|
|
@@ -1,634 +1,287 @@
|
|
|
<?php
|
|
|
-
|
|
|
namespace App\Controllers;
|
|
|
|
|
|
-use App\Models\{
|
|
|
- User,
|
|
|
- Setting,
|
|
|
- InviteCode,
|
|
|
- EmailVerify
|
|
|
-};
|
|
|
-use App\Utils\{
|
|
|
- GA,
|
|
|
- Hash,
|
|
|
- Check,
|
|
|
- Tools,
|
|
|
- TelegramSessionManager
|
|
|
-};
|
|
|
-use App\Services\{
|
|
|
- Auth,
|
|
|
- Captcha,
|
|
|
- Mail,
|
|
|
- Config
|
|
|
-};
|
|
|
-use voku\helper\AntiXSS;
|
|
|
-use Exception;
|
|
|
+use App\Utils\GA;
|
|
|
+use App\Utils\Hash;
|
|
|
+use App\Utils\Tools;
|
|
|
use Ramsey\Uuid\Uuid;
|
|
|
-use Slim\Http\{
|
|
|
- Request,
|
|
|
- Response
|
|
|
-};
|
|
|
+use App\Services\Auth;
|
|
|
+use App\Services\Mail;
|
|
|
+use Slim\Http\Response;
|
|
|
+use voku\helper\AntiXSS;
|
|
|
+use App\Models\User;
|
|
|
+use App\Models\Setting;
|
|
|
+use App\Models\InviteCode;
|
|
|
+use App\Models\EmailVerify;
|
|
|
|
|
|
-/**
|
|
|
- * AuthController
|
|
|
- */
|
|
|
class AuthController extends BaseController
|
|
|
{
|
|
|
- /**
|
|
|
- * @param Request $request
|
|
|
- * @param Response $response
|
|
|
- * @param array $args
|
|
|
- */
|
|
|
public function login($request, $response, $args)
|
|
|
{
|
|
|
- $captcha = Captcha::generate();
|
|
|
-
|
|
|
- if ($_ENV['enable_telegram_login'] === true) {
|
|
|
- $login_text = TelegramSessionManager::add_login_session();
|
|
|
- $login = explode('|', $login_text);
|
|
|
- $login_token = $login[0];
|
|
|
- $login_number = $login[1];
|
|
|
- } else {
|
|
|
- $login_token = '';
|
|
|
- $login_number = '';
|
|
|
- }
|
|
|
-
|
|
|
- if (Setting::obtain('enable_login_captcha') == true) {
|
|
|
- $geetest_html = $captcha['geetest'];
|
|
|
- } else {
|
|
|
- $geetest_html = null;
|
|
|
- }
|
|
|
-
|
|
|
- return $this->view()
|
|
|
- ->assign('geetest_html', $geetest_html)
|
|
|
- ->assign('login_token', $login_token)
|
|
|
- ->assign('login_number', $login_number)
|
|
|
- ->assign('telegram_bot', $_ENV['telegram_bot'])
|
|
|
- ->assign('base_url', $_ENV['baseUrl'])
|
|
|
- ->assign('recaptcha_sitekey', $captcha['recaptcha'])
|
|
|
- ->display('auth/login.tpl');
|
|
|
+ return $this->view()->display('auth/login.tpl');
|
|
|
}
|
|
|
|
|
|
- /**
|
|
|
- * @param Request $request
|
|
|
- * @param Response $response
|
|
|
- * @param array $args
|
|
|
- */
|
|
|
- public function getCaptcha($request, $response, $args)
|
|
|
- {
|
|
|
- $captcha = Captcha::generate();
|
|
|
- return $response->withJson([
|
|
|
- 'recaptchaKey' => $captcha['recaptcha'],
|
|
|
- 'GtSdk' => $captcha['geetest'],
|
|
|
- 'respon' => 1,
|
|
|
- ]);
|
|
|
- }
|
|
|
-
|
|
|
- /**
|
|
|
- * @param Request $request
|
|
|
- * @param Response $response
|
|
|
- * @param array $args
|
|
|
- */
|
|
|
public function loginHandle($request, $response, $args)
|
|
|
{
|
|
|
- $email = trim($request->getParam('email'));
|
|
|
- $email = strtolower($email);
|
|
|
- $passwd = $request->getParam('passwd');
|
|
|
- $code = $request->getParam('code');
|
|
|
+ $code = $request->getParam('code');
|
|
|
+ $email = strtolower(trim($request->getParam('email')));
|
|
|
+ $passwd = $request->getParam('passwd');
|
|
|
$rememberMe = $request->getParam('remember_me');
|
|
|
-
|
|
|
- if (Setting::obtain('enable_login_captcha') == true) {
|
|
|
- $ret = Captcha::verify($request->getParams());
