Common.php 11.9 KB
<?php

namespace app\api\controller;

use addons\epay\library\Service;
use addons\wechat\library\Config as ConfigService;
use app\api\model\Order;
use app\common\controller\Api;
use app\common\library\Auth;
use app\common\model\Area;
use app\common\model\Version;
use EasyWeChat\Encryption\EncryptionException;
use EasyWeChat\Foundation\Application;
use fast\Http;
use fast\Random;
use think\Config;
use think\Db;

/**
 * 公共接口
 */
class Common extends Api
{
    protected $noNeedLogin = ['init'];
    protected $noNeedRight = '*';

    /**
     * 加载初始化
     *
     * @param string $version 版本号
     * @param string $lng     经度
     * @param string $lat     纬度
     */
    public function init()
    {
        if ($version = $this->request->request('version')) {
            $lng = $this->request->request('lng');
            $lat = $this->request->request('lat');
            $content = [
                'citydata'    => Area::getCityFromLngLat($lng, $lat),
                'versiondata' => Version::check($version),
                'uploaddata'  => Config::get('upload'),
                'coverdata'   => Config::get("cover"),
            ];
            $this->success('', $content);
        } else {
            $this->error(__('Invalid parameters'));
        }
    }



    /**
     * 上传文件
     * @ApiMethod (POST)
     * @param File $file 文件流
     */
    public function upload()
    {
        $file = $this->request->file('file');
        if (empty($file)) {
            $this->error(__('No file upload or server upload limit exceeded'));
        }

        //判断是否已经存在附件
        $sha1 = $file->hash();

        $upload = Config::get('upload');

        preg_match('/(\d+)(\w+)/', $upload['maxsize'], $matches);
        $type = strtolower($matches[2]);
        $typeDict = ['b' => 0, 'k' => 1, 'kb' => 1, 'm' => 2, 'mb' => 2, 'gb' => 3, 'g' => 3];
        $size = (int)$upload['maxsize'] * pow(1024, isset($typeDict[$type]) ? $typeDict[$type] : 0);
        $fileInfo = $file->getInfo();
        $suffix = strtolower(pathinfo($fileInfo['name'], PATHINFO_EXTENSION));
        $suffix = $suffix && preg_match("/^[a-zA-Z0-9]+$/", $suffix) ? $suffix : 'file';

        $mimetypeArr = explode(',', strtolower($upload['mimetype']));
        $typeArr = explode('/', $fileInfo['type']);

        //禁止上传PHP和HTML文件
        if (in_array($fileInfo['type'], ['text/x-php', 'text/html']) || in_array($suffix, ['php', 'html', 'htm'])) {
            $this->error(__('Uploaded file format is limited'));
        }
        //验证文件后缀
        if ($upload['mimetype'] !== '*' &&
            (
                !in_array($suffix, $mimetypeArr)
                || (stripos($typeArr[0] . '/', $upload['mimetype']) !== false && (!in_array($fileInfo['type'], $mimetypeArr) && !in_array($typeArr[0] . '/*', $mimetypeArr)))
            )
        ) {
            $this->error(__('Uploaded file format is limited'));
        }
        //验证是否为图片文件
        $imagewidth = $imageheight = 0;
        if (in_array($fileInfo['type'], ['image/gif', 'image/jpg', 'image/jpeg', 'image/bmp', 'image/png', 'image/webp']) || in_array($suffix, ['gif', 'jpg', 'jpeg', 'bmp', 'png', 'webp'])) {
            $imgInfo = getimagesize($fileInfo['tmp_name']);
            if (!$imgInfo || !isset($imgInfo[0]) || !isset($imgInfo[1])) {
                $this->error(__('Uploaded file is not a valid image'));
            }
            $imagewidth = isset($imgInfo[0]) ? $imgInfo[0] : $imagewidth;
            $imageheight = isset($imgInfo[1]) ? $imgInfo[1] : $imageheight;
        }
        $replaceArr = [
            '{year}'     => date("Y"),
            '{mon}'      => date("m"),
            '{day}'      => date("d"),
            '{hour}'     => date("H"),
            '{min}'      => date("i"),
            '{sec}'      => date("s"),
            '{random}'   => Random::alnum(16),
            '{random32}' => Random::alnum(32),
            '{filename}' => $suffix ? substr($fileInfo['name'], 0, strripos($fileInfo['name'], '.')) : $fileInfo['name'],
            '{suffix}'   => $suffix,
            '{.suffix}'  => $suffix ? '.' . $suffix : '',
            '{filemd5}'  => md5_file($fileInfo['tmp_name']),
        ];
        $savekey = $upload['savekey'];
        $savekey = str_replace(array_keys($replaceArr), array_values($replaceArr), $savekey);

        $uploadDir = substr($savekey, 0, strripos($savekey, '/') + 1);
        $fileName = substr($savekey, strripos($savekey, '/') + 1);
        //
        $splInfo = $file->validate(['size' => $size])->move(ROOT_PATH . '/public' . $uploadDir, $fileName);
        if ($splInfo) {
            $params = array(
                'admin_id'    => 0,
                'user_id'     => (int)$this->auth->id,
                'filesize'    => $fileInfo['size'],
                'imagewidth'  => $imagewidth,
                'imageheight' => $imageheight,
                'imagetype'   => $suffix,
                'imageframes' => 0,
                'mimetype'    => $fileInfo['type'],
                'url'         => $uploadDir . $splInfo->getSaveName(),
                'uploadtime'  => time(),
                'storage'     => 'local',
                'sha1'        => $sha1,
            );
            $attachment = model("attachment");
            $attachment->data(array_filter($params));
            $attachment->save();
            \think\Hook::listen("upload_after", $attachment);
            $this->success(__('Upload successful'), [
                'url' => $uploadDir . $splInfo->getSaveName()
            ]);
        } else {
            // 上传失败获取错误信息
            $this->error($file->getError());
        }
    }



