|
@@ -342,14 +342,18 @@ class LoginController extends AbstractController
|
|
|
*/
|
|
|
public function checkUserAuth($data)
|
|
|
{
|
|
|
+// var_dump("进没进来呢::",$data);
|
|
|
$websiteGroup = [
|
|
|
'id'=>$data['id']
|
|
|
];
|
|
|
$result = $this->userServiceClient->getWebsiteGroupInfo($websiteGroup);
|
|
|
+// var_dump("checkUserAuth:",$result);
|
|
|
if($result['code']==200){
|
|
|
if($data['SiteId'] && $result['data']['web_ids']){
|
|
|
if(in_array($data['SiteId'],json_decode($result['data']['web_ids'],true))){
|
|
|
return true;
|
|
|
+ }else{
|
|
|
+ return false;
|
|
|
}
|
|
|
}else{
|
|
|
return false;
|
|
@@ -366,6 +370,12 @@ class LoginController extends AbstractController
|
|
|
*/
|
|
|
public function loginStatus(Jwt $jwt)
|
|
|
{
|
|
|
+ $header = $this->request->getHeader('userurl');
|
|
|
+ $origin = $header[0];
|
|
|
+ $logindevice = explode("//", $origin);
|
|
|
+ if(!isset($logindevice[1]) && !$logindevice[1]){
|
|
|
+ return Result::error('userurl不存在,请登录');
|
|
|
+ }
|
|
|
$reqData = $this->request->all();
|
|
|
$validator = $this->validationFactory->make(
|
|
|
$reqData,
|
|
@@ -381,11 +391,22 @@ class LoginController extends AbstractController
|
|
|
return Result::error($errorMessage);
|
|
|
}
|
|
|
try {
|
|
|
- $status = $jwt->verifyToken($reqData['token']);
|
|
|
- // var_dump("状态:",$status);
|
|
|
- return Result::success(['isLogin' => true]);
|
|
|
+ $jwt->verifyToken($reqData['token']);
|
|
|
+ $results = $this->checkAuth([
|
|
|
+ 'token'=>$reqData['token'],
|
|
|
+ 'userurl'=>$logindevice[1]
|
|
|
+ ]);
|
|
|
+ if($results['code']==200){
|
|
|
+ return Result::success(['isLogin' => true]);
|
|
|
+ }elseif($results['code']==-1){
|
|
|
+ return Result::error("没有权限登陆".$logindevice[1]."这个域名",-1);
|
|
|
+ }elseif($results['code']==-2){
|
|
|
+ return Result::error("token已过期",-2);
|
|
|
+ }else{
|
|
|
+ return Result::error("参数错误");
|
|
|
+ }
|
|
|
}catch(\Exception $e){
|
|
|
- return Result::error('token已过期:'.$e->getMessage());
|
|
|
+ return Result::error('token已过期:'.$e->getMessage(),-2);
|
|
|
}
|
|
|
}
|
|
|
|
|
@@ -674,12 +695,12 @@ class LoginController extends AbstractController
|
|
|
$ver =$jwt->getClaimsByToken($data['token']);
|
|
|
$tokenTime = $jwt->getTokenDynamicCacheTime($data['token']);
|
|
|
if($tokenTime==0){
|
|
|
- return Result::error("token已过期,请重新登录",-1);
|
|
|
+ return Result::error("token已过期,请重新登录",-2);
|
|
|
}
|
|
|
if(isset($data['userurl']) && $data['userurl']){
|
|
|
$result = $this->websiteServiceClient->getWebsiteId(['website_url'=>$data['userurl']]);
|
|
|
if(!isset($result['data']['id']) || !$result['data']['id']){
|
|
|
- return Result::error("网站不存在...",-1);
|
|
|
+ return Result::error("网站不存在...",-2);
|
|
|
}
|
|
|
if($ver['type_id']!=10000){
|
|
|
$userInfo = $this->userServiceClient->getUserInfo($ver['uid']);
|
|
@@ -695,13 +716,17 @@ class LoginController extends AbstractController
|
|
|
if (!$resultAuth) {
|
|
|
// 如果没有权限,返回错误响应
|
|
|
return Result::error("没有权限登陆此网站...",-1);
|
|
|
+ }else{
|
|
|
+ return Result::success([]);
|
|
|
}
|
|
|
}else{
|
|
|
- return Result::error("用户没有群组...",-1);
|
|
|
+ return Result::error("用户没有群组...",-2);
|
|
|
}
|
|
|
+ }else{
|
|
|
+ return Result::success([]);
|
|
|
}
|
|
|
}else{
|
|
|
- return Result::error("userurl不能为空...",-1);
|
|
|
+ return Result::error("userurl不能为空...",-2);
|
|
|
}
|
|
|
|
|
|
}
|