csapi/application/expand/controller/BaseAuth.php

<?php
namespace app\expand\controller;

use app\common\service\HelperService;
use PDO;
use think\Config;
use think\Controller;
use think\Db;
use think\Validate;

/**
 * 基础授权类
 * Class BaseAuth
 * @package app\expand\controller
 */
class BaseAuth extends Controller
{
    public $_params = null;
    public $_apiCode = null;
    public $_sysParams = null;
    public $_redisClient = null;
    public $_oldParams = null;
    public $_mssqlProductConnect = null;

    //白名单方法列表
    public $_whiteList = [
        'notifyJdPay',//jd
        'notifyXcxPay',//xcx
        'paySuccess',//wx
        'getOpenId2Pay',//wx
        'platformNotifyUrl',//wx
    ];
    
    public $_inWhiteList = false;//是否在白名单里面
    public $_debug = false;//是否是debug模式

    /**
     * 有2种情况
     * 1、有sign的情况，这时候他没有signKey
     * 2、有signKey的情况
     * 都需要兼容
     * @return boolean
     */
    public function __construct()
    {
        parent::__construct();
        
        $this->getInput();//获取系统/原始业务参数/解码后的业务参数
        $this->_openDebug();//debug模式是否打开
        
        //白名单方法的过滤
        if(true == $this->_filterActionWhiteList()){
            return true;
        }
        $this->_valiBaseParams();//要过基本参数校验
        $this->_valiRequireTs();//验证时间是否正确

        $this->_apiCode = $this->_sysParams['api_code'];
    }
    
    //校验基础参数
    private function _valiBaseParams(){
        
        $rule = [
            'api_code|api调用方'=>'require|max:100',//新字段名
            'request_ts|请求时间'=>'require|number',
            'signKey|签名'=>'require|max:100' //1.0版本传参，2.0接口传signKey
        ];

        $validate = new Validate($rule);
        if(!$validate->check($this->_sysParams)){
            $data = $this->_debug?$this->_sysParams:[];
            HelperService::returnJson(['code'=>400,'msg'=>$validate->getError(),'data'=>$data]);
        }
    }
    
    //白名单方法的过滤
    private function _filterActionWhiteList(){
        
        $action = $this->request->action();
        if(in_array($action, $this->_whiteList)){
            $this->_inWhiteList =  true;
            return true;
        }
        
        return false;
    }
    
    //验证请求时间戳
    private function _valiRequireTs(){

        $requireTs = $this->_sysParams['request_ts']?:0;

        if(time() - $requireTs > 1800){
            HelperService::returnJson(['code'=>400,'msg'=>'签名错误(1)','data'=>[]]);
        }
        
    }
    
    //是否开启debug模式
    private function _openDebug(){
        
        if(isset($this->_sysParams['debug']) 
                && $this->_sysParams['debug']=='xiepeng123@'){
            
            $this->_debug = true;
        }
    }

    /**
     * 获取当前url中是否包含某个字符串
     * 
     * @param type $string
     * @return boolean
     */
    protected function getUrlContent($string){
        $queryString = $_SERVER['HTTP_HOST'].$_SERVER['REQUEST_URI'];
        if(strpos($queryString,$string)!==false){
            return true;
        }
    }


    //获取input参数
    protected function getInput(){
        
        $this->_sysParams = $this->request->param();//系统参数
        $this->_oldParams = file_get_contents("php://input");//原始业务参数
        
        try{
            $this->_params =  json_decode($this->_oldParams,true);//解码的业务参数【xml/表单解析不出来】
        }catch(\Exception $ex){
            $this->_params = $this->_oldParams;
        }
        
        $this->_setGlobalStaticParams();
    }
    
    //设置全局的静态变量，为了后续日志
    private function _setGlobalStaticParams(){
        
        HelperService::$_startExecTime = microtime(true);//请求时间
        HelperService::$_serviceParams = $this->_params;//业务参数
        HelperService::$_sysParams = $this->_sysParams;//系统参数
    }
    
    //验证sha1加密
    private function _getSignKey($apiCode,$requestTs,$signKeySalt){
        
        $md5Sign = md5(base64_encode($apiCode.$requestTs));
        $sha1Sign = strtoupper(sha1($md5Sign.$signKeySalt));
        
        if($sha1Sign == strtoupper($this->_sysParams['signKey'])){
            return true;
        }
        
        $data = [];
        if($this->_debug){
           $data = [
                'signKey'=>$sha1Sign,
                'salt'=>$signKeySalt
            ];
        }
            
        HelperService::returnJson(['code'=>400,'msg'=>"签名错误(3)",'data'=>$data]);
    }
    
    /**
     * 获取当前公司的配置信息
     * @param type $apiCode
     * @return array
     */
    private function _getCompanyAuth($apiCode){
        
        $filePath = "./COMPANY_LIST/$apiCode/auth.php";
        if(!file_exists($filePath)){
            HelperService::returnJson(['code'=>400,'msg'=>"this apiCode error($apiCode)",'data'=>[]]);
        }

        return require_once("{$filePath}");
    }

    /**
     * 获取各平台密钥
     * @param $apiCode
     * @param $isVer 是否验证参数
     * @return mixed
     */
    protected function getKey($apiCode='CHENSEN',$isVer=true){

        $companyAuth = $this->_getCompanyAuth($apiCode);

        if(empty($companyAuth)){
            HelperService::returnJson(['code'=>400,'msg'=>"this apiAuth is empty",'data'=>[]]);
        }
        
        if(!isset($companyAuth['signKey'])){
            HelperService::returnJson(['code'=>400,'msg'=>"签名错误(2)",'data'=>[]]);
        }

        //需要验证的情况下
        if($isVer){
            $this->_getSignKey($apiCode, $this->_sysParams['request_ts'], $companyAuth['signKey']);
        }
        
        return $companyAuth;
    }
    
    /**
     * 连接远程的redis
     */
    protected function connectionRedis($select=0){
        $this->_redisClient = new \Redis();
        $this->_redisClient->connect('47.97.187.118', 6379);
        $this->_redisClient->auth('gudong-hz');
        $this->_redisClient->select($select);
    }
    
    /**
     * 创建mysql链接
     * @param type $tableName
     * @return type
     */
    protected function connectionMysql($tableName,$dbConfig='monitor'){
        $table = (string)$tableName;
        return Db::connect($dbConfig)->table($table);
    }


    /**
     * 创建product database mssql pdo连接
     * @return PDO
     */
    protected function singleProductDbConnect(){
        
        //当连接已经实例化，就不再实例化了
        if(!empty($this->_mssqlProductConnect)){
            return $this->_mssqlProductConnect;
        }
        
        $productDbConfig = Config::get('productDb');
        // Open connection
        $this->_mssqlProductConnect = Db::connect($productDbConfig);
        // Check for successful connection
        if ( $this->_mssqlProductConnect ) {
            return $this->_mssqlProductConnect;
        } else {
            die("PDO MSSQL 链接失败");
        }
    }
    
    /**
     * 专门针对于微信请求
     */
    protected  function getFileContext(){
        $currentUrl = $_SERVER['REQUEST_URI'];
        $fileName = '';
        //说明是txt文件
        if(strpos($currentUrl, '.txt')>0){
            $arr = parse_url($currentUrl);
            $arr2 = pathinfo($arr['path']);
            $fileName = isset($arr2['basename'])?$arr2['basename']:"";
            $fileName?die(file_get_contents($fileName)):"";
        }
        
        return true;
    }
}