437 lines
16 KiB
PHP
437 lines
16 KiB
PHP
<?php
|
|
|
|
namespace App\Http\Controllers;
|
|
|
|
use App\Http\Requests\SetEmailRequest;
|
|
use App\Http\Requests\SetPasswordRequest;
|
|
use App\Http\Requests\SetStuidRequest;
|
|
use App\Http\Requests\SetUsernameRequest;
|
|
use Illuminate\Support\Facades\View;
|
|
use Illuminate\Support\Facades\Redirect;
|
|
use Illuminate\Support\Facades\Hash;
|
|
use Illuminate\Http\Request;
|
|
use App\Http\Requests\LoginRequest;
|
|
use App\Http\Requests\RegisterRequest;
|
|
use App\Http\Requests\ResetPassRequest;
|
|
use App\User;
|
|
use App\CheckEmail;
|
|
use App\PasswordReset;
|
|
use Mail;
|
|
use App\AuthLog;
|
|
|
|
class AuthController extends Controller
|
|
{
|
|
public function showLogin()
|
|
{
|
|
return View::make('auth.login');
|
|
}
|
|
|
|
public function login(LoginRequest $request)
|
|
{
|
|
$input = $request->all();
|
|
|
|
if (filter_var($input['username'], FILTER_VALIDATE_EMAIL)) {
|
|
$user = User::where('email', $input['username'])->first();
|
|
if ($user != NULL && !$user->havecheckedemail) {
|
|
// log start
|
|
$log = new AuthLog();
|
|
$log->user_id = $user->id;
|
|
$log->ip = $request->ip();
|
|
$log->event = "login_uncheckedmail";
|
|
$log->save();
|
|
// log end
|
|
return Redirect::back()->withInput()->withErrors('未验证您的邮箱，请查收您的电子邮箱或<a href="/user/' . $user->id . '/sendCheckLetter">重新发送一封</a>');
|
|
}
|
|
} else {
|
|
$user = User::where('username', $input['username'])->first();
|
|
}
|
|
|
|
if ($user != NULL && Hash::check($input['password'], $user->password)) {
|
|
if (Hash::needsRehash($user->password)) {
|
|
$user->password = Hash::make($request->password);
|
|
$user->save();
|
|
}
|
|
|
|
if ($user->baned) {
|
|
// log start
|
|
$log = new AuthLog();
|
|
$log->user_id = $user->id;
|
|
$log->ip = $request->ip();
|
|
$log->event = "login_banned";
|
|
$log->save();
|
|
// log end
|
|
//
|
|
return Redirect::back()->withInput()->withErrors('You\'re banned!');
|
|
}
|
|
|
|
//Successfully logged in
|
|
|
|
// log start
|
|
$log = new AuthLog();
|
|
$log->user_id = $user->id;
|
|
$log->ip = $request->ip();
|
|
$log->event = "login_success";
|
|
$log->save();
|
|
// log end
|
|
|
|
$request->session()->put('user_id', $user->id);
|
|
$request->session()->put('username', $user->username);
|
|
$request->session()->put('nickname', $user->nickname);
|
|
if ($user->privilege)
|
|
$request->session()->put('is_admin', $user->privilege);
|
|
|
|
if ($user->registerCompletion() != 0)
|
|
return Redirect::to('/register/' . $user->registerCompletion());
|
|
else
|
|
return Redirect::to('/');
|
|
} else {
|
|
// log start
|
|
$log = new AuthLog();
|
|
$log->username = $input['username'];
|
|
$log->ip = $request->ip();
|
|
$log->event = "login_authfail";
|
|
$log->save();
|
|
// log end
|
|
return Redirect::back()->withInput()->withErrors('用户名或者密码错误！<a href="/iforgotit">忘记密码？</a>');
|
|
}
|
|
}
|
|
|
|
public function showRegister()
|
|
{
|
|
if (!env('ALLOW_REG', false)){
|
|
return View::make('auth.ssoGuide');
|
|
}else{
|
|
return View::make('auth.register');
|
|
}
|
|
}
|
|
|
|
public function register(RegisterRequest $request)
|
|
{
|
|
if (!env('ALLOW_REG', false)) {
|
|
abort(404);
|
|
}
|
|
$input = $request->all();
|
|
$user = new User;
|
|
$user->password = Hash::make($input['password']);
|
|
$user->email = $input['email'];
|
|
$user->havecheckedemail = false;
|
|
$user->save();
|
|
|
|
// log start
|
|
