $apiAuth, json_encode($userInfo), config('apiadmin.ONLINE_TIME')); cache('Login:' . $userInfo['id'], $apiAuth, config('apiadmin.ONLINE_TIME')); $return['access'] = []; $isSupper = Tools::isAdministrator($userInfo['id']); if ($isSupper) { $access = AdminMenu::all(['hide' => 0]); $access = Tools::buildArrFromObj($access); $return['access'] = array_values(array_filter(array_column($access, 'url'))); } else { $groups = AdminAuthGroupAccess::get(['uid' => $userInfo['id']]); if (isset($groups) && $groups->group_id) { $access = (new AdminAuthRule())->whereIn('group_id', $groups->group_id)->select(); $access = Tools::buildArrFromObj($access); $return['access'] = array_values(array_unique(array_column($access, 'url'))); } } $return['id'] = $userInfo['id']; $return['username'] = $userInfo['username']; $return['nickname'] = $userInfo['nickname']; $return['apiAuth'] = $apiAuth; return $this->buildSuccess($return, '登录成功'); } public function logout() { $ApiAuth = $this->request->header('ApiAuth'); cache('Login:' . $ApiAuth, null); cache('Login:' . $this->userInfo['id'], null); return $this->buildSuccess([], '登出成功'); } }