|
|
|
- if (!$ret) {
|
|
|
- return $response->withJson([
|
|
|
- 'ret' => 0,
|
|
|
- 'msg' => '系统无法接受您的验证结果，请刷新页面后重试。'
|
|
|
- ]);
|
|
|
- }
|
|
|
- }
|
|
|
-
|
|
|
$user = User::where('email', $email)->first();
|
|
|
- if ($user == null) {
|
|
|
- return $response->withJson([
|
|
|
- 'ret' => 0,
|
|
|
- 'msg' => '邮箱不存在'
|
|
|
- ]);
|
|
|
- }
|
|
|
-
|
|
|
- if (!Hash::checkPassword($user->pass, $passwd)) {
|
|
|
- // 记录登录失败
|
|
|
- $user->collectLoginIP($_SERVER['REMOTE_ADDR'], 1);
|
|
|
- return $response->withJson([
|
|
|
- 'ret' => 0,
|
|
|
- 'msg' => '邮箱或者密码错误'
|
|
|
- ]);
|
|
|
- }
|
|
|
|
|
|
- if ($user->ga_enable == 1) {
|
|
|
- $ga = new GA();
|
|
|
- $rcode = $ga->verifyCode($user->ga_token, $code);
|
|
|
- if (!$rcode) {
|
|
|
- return $response->withJson([
|
|
|
- 'ret' => 0,
|
|
|
- 'msg' => '两步验证码错误，如果您是丢失了生成器或者错误地设置了这个选项，您可以尝试重置密码，即可取消这个选项。'
|
|
|
- ]);
|
|
|
+ try {
|
|
|
+ if ($user == null) {
|
|
|
+ throw new \Exception('没有找到这个邮箱');
|
|
|
+ }
|
|
|
+ if (!Hash::checkPassword($user->pass, $passwd)) {
|
|
|
+ $user->collectLoginIP($_SERVER['REMOTE_ADDR'], 1);
|
|
|
+ throw new \Exception('登录密码不正确');
|
|
|
+ }
|
|
|
+ if ($user->ga_enable == 1) {
|
|
|
+ $ga = new GA();
|
|
|
+ $rcode = $ga->verifyCode($user->ga_token, $code);
|
|
|
+ if (!$rcode) {
|
|
|
+ throw new \Exception('两步验证码错误，如丢失密钥，请重置密码');
|
|
|
+ }
|
|
|
}
|
|
|
- }
|
|
|
-
|
|
|
- $time = 3600 * 24;
|
|
|
- if ($rememberMe) {
|
|
|
- $time = 3600 * 24 * ($_ENV['cookie_expiration_time'] ?: 7);
|
|
|
- }
|
|
|
-
|
|
|
- Auth::login($user->id, $time);
|
|
|
- // 记录登录成功
|
|
|
- $user->collectLoginIP($_SERVER['REMOTE_ADDR']);
|
|
|
-
|
|
|
- return $response->withJson([
|
|
|
- 'ret' => 1,
|
|
|
- 'msg' => '登录成功'
|
|
|
- ]);
|
|
|
- }
|
|
|
-
|
|
|
- /**
|
|
|
- * @param Request $request
|
|
|
- * @param Response $response
|
|
|
- * @param array $args
|
|
|
- */
|
|
|
- public function qrcode_loginHandle($request, $response, $args)
|
|
|
- {
|
|
|
- $token = $request->getParam('token');
|
|
|
- $number = $request->getParam('number');
|
|
|
|
|
|
- $ret = TelegramSessionManager::step2_verify_login_session($token, $number);
|
|
|
- if ($ret === 0) {
|
|
|
+ $time = 3600 * 24;
|
|
|
+ Auth::login($user->id, $time);
|
|
|
+ $user->collectLoginIP($_SERVER['REMOTE_ADDR']);
|
|
|
+ } catch (\Exception $e) {
|
|
|
return $response->withJson([
|
|
|
'ret' => 0,
|
|
|
- 'msg' => '此令牌无法被使用。'
|
|
|
+ 'msg' => $e->getMessage()
|
|
|
]);
|
|
|
}
|
|
|
|
|
|
- $user = User::find($ret);
|
|
|
-
|
|
|
- Auth::login($user->id, 3600 * 24);
|
|
|
- // 记录登录成功
|
|
|
- $user->collectLoginIP($_SERVER['REMOTE_ADDR']);
|
|
|
-
|
|
|
return $response->withJson([
|
|
|
'ret' => 1,
|
|
|
- 'msg' => '登录成功'
|
|
|
+ 'msg' => '登录成功，欢迎回来'
|
|
|
]);
|
|
|
}
|
|
|
|
|
|
- /**
|
|
|
- * @param Request $request
|
|
|
- * @param Response $response
|
|
|
- * @param array $args
|
|
|
- */
|
|
|
- public function register($request, $response, $next)
|
|
|
- {
|
|
|
- $ary = $request->getQueryParams();
|
|
|
- $code = '';
|
|
|
- if (isset($ary['code'])) {
|
|
|
- $antiXss = new AntiXSS();
|
|
|
- $code = $antiXss->xss_clean($ary['code']);
|
|
|
- }
|
|
|
-
|
|
|
- $captcha = Captcha::generate();
|
|
|
-
|
|
|
- if ($_ENV['enable_telegram_login'] === true) {
|
|
|