$log = new AuthLog();
|
|
$log->user_id = $user->id;
|
|
$log->ip = $request->ip();
|
|
$log->event = "reg_success";
|
|
$log->save();
|
|
// log end
|
|
return $this->sendCheckLetter($request, $user->id);
|
|
}
|
|
|
|
public function logOut(Request $request)
|
|
{
|
|
// log start
|
|
$log = new AuthLog();
|
|
$log->user_id = $request->session()->get('user_id');
|
|
$log->ip = $request->ip();
|
|
$log->event = "logout";
|
|
$log->save();
|
|
// log end
|
|
|
|
$request->session()->forget('user_id');
|
|
$request->session()->forget('username');
|
|
$request->session()->forget('nickname');
|
|
$request->session()->forget('is_admin');
|
|
|
|
return Redirect::to('/');
|
|
}
|
|
|
|
public function sendCheckLetter(Request $request, $user_id)
|
|
{
|
|
if(self::doSendCheckLetter($request, $user_id))
|
|
return Redirect::to('/login')->withErrors('该用户已经验证过邮箱。');
|
|
return Redirect::to('/login')->withErrors('已向您的邮箱发送一封验证邮件，请查收。验证完成后即可登录先锋市场。');
|
|
}
|
|
|
|
static private function doSendCheckLetter(Request $request, $user_id)
|
|
{
|
|
$data = [];
|
|
$user = User::where('id', $user_id)->first();
|
|
if ($user == NULL)
|
|
abort(404);
|
|
if ($user->havecheckedemail)
|
|
return true;
|
|
$email = $user->email;
|
|
|
|
$check_email = CheckEmail::where('user_id', $user_id)->first();
|
|
|
|
if ($check_email != NULL) {
|
|
$token = $check_email->token;
|
|
} else {
|
|
$new_check_email = new CheckEmail;
|
|
$new_check_email->user_id = $user_id;
|
|
$token = md5($email . time());
|
|
$new_check_email->token = $token;
|
|
$new_check_email->save();
|
|
}
|
|
$time = time();
|
|
$data['token'] = base64_encode($token . "#" . $time . "#" . $email . "#" . substr(sha1($time . $email . env('APP_KEY')), 0, 6));
|
|
$data['host'] = $request->server("HTTP_HOST");
|
|
if (env('APP_ENV') != "testing")
|
|
Mail::send('auth.checkLetter', $data, function ($m) use ($user, $email) {
|
|
$m->from(env('MAIL_USERNAME'), "先锋市场");
|
|
$m->to($email, $user->username)->subject('验证你的邮箱');
|
|
});
|
|
|
|
// log start
|
|
$log = new AuthLog();
|
|
$log->user_id = $user_id;
|
|
$log->ip = $request->ip();
|
|
$log->event = "sendcheckletter";
|
|
$log->save();
|
|
// log end
|
|
}
|
|
|
|
static private function doSendUnbindLetter(Request $request, $user_id)
|
|
{
|
|
$data = [];
|
|
$user = User::where('id', $user_id)->first();
|
|
if ($user == NULL)
|
|
abort(404);
|
|
if (!$user->havecheckedemail) {
|
|
$user->email = '';
|
|
$user->save();
|
|
return true;
|
|
}
|
|
$email = $user->email;
|
|
|
|
$check_email = CheckEmail::where('user_id', $user_id)->first();
|
|
|
|
if ($check_email != NULL) {
|
|
$token = $check_email->token;
|
|
} else {
|
|
$new_check_email = new CheckEmail;
|
|
$new_check_email->user_id = $user_id;
|
|
$token = md5($email . time());
|
|
$new_check_email->token = $token;
|
|
$new_check_email->save();
|
|
}
|
|
$time = time();
|
|
$data['token'] = base64_encode($token . "#" . $time . "#" . $email . "#" . substr(sha1($time . $email . env('APP_KEY')), 0, 6));
|
|
$data['host'] = $request->server("HTTP_HOST");
|
|
if (env('APP_ENV') != "testing")
|
|
Mail::send('auth.unbindLetter', $data, function ($m) use ($user, $email) {
|
|
$m->from(env('MAIL_USERNAME'), "先锋市场");
|
|
$m->to($email, $user->username)->subject('邮箱解绑请求');
|
|
});
|
|
|
|
// log start
|
|
$log = new AuthLog();
|
|
$log->user_id = $user_id;
|
|
$log->ip = $request->ip();
|
|
$log->event = "sendunbindletter";
|
|
$log->save();
