文件
yjyf/server/application/api/controller/Auth.php
linda 5a34d87eee feat(merchant): 商家关联账号绑定与数据同步
- 新增 fa_merchant_member 关联账号表,主账号可绑定/解绑已注册用户
- 关联账号可切换商家端,订单、账单、开票、批量归属按主账号+关联账号聚合
- 商家工作台新增关联账号列表、绑定弹层、解除入口与个人订单统计
- 关联账号在商家入驻页显示只读企业资料与同步说明
- 我的页面区分主账号/关联商家身份;修复 merchant 角色本地存储
- 绑定/解绑仅主账号可操作,关联账号操作返回 403
- 新增 schema_phase7.sql 迁移脚本
2026-10-28 19:21:54 +08:00

229 行
8.2 KiB
PHP

此文件含有模棱两可的 Unicode 字符

此文件含有可能会与其他字符混淆的 Unicode 字符。 如果您是想特意这样的,可以安全地忽略该警告。 使用 Escape 按钮显示他们。

<?php
namespace app\api\controller;
use fast\Random;
use think\Db;
use think\Validate;
/**
* 登录 / 角色 / 个人信息
*/
class Auth extends Base
{
protected $noNeedLogin = ['login', 'wxlogin'];
/**
* 手机号 + 验证码登录(兜底通道)
* 验证码来源由 .env 的 [sms] 段控制:mock=1 时使用 mock_code(联调用),
* 接入真实短信后置 mock=0 并在此处改为 Sms::check($mobile, $code, 'mobilelogin')
* @ApiMethod (POST)
*/
public function login()
{
$mobile = $this->request->post('mobile');
$code = $this->request->post('code');
if (!$mobile || !$code) {
$this->error('请填写手机号和验证码');
}
if (!Validate::regex($mobile, "^1\d{10}$")) {
$this->error('手机号格式不正确');
}
$mockOn = (int)\think\Env::get('sms.mock', 1);
$mockCode = (string)\think\Env::get('sms.mock_code', '123456');
if (!($mockOn === 1 && $mockCode !== '' && (string)$code === $mockCode)) {
$this->error('短信通道尚未接入,请联系管理员开通', ['sms_ready' => 0], 2010);
}
$user = \app\common\model\User::getByMobile($mobile);
if ($user) {
if ($user['status'] !== 'normal') {
$this->error('账号已被禁用');
}
$this->auth->direct($user['id']);
} else {
$ret = $this->auth->register($mobile, Random::alnum(), '', $mobile, []);
if (!$ret) {
$this->error($this->auth->getError() ?: '注册失败');
}
}
$this->success('登录成功', [
'token' => $this->auth->getToken(),
'expires' => 2592000,
'userinfo' => $this->profileData(),
]);
}
/**
* 我的信息(含角色与师傅状态)
*/
public function profile()
{
$this->success('', $this->profileData());
}
/**
* 组装个人信息
*/
protected function profileData()
{
$uid = $this->uid();
$user = Db::name('user')->field('id,nickname,mobile,avatar,money,score,createtime')->where('id', $uid)->find();
$master = Db::name('master')->where('user_id', $uid)->find();
$couponCount = Db::name('user_coupon')->where('user_id', $uid)->where('status', 'unused')->count();
$unread = Db::name('message')->where('receive_type', 'user')->where('receive_id', $uid)->where('is_read', 0)->count();
$masterInfo = null;
if ($master) {
$masterInfo = [
'id' => (int)$master['id'],
'realname' => $master['realname'],
'verify_status' => $master['verify_status'],
'audit_msg' => $master['audit_msg'],
'work_status' => $master['work_status'],
'level' => (int)$master['level'],
'score' => (float)$master['score'],
'order_count' => (int)$master['order_count'],
'money' => (float)$master['money'],
'can_take' => $master['verify_status'] === 'pass',
];
}
$merchantRel = $this->merchantOf($uid);
$merchant = $merchantRel ? $merchantRel['merchant'] : null;
$merchantRole = $merchantRel ? $merchantRel['role'] : null;
$merchantInfo = null;
if ($merchant) {
$merchantInfo = [
'id' => (int)$merchant['id'],
'name' => $merchant['name'],
'verify_status' => $merchant['verify_status'],
'audit_msg' => $merchant['audit_msg'],
'settle_type' => $merchant['settle_type'],
'role' => $merchantRole,