- $login_text = TelegramSessionManager::add_login_session();
|
|
|
- $login = explode('|', $login_text);
|
|
|
- $login_token = $login[0];
|
|
|
- $login_number = $login[1];
|
|
|
- } else {
|
|
|
- $login_token = '';
|
|
|
- $login_number = '';
|
|
|
- }
|
|
|
-
|
|
|
- if (Setting::obtain('enable_reg_captcha') == true) {
|
|
|
- $geetest_html = $captcha['geetest'];
|
|
|
- } else {
|
|
|
- $geetest_html = null;
|
|
|
- }
|
|
|
-
|
|
|
- return $this->view()
|
|
|
- ->assign('geetest_html', $geetest_html)
|
|
|
- ->assign('enable_email_verify', Setting::obtain('reg_email_verify'))
|
|
|
- ->assign('code', $code)
|
|
|
- ->assign('recaptcha_sitekey', $captcha['recaptcha'])
|
|
|
- ->assign('telegram_bot', $_ENV['telegram_bot'])
|
|
|
- ->assign('base_url', $_ENV['baseUrl'])
|
|
|
- ->assign('login_token', $login_token)
|
|
|
- ->assign('login_number', $login_number)
|
|
|
- ->display('auth/register.tpl');
|
|
|
- }
|
|
|
-
|
|
|
- /**
|
|
|
- * @param Request $request
|
|
|
- * @param Response $response
|
|
|
- * @param array $args
|
|
|
- */
|
|
|
public function sendVerify($request, $response, $next)
|
|
|
{
|
|
|
- if (Setting::obtain('reg_email_verify')) {
|
|
|
- $email = trim($request->getParam('email'));
|
|
|
- $email = strtolower($email);
|
|
|
+ try {
|
|
|
+ if (!Setting::obtain('reg_email_verify')) {
|
|
|
+ throw new \Exception('不需要验证邮箱');
|
|
|
+ }
|
|
|
+ if (Setting::obtain('mail_driver') == 'none') {
|
|
|
+ throw new \Exception('没有有效的发信配置');
|
|
|
+ }
|
|
|
+ $email = strtolower(trim($request->getParam('email')));
|
|
|
if ($email == '') {
|
|
|
- return $response->withJson([
|
|
|
- 'ret' => 0,
|
|
|
- 'msg' => '未填写邮箱'
|
|
|
- ]);
|
|
|
+ throw new \Exception('请填写邮箱');
|
|
|
}
|
|
|
- // check email format
|
|
|
- $check_res = Check::isEmailLegal($email);
|
|
|
- if ($check_res['ret'] == 0) {
|
|
|
- return $response->withJson($check_res);
|
|
|
+ if (!Tools::emailCheck($email)) {
|
|
|
+ throw new \Exception('邮箱格式不正确');
|
|
|
}
|
|
|
$user = User::where('email', $email)->first();
|
|
|
if ($user != null) {
|
|
|
- return $response->withJson([
|
|
|
- 'ret' => 0,
|
|
|
- 'msg' => '此邮箱已经注册'
|
|
|
- ]);
|
|
|
+ throw new \Exception('此邮箱已注册');
|
|
|
}
|
|
|
- $ipcount = EmailVerify::where('ip', '=', $_SERVER['REMOTE_ADDR'])->where('expire_in', '>', time())->count();
|
|
|
+ $ipcount = EmailVerify::where('ip', $_SERVER['REMOTE_ADDR'])
|
|
|
+ ->where('expire_in', '>', time())
|
|
|
+ ->count();
|
|
|
if ($ipcount >= Setting::obtain('email_verify_ip_limit')) {
|
|
|
- return $response->withJson([
|
|
|
- 'ret' => 0,
|
|
|
- 'msg' => '此IP请求次数过多'
|
|
|
- ]);
|
|
|
+ throw new \Exception('此IP请求次数过多');
|
|
|
}
|
|
|
- $mailcount = EmailVerify::where('email', '=', $email)->where('expire_in', '>', time())->count();
|
|
|
+ $mailcount = EmailVerify::where('email', $email)
|
|
|
+ ->where('expire_in', '>', time())
|
|
|
+ ->count();
|
|
|
if ($mailcount >= 3) {
|
|
|
- return $response->withJson([
|
|
|
- 'ret' => 0,
|
|
|
- 'msg' => '此邮箱请求次数过多'
|
|
|
- ]);
|
|
|
+ throw new \Exception('此邮箱请求次数过多');
|
|
|
}
|
|
|
- $code = Tools::genRandomNum(6);
|
|
|
- $ev = new EmailVerify();
|
|
|
+
|
|
|
+ $code = Tools::genRandomNum(6);
|
|
|
+ $ev = new EmailVerify();
|
|
|
$ev->expire_in = time() + Setting::obtain('email_verify_ttl');
