[接口v1]对接平台API-鉴权authtoken接口和getGameUrl接口

2026-03-09 13:50:32 +08:00
parent a37da0b6f5
commit e726fc3041
7 changed files with 289 additions and 0 deletions
--- a/server/app/api/controller/v1/AuthTokenController.php
+++ b/server/app/api/controller/v1/AuthTokenController.php
@@ -0,0 +1,73 @@
+<?php
+declare(strict_types=1);
+
+namespace app\api\controller\v1;
+
+use app\api\cache\AuthTokenCache;
+use app\api\util\ReturnCode;
+use plugin\saiadmin\basic\OpenController;
+use support\Request;
+use support\Response;
+use Tinywan\Jwt\JwtToken;
+
+/**
+ * 平台鉴权接口
+ * 鉴权接口：/api/v1/authtoken
+ * GET 参数：signature, secret, time, agent_id
+ * 签名：signature = md5(agent_id.secret.time)
+ */
+class AuthTokenController extends OpenController
+{
+    /**
+     * 获取 auth-token
+     * GET 参数：signature, secret, time, agent_id
+     * 返回 authtoken，后续 /api/v1/* 接口需在请求头携带 auth-token
+     */
+    public function index(Request $request): Response
+    {
+        $agentId = trim((string) ($request->get('agent_id', '')));
+        $secret = trim((string) ($request->get('secret', '')));
+        $time = trim((string) ($request->get('time', '')));
+        $signature = trim((string) ($request->get('signature', '')));
+
+        if ($agentId === '' || $secret === '' || $time === '' || $signature === '') {
+            return $this->fail('缺少参数：agent_id、secret、time、signature 不能为空', ReturnCode::PARAMS_ERROR);
+        }
+
+        $expectedSecret = config('api.auth_token_secret', '');
+        if ($expectedSecret === '') {
+            return $this->fail('服务端未配置 API_AUTH_TOKEN_SECRET', ReturnCode::SERVER_ERROR);
+        }
+        if ($secret !== $expectedSecret) {
+            return $this->fail('密钥错误', ReturnCode::FORBIDDEN);
+        }
+
+        $timeVal = (int) $time;
+        $tolerance = (int) config('api.auth_token_time_tolerance', 300);
+        $now = time();
+        if ($timeVal < $now - $tolerance || $timeVal > $now + $tolerance) {
+            return $this->fail('时间戳已过期或无效，请同步时间', ReturnCode::FORBIDDEN);
+        }
+
+        $expectedSignature = md5($agentId . $secret . $time);
+        if ($signature !== $expectedSignature) {
+            return $this->fail('签名验证失败', ReturnCode::FORBIDDEN);
+        }
+
+        $exp = (int) config('api.auth_token_exp', 86400);
+        $tokenResult = JwtToken::generateToken([
+            'id' => 0,
+            'agent_id' => $agentId,
+            'plat' => 'api_auth_token',
+            'access_exp' => $exp,
+        ]);
+        $token = $tokenResult['access_token'];
+        if (!AuthTokenCache::setToken($agentId, $token)) {
+            return $this->fail('生成 token 失败', ReturnCode::SERVER_ERROR);
+        }
+
+        return $this->success([
+            'authtoken' => $token,
+        ]);
+    }
+}