'is_owner' => $merchantRole === 'owner',
'can_order' => $merchant['verify_status'] === 'pass',
];
}
return [
'id' => (int)$user['id'],
'nickname' => $user['nickname'] ?: ('用户' . substr((string)$user['mobile'], -4)),
'mobile' => $user['mobile'],
'avatar' => $user['avatar'] ?: '',
'balance' => (float)$user['money'],
'coupon_count' => (int)$couponCount,
'unread_count' => (int)$unread,
'is_master' => $master ? true : false,
'master' => $masterInfo,
'is_merchant' => $merchant ? true : false,
'merchant' => $merchantInfo,
];
}
/**
* 微信授权登录(小程序 uni.login 拿到的 code)
* @ApiMethod (POST)
*/
public function wxlogin()
{
$code = trim((string)$this->request->post('code'));
$nickname = trim((string)$this->request->post('nickname'));
$avatar = trim((string)$this->request->post('avatar'));
if ($code === '') {
$this->error('缺少微信登录凭证 code');
}
$wx = \app\common\library\WxLogin::jscode2session($code);
if (isset($wx['error'])) {
$this->error($wx['error'], ['wx_errcode' => isset($wx['errcode']) ? (int)$wx['errcode'] : 0]);
}
$ret = \app\common\library\WxLogin::provision(
$wx['openid'],
isset($wx['unionid']) ? $wx['unionid'] : '',
isset($wx['session_key']) ? $wx['session_key'] : '',
$nickname,
$avatar
);
$this->auth->direct($ret['user_id']);
$this->success('登录成功', [
'token' => $this->auth->getToken(),
'expires' => 2592000,
'userinfo' => $this->profileData(),
'is_new' => $ret['is_new'],
]);
}
/**
* 切换角色(用户 / 师傅)
* @ApiMethod (POST)
*/
public function switchRole()
{
$role = $this->request->post('role', 'user');
if (!in_array($role, ['user', 'master', 'merchant'], true)) {
$this->error('角色参数错误');
}
if ($role === 'master') {
$master = $this->masterInfo();
if (!$master) {
$this->error('请先完成师傅入驻', ['need_apply' => 1], 2001);
}
if ($master['verify_status'] === 'pending') {
$this->error('师傅资质审核中,请耐心等待', ['verify_status' => 'pending'], 2002);
}
if ($master['verify_status'] === 'reject') {
$this->error('资质未通过:' . $master['audit_msg'], ['verify_status' => 'reject'], 2003);
}
}
if ($role === 'merchant') {
$merchantRel = $this->merchantOf($this->uid());
$merchant = $merchantRel ? $merchantRel['merchant'] : null;
if (!$merchant) {
$this->error('请先完成商家入驻', ['need_apply' => 1], 2001);
}
if ($merchant['verify_status'] === 'pending') {
$this->error('商家资质审核中,请耐心等待', ['verify_status' => 'pending'], 2002);
}
if ($merchant['verify_status'] === 'reject') {
$this->error('资质未通过:' . $merchant['audit_msg'], ['verify_status' => 'reject'], 2003);
}
}
$redirect = '/YJYF/YJYF';
if ($role === 'master') {
$redirect = '/pages/master/workbench';
} elseif ($role === 'merchant') {
$redirect = '/pages/merchant/workbench';
}
$this->success('切换成功', ['role' => $role, 'redirect' => $redirect]);
}
/**
* 当前用户的商家归属:主账号 / 关联账号
* 返回 ['merchant' => 商家行, 'role' => owner|member]
*/
protected function merchantOf($uid)
{
$merchant = Db::name('merchant')->where('user_id', $uid)->find();
if ($merchant) {
return ['merchant' => $merchant, 'role' => 'owner'];
}
$bind = Db::name('merchant_member')->where('user_id', $uid)->find();
if ($bind) {
$merchant = Db::name('merchant')->where('id', (int)$bind['merchant_id'])->find();
if ($merchant) {
return ['merchant' => $merchant, 'role' => 'member'];
}
}
return null;
}
}