WebLogin.php 2.5 KB

123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475
  1. <?php
  2. namespace App\Http\Middleware;
  3. use App\Helpers\Jwt;
  4. use App\Services\ConfigService;
  5. use Closure;
  6. use Illuminate\Auth\Middleware\Authenticate as Middleware;
  7. class WebLogin extends Middleware
  8. {
  9. /**
  10. * 执行句柄
  11. * @param \Illuminate\Http\Request $request
  12. * @param Closure $next
  13. * @param mixed ...$guards
  14. * @return mixed
  15. * @throws \Illuminate\Auth\AuthenticationException
  16. * @since 2020/8/31
  17. * @author wesmiler
  18. */
  19. public function handle($request, Closure $next, ...$guards)
  20. {
  21. $action = app('request')->route()->getAction();
  22. $controller = class_basename($action['controller']);
  23. list($controller, $action) = explode('@', $controller);
  24. $token = $request->headers->get('Authorization');
  25. if (strpos($token, 'Bearer ') !== false) {
  26. $token = str_replace("Bearer ", null, $token);
  27. $token = trim($token);
  28. if($token){
  29. // JWT解密token
  30. $jwt = new Jwt('jwt_ok_app');
  31. $userId = $jwt->verifyToken($token);
  32. }else{
  33. return response()->json(message(1035, false, [], 403))->setEncodingOptions(256);
  34. }
  35. } else {
  36. $userId = 0;
  37. }
  38. // 接口验证
  39. $params = $request->except('s');
  40. $key = $request->header('sign');
  41. if(empty($key)){
  42. $key = isset($params['key'])? $params['key'] : '';
  43. }
  44. $data = api_decrypt($key);
  45. $ctime = isset($data['ctime']) ? $data['ctime'] : 0;
  46. if ($ctime>0 && $ctime < time() - 30) {
  47. return response()->json(message(1012, false, null, 403))->setEncodingOptions(256);
  48. }
  49. // 站点升级检测返回
  50. $isUpgrade = ConfigService::make()->getConfigByCode('dapp_upgrade',0);
  51. if(intval($isUpgrade) == 1){
  52. $updateDate = ConfigService::make()->getConfigByCode('dapp_upgrade_date',date('Y-m-d H:i',time() + 3600));
  53. return response()->json(message(1037, false, ['date'=> $updateDate], 405))->setEncodingOptions(256);
  54. }
  55. // 接口加密验证
  56. if ($userId<=0) {
  57. // 在这里可以定制你想要的返回格式, 亦或者是 JSON 编码格式
  58. return response()->json(message(1035, false, [], 403))->setEncodingOptions(256);
  59. }
  60. $request->headers->set('token_uid' , $userId);
  61. $request->merge($data!=NULL && !empty($data)?$data: []);
  62. //如果已登录则执行正常的请求
  63. return $next($request);
  64. }
  65. }