qztool/backend/app/Http/Controllers/Api/V1/AuthController.php

<?php

namespace App\Http\Controllers\Api\V1;

use App\Http\Controllers\Controller;
use App\Services\AuthService;
use App\Support\Presenter;
use Illuminate\Http\Request;

class AuthController extends Controller
{
    public function __construct(private readonly AuthService $auth) {}

    public function publicKey()
    {
        return $this->ok(['pem' => $this->auth->publicKeyPem()]);
    }

    public function captcha()
    {
        return $this->ok($this->auth->captcha());
    }

    public function sendCode(Request $request)
    {
        $data = $request->validate([
            'scene' => ['required', 'in:register,login,reset,bind'],
            'channel' => ['required', 'in:sms,email'],
            'account' => ['required', 'string', 'max:191'],
        ]);

        return $this->ok($this->auth->sendCode($data['scene'], $data['channel'], $data['account'], (string) $request->ip()));
    }

    public function register(Request $request)
    {
        $data = $request->validate([
            'channel' => ['required', 'in:sms,email'],
            'account' => ['required', 'string'],
            'code' => ['required', 'string'],
            'password' => ['required', 'string'],
            'nickname' => ['nullable', 'string', 'max:40'],
        ]);
        $user = $this->auth->register(
            $data['channel'],
            $data['account'],
            $data['code'],
            $this->auth->decrypt($data['password']),
            $data['nickname'] ?? null,
            $request
        );

        return $this->ok(Presenter::user($user), '注册成功');
    }

    public function login(Request $request)
    {
        $data = $request->validate([
            'account' => ['required', 'string'],
            'password' => ['required', 'string'],
            'captcha_key' => ['nullable', 'string'],
            'captcha_code' => ['nullable', 'string'],
        ]);
        $user = $this->auth->loginWithPassword(
            $data['account'],
            $this->auth->decrypt($data['password']),
            $data['captcha_key'] ?? null,
            $data['captcha_code'] ?? null,
            $request
        );

        return $this->ok(Presenter::user($user), '登录成功');
    }

    public function loginSms(Request $request)
    {
        $data = $request->validate([
            'account' => ['required', 'string'],
            'code' => ['required', 'string'],
        ]);
        $user = $this->auth->loginWithSms($data['account'], $data['code'], $request);

        return $this->ok(Presenter::user($user), '登录成功');
    }

    public function forgot(Request $request)
    {
        $data = $request->validate([
            'account' => ['required', 'string'],
            'code' => ['required', 'string'],
            'password' => ['required', 'string'],
        ]);
        $this->auth->resetPassword($data['account'], $data['code'], $this->auth->decrypt($data['password']));

        return $this->ok(null, '密码已重置');
    }

    public function logout(Request $request)
    {
        $this->auth->logout($request, true);

        return $this->ok(null, '已退出');
    }

    public function me(Request $request)
    {
        $user = $request->user();
        if (! $user) {
            return response()->json(['message' => '未登录', 'code' => 'unauthenticated', 'data' => null], 401);
        }
        $session = $user->sessions()->where('session_id', $request->session()->getId())->first();
        $session?->update(['last_seen_at' => now()]);

        return $this->ok(Presenter::user($user));
    }
}