first commit

2026-04-16 11:17:18 +08:00
commit 5b9c398e68
98 changed files with 8701 additions and 0 deletions
--- a/app/common/service/AuthService.php
+++ b/app/common/service/AuthService.php
@@ -0,0 +1,90 @@
+<?php
+namespace app\common\service;
+
+use app\common\model\User;
+use app\common\model\UserToken;
+use app\common\model\AdminUser;
+use app\common\model\AdminToken;
+use Carbon\Carbon;
+
+class AuthService
+{
+    public static function issueUserToken(User $user): string
+    {
+        $ttl = intval(getenv('USER_TOKEN_TTL') ?: 604800);
+        $token = generateToken();
+        $hash = hashToken($token);
+
+        UserToken::create([
+            'user_id' => $user->id,
+            'token_hash' => $hash,
+            'expired_at' => $ttl > 0 ? Carbon::now()->addSeconds($ttl) : null,
+        ]);
+
+        return $token;
+    }
+
+    public static function getUserByToken(?string $token): ?User
+    {
+        if (!$token) {
+            return null;
+        }
+        $hash = hashToken($token);
+        $row = UserToken::where('token_hash', $hash)->first();
+        if (!$row) {
+            return null;
+        }
+        if ($row->expired_at && $row->expired_at->lt(Carbon::now())) {
+            return null;
+        }
+        return User::find($row->user_id);
+    }
+
+    public static function revokeUserToken(?string $token): void
+    {
+        if (!$token) {
+            return;
+        }
+        UserToken::where('token_hash', hashToken($token))->delete();
+    }
+
+    public static function issueAdminToken(AdminUser $admin): string
+    {
+        $ttl = intval(getenv('ADMIN_TOKEN_TTL') ?: 86400);
+        $token = generateToken();
+        $hash = hashToken($token);
+
+        AdminToken::create([
+            'admin_id' => $admin->id,
+            'token_hash' => $hash,
+            'expired_at' => $ttl > 0 ? Carbon::now()->addSeconds($ttl) : null,
+        ]);
+
+        return $token;
+    }
+
+    public static function getAdminByToken(?string $token): ?AdminUser
+    {
+        if (!$token) {
+            return null;
+        }
+        $hash = hashToken($token);
+        $row = AdminToken::where('token_hash', $hash)->first();
+        if (!$row) {
+            return null;
+        }
+        if ($row->expired_at && $row->expired_at->lt(Carbon::now())) {
+            return null;
+        }
+        return AdminUser::find($row->admin_id);
+    }
+
+    public static function revokeAdminToken(?string $token): void
+    {
+        if (!$token) {
+            return;
+        }
+        AdminToken::where('token_hash', hashToken($token))->delete();
+    }
+}
+