    /**
     * 支付回调
     * @ApiTitle    (支付回调)
     * @ApiSummary  ()
     * @ApiMethod   (POST)
     */
    public function payNotify()
    {
        $payType = 'wechat';
        $pay = Service::checkNotify($payType);
        if (!$pay) {
            echo '签名错误';
            return;
        }
        $data = $pay->verify();
        $order = new Order();

        Db::startTrans();
        try {
            $out_trade_no = $data['out_trade_no'];
            $orderInfo = $order->infoAndLockById($out_trade_no);
            if(!$orderInfo) {
                Db::rollback();
            } else {
                if($orderInfo['status'] == 3) {
                    Db::rollback();
                } else {
                    $res = $order->updateOne($orderInfo['id'], ['status' => 3, 'updatetime' => time()]);
                    if(!$res) {
                        Db::rollback();
                    } else {
                        // 根据订单内容修改相应的数据
                        $res = handleOrder($orderInfo);
                        if(!$res) {
                            Db::rollback();
                        } else {
                            Db::commit();
                        }
                    }
                }
            }
        } catch (\Exception $e) {

        }
        $pay->success();
    }


    /**
     * 获取SessionKey
     * @ApiTitle    (获取SessionKey)
     * @ApiSummary  (使用code换取SessionKey)
     * @ApiMethod   (POST)
     * @ApiParams   (name="code", type="string", required=true, description="code")
     */
    public function getSessionKey(){
        $config = get_addon_config('wechat');
        $code = $this->request->param('code');
        if (!$code) {
            $this->error('参数不正确');
        }
        $params = [
            'appid'      => $config['app_id'],
            'secret'     => $config['secret'],
            'js_code'    => $code,
            'grant_type' => 'authorization_code'
        ];
        $result = Http::sendRequest("https://api.weixin.qq.com/sns/jscode2session", $params, 'GET');
        if ($result['ret']) {
            $json = (array)json_decode($result['msg'], true);
            $this->success("SessionKey",$json);
        }else{
            $this->error('获取失败',$result);
        };
    }


    /**
     * 小程序登录
     * @ApiTitle    (小程序登录)
     * @ApiSummary  (微信小程序登录)
     * @ApiMethod   (POST)
     * @ApiParams   (name="sessionKey", type="string", required=true, description="sessionKey")
     * @ApiParams   (name="iv", type="string", required=true, description="iv")
     * @ApiParams   (name="encryptedData", type="object", required=true, description="encryptedData")
     * @ApiParams   (name="store_id", type="integer", required=false, description="门店ID,二维码进入小程序可能会带入此值")
     */
    public function login(){
        $sessionKey = $this->request->param('sessionKey');
        $iv = $this->request->param('iv');
        $encryptData = $this->request->param('encryptedData');
        $storeId = $this->request->param('store_id',0,'int');
        if (!$sessionKey || !$iv || !$encryptData) {
            $this->error('参数不正确');
        }

        try {
            $app = new Application(ConfigService::load());
            $miniProgram = $app->mini_program;
            $result = $miniProgram->encryptor->decryptData($sessionKey, $iv, $encryptData);
            if (isset($result['openId'])) {
                $platform = 'wxapp';
                $data = [
                    'openid' => $result['openId'],
                    'userinfo' => [
                        'nickname' => $result['nickName'],
                        'unionid' => isset($result['unionId']) ? $result['unionId'] : '',
                    ],
                    'access_token' => $sessionKey,
                    'refresh_token' => '',
                    'expires_in' => 0,
                ];
                $extend = [
                    'group_id'=>1,
                    'gender' => $result['gender'],
                    'nickname' => $result['nickName'],
                    'name' => $result['nickName'],
                    'avatar' => $result['avatarUrl'],
                    'store_id'=>$storeId,
                ];
                $ret = \addons\third\library\Service::connect($platform, $data, $extend);
                if ($ret) {
                    $auth = Auth::instance();
                    $this->success('登录成功', ['userInfo' => $auth->getUserinfo()]);
                } else {
                    $this->error('登录失败');
                }
            } else {
                $this->error('登录失败',$result);
            }
        } catch (EncryptionException $e) {
            $this->error($e->getMessage());
        }
    }


    /**
     * CODE换取Token
     * @ApiTitle    (CODE换取Token)
     * @ApiSummary  (使用code换取Token)
     * @ApiMethod   (POST)
     * @ApiParams   (name="code", type="string", required=true, description="code")
     */
    public function codeToToken()
    {
        $config = get_addon_config('wechat');
        $code = $this->request->param('code');
        if (!$code) {
            $this->error('参数不正确');
        }
        $params = [
            'appid' => $config['app_id'],
            'secret' => $config['secret'],
            'js_code' => $code,
            'grant_type' => 'authorization_code',
        ];
        $result = Http::sendRequest("https://api.weixin.qq.com/sns/jscode2session", $params, 'GET');
        if ($result['ret']) {
            $json = (array)json_decode($result['msg'], true);
            if (isset($json['openid'])) {
                $userId = Db::name('third')->where(['platform'=>'wxapp','openid'=>$json['openid']])->value('user_id');
                $auth = Auth::instance();
                $ret=$auth->direct($userId);
                if ($ret) {
                    Db::name('third')->where(['user_id'=>$userId])->setField('access_token',$json['session_key']);
                    $this->success("登录成功", ['userInfo' => $auth->getUserinfo()]);
                } else {
                    $this->error("登录失败",$userId,'401');
                }
            } else {
                $this->error("登录失败",$json);
            }
        } else {
            $this->error("登录失败");
        }
    }
}