|
|
|
- $ev->ip = $_SERVER['REMOTE_ADDR'];
|
|
|
- $ev->email = $email;
|
|
|
- $ev->code = $code;
|
|
|
+ $ev->ip = $_SERVER['REMOTE_ADDR'];
|
|
|
+ $ev->email = $email;
|
|
|
+ $ev->code = $code;
|
|
|
$ev->save();
|
|
|
- try {
|
|
|
- Mail::send(
|
|
|
- $email,
|
|
|
- $_ENV['appName'] . '- 验证邮件',
|
|
|
- 'auth/verify.tpl',
|
|
|
- [
|
|
|
- 'code' => $code,
|
|
|
- 'expire' => date('Y-m-d H:i:s', time() + Setting::obtain('email_verify_ttl'))
|
|
|
- ],
|
|
|
- []
|
|
|
- );
|
|
|
- } catch (Exception $e) {
|
|
|
- return $response->withJson([
|
|
|
- 'ret' => 0,
|
|
|
- 'msg' => '验证码发送失败'
|
|
|
- ]);
|
|
|
- }
|
|
|
+
|
|
|
+ Mail::send($email, $_ENV['appName'] . ' - 验证邮件', 'auth/verify.tpl',
|
|
|
+ [
|
|
|
+ 'code' => $code,
|
|
|
+ 'expire' => date('Y-m-d H:i:s', time() + Setting::obtain('email_verify_ttl'))
|
|
|
+ ], []
|
|
|
+ );
|
|
|
+ } catch (\Exception $e) {
|
|
|
return $response->withJson([
|
|
|
- 'ret' => 1,
|
|
|
- 'msg' => '验证码发送成功，请查收'
|
|
|
+ 'ret' => 0,
|
|
|
+ 'msg' => $e->getMessage()
|
|
|
]);
|
|
|
}
|
|
|
|
|
|
return $response->withJson([
|
|
|
- 'ret' => 0,
|
|
|
- 'msg' => '没有启用邮箱验证'
|
|
|
+ 'ret' => 1,
|
|
|
+ 'msg' => '请查收验证码'
|
|
|
]);
|
|
|
}
|
|
|
|
|
|
- /**
|
|
|
- * @param Request $request
|
|
|
- * @param Response $response
|
|
|
- * @param array $args
|
|
|
- */
|
|
|
- public function register_helper($name, $email, $passwd, $code, $imtype, $imvalue, $telegram_id)
|
|
|
+ public function register($request, $response, $next)
|
|
|
{
|
|
|
- if (Setting::obtain('reg_mode') == 'close') {
|
|
|
- $res['ret'] = 0;
|
|
|
- $res['msg'] = '暂时不对外开放注册';
|
|
|
- return $res;
|
|
|
- }
|
|
|
+ $anti_xss = new AntiXSS();
|
|
|
+ $code = $anti_xss->xss_clean(trim($request->getParam('code')));
|
|
|
|
|
|
- if ($code == '') {
|
|
|
- $res['ret'] = 0;
|
|
|
- $res['msg'] = '注册需要填写邀请码';
|
|
|
- return $res;
|
|
|
- }
|
|
|
+ return $this->view()
|
|
|
+ ->assign('code', $code)
|
|
|
+ ->assign('enable_email_verify', Setting::obtain('reg_email_verify'))
|
|
|
+ ->display('auth/register.tpl');
|
|
|
+ }
|
|
|
|
|
|
- $c = InviteCode::where('code', $code)->first();
|
|
|
- if ($c == null) {
|
|
|
- if (Setting::obtain('reg_mode') == 'invite') {
|
|
|
- $res['ret'] = 0;
|
|
|
- $res['msg'] = '这个邀请码不存在';
|
|
|
- return $res;
|
|
|
+ public function registerHandle($request, $response, $args)
|
|
|
+ {
|
|
|
+ try {
|
|
|
+ $tos = $request->getParam('tos');
|
|
|
+ $name = trim($request->getParam('name'));
|
|
|
+ $passwd = $request->getParam('passwd');
|
|
|
+ $repasswd = $request->getParam('repasswd');
|
|
|
+ $code = trim($request->getParam('code'));
|
|
|
+ $emailcode = trim($request->getParam('emailcode'));
|
|
|
+ $email = strtolower(trim($request->getParam('email')));
|
|
|
+ $reg_mode = Setting::obtain('reg_mode');
|
|
|
+
|
|
|
+ if ($name == '') {
|
|
|
+ throw new \Exception('请填写昵称');
|
|
|
}
|
|
|
- } elseif ($c->user_id != 0) {
|
|
|
- $gift_user = User::where('id', $c->user_id)->first();
|
|
|
- if ($gift_user == null) {
|
|
|
- $res['ret'] = 0;
|
|
|
- $res['msg'] = '邀请码已失效';
|
|
|
- return $res;
|
|
|
+ if ($email == '') {
|
|
|
+ throw new \Exception('请填写注册邮箱');
|
|
|
}
|
|
|
-
|
|
|
- if ($gift_user->invite_num == 0) {
|
|
|
- $res['ret'] = 0;
|
|
|
- $res['msg'] = '邀请码不可用';
