jyshd_mWtK2/application/api/controller/Google.php

<?php

namespace app\api\controller;

use app\common\controller\Api;
use think\Db;
use think\Config;
use think\Loader;
/**
 * 谷歌验证接口
 */
class Google extends Api
{
    // 无需登录的接口,*表示全部
    protected $noNeedLogin = ['*'];
    // 无需鉴权的接口,*表示全部
    protected $noNeedRight = ['*'];

    public function index(){
        $salt = $this->request->get("token");
        $admin = Db::name("admin")->where("salt",$salt)->find();
        if(empty($admin)){
            echo "非法操作";exit;
        }
        if($admin['secret']){
            echo "请勿重复绑定";exit;
        }
        if($admin['secret_y'] && $admin['updatetime']>time()-600){
            import('lib.GoogleAuthenticator', EXTEND_PATH , '.php');
            $ga = new \PHPGangsta_GoogleAuthenticator();
            $secret = $admin['secret_y'];
            $qrCodeUrl = $ga->getQRCodeGoogleUrl('HASH', $secret);
        }else{
            import('lib.GoogleAuthenticator', EXTEND_PATH , '.php');
            $ga = new \PHPGangsta_GoogleAuthenticator();
            $secret = $ga->createSecret();
            $qrCodeUrl = $ga->getQRCodeGoogleUrl('HASH', $secret);
            Db::name("admin")->where("id",$admin['id'])->update(['secret_y'=>$secret,'updatetime'=>time()]);
        }
        echo '<div style="display: flex;align-items: center;justify-content: center;width: 100%;height: 100vh;text-align: center;">
                <div>
                 <div style="padding: 20px;font-size: 18px;">
                  <span>'.$secret.'</span>
                 </div>
                 <div>
                  <img src="'.$qrCodeUrl.'"  alt="">
                 </div>
                </div>
               </div>';
        
    }
    
    /**
     * 生成私钥二维码
     */
    public function get_keys(){
        import('lib.GoogleAuthenticator', EXTEND_PATH , '.php');
        $ga = new \PHPGangsta_GoogleAuthenticator();
        $secret = $ga->createSecret();
        $qrCodeUrl = $ga->getQRCodeGoogleUrl('APEC', $secret);
        $data = array(
            "secret" => $secret,
            "code_url" => $qrCodeUrl,
        );
        $this->success("ok",$data);
    }
    
    /**
     * 验证并绑定私钥
     */
    public function band_secret()
    {
        $user_id = $this->auth->id;
        $secret = $this->request->post("secret");
        $code = $this->request->post("code");
        if(empty($secret)){
            $this->error(__("请输入私钥"));
        }
        if(empty($code)){
            $this->error(__("请输入验证码"));
        }
        
        $user = Db::name("user")->where("id",$user_id)->find();
        if($user['secret']){
            $this->error(__("请勿重复绑定"));
        }
        import('lib.GoogleAuthenticator', EXTEND_PATH , '.php');
        $ga = new \PHPGangsta_GoogleAuthenticator();
        $checkResult = $ga->verifyCode($secret, $code, 1);    // 2 = 2*30sec clock tolerance
        if ($checkResult) {
            $user_update = array(
                "secret" => base64_encode($secret),
                "updatetime" => time(),
            );
            $res = Db::name("user")->where("id",$user_id)->update($user_update);
            if($res){
                $this->success(__("绑定成功"));
            }else{
                $this->error(__("绑定失败"));
            }
        } else {
            $this->error(__("绑定失败"),$checkResult);
        }
    }
    
    /**
     * 验证私钥验证码
     */
    public function check_code($code)
    {
        $secret = $this->auth->secret;
        if(!$secret){
            $this->error(__("请先绑定谷歌验证"));
        }
        import('lib.GoogleAuthenticator', EXTEND_PATH , '.php');
        $ga = new \PHPGangsta_GoogleAuthenticator();
        $checkResult = $ga->verifyCode(base64_decode($secret), $code, 1);    // 2 = 2*30sec clock tolerance
        if ($checkResult) {
            return true;
        } else {
            return false;
        }
    }
    
    public function check_test()
    {
        $code = $this->request->post("code");
        controller("Google")->check_code($code);
    }

        /**
     * 验证并绑定私钥
     */
    public function jiechu_band()
    {
        $user_id = $this->auth->id;
        $secret = $this->auth->secret;
        $code = $this->request->post("code");
        if(empty($code)){
            $this->error(__("请输入验证码"));
        }
        
        if(!$secret){
            $this->error(__("暂未绑定"));
        }
        import('lib.GoogleAuthenticator', EXTEND_PATH , '.php');
        $ga = new \PHPGangsta_GoogleAuthenticator();
        $checkResult = $ga->verifyCode(base64_decode($secret), $code, 1);    // 2 = 2*30sec clock tolerance
        if ($checkResult) {
            $user_update = array(
                "secret" => "",
                "updatetime" => time(),
            );
            $res = Db::name("user")->where("id",$user_id)->update($user_update);
            if($res){
                $this->success(__("解绑成功"));
            }else{
                $this->error(__("解绑失败"));
            }
        } else {
            $this->error(__("验证失败"),$checkResult);
        }
    }
}