51 lines
1.4 KiB
PHP
51 lines
1.4 KiB
PHP
<?php
|
||
|
||
namespace app\index\controller;
|
||
|
||
use app\BaseController;
|
||
use app\common\service\AuthService;
|
||
use think\facade\Session;
|
||
|
||
|
||
// 已完成
|
||
class Login extends BaseController
|
||
{
|
||
/*
|
||
处理登录请求(已完成)
|
||
*/
|
||
public function login(AuthService $authService)
|
||
{
|
||
$params = $this->request->only(['username', 'password'], 'post');
|
||
|
||
if (empty(trim($params['username'])) || empty(trim($params['password']))) { // 验证数据
|
||
return $this->error('用户名和密码不能为空');
|
||
}
|
||
|
||
$username = trim($params['username']);
|
||
$failKey = 'login_fail_' . md5($username);
|
||
$fails = (int) cache($failKey); // 读取失败次数，并强制转为整数
|
||
|
||
if ($fails >= 5) {
|
||
return $this->error('失败次数过多，请 15 分钟后再试', [], 429);
|
||
}
|
||
|
||
try {
|
||
$result = $authService->login(trim($params['username']), trim($params['password']));
|
||
cache($failKey, null);
|
||
return $this->success('登录成功', $result);
|
||
} catch (\Exception $e) {
|
||
cache($failKey, $fails + 1, 900); // 失败次数存活时间，15分钟之后自动清零
|
||
return $this->error($e->getMessage());
|
||
}
|
||
}
|
||
|
||
/*
|
||
退出登录(已完成)
|
||
*/
|
||
public function logout()
|
||
{
|
||
Session::clear();
|
||
return $this->success('退出成功');
|
||
}
|
||
}
|