AuthForm.php 16 KB

123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118119120121122123124125126127128129130131132133134135136137138139140141142143144145146147148149150151152153154155156157158159160161162163164165166167168169170171172173174175176177178179180181182183184185186187188189190191192193194195196197198199200201202203204205206207208209210211212213214215216217218219220221222223224225226227228229230231232233234235236237238239240241242243244245246247248249250251252253254255256257258259260261262263264265266267268269270271272273274275276277278279280281282283284285286287288289290291292293294295296297298299300301302303304305306307308309310311312313314315316317318319320321322323324325326327328329330331332333334335336337338339340341342343344345346347348349350351352353354355356357358359360361362363364365366367368369370371372373374375376377378379380381382383384385386387388389390391392393394395396397398399400401402403404405406407408409410411412413414415416417418419420421422423424425426427428429430431432433434435436437438439440
  1. <?php
  2. /**
  3. * 重庆赤晓店信息科技有限公司
  4. * https://www.chixiaodian.com
  5. * Copyright (c) 2023 赤店商城 All rights reserved.
  6. */
  7. namespace app\modules\client\models\v1\alipay;
  8. use app\models\User;
  9. use app\models\UserAuditLog;
  10. use app\modules\admin\models\AlipayThirdForm;
  11. use app\utils\Alipay\Alipay;
  12. use app\utils\Alipay\alipaySdk\aop\request\AlipayUserInfoShareRequest;
  13. use Overtrue\Socialite\SocialiteManager;
  14. use yii\base\BaseObject;
  15. use yii\base\Model;
  16. use yii\helpers\Json;
  17. use app\models\SaasUser;
  18. use app\modules\client\models\v1\BindForm;
  19. use app\models\Share;
  20. use yii\log\Logger;
  21. use app\utils\Alipay\alipaySdk\aop\request\AlipaySystemOauthTokenRequest;
  22. use AopClient;
  23. use app\models\StoreAliMini;
  24. use app\models\Option;
  25. include_once \Yii::$app->basePath . "/utils/Alipay/alipaySdk/aop/AopClient.php";;
  26. class AuthForm extends \app\modules\client\models\ApiModel
  27. {
  28. public $store_id;
  29. public $authCode;
  30. public $isv_appid;
  31. public $response;
  32. public $mini_id;
  33. public $user_id;
  34. public $app_user_code;
  35. public $share_user_id;
  36. /**
  37. * @var SocialiteManager $socialite
  38. */
  39. public $socialite;
  40. public function rules()
  41. {
  42. return [
  43. [['store_id', 'share_user_id','mini_id', 'user_id'], 'integer'],
  44. [['authCode'], 'required'],
  45. [['authCode', 'response'], 'trim'],
  46. [['authCode', 'response','isv_appid'], 'string'],
  47. [['app_user_code'], 'safe'],
  48. ];
  49. }
  50. /**
  51. *
  52. */
  53. public function codeAnalysis()
  54. {
  55. if(is_isv()){
  56. [$token, $aop, $auth_token] = $this->getToken($this->authCode);
  57. }else{
  58. $token = $this->socialite->create('alipay')->tokenFromCode($this->authCode);
  59. }
  60. \Yii::warning($token);
  61. if (empty($token['user_id'])) {
  62. return [
  63. 'code' => 1,
  64. 'msg' => '获取支付宝user_id失败'
  65. ];
  66. }
  67. $data = [];
  68. $data['openid'] = $token['user_id'];
  69. if($this->app_user_code){
  70. $user_id = cache()->get($this->app_user_code);
  71. cache()->delete($this->app_user_code);
  72. if(empty($user_id)){
  73. return [
  74. 'code' => 0,
  75. 'msg' => '获取app user_id失败',
  76. 'data' => $data,
  77. ];
  78. }
  79. $user = User::findOne($user_id);
  80. $user->alipay_open_id = $data['openid'];
  81. $user->save();
  82. $saas_user = SaasUser::findOne(['mobile' => $user->binding]);
  83. $saas_user->ali_user_id = $data['openid'];
  84. $saas_user->save();
  85. $data['access_token'] = $saas_user['access_token'];
  86. }
  87. return [
  88. 'code' => 0,
  89. 'data' => $data,