|
|
// log end
|
|
}
|
|
|
|
public function setUsername(SetUsernameRequest $request)
|
|
{
|
|
$input = $request->all();
|
|
$user_id = $request->session()->get('user_id');
|
|
$user = User::find($user_id);
|
|
if ($user->username == '') {
|
|
$user->username = $input['username'];
|
|
$user->save();
|
|
return Redirect::to('/user?tab=account')->withInput()->withErrors('设置成功！');
|
|
}
|
|
else
|
|
return Redirect::to('/user?tab=account')->withInput()->withErrors('用户名不能更改');
|
|
}
|
|
|
|
public function setStuid(SetStuidRequest $request)
|
|
{
|
|
$input = $request->all();
|
|
$user_id = $request->session()->get('user_id');
|
|
$user = User::find($user_id);
|
|
if ($user->stuid == '') {
|
|
$user->stuid = $input['stuid'];
|
|
$user->save();
|
|
return Redirect::to('/user?tab=account')->withInput()->withErrors('设置成功！');
|
|
}
|
|
else
|
|
return Redirect::to('/user?tab=account')->withInput()->withErrors('学号一旦设置不能更改，请联系管理员');
|
|
}
|
|
|
|
public function setEmail(SetEmailRequest $request)
|
|
{
|
|
$input = $request->all();
|
|
$user_id = $request->session()->get('user_id');
|
|
$user = User::find($user_id);
|
|
if ($user->email == '') {
|
|
$user->email = $input['email'];
|
|
$user->havecheckedemail = false;
|
|
$user->save();
|
|
self::doSendCheckLetter($request, $user_id);
|
|
return Redirect::to('/user?tab=account')->withErrors('已向您的邮箱发送一封验证邮件，请查收。');
|
|
}
|
|
else {
|
|
if(self::doSendUnbindLetter($request, $user_id))
|
|
return Redirect::to('/user?tab=account')->withErrors('解绑成功。');
|
|
return Redirect::to('/user?tab=account')->withInput()->withErrors('已向您的邮箱发送一封验证邮件，请查收。验证完成后即可解绑此邮箱。');
|
|
}
|
|
}
|
|
|
|
public function setPassword(SetPasswordRequest $request)
|
|
{
|
|
$input = $request->all();
|
|
$user_id = $request->session()->get('user_id');
|
|
$user = User::find($user_id);
|
|
if ($user->password != '' && !Hash::check($input['password'], $user->password))
|
|
return Redirect::to('/user?tab=account')->withErrors('旧密码错误');
|
|
$user->password = Hash::make($input['newPassword']);
|
|
$user->update();
|
|
return Redirect::to('/user?tab=account')->withErrors('密码已变更。');
|
|
}
|
|
|
|
|
|
public function checkEmail(Request $request, $token)
|
|
{
|
|
$token = explode('#', base64_decode($token));
|
|
$check_email = CheckEmail::where('token', $token[0])->first();
|
|
if ($check_email == NULL || substr(sha1($token[1] . $token[2] . env('APP_KEY')), 0, 6) != $token[3])
|
|
return Redirect::to('/login')->withErrors('无效的链接');
|
|
$user = User::find($check_email->user_id);
|
|
if($user->email != $token[2])
|
|
return Redirect::to('/login')->withErrors('此链接已失效。');
|
|
$user->havecheckedemail = true;
|
|
$user->update();
|
|
$check_email->delete();
|
|
|
|
// log start
|
|
$log = new AuthLog();
|
|
$log->user_id = $user->id;
|
|
$log->ip = $request->ip();
|
|
$log->event = "checkemail";
|
|
$log->save();
|
|
// log end
|
|
return Redirect::to('/login')->withErrors('已验证您的邮箱！现在你可以用这个邮箱登录啦！');
|
|
}
|
|
|
|
public function unbindEmail(Request $request, $token)
|
|
{
|
|
$token = explode('#', base64_decode($token));
|
|
$check_email = CheckEmail::where('token', $token[0])->first();
|
|
if ($check_email == NULL || substr(sha1($token[1] . $token[2] . env('APP_KEY')), 0, 6) != $token[3])
|
|
return Redirect::to('/login')->withErrors('无效的链接');
|
|
$user = User::find($check_email->user_id);
|
|
if($user->email != $token[2])
|
|
return Redirect::to('/login')->withErrors('此链接已失效。');
