src/ApiV3Bundle/Controller/AuthController.php line 22

Open in your IDE?
  1. <?php
  3. namespace ApiV3Bundle\Controller;
  5. use ApiV3Bundle\Util\AssetHelper;
  6. use Biz\Theme\Service\ThemeService;
  7. use Firebase\JWT\JWT;
  8. use Symfony\Component\HttpFoundation\Request;
  9. use Symfony\Component\HttpFoundation\Response;
  10. use Topxia\Service\Common\ServiceKernel;
  12. class AuthController extends BaseController
  13. {
  14.     public function getJwtAction(Request $request)
  15.     {
  16.         $user = $this->getUser();
  17.         if (empty($user) || !$user->isLogin()) {
  18.             return $this->createJsonResponse([
  19.                 'message' => '用户未登录',
  20.             ], Response::HTTP_UNAUTHORIZED);
  21.         }
  22.         $userProfile = $this->getUserService()->getUserProfile($user['id']);
  23.         $secret = ServiceKernel::instance()->getParameter('secret');
  24.         // token 过期时间不能太小，前端会提前 1 分钟刷新
  25.         $ttl = 60 * 5;
  26.         $payload = [
  27.             'sub' => (string) $user['id'],
  28.             'iss' => 'ES SESSION',
  29.             'for' => 'access',
  30.             'exp' => time() + $ttl,
  31.         ];
  33.         return $this->createJsonResponse([
  34.             'id' => (int) $user['id'],
  35.             'nickname' => (string) $user['nickname'],
  36.             'truename' => (string) $userProfile['truename'],
  37.             'roles' => $user['roles'],
  38.             'avatar' => AssetHelper::getFurl($user['smallAvatar'] ?? '', 'avatar.png'),
  39.             'locale' => $request->getLocale(),
  40.             'mainColor' => $this->getThemeService()->getCurrentThemeConfig()['confirmConfig']['maincolor'] ?? 'blue',
  41.             'token' => JWT::encode($payload, $secret, 'HS256', $this->encrypt($request->getSession()->getId(), $secret)),
  42.             'tokenTtl' => $ttl * 1000,
  43.         ]);
  44.     }
  46.     /**
  47.      * @return ThemeService
  48.      */
  49.     private function getThemeService()
  50.     {
  51.         return $this->getBiz()->service('Theme:ThemeService');
  52.     }
  54.     private function encrypt(string $sessionId, $secret): string
  55.     {
  56.         return hash_hmac('sha256', $sessionId, $secret);
  57.     }
  58. }