  90. 'msg' => 'ok'
  91. ];
  92. }
  93. public function login()
  94. {
  95. if (!$this->validate()) {
  96. return [
  97. 'code' => 1,
  98. 'msg' => $this->getErrorSummary(false)[0]
  99. ];
  100. }
  101. $self_mini = Option::get('self_mini', $this->store_id, 'store', 0)['value'];
  102. if (\Yii::$app->prod_is_dandianpu() && !intval($self_mini)) {
  103. $token = $this->socialite->create('alipay')->userFromCode($this->authCode);
  104. $token = [
  105. 'nick_name' => $token->getNickname(),
  106. 'user_id' => $token->getId(),
  107. 'avatar' => $token->getAvatar()
  108. ];
  109. } else {
  110. [$token, $aop, $auth_token] = $this->getToken($this->authCode);
  111. $auth_time = (strtotime($token['auth_start']) + $token['expires_in']);
  112. if ($auth_time < time()) {
  113. [$token, $aop, $auth_token] = $this->getToken($this->authCode, 1, $token['refresh_token']);
  114. }
  115. $request = new AlipayUserInfoShareRequest();
  116. $result = $aop->execute($request, $token['access_token'], $auth_token);
  117. $result = json_encode($result);
  118. $result = json_decode($result,true);
  119. \Yii::error($result);
  120. $token = $result['alipay_user_info_share_response'];
  121. if ((int)$token['code'] !== 10000) {
  122. return [
  123. 'code' => 1,
  124. 'msg' => $token['msg']
  125. ];
  126. }
  127. }
  128. if ($this->user_id) {
  129. $user = User::findOne($this->user_id);
  130. if ($user) {
  131. if (isset($token['avatar'])) {
  132. $user->avatar_url = $token['avatar'];
  133. }
  134. if (isset($token['nick_name'])) {
  135. $user->nickname = $token['nick_name'];
  136. }
  137. if (isset($token['user_id'])) {
  138. $user->alipay_open_id = $token['user_id'];
  139. }
  140. $user->save();
  141. $saasUser = SaasUser::findOne(['mobile' => $user->binding]);
  142. if ($saasUser) {
  143. if (isset($token['nick_name'])) {
  144. $saasUser->name = $token['nick_name'];
  145. }
  146. if (isset($token['avatar'])) {
  147. $saasUser->avatar = $token['avatar'];
  148. }
  149. if (isset($token['user_id'])) {
  150. $saasUser->ali_user_id = $token['user_id'];
  151. }
  152. $saasUser->save();
  153. }
  154. }
  155. }
  156. return [
  157. 'code' => 0,
  158. 'msg' => 'success',
  159. ];
  160. }
  161. /**
  162. * 用户登录注册
  163. * @return array|mixed|null
  164. */
  165. public function analysisPhone()
  166. {
  167. \Yii::getLogger()->log("支付宝配置",Logger::LEVEL_ERROR);
  168. if (!$this->validate()) {
  169. return [
  170. 'code' => 1,
  171. 'msg' => $this->getErrorSummary(false)[0]
  172. ];
  173. }
  174. if(is_isv()){
  175. [$token, $aop, $auth_token] = $this->getToken($this->authCode);
  176. $auth_time = (strtotime($token['auth_start']) + $token['expires_in']);
  177. if ($auth_time < time()) {
  178. [$token, $aop, $auth_token] = $this->getToken($this->authCode, 1, $token['refresh_token']);
  179. }
  180. $request = new AlipayUserInfoShareRequest();
  181. $result = $aop->execute ($request, $token['access_token'], $auth_token);
  182. $result = json_encode($result);
  183. $result = json_decode($result,true);
  184. $token = $result['alipay_user_info_share_response'];
  185. if ((int)$token['code'] !== 10000) {
  186. return [
  187. 'code' => 1,
  188. 'msg' => $token['msg']
  189. ];
  190. }
  191. }else{
  192. $response = Json::decode($this->response);
  193. if (empty($response['response'])) {
  194. return [
  195. 'code' => 1,
  196. 'msg' => 'response 不能为空'
  197. ];
  198. }
  199. // 获取user_id
  200. $token = $this->socialite->create('alipay')->tokenFromCode($this->authCode);
  201. }
  202. if (empty($token['user_id'])) {
  203. return [
  204. 'code' => 1,
  205. 'msg' => '获取user_id失败'
  206. ];
  207. }