|
|
|
- return $res;
|
|
|
+ if (!Tools::emailCheck($email)) {
|
|
|
+ throw new \Exception('邮箱格式不正确');
|
|
|
}
|
|
|
- }
|
|
|
-
|
|
|
- $configs = Setting::getClass('register');
|
|
|
- // do reg user
|
|
|
- $user = new User();
|
|
|
- $antiXss = new AntiXSS();
|
|
|
- $current_timestamp = time();
|
|
|
-
|
|
|
- $user->user_name = $antiXss->xss_clean($name);
|
|
|
- $user->email = $email;
|
|
|
- $user->pass = Hash::passwordHash($passwd);
|
|
|
- $user->passwd = Tools::genRandomChar(16);
|
|
|
- $user->uuid = Uuid::uuid3(Uuid::NAMESPACE_DNS, $email . '|' . $current_timestamp);
|
|
|
- $user->port = Tools::getAvPort();
|
|
|
- $user->t = 0;
|
|
|
- $user->u = 0;
|
|
|
- $user->d = 0;
|
|
|
- $user->method = $configs['sign_up_for_method'];
|
|
|
- $user->protocol = $configs['sign_up_for_protocol'];
|
|
|
- $user->protocol_param = $configs['sign_up_for_protocol_param'];
|
|
|
- $user->obfs = $configs['sign_up_for_obfs'];
|
|
|
- $user->obfs_param = $configs['sign_up_for_obfs_param'];
|
|
|
- $user->forbidden_ip = $_ENV['reg_forbidden_ip'];
|
|
|
- $user->forbidden_port = $_ENV['reg_forbidden_port'];
|
|
|
- $user->im_type = $imtype;
|
|
|
- $user->im_value = $antiXss->xss_clean($imvalue);
|
|
|
-
|
|
|
- $user->transfer_enable = Tools::toGB($configs['sign_up_for_free_traffic']);
|
|
|
- $user->invite_num = $configs['sign_up_for_invitation_codes'];
|
|
|
- $user->auto_reset_day = '0';
|
|
|
- $user->auto_reset_bandwidth = '0';
|
|
|
- $user->money = 0;
|
|
|
- $user->sendDailyMail = $configs['sign_up_for_daily_report'];
|
|
|
-
|
|
|
- //dumplin：填写邀请人，写入邀请奖励
|
|
|
- $user->ref_by = 0;
|
|
|
- if ($c != null && $c->user_id != 0) {
|
|
|
- $invitation = Setting::getClass('invite');
|
|
|
- // 设置新用户
|
|
|
- $user->ref_by = $c->user_id;
|
|
|
- // 给邀请人反流量
|
|
|
- if (($gift_user->invite_num - 1) >= 0) {
|
|
|
- --$gift_user->invite_num;
|
|
|
- // 避免设置为不限制邀请次数的值 -1 发生变动
|
|
|
+ if (strlen($passwd) < 8) {
|
|
|
+ throw new \Exception('密码长度需要大于 8');
|
|
|
}
|
|
|
- $gift_user->save();
|
|
|
- }
|
|
|
-
|
|
|
- if ($telegram_id) {
|
|
|
- $user->telegram_id = $telegram_id;
|
|
|
- }
|
|
|
-
|
|
|
- $ga = new GA();
|
|
|
- $secret = $ga->createSecret();
|
|
|
- $user->ga_token = $secret;
|
|
|
- $user->ga_enable = 0;
|
|
|
- $user->class_expire = date('Y-m-d H:i:s', time() + $configs['sign_up_for_class_time'] * 86400);
|
|
|
- $user->class = $configs['sign_up_for_class'];
|
|
|
- $user->node_connector = $configs['connection_device_limit'];
|
|
|
- $user->node_speedlimit = $configs['connection_rate_limit'];
|
|
|
- $user->expire_in = date('Y-m-d H:i:s', time() + $configs['sign_up_for_free_time'] * 86400);
|
|
|
- $user->reg_date = date('Y-m-d H:i:s');
|
|
|
- $user->reg_ip = $_SERVER['REMOTE_ADDR'];
|
|
|
- $user->theme = $_ENV['theme'];
|
|
|
- $groups = explode(',', $_ENV['random_group']);
|
|
|
- $user->node_group = $groups[array_rand($groups)];
|
|
|
-
|
|
|
- if ($user->save()) {
|
|
|
- Auth::login($user->id, 3600);
|
|
|
- $user->collectLoginIP($_SERVER['REMOTE_ADDR']);
|
|
|
-
|
|
|
- $res['ret'] = 1;
|
|
|
- $res['msg'] = '注册成功！正在进入登录界面';
|
|
|
- return $res;
|
|
|
- }
|
|
|
-
|
|
|
- $res['ret'] = 0;
|
|
|
- $res['msg'] = '未知错误';
|
|
|
- return $res;
|
|
|
- }
|
|
|
-
|
|
|
- /**
|
|
|
- * @param Request $request
|
|
