初始化项目：添加后端代码、ThinkPHP框架、前端资源

2026-09-03 12:42:39 +08:00
commit 482bece22e
3726 changed files with 416708 additions and 0 deletions
@@ -0,0 +1,120 @@
+<?php
+
+namespace addons\alioss\library;
+
+use app\common\library\Upload;
+
+class Auth
+{
+
+    public function __construct()
+    {
+
+    }
+
+    public function params($name, $md5, $callback = true)
+    {
+        global $_W;
+        $config = \app\common\model\config\System::getConfig('alioss');
+
+        //这里生成 aliosstoken
+        $data = ['deadline' => time() + $config['expire'] ];
+        $signature = hash_hmac('sha1', json_encode($data), $config['accessKeySecret'], true);
+        $token = $config['accessKeyId'] . ':' . base64_encode($signature) . ':' . base64_encode(json_encode($data));
+
+
+        $callback_param = array(
+            'callbackBody'     => 'aliosstoken='.$token.'&group='.input('group').'&name='.urlencode(input('name')).'&md5='.urlencode(input('md5')).'&url=${object}&size=${size}&type=${mimeType}&height=${imageInfo.height}&width=${imageInfo.width}',
+            'callbackBodyType' => "application/x-www-form-urlencoded"
+        );
+
+        if(defined('TUZHI_SYSTEM_TYPE') && TUZHI_SYSTEM_TYPE == 'single'){
+            $callback_param['callbackUrl'] = $_W['siteroot'].'/index.php?i='.$_W['uniacid'].'&route=addons/alioss/index/notify';
+        }else{
+            $callback_param['callbackUrl'] = $_W['siteroot'].'/app/index.php?i='.$_W['uniacid'].'&c=entry&m=tuzi_v1&do=index&route=addons/alioss/index/notify';
+        }
+
+
+        $base64_callback_body = base64_encode(json_encode($callback_param));
+
+        $now = time();
+        $end = $now + $config['expire']; //设置该policy超时时间是10s. 即这个policy过了这个有效时间，将不能访问
+        $expiration = $this->gmt_iso8601($end);
+
+        preg_match('/(\d+)(\w+)/', $config['maxsize'], $matches);
+        $type = strtolower($matches[2]);
+        $typeDict = ['b' => 0, 'k' => 1, 'kb' => 1, 'm' => 2, 'mb' => 2, 'gb' => 3, 'g' => 3];
+        $size = (int)$config['maxsize'] * pow(1024, isset($typeDict[$type]) ? $typeDict[$type] : 0);
+
+        //最大文件大小.用户可以自己设置
+        $condition = array(0 => 'content-length-range', 1 => 0, 2 => $size);
+        $conditions[] = $condition;
+
+        //表示用户上传的数据,必须是以$dir开始, 不然上传会失败,这一步不是必须项,只是为了安全起见,防止用户通过policy上传到别人的目录
+        //$start = array(0 => 'starts-with', 1 => '$key', 2 => $dir);
+        //$conditions[] = $start;
+
+        $arr = array('expiration' => $expiration, 'conditions' => $conditions);
+
+        $policy = base64_encode(json_encode($arr));
+        $signature = base64_encode(hash_hmac('sha1', $policy, $config['accessKeySecret'], true));
+
+        $key = (new Upload())->getSavekey($config['savekey'], $name, $md5);
+        $key = ltrim($key, "/");
+
+        $response = array();
+        $response['id'] = $config['accessKeyId'];
+        $response['key'] = $key;
+        $response['policy'] = $policy;
+        $response['signature'] = $signature;
+        $response['expire'] = $end;
+        $response['callback'] = $callback_param;
+        return $response;
+    }
+
+    public function check($signature, $policy)
+    {
+        $config = \app\common\model\config\System::getConfig('alioss');
+        $sign = base64_encode(hash_hmac('sha1', $policy, $config['accessKeySecret'], true));
+        return $signature == $sign;
+    }
+
+    private function gmt_iso8601($time)
+    {
+        $dtStr = date("c", $time);
+        $mydatetime = new \DateTime($dtStr);
+        $expiration = $mydatetime->format(\DateTime::ISO8601);
+        $pos = strpos($expiration, '+');
+        $expiration = substr($expiration, 0, $pos);
+        return $expiration . "Z";
+    }
+
+    public static function isModuleAllow()
+    {
+        $config = \app\common\model\config\System::getConfig('alioss');
+        $module = request()->module();
+        
+        $module = $module ? strtolower($module) : 'index';
+
+//        $noNeedLogin = array_filter($config['noneedlogin']);
+        $noNeedLogin = array_filter(explode(',', $config['noneedlogin'] ?? ''));
+//        $noNeedLogin = [];
+        $isModuleLogin = false;
+        $tagName = 'upload_config_checklogin';
+        foreach (\think\Hook::get($tagName) as $index => $name) {
+            if (\think\Hook::exec($name, $tagName)) {
+                $isModuleLogin = true;
+                break;
+            }
+        }
+        if (in_array($module, $noNeedLogin)
+            || ($module == 'admin' && \app\admin\library\Auth::instance()->id)
+            || ($module != 'admin' && \app\common\library\Auth::instance()->id)
+            || $isModuleLogin) {
+            return true;
+        } else {
+            return false;
+        }
+    }
+
+}