  208. $alipay_config = self::getAlipayConfig();
  209. if (empty($alipay_config) && !is_isv()) {
  210. return [
  211. 'code' => 1,
  212. 'msg' => '支付宝配置信息不能为空'
  213. ];
  214. }
  215. $aes_key = $alipay_config['aes_key'];
  216. if(!is_isv()){
  217. $result = openssl_decrypt(base64_decode($response['response']), 'AES-128-CBC', base64_decode($aes_key), OPENSSL_RAW_DATA);
  218. // 获取手机号解密
  219. if (!$result) {
  220. return [
  221. 'code' => 1,
  222. 'msg' => '解密失败'
  223. ];
  224. }
  225. $res = Json::decode($result);
  226. if ($res['code'] != '10000') {
  227. $res['msg'] .= (string)$res['subMsg'];
  228. return $res;
  229. }
  230. $mobile = $res['mobile'];
  231. // 创建平台会员saas_user
  232. $saas_user = SaasUser::find()->where(['mobile' => $mobile, 'is_delete' => SaasUser::DELETE_STATUS_FALSE])->one();
  233. if (!$saas_user) {
  234. $saas_user = new SaasUser();
  235. $saas_user->access_token = \Yii::$app->security->generateRandomString();
  236. $saas_user->avatar = \Yii::$app->request->hostInfo . \Yii::$app->request->baseUrl . '/web/v1/statics/images/avatar.png';
  237. $saas_user->mobile = $mobile;
  238. $saas_user->name = substr_replace($mobile, '******', 3, 6);
  239. $saas_user->store_id = $this->store_id;
  240. $saas_user->ali_user_id = $token['user_id'];
  241. $saas_user->save();
  242. }
  243. }
  244. if ($token['nick_name']) {
  245. $nick_name = $token['nick_name'];
  246. } else {
  247. if (!empty($mobile)) {
  248. $nick_name = substr_replace($mobile, '******', 3, 6);
  249. } else {
  250. $str = md5(time());
  251. $nick_name = substr($str, 5, 8);
  252. }
  253. }
  254. $where = [
  255. 'is_delete' => SaasUser::DELETE_STATUS_FALSE
  256. ];
  257. if (!empty($mobile)) {
  258. $where['mobile'] = $mobile;
  259. } else {
  260. $where['ali_user_id'] = $token['user_id'];
  261. }
  262. // 创建平台会员saas_user
  263. $saas_user = SaasUser::find()->where($where)->one();
  264. if (!$saas_user) {
  265. $saas_user = new SaasUser();
  266. $saas_user->access_token = \Yii::$app->security->generateRandomString();
  267. $saas_user->avatar = $token['avatar'] ?: (\Yii::$app->request->hostInfo . \Yii::$app->request->baseUrl . '/web/v1/statics/images/avatar.png');
  268. $saas_user->mobile = $mobile ?? '';
  269. $saas_user->name = $nick_name;
  270. $saas_user->store_id = $this->store_id;
  271. $saas_user->ali_user_id = $token['user_id'] ?: '';
  272. $saas_user->save();
  273. } else {
  274. $saas_user->ali_user_id = $token['user_id'] ?: '';
  275. $saas_user->save();
  276. }
  277. $mobile = $saas_user->mobile;
  278. $where = [
  279. 'store_id' => $this->store_id
  280. ];
  281. if (!empty($mobile)) {
  282. $where['binding'] = $mobile;
  283. } else {
  284. $where['alipay_open_id'] = $token['user_id'];
  285. }
  286. $user = User::findOne($where);
  287. if (!$user) {
  288. $user = new User();
  289. $user->type = User::USER_TYPE_NORMAL;
  290. $user->binding = $mobile ?? '';
  291. $user->avatar_url = $token['avatar'] ?: \Yii::$app->request->hostInfo . '/web/v1/statics/images/avatar.png';
  292. $user->username = \Yii::$app->security->generateRandomString();
  293. $user->nickname = $nick_name;
  294. $user->password = \Yii::$app->security->generatePasswordHash(\Yii::$app->security->generateRandomString(), 5);
  295. $user->auth_key = \Yii::$app->security->generateRandomString();
  296. $user->access_token = \Yii::$app->security->generateRandomString();
  297. $user->is_delete = User::USER_NOT_DELETE;
  298. $user->alipay_open_id = $token['user_id'] ?: '';
  299. $user->store_id = $this->store_id;
  300. $user->platform = User::USER_FROM_ALIPAY; // 支付宝
  301. if (!$user->save()) {
  302. return [
  303. 'code' => 1,
  304. 'msg' => '登录失败',
