LoginMiddleware.php 2.9 KB

12345678910111213141516171819202122232425262728293031323334353637383940414243444546474849505152535455565758596061626364656667686970717273747576
  1. <?php
  2. // +----------------------------------------------------------------------
  3. // | likeadmin快速开发前后端分离管理后台(PHP版)
  4. // +----------------------------------------------------------------------
  5. // | 欢迎阅读学习系统程序代码,建议反馈是我们前进的动力
  6. // | 开源版本可自由商用,可去除界面版权logo
  7. // | gitee下载:https://gitee.com/likeshop_gitee/likeadmin
  8. // | github下载:https://github.com/likeshop-github/likeadmin
  9. // | 访问官网:https://www.likeadmin.cn
  10. // | likeadmin团队 版权所有 拥有最终解释权
  11. // +----------------------------------------------------------------------
  12. // | author: likeadminTeam
  13. // +----------------------------------------------------------------------
  14. declare (strict_types=1);
  15. namespace app\workerapi\http\middleware;
  16. use app\common\cache\MasterWokerTokenCache;
  17. use app\common\cache\UserTokenCache;
  18. use app\common\service\JsonService;
  19. use app\api\service\UserTokenService;
  20. use app\workerapi\service\MasterWokerTokenService;
  21. use think\facade\Config;
  22. class LoginMiddleware
  23. {
  24. /**
  25. * @notes 登录验证
  26. * @param $request
  27. * @param \Closure $next
  28. * @return mixed|\think\response\Json
  29. * @author 令狐冲
  30. * @date 2021/7/1 17:33
  31. */
  32. public function handle($request, \Closure $next)
  33. {
  34. $token = $request->header('token');
  35. //判断接口是否免登录
  36. $isNotNeedLogin = $request->controllerObject->isNotNeedLogin();
  37. //不直接判断$isNotNeedLogin结果,使不需要登录的接口通过,为了兼容某些接口可以登录或不登录访问
  38. if (empty($token) && !$isNotNeedLogin) {
  39. //没有token并且该地址需要登录才能访问, 指定show为0,前端不弹出此报错
  40. return JsonService::fail('请求参数缺token', [], 0, 0);
  41. }
  42. $userInfo = (new MasterWokerTokenCache())->getUserInfo($token);
  43. if (empty($userInfo) && !$isNotNeedLogin) {
  44. //token过期无效并且该地址需要登录才能访问
  45. return JsonService::fail('登录超时,请重新登录', [], -1, 0);
  46. }
  47. //token临近过期,自动续期
  48. if ($userInfo) {
  49. //获取临近过期自动续期时长
  50. $beExpireDuration = Config::get('project.user_token.be_expire_duration');
  51. //token续期
  52. if (time() > ($userInfo['expire_time'] - $beExpireDuration)) {
  53. $result = MasterWokerTokenService::overtimeToken($token);
  54. //续期失败(数据表被删除导致)
  55. if (empty($result)) {
  56. return JsonService::fail('登录过期', [], -1);
  57. }
  58. }
  59. }
  60. //给request赋值,用于控制器
  61. $request->userInfo = $userInfo;
  62. $request->userId = $userInfo['user_id'] ?? 0;
  63. return $next($request);
  64. }
  65. }