初始版本

server/app/shopapi/validate/LoginAccountValidate.php

@@ -0,0 +1,159 @@
+<?php
+// +----------------------------------------------------------------------
+// | likeadmin快速开发前后端分离管理后台（PHP版）
+// +----------------------------------------------------------------------
+// | 欢迎阅读学习系统程序代码，建议反馈是我们前进的动力
+// | 开源版本可自由商用，可去除界面版权logo
+// | gitee下载：https://gitee.com/likeshop_gitee/likeadmin
+// | github下载：https://github.com/likeshop-github/likeadmin
+// | 访问官网：https://www.likeadmin.cn
+// | likeadmin团队 版权所有 拥有最终解释权
+// +----------------------------------------------------------------------
+// | author: likeadminTeam
+// +----------------------------------------------------------------------
+
+namespace app\shopapi\validate;
+
+use app\common\cache\ShopUserAccountSafeCache;
+use app\common\enum\LoginEnum;
+use app\common\enum\notice\NoticeEnum;
+use app\common\enum\shop\ShopUserTerminalEnum;
+use app\common\enum\YesNoEnum;
+use app\common\model\shop\ShopUser;
+use app\common\service\sms\SmsDriver;
+use app\common\validate\BaseValidate;
+use think\facade\Config;
+
+/**
+ * 账号密码登录校验
+ * Class LoginValidate
+ * @package app\coachapi\validate
+ */
+class LoginAccountValidate extends BaseValidate
+{
+
+    protected $rule = [
+        'terminal' => 'require|in:' . ShopUserTerminalEnum::WECHAT_MMP . ',' . ShopUserTerminalEnum::WECHAT_OA . ','
+            . ShopUserTerminalEnum::H5 . ',' . ShopUserTerminalEnum::PC . ',' . ShopUserTerminalEnum::IOS .
+            ',' . ShopUserTerminalEnum::ANDROID,
+        'scene' => 'require|in:' . LoginEnum::ACCOUNT_PASSWORD . ',' . LoginEnum::MOBILE_CAPTCHA .'|checkConfig',
+        'account' => 'require',
+    ];
+
+
+    protected $message = [
+        'terminal.require' => '终端参数缺失',
+        'terminal.in' => '终端参数状态值不正确',
+        'scene.require' => '场景不能为空',
+        'scene.in' => '场景值错误',
+        'account.require' => '请输入账号',
+        'password.require' => '请输入密码',
+    ];
+
+
+    /**
+     * @notes 登录场景相关校验
+     * @param $scene
+     * @param $rule
+     * @param $data
+     * @return bool|string
+     * @author 段誉
+     * @date 2022/9/15 14:37
+     */
+    public function checkConfig($scene, $rule, $data)
+    {
+//        $config = ConfigService::get('login', 'login_way', config('project.login.login_way'));
+//        if (!in_array($scene, $config)) {
+//            return '不支持的登录方式';
+//        }
+
+        // 账号密码登录
+        if (LoginEnum::ACCOUNT_PASSWORD == $scene) {
+            if (!isset($data['password'])) {
+                return '请输入密码';
+            }
+            return $this->checkPassword($data['password'], [], $data);
+        }
+
+        // 手机验证码登录
+        if (LoginEnum::MOBILE_CAPTCHA == $scene) {
+            if (!isset($data['code'])) {
+                return '请输入手机验证码';
+            }
+            return $this->checkCode($data['code'], [], $data);
+        }
+
+        return true;
+    }
+
+
+    /**
+     * @notes 登录密码校验
+     * @param $password
+     * @param $other
+     * @param $data
+     * @return bool|string
+     * @author 段誉
+     * @date 2022/9/15 14:39
+     */
+    public function checkPassword($password, $other, $data)
+    {
+        //账号安全机制，连续输错后锁定，防止账号密码暴力破解
+        $shopUserAccountSafeCache = new ShopUserAccountSafeCache();
+        if (!$shopUserAccountSafeCache->isSafe()) {
+            return '密码连续' . $shopUserAccountSafeCache->count . '次输入错误，请' . $shopUserAccountSafeCache->minute . '分钟后重试';
+        }
+
+        $where = [];
+        if ($data['scene'] == LoginEnum::ACCOUNT_PASSWORD) {
+            // 手机号密码登录
+            $where = ['account' => $data['account']];
+        }
+        $shopUserInfo = ShopUser::where($where)
+            ->field(['password'])
+            ->findOrEmpty();
+
+        if ($shopUserInfo->isEmpty()) {
+            return '用户不存在';
+        }
+
+//        if ($shopUserInfo['is_disable'] === YesNoEnum::YES) {
+//            return '用户已禁用';
+//        }
+
+        if (empty($shopUserInfo['password'])) {
+            $shopUserAccountSafeCache->record();
+            return '用户不存在';
+        }
+
+        $passwordSalt = Config::get('project.unique_identification');
+        if ($shopUserInfo['password'] !== create_password($password, $passwordSalt)) {
+            $shopUserAccountSafeCache->record();
+            return '密码错误';
+        }
+
+        $shopUserAccountSafeCache->relieve();
+
+        return true;
+    }
+
+
+    /**
+     * @notes 校验验证码
+     * @param $code
+     * @param $rule
+     * @param $data
+     * @return bool|string
+     * @author Tab
+     * @date 2021/8/25 15:43
+     */
+    public function checkCode($code, $rule, $data)
+    {
+        $smsDriver = new SmsDriver();
+        $result = $smsDriver->verify($data['account'], $code, NoticeEnum::LOGIN_CAPTCHA_SHOP);
+        if ($result) {
+            return true;
+        }
+        return '验证码错误';
+    }
+}