|
- * @param Response $response
|
|
|
- * @param array $args
|
|
|
- */
|
|
|
- public function registerHandle($request, $response, $args)
|
|
|
- {
|
|
|
- if (Setting::obtain('reg_mode') == 'close') {
|
|
|
- return $response->withJson([
|
|
|
- 'ret' => 0,
|
|
|
- 'msg' => '未开放注册。'
|
|
|
- ]);
|
|
|
- }
|
|
|
-
|
|
|
- $name = $request->getParam('name');
|
|
|
- $email = $request->getParam('email');
|
|
|
- $email = trim($email);
|
|
|
- $email = strtolower($email);
|
|
|
- $passwd = $request->getParam('passwd');
|
|
|
- $repasswd = $request->getParam('repasswd');
|
|
|
- $code = trim($request->getParam('code'));
|
|
|
- $emailcode = $request->getParam('emailcode');
|
|
|
- $emailcode = trim($emailcode);
|
|
|
-
|
|
|
- if ($_ENV['enable_reg_im'] === true) {
|
|
|
- $imtype = $request->getParam('im_type');
|
|
|
- $imvalue = $request->getParam('im_value');
|
|
|
- if ($imtype == '' || $imvalue == '') {
|
|
|
- return $response->withJson([
|
|
|
- 'ret' => 0,
|
|
|
- 'msg' => '请填上你的联络方式'
|
|
|
- ]);
|
|
|
+ if ($passwd != $repasswd) {
|
|
|
+ throw new \Exception('两次输入的密码不相符');
|
|
|
}
|
|
|
- $user = User::where('im_value', $imvalue)->where('im_type', $imtype)->first();
|
|
|
- if ($user != null) {
|
|
|
- return $response->withJson([
|
|
|
- 'ret' => 0,
|
|
|
- 'msg' => '此联络方式已注册'
|
|
|
- ]);
|
|
|
+ if ($reg_mode == 'close') {
|
|
|
+ throw new \Exception('未开放注册');
|
|
|
}
|
|
|
- } else {
|
|
|
- $imtype = 1;
|
|
|
- $imvalue = '';
|
|
|
- }
|
|
|
-
|
|
|
- if (Setting::obtain('enable_reg_captcha') == true) {
|
|
|
- $ret = Captcha::verify($request->getParams());
|
|
|
- if (!$ret) {
|
|
|
- return $response->withJson([
|
|
|
- 'ret' => 0,
|
|
|
- 'msg' => '系统无法接受您的验证结果，请刷新页面后重试。'
|
|
|
- ]);
|
|
|
+ if ($reg_mode == 'invite' && $code == '') {
|
|
|
+ throw new \Exception('仅开放邀请注册，请填写邀请码');
|
|
|
}
|
|
|
- }
|
|
|
-
|
|
|
- // check email format
|
|
|
- $check_res = Check::isEmailLegal($email);
|
|
|
- if ($check_res['ret'] == 0) {
|
|
|
- return $response->withJson($check_res);
|
|
|
- }
|
|
|
- // check email
|
|
|
- $user = User::where('email', $email)->first();
|
|
|
- if ($user != null) {
|
|
|
- return $response->withJson([
|
|
|
- 'ret' => 0,
|
|
|
- 'msg' => '邮箱已经被注册了'
|
|
|
- ]);
|
|
|
- }
|
|
|
-
|
|
|
- if (Setting::obtain('reg_email_verify')) {
|
|
|
- $mailcount = EmailVerify::where('email', '=', $email)->where('code', '=', $emailcode)->where('expire_in', '>', time())->first();
|
|
|
- if ($mailcount == null) {
|
|
|
- return $response->withJson([
|
|
|
- 'ret' => 0,
|
|
|
- 'msg' => '您的邮箱验证码不正确'
|
|
|
- ]);
|
|
|
+ if ($reg_mode == 'invite') {
|
|
|
+ $reg_invite_code = InviteCode::where('code', $code)->first();
|
|
|
+ if ($reg_invite_code == null) {
|
|
|
+ throw new \Exception('没有找到这个邀请码');
|
|
|
+ }
|
|
|
+ $invite_user = User::where('id', $reg_invite_code->user_id)->first();
|
|
|
+ if ($invite_user == null) {
|
|
|
+ throw new \Exception('邀请人不存在');
|
|
|
+ }
|
|
|
+ if ($invite_user->invite_num == 0) {
|
|
|
+ throw new \Exception('邀请码可用次数不足');
|
|
|
+ }
|
|
|
+ }
|
|
|
+ if ($_ENV['enable_reg_im']) {
|
|
|
+ $imtype = $request->getParam('im_type');
|
|
|
+ $imvalue = $request->getParam('im_value');
|
|
|
+ if ($imtype == '0' || $imtype != '1' && $imtype != '2' && $imtype != '4' && $imtype != '5' || $imvalue == '') {
