AdminTokenMiddleware.php 2.9 KB

123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100
  1. <?php
  2. /**
  3. * @package merchant
  4. *
  5. * @author xaboy
  6. * @day 2020-03-24
  7. *
  8. *
  9. */
  10. namespace app\common\middleware;
  11. use app\common\repositories\system\admin\AdminRepository;
  12. use app\Request;
  13. use crmeb\exceptions\AuthException;
  14. use crmeb\services\JwtTokenService;
  15. use Firebase\JWT\ExpiredException;
  16. use think\exception\ValidateException;
  17. use think\facade\Route;
  18. use think\Log;
  19. use think\Response;
  20. use Throwable;
  21. class AdminTokenMiddleware extends BaseMiddleware
  22. {
  23. /**
  24. * @param Request $request
  25. * @throws Throwable
  26. * @author xaboy
  27. * @day 2020-04-10
  28. */
  29. public function before(Request $request)
  30. {
  31. \think\facade\Log::info('Midd_ko=>'.\GuzzleHttp\json_encode($request));
  32. $force = $this->getArg(0, true);
  33. try {
  34. $token = trim($request->header('X-Token'));
  35. if(!$token) $token = trim($request->param('token',''));
  36. if (strpos($token, 'Bearer') === 0)
  37. $token = trim(substr($token, 6));
  38. if (!$token)
  39. throw new ValidateException('请登录');
  40. /**
  41. * @var AdminRepository $repository
  42. */
  43. $repository = app()->make(AdminRepository::class);
  44. $service = new JwtTokenService();
  45. try {
  46. $payload = $service->parseToken($token);
  47. } catch (ExpiredException $e) {
  48. $repository->checkToken($token);
  49. $payload = $service->decode($token);
  50. } catch (Throwable $e) {//Token 过期
  51. throw new AuthException('token 已过期');
  52. }
  53. if ('admin' != $payload->jti[1])
  54. throw new AuthException('无效的 token');
  55. $admin = $repository->get($payload->jti[0]);
  56. if (!$admin)
  57. throw new AuthException('账号不存在');
  58. if (!$admin['status'])
  59. throw new AuthException('账号已被禁用');
  60. } catch (Throwable $e) {
  61. if ($force)
  62. throw $e;
  63. $request->macro('isLogin', function () {
  64. return false;
  65. });
  66. $request->macros(['tokenInfo', 'adminId', 'adminInfo', 'token'], function () {
  67. throw new AuthException('请登录');
  68. });
  69. return;
  70. }
  71. $request->macro('isLogin', function () {
  72. return true;
  73. });
  74. $request->macro('tokenInfo', function () use (&$payload) {
  75. return $payload;
  76. });
  77. $request->macro('token', function () use (&$token) {
  78. return $token;
  79. });
  80. $request->macro('adminId', function () use (&$admin) {
  81. return $admin->admin_id;
  82. });
  83. $request->macro('adminInfo', function () use (&$admin) {
  84. return $admin;
  85. });
  86. }
  87. public function after(Response $response)
  88. {
  89. // TODO: Implement after() method.
  90. }
  91. }