cunkebao_v3/Server/application/superadmin/controller/auth/AuthLoginController.php

<?php

namespace app\superadmin\controller\auth;

use app\common\model\Administrator as AdministratorModel;
use app\superadmin\controller\administrator\DeleteAdministratorController;
use library\ResponseHelper;
use think\Controller;
use think\Validate;
use think\facade\Cookie;

class AuthLoginController extends Controller
{
    /**
     * 创建登录令牌
     * @param DeleteAdministratorController $admin
     * @return string
     */
    protected function createToken(AdministratorModel $admin): string
    {
        return md5($admin->id . '|' . $admin->account . 'cunkebao_admin_secret');
    }

    /**
     * 数据验证
     *
     * @param array $params
     * @return $this
     * @throws \Exception
     */
    protected function dataValidate(array $params): self
    {
        $validate = Validate::make([
            'account'  => 'require|/\S+/',
            'password' => 'require|/\S+/',
        ]);

        if (!$validate->check($params)) {
            throw new \Exception($validate->getError(), 400);
        }

        return $this;
    }

    /**
     * 获取管理员信息
     *
     * @param array $params
     * @return object|AdministratorModel
     * @throws \Exception
     */
    protected function getAdministrator(array $params): AdministratorModel
    {
        extract($params);

        $admin = AdministratorModel::where(['account' => $account])->find();

        if (!$admin ||
            $admin->password !== $password ||
            $admin->deleteTime
        ) {
            throw new \Exception('账号不存在或密码错误', 404);
        }

        if (!$admin->status) {
            throw new \Exception('账号已禁用', 404);
        }

        return $admin;
    }

    /**
     * 更新登录信息
     *
     * @param AdministratorModel $admin
     * @return $this
     */
    protected function saveLoginInfo(AdministratorModel $admin): self
    {
        $admin->lastLoginTime = time();
        $admin->lastLoginIp = $this->request->ip();

        if (!$admin->save()) {
            throw new \Exception('拒绝登录', 403);
        }

        return $this;
    }

    /**
     * 设置登录Cookie，有效期24小时
     *
     * @param AdministratorModel $admin
     * @return void
     */
    protected function setCookie(AdministratorModel $admin): void
    {
        // 获取当前环境
        $env = app()->env->get('APP_ENV', 'production');

        // 获取请求的域名
        $origin = $this->request->header('origin');
        $domain = '';

        if ($origin) {
            // 解析域名
            $parsedUrl = parse_url($origin);
            if (isset($parsedUrl['host'])) {
                // 如果是测试环境，使用完整的域名
                if ($env === 'testing') {
                    $domain = $parsedUrl['host'];
                } else {
                    // 生产环境使用顶级域名
                    $parts = explode('.', $parsedUrl['host']);
                    if (count($parts) > 1) {
                        $domain = '.' . $parts[count($parts) - 2] . '.' . $parts[count($parts) - 1];
                    }
                }
            }
        }

        // 设置cookie选项
        $options = [
            'expire'   => 86400,
            'path'     => '/',
            'httponly' => true,
            'samesite' => 'None',   // 允许跨域
            'secure'   => true      // 仅 HTTPS 下有效
        ];

        // 如果有域名，添加到选项
        if ($domain) {
            $options['domain'] = $domain;
        }

        // 设置cookies
        Cookie::set('admin_id', $admin->id, $options);
        Cookie::set('admin_token', $this->createToken($admin), $options);
    }

    /**
     * 管理员登录
     *
     * @return \think\response\Json
     */
    public function index()
    {
        try {
            $params = $this->request->only(['account', 'password']);

            $admin = $this->dataValidate($params)->getAdministrator($params);
            $this->saveLoginInfo($admin)->setCookie($admin);

            return ResponseHelper::success(
                [
                    'id'      => $admin->id,
                    'name'    => $admin->username,
                    'account' => $admin->account,
                    'token'   => Cookie::get('admin_token')
                ]
            );
        } catch (\Exception $e) {
            return ResponseHelper::error($e->getMessage(), $e->getCode());
        }
    }
}