  305. 'data' => $user->getErrorSummary(false)[0]
  306. ];
  307. }
  308. } else {
  309. if (empty($user->alipay_open_id)) {
  310. $user->alipay_open_id = $token['user_id'];
  311. $user->save();
  312. }
  313. }
  314. $userAuditLog = UserAuditLog::findOne(['user_id' => $user->id, 'is_delete' => 0]);
  315. if (!$userAuditLog) {
  316. $userAuditLog = UserAuditLog::findOne(['ali_user_id' => $user->alipay_open_id, 'is_delete' => 0]);
  317. if (!empty($userAuditLog)) {
  318. $userAuditLog->user_id = $user->id;
  319. $userAuditLog->save();
  320. }
  321. }
  322. if ($user->blacklist == '1') {
  323. return [
  324. 'code' => 1,
  325. 'msg' => '您的账号已被限制登录!',
  326. ];
  327. }
  328. $share = $share_user = null;
  329. if ($this->share_user_id > 0) {
  330. // 绑定上下级
  331. $bindForm = new BindForm();
  332. $bindForm->store_id = $this->store_id;
  333. $bindForm->user_id = $user->id;
  334. $bindForm->parent_id = $this->share_user_id;
  335. $bindForm->condition = 0;
  336. $bindForm->save();
  337. }
  338. if ($user->parent_id > 0) {
  339. $share = Share::findOne(['user_id' => $user->parent_id]);
  340. $share_user = User::findOne(['id' => $share->user_id]);
  341. }
  342. $data = [
  343. 'nickname' => $saas_user->name,
  344. 'binding' => $saas_user->mobile,
  345. 'id' => $user->id,
  346. 'is_distributor' => $user->is_distributor ? $user->is_distributor : 0,
  347. 'avatar_url' => $saas_user->avatar,
  348. 'errCode' => 0,
  349. 'parent' => $share ? ($share->name ? $share->name : $share_user->nickname) : '总店',
  350. 'money' => $user->money ? $user->money : 0,
  351. 'blacklist' => $user->blacklist ? $user->blacklist : 0,
  352. 'access_token' => $saas_user->access_token,
  353. 'level' => $user->level ? $user->level : -1,
  354. 'is_clerk' => $user->is_clerk === null ? 0 : $user->is_clerk,
  355. 'integral' => $user->integral === null ? 0 : $user->integral,
  356. 'is_saas_clerk' => (int)$user->is_saas_clerk,
  357. ];
  358. return [
  359. 'code' => 0,
  360. 'msg' => '登录成功',
  361. 'data' => $data,
  362. ];
  363. }
  364. public function getToken($code, $type = 0, $refresh_token = '')
  365. {
  366. if ($type === 0) {
  367. $auth = 'authorization_code';
  368. } else {
  369. $auth = 'refresh_token';
  370. }
  371. $aop = new AopClient();
  372. if(is_open_platform()){
  373. $aop->appId = Option::get("alipay_appid",0,'saas')['value'];;
  374. $aop->rsaPrivateKey = Option::get("alipay_app_private_key",0,'saas')['value'];
  375. $aop->alipayrsaPublicKey=Option::get("alipay_public_key",0,'saas')['value'];
  376. }else{
  377. $value = Option::get(Option::OPTOPN_KEY, get_store_id(), 'alipay')['value'];
  378. $conf = json_decode($value, true);
  379. $aop->appId = $conf['app_id'];
  380. $aop->rsaPrivateKey = $conf['app_private_key'];
  381. $aop->alipayrsaPublicKey = $conf['alipay_public_key'];
  382. }
  383. $aop->apiVersion = '1.0';
  384. $aop->signType = "RSA2";
  385. $aop->postCharset="utf-8";
  386. $aop->format='json';
  387. $request = new AlipaySystemOauthTokenRequest();
  388. $request->setGrantType($auth);
  389. $request->setCode($code);
  390. if ($type !== 0) {
  391. $request->setRefreshToken($refresh_token);
  392. }
  393. $auth_token = Option::get("ali_template_token",0,'saas')['value'];
  394. if(!empty($this->mini_id)){
  395. $mini = StoreAliMini::findOne($this->mini_id);
  396. $auth_token = !empty($mini->auth_token)?$mini->auth_token:$auth_token;
  397. }
  398. $result = $aop->execute ($request, null, $auth_token); //第三方应用代小程序模板调用接口必须传入
  399. $result = json_encode($result);
  400. $result = json_decode($result,true);
  401. $token = $result['alipay_system_oauth_token_response'];
  402. return [
  403. $token, $aop, $auth_token
  404. ];
  405. }
  406. }