|
1
|
|
|
<?php |
|
2
|
|
|
|
|
3
|
|
|
namespace zacksleo\yii2\oauth2\common\behaviors; |
|
4
|
|
|
|
|
5
|
|
|
use zacksleo\yii2\oauth2\common\helpers\Predis; |
|
6
|
|
|
use yii; |
|
7
|
|
|
use yii\base\Behavior; |
|
8
|
|
|
use yii\web\Controller; |
|
9
|
|
|
use zacksleo\yii2\oauth2\common\models\storage\AccessToken; |
|
10
|
|
|
use zacksleo\yii2\oauth2\common\models\OauthClients; |
|
11
|
|
|
|
|
12
|
|
|
/** |
|
13
|
|
|
* Class TokenBehavior |
|
14
|
|
|
* @package common\models\behaviors |
|
15
|
|
|
* @property $owner \common\helpers\utils\Token |
|
16
|
|
|
*/ |
|
17
|
|
|
class TokenBehavior extends Behavior |
|
18
|
|
|
{ |
|
19
|
|
|
const EVENT_AFTER_TOKEN_CREATE = 'afterTokenCreate'; |
|
20
|
|
|
|
|
21
|
|
|
public function events() |
|
22
|
|
|
{ |
|
23
|
|
|
return [ |
|
24
|
|
|
Controller::EVENT_AFTER_ACTION => 'afterAction', |
|
25
|
|
|
self::EVENT_AFTER_TOKEN_CREATE => 'afterTokenCreate' |
|
26
|
|
|
]; |
|
27
|
|
|
} |
|
28
|
|
|
|
|
29
|
|
|
public function afterAction($event) |
|
|
|
|
|
|
30
|
|
|
{ |
|
31
|
|
|
$grantType = Yii::$app->request->getBodyParam('grant_type'); |
|
32
|
|
|
$clientId = Yii::$app->request->getBodyParam('client_id'); |
|
|
|
|
|
|
33
|
|
|
$clientSecret = Yii::$app->request->getBodyParam('client_secret'); |
|
|
|
|
|
|
34
|
|
|
if (!in_array($grantType, ['password', 'refresh_token'])) { |
|
35
|
|
|
return true; |
|
36
|
|
|
} |
|
37
|
|
|
$token = Yii::$app->getModule('oauth2')->getServer()->getResponse()->getParameters(); |
|
38
|
|
|
/* @var $oauthAccessToken array */ |
|
39
|
|
|
$oauthAccessToken = (new AccessToken())->getAccessToken($token['access_token']); |
|
40
|
|
|
$this->revokeUserTokens($oauthAccessToken); |
|
41
|
|
|
} |
|
42
|
|
|
|
|
43
|
|
|
public function afterTokenCreate() |
|
44
|
|
|
{ |
|
45
|
|
|
/** |
|
46
|
|
|
* Array |
|
47
|
|
|
( |
|
48
|
|
|
[access_token] => 97d7445c03e1551b5d22bfd4306c86f94ea0f9b3 |
|
49
|
|
|
[expires_in] => 604800 |
|
50
|
|
|
[token_type] => Bearer |
|
51
|
|
|
[scope] => |
|
52
|
|
|
[refresh_token] => 8e01cc423cd74935fccd7b84bb0b6b3794ceed62 |
|
53
|
|
|
) |
|
54
|
|
|
*/ |
|
55
|
|
|
$token = $this->owner->getToken(); |
|
56
|
|
|
/* @var $oauthAccessToken array */ |
|
57
|
|
|
$oauthAccessToken = (new AccessToken())->getAccessToken($token['access_token']); |
|
58
|
|
|
$this->revokeUserTokens($oauthAccessToken); |
|
59
|
|
|
} |
|
60
|
|
|
|
|
61
|
|
|
/** |
|
62
|
|
|
* 删除该用户该设备下的其他Token |
|
63
|
|
|
* @param $oauthAccessToken array |
|
64
|
|
|
*/ |
|
65
|
|
|
protected function revokeUserTokens($oauthAccessToken) |
|
66
|
|
|
{ |
|
67
|
|
|
$client = OauthClients::findOne(['client_id' => $oauthAccessToken['client_id']]); |
|
68
|
|
|
if ($client->one_token_per_user) { |
|
69
|
|
|
//删除缓存 |
|
70
|
|
|
Predis::getInstance()->getClient()->deleteOldUserClientToken($oauthAccessToken['access_token'], $oauthAccessToken['client_id'], $oauthAccessToken['user_id']); |
|
71
|
|
|
} |
|
72
|
|
|
} |
|
73
|
|
|
} |
|
74
|
|
|
|
This check looks from parameters that have been defined for a function or method, but which are not used in the method body.