|
|
$user->email = "";
|
|
$user->update();
|
|
$check_email->delete();
|
|
|
|
// log start
|
|
$log = new AuthLog();
|
|
$log->user_id = $user->id;
|
|
$log->ip = $request->ip();
|
|
$log->event = "unbindemail";
|
|
$log->save();
|
|
// log end
|
|
return Redirect::to('/user?tab=account')->withErrors('已解绑您的邮箱！');
|
|
}
|
|
|
|
public function showPasswordForget()
|
|
{
|
|
$data['method'] = 'GET';
|
|
return View::make('auth.passwordForget')->with($data);
|
|
}
|
|
|
|
public function sendPasswordResetMail(Request $request)
|
|
{
|
|
$data['method'] = 'POST';
|
|
$data['sentence'] = '';
|
|
$input = $request->all();
|
|
$user = User::where('email', $input['email'])->first();
|
|
if ($user == NULL) {
|
|
$data['sentence'] = '已向你的邮箱发送一份包含重置密码的链接的邮件。';
|
|
} else {
|
|
$data['sentence'] = '已向你的邮箱发送一份包含重置密码的链接的邮件。';
|
|
$password_reset = PasswordReset::where('user_id', $user->id)->first();
|
|
$email = $user->email;
|
|
if ($password_reset != NULL) {
|
|
$token = $password_reset->token;
|
|
} else {
|
|
$new_password_reset = new PasswordReset;
|
|
$new_password_reset->user_id = $user->id;
|
|
$token = md5($email . time());
|
|
$new_password_reset->token = $token;
|
|
$new_password_reset->save();
|
|
}
|
|
$time = time();
|
|
$data['token'] = base64_encode($token . "#" . $time . "#" . substr(sha1($time . env('APP_KEY')), 0, 6));
|
|
$data['host'] = $request->server("HTTP_HOST");
|
|
if (env('APP_ENV') != "testing")
|
|
Mail::send('auth.resetLetter', $data, function ($m) use ($user, $email) {
|
|
$m->from(env('MAIL_USERNAME'), '先锋市场');
|
|
$m->to($email, $user->username)->subject('重置密码');
|
|
});
|
|
// log start
|
|
$log = new AuthLog();
|
|
$log->user_id = $user->id;
|
|
$log->ip = $request->ip();
|
|
$log->event = "sendpwdresetletter";
|
|
$log->save();
|
|
// log end
|
|
}
|
|
return View::make('auth.passwordForget')->with($data);
|
|
}
|
|
|
|
public function showPasswordReset(Request $request, $token)
|
|
{
|
|
$data['method'] = 'GET';
|
|
$data['token'] = $token;
|
|
return view::make('auth.resetPassword')->with($data);
|
|
}
|
|
|
|
public function resetPassword(ResetPassRequest $request, $token)
|
|
{
|
|
$token = explode('#', base64_decode($token));
|
|
$data['method'] = 'POST';
|
|
$data['sentence'] = '';
|
|
$password_reset = PasswordReset::where('token', $token[0])->first();
|
|
if ($password_reset == NULL || substr(sha1($token[1] . env('APP_KEY')), 0, 6) != $token[2]) {
|
|
$data['sentence'] = '无效的链接';
|
|
// log start
|
|
$log = new AuthLog();
|
|
$log->ip = $request->ip();
|
|
$log->event = "resetpwd_invalid";
|
|
$log->save();
|
|
// log end
|
|
return View::make('user.resetPassword')->with($data);
|
|
} else if (time() - $token[1] > 48 * 60 * 60) {
|
|
$data['sentence'] = '此链接已过期';
|
|
// log start
|
|
$log = new AuthLog();
|
|
$log->ip = $request->ip();
|
|
$log->event = "resetpwd_expired";
|
|
$log->save();
|
|
// log end
|
|
return View::make('user.resetPassword')->with($data);
|
|
}
|
|
$input = $request->all();
|
|
$user = User::find($password_reset->user_id);
|
|
$user->password = Hash::make($input['password']);
|
|
$user->update();
|
|
$password_reset->delete();
|
|
$data['sentence'] = '成功重置密码！';
|
|
|
|
// log start
|
|
$log = new AuthLog();
|
|
$log->user_id = $user->id;
|
|
$log->ip = $request->ip();
|
|
$log->event = "resetpwd_success";
|
|
$log->save();
|
|
// log end
|
|
return View::make('auth.resetPassword')->with($data);
|
|
}
|
|
}
|