c1e74d8e68
- 按 docs/renew-code-comment.md 将 PHP 文件头改为带边框的 Author 注释\n- 注释中的 crmeb.com 替换为 uj345.cn（代码字符串中的外链未改）\n- 新增 docs/renew-code-comment.md 说明 Made-with: Cursor
109 lines
2.7 KiB
PHP
109 lines
2.7 KiB
PHP
<?php
|
|
// +----------------------------------------------------------------------
|
|
// | Author: ScottPan Team
|
|
// +----------------------------------------------------------------------
|
|
|
|
namespace crmeb\utils;
|
|
|
|
|
|
use crmeb\exceptions\AdminException;
|
|
use crmeb\services\CacheService;
|
|
use Firebase\JWT\JWT;
|
|
use Firebase\JWT\Key;
|
|
use think\facade\Env;
|
|
|
|
/**
|
|
* Jwt
|
|
* Class JwtAuth
|
|
* @package crmeb\utils
|
|
*/
|
|
class JwtAuth
|
|
{
|
|
|
|
/**
|
|
* token
|
|
* @var string
|
|
*/
|
|
protected $token;
|
|
|
|
/**
|
|
* @var string
|
|
*/
|
|
protected $app_key = 'crmeb_app_key';
|
|
|
|
/**
|
|
* 获取token
|
|
* @param int $id
|
|
* @param string $type
|
|
* @param array $params
|
|
* @return array
|
|
*/
|
|
public function getToken(int $id, string $type, array $params = []): array
|
|
{
|
|
$host = app()->request->host();
|
|
$time = time();
|
|
$exp_time = strtotime('+ 7day');
|
|
if (app()->request->isApp()) {
|
|
$exp_time = strtotime('+ 30day');
|
|
}
|
|
if ($type == 'out') {
|
|
$exp_time = strtotime('+ 1day');
|
|
}
|
|
$params += [
|
|
'iss' => $host,
|
|
'aud' => $host,
|
|
'iat' => $time,
|
|
'nbf' => $time,
|
|
'exp' => $exp_time,
|
|
];
|
|
$params['jti'] = compact('id', 'type');
|
|
$token = JWT::encode($params, Env::get('app.app_key', $this->app_key) ?: $this->app_key, 'HS256');
|
|
|
|
return compact('token', 'params');
|
|
}
|
|
|
|
/**
|
|
* 解析token
|
|
* @param string $jwt
|
|
* @return array
|
|
*/
|
|
public function parseToken(string $jwt): array
|
|
{
|
|
$this->token = $jwt;
|
|
[, $bodyb64,] = explode('.', $this->token);
|
|
$payload = JWT::jsonDecode(JWT::urlsafeB64Decode($bodyb64));
|
|
return [$payload->jti->id, $payload->jti->type, $payload->auth ?? ''];
|
|
}
|
|
|
|
/**
|
|
* 验证token
|
|
*/
|
|
public function verifyToken()
|
|
{
|
|
JWT::$leeway = 60;
|
|
|
|
$key = Env::get('app.app_key', $this->app_key) ?: $this->app_key;
|
|
JWT::decode($this->token, new Key($key, 'HS256'));
|
|
|
|
$this->token = null;
|
|
}
|
|
|
|
/**
|
|
* 获取token并放入令牌桶
|
|
* @param int $id
|
|
* @param string $type
|
|
* @param array $params
|
|
* @return array
|
|
*/
|
|
public function createToken(int $id, string $type, array $params = [])
|
|
{
|
|
$tokenInfo = $this->getToken($id, $type, $params);
|
|
$exp = $tokenInfo['params']['exp'] - $tokenInfo['params']['iat'] + 60;
|
|
$res = CacheService::setTokenBucket(md5($tokenInfo['token']), ['uid' => $id, 'type' => $type, 'token' => $tokenInfo['token'], 'exp' => $exp], (int)$exp, $type);
|
|
if (!$res) {
|
|
throw new AdminException(ApiErrorCode::ERR_SAVE_TOKEN);
|
|
}
|
|
return $tokenInfo;
|
|
}
|
|
}
|