|
|
|
+ throw new \Exception('选择社交软件并填写社交账户');
|
|
|
+ }
|
|
|
+ $imtype_exist = User::where('im_value', $imvalue)
|
|
|
+ ->where('im_type', $imtype)
|
|
|
+ ->first();
|
|
|
+ if ($imtype_exist != null) {
|
|
|
+ throw new \Exception('此社交账户已被使用');
|
|
|
+ }
|
|
|
+ } else {
|
|
|
+ $imtype = 1;
|
|
|
+ $imvalue = '';
|
|
|
+ }
|
|
|
+ $user = User::where('email', $email)->first();
|
|
|
+ if ($user != null) {
|
|
|
+ throw new \Exception('此邮箱已注册');
|
|
|
+ }
|
|
|
+ if (Setting::obtain('reg_email_verify')) {
|
|
|
+ $mailcount = EmailVerify::where('email', $email)
|
|
|
+ ->where('code', $emailcode)
|
|
|
+ ->where('expire_in', '>', time())
|
|
|
+ ->first();
|
|
|
+ if ($mailcount == null) {
|
|
|
+ throw new \Exception('邮箱验证码不正确');
|
|
|
+ }
|
|
|
}
|
|
|
- }
|
|
|
-
|
|
|
- // check pwd length
|
|
|
- if (strlen($passwd) < 8) {
|
|
|
- return $response->withJson([
|
|
|
- 'ret' => 0,
|
|
|
- 'msg' => '密码请大于8位'
|
|
|
- ]);
|
|
|
- }
|
|
|
|
|
|
- // check pwd re
|
|
|
- if ($passwd != $repasswd) {
|
|
|
+ self::register_helper($name, $email, $passwd, $code, $imtype, $imvalue, 0);
|
|
|
+ } catch (\Exception $e) {
|
|
|
return $response->withJson([
|
|
|
'ret' => 0,
|
|
|
- 'msg' => '两次密码输入不符'
|
|
|
+ 'msg' => $e->getMessage()
|
|
|
]);
|
|
|
}
|
|
|
|
|
|
- if (Setting::obtain('reg_email_verify')) {
|
|
|
- EmailVerify::where('email', $email)->delete();
|
|
|
+ if ($reg_mode == 'invite') {
|
|
|
+ // 仅在仅允许邀请注册的情况下扣减邀请码次数
|
|
|
+ $invite_user->invite_num -= 1;
|
|
|
+ $invite_user->save();
|
|
|
}
|
|
|
|
|
|
- return $response->withJson(
|
|
|
- $this->register_helper($name, $email, $passwd, $code, $imtype, $imvalue, 0)
|
|
|
- );
|
|
|
- }
|
|
|
-
|
|
|
- /**
|
|
|
- * @param Request $request
|
|
|
- * @param Response $response
|
|
|
- * @param array $args
|
|
|
- */
|
|
|
- public function logout($request, $response, $next)
|
|
|
- {
|
|
|
- Auth::logout();
|
|
|
- return $response->withStatus(302)->withHeader('Location', '/auth/login');
|
|
|
- }
|
|
|
-
|
|
|
- /**
|
|
|
- * @param Request $request
|
|
|
- * @param Response $response
|
|
|
- * @param array $args
|
|
|
- */
|
|
|
- public function qrcode_check($request, $response, $args)
|
|
|
- {
|
|
|
- $token = $request->getParam('token');
|
|
|
- $number = $request->getParam('number');
|
|
|
- $user = Auth::getUser();
|
|
|
- if ($user->isLogin) {
|
|
|
- return $response->withJson([
|
|
|
- 'ret' => 0
|
|
|
- ]);
|
|
|
- }
|
|
|
- if ($_ENV['enable_telegram_login'] === true) {
|
|
|
- $ret = TelegramSessionManager::check_login_session($token, $number);
|
|
|
- $res['ret'] = $ret;
|
|
|
- return $response->withJson($res);
|
|
|
- }
|
|
|
return $response->withJson([
|
|
|
- 'ret' => 0
|
|
|
+ 'ret' => 1,
|
|
|
+ 'msg' => '注册成功'
|
|
|
]);
|
|
|
}
|
|
|
|
|
|
- /**
|
|
|
- * @param Request $request
|
|
|
- * @param Response $response
|
|
|
- * @param array $args
|
|
|
- */
|
|
|
- public function telegram_oauth($request, $response, $args)
|
|
|
+ public function register_helper($name, $email, $passwd, $code, $imtype, $imvalue, $telegram_id)
|
|
|
{
|
|
|
- if ($_ENV['enable_telegram_login'] === true) {
|
|
|
- $auth_data = $request->getQueryParams();
|
|
|
- if ($this->telegram_oauth_check($auth_data) === true) { // Looks good, proceed.
