NN2023021801/app/api/services/UserAuthServices.php

<?php
/**
 * 用户验证
 */
declare (strict_types=1);

namespace app\api\services;


use app\common\model\UserModel;
use services\CacheServices;
use think\Exception;
use think\facade\Db;
use utils\JwtAuth;

class UserAuthServices extends BaseServices
{

    public function __construct (UserModel $model)
    {
        $this->model = new UserModel();
    }

    /**
     * 获取授权信息
     * @param $token
     * @return array
     * @throws \Psr\SimpleCache\InvalidArgumentException
     */
    public function parseToken ($token)
    {
        if ($token === 'undefined' || !$token) {
            throw new Exception('请登录', 401);
        }


        /** @var JwtAuth $jwtAuth */
        $jwtAuth = app()->make(JwtAuth::class);

        // 解析token
        [$uid, $type] = $jwtAuth->parseToken($token);


        /** @var CacheServices $cacheServices */
        $cacheServices = app()->make(CacheServices::class);
        $md5Token = md5('yjbuy:' . $uid);

        if (!$cacheServices::hasToken($md5Token) || !($tokenData = $cacheServices::getTokenBucket($md5Token)))

            throw new Exception('登录已过期,请重新登录', 401);
        if (!is_array($tokenData) || empty($tokenData) || !isset($tokenData['uid'])) {
            throw new Exception('请登录', 401);
        }


        /**
         * 验证token
         */
        try {

            $jwt = $jwtAuth->verifyToken($token);
        } catch (\Throwable $e) {
//            $cacheServices::clearToken($md5Token);
            throw new Exception($e->getMessage(), 401);
        }


        $user = $this->model->where('id', $uid)->where('status', 1)->find(); // 获取用户信息
//        $user->service_ratio = getService($user->pledge_level);
        if (empty($user) || $user->id != $tokenData['uid']) {
            $cacheServices::clearToken($md5Token);
            // token过期
            throw new Exception('登录状态有误,请重新登录', 401);
        }


        if ($user->login_count != $jwt['user']['login_count']) {
//            $cacheServices::clearToken($md5Token);
//            throw new Exception('当前账号在另一设备上登陆，若非本人操作，您的登陆密码可能泄露，请及时修改密码', 402); // 账号在另一设备登录，使用短信登录


            throw new Exception('登录已过期', 402); // 账号在另一设备登录，使用短信登录
        }


        return $user;
    }
}