|
|
|
- $telegram_id = $auth_data['id'];
|
|
|
- $user = User::query()->where('telegram_id', $telegram_id)->firstOrFail(); // Welcome Back :)
|
|
|
- if ($user == null) {
|
|
|
- return $this->view()
|
|
|
- ->assign('title', '您需要先进行邮箱注册后绑定Telegram才能使用授权登录')
|
|
|
- ->assign('message', '很抱歉带来的不便，请重新试试')
|
|
|
- ->assign('redirect', '/auth/login')
|
|
|
- ->display('telegram_error.tpl');
|
|
|
- }
|
|
|
- Auth::login($user->id, 3600);
|
|
|
-
|
|
|
- // 记录登录成功
|
|
|
- $user->collectLoginIP($_SERVER['REMOTE_ADDR']);
|
|
|
-
|
|
|
- // 登陆成功！
|
|
|
- return $this->view()
|
|
|
- ->assign('title', '登录成功')
|
|
|
- ->assign('message', '正在前往仪表盘')
|
|
|
- ->assign('redirect', '/user')
|
|
|
- ->display('telegram_success.tpl');
|
|
|
- }
|
|
|
- // 验证失败
|
|
|
- return $this->view()
|
|
|
- ->assign('title', '登陆超时或非法构造信息')
|
|
|
- ->assign('message', '很抱歉带来的不便，请重新试试')
|
|
|
- ->assign('redirect', '/auth/login')
|
|
|
- ->display('telegram_error.tpl');
|
|
|
+ $ga = new GA();
|
|
|
+ $user = new User();
|
|
|
+ $antiXss = new AntiXSS();
|
|
|
+
|
|
|
+ $user->money = $_ENV['reg_money'];
|
|
|
+ $user->email = $email;
|
|
|
+ $user->im_type = $imtype;
|
|
|
+ $user->im_value = $antiXss->xss_clean($imvalue);
|
|
|
+ $user->user_name = $antiXss->xss_clean($name);
|
|
|
+ $user->port = Tools::getAvPort();
|
|
|
+ $user->pass = Hash::passwordHash($passwd); // 登录密码
|
|
|
+ $user->passwd = Tools::genRandomChar(16); // ss 连接密码
|
|
|
+ $user->uuid = Uuid::uuid3(Uuid::NAMESPACE_DNS, $email . '|' . time());
|
|
|
+ $user->t = 0;
|
|
|
+ $user->u = 0;
|
|
|
+ $user->d = 0;
|
|
|
+ $user->transfer_enable = 0;
|
|
|
+ $user->invite_num = $_ENV['reg_invite_num'];
|
|
|
+ $user->auto_reset_day = 0;
|
|
|
+ $user->auto_reset_bandwidth = 0;
|
|
|
+ $user->sendDailyMail = 0; // 默认不发送
|
|
|
+ $user->obfs = 'plain';
|
|
|
+ $user->method = 'rc4-md5';
|
|
|
+ $user->protocol = 'origin';
|
|
|
+ $user->obfs_param = 'world.taobao.com';
|
|
|
+ $user->protocol_param = '';
|
|
|
+ $user->forbidden_ip = $_ENV['reg_forbidden_ip'];
|
|
|
+ $user->forbidden_port = $_ENV['reg_forbidden_port'];
|
|
|
+ if ($telegram_id) {
|
|
|
+ $user->telegram_id = $telegram_id;
|
|
|
}
|
|
|
- return $response->withRedirect('/404');
|
|
|
+ $user->ga_enable = 0;
|
|
|
+ $user->ga_token = $ga->createSecret();
|
|
|
+ $user->node_connector = 0;
|
|
|
+ $user->node_speedlimit = 0;
|
|
|
+ $user->class = 0;
|
|
|
+ $user->expire_in = date('Y-m-d H:i:s', time());
|
|
|
+ $user->class_expire = date('Y-m-d H:i:s', time());
|
|
|
+ $user->reg_date = date('Y-m-d H:i:s');
|
|
|
+ $user->reg_ip = $_SERVER['REMOTE_ADDR'];
|
|
|
+ $user->theme = $_ENV['theme'];
|
|
|
+ $groups = explode(',', $_ENV['random_group']);
|
|
|
+ $user->node_group = $groups[array_rand($groups)];
|
|
|
+ $user->save();
|
|
|
+
|
|
|
+ Auth::login($user->id, 3600);
|
|
|
+ $user->collectLoginIP($_SERVER['REMOTE_ADDR']);
|
|
|
}
|
|
|
|
|
|
- /**
|
|
|
- * @param Request $request
|
|
|
- * @param Response $response
|
|
|
- * @param array $args
|
|
|
- */
|
|
|
- private function telegram_oauth_check($auth_data)
|
|
|
+ public function logout($request, $response, $next)
|
|
|
{
|
|
|
- $check_hash = $auth_data['hash'];
|
|
|
- $bot_token = $_ENV['telegram_token'];
|
|
|
- unset($auth_data['hash']);
|
|
|
- $data_check_arr = [];
|
|
|
- foreach ($auth_data as $key => $value) {
|
|
|
- $data_check_arr[] = $key . '=' . $value;
|
|
|
- }
|
|
|
- sort($data_check_arr);
|
|
|
- $data_check_string = implode("\n", $data_check_arr);
|
|
|
- $secret_key = hash('sha256', $bot_token, true);
|
|
|
- $hash = hash_hmac('sha256', $data_check_string, $secret_key);
|
|
|
- if (strcmp($hash, $check_hash) !== 0) {
|
|
|
- return false; // Bad Data :(
|
|
|
- }
|
|
|
-
|
|
|
- if ((time() - $auth_data['auth_date']) > 300) { // Expire @ 5mins
|
|
|
- return false;
|
|
|
- }
|
|
|
-
|
|
|
- return true; // Good to Go
|
|
|
+ Auth::logout();
|
|
|
+ return $response->withStatus(302)->withHeader('Location', '/auth/login');
|
|
|
}
|
|
|
}
|
iamsaltedfish