food_server/FlyCube/Api/Controller/CheckController.class.php

<?php

namespace Api\Controller;

use Firebase\JWT\JWT;
use Firebase\JWT\Key;

class CheckController extends PublicController
{
    private $openid; //用户id
    private $session_key; //用户session_key
    /**
     * @description: 子类的初始化
     */
    public function _initialize()
    {
        // 调用父类的_initialize方法
        parent::_initialize();
        //解构文件头里面的token
        $server = isset($_SERVER) ? $_SERVER : "";
        $token = $server['HTTP_TOKEN'];
        $jwtKey = C('jwtKey'); // jwt密钥
        $jwt = JWT::decode($token, new Key($jwtKey, 'HS256')); // 使用密钥和 HS256 算法对 JWT 进行解码
        $res_token = (array) $jwt; // 将解码后的对象转换为数组
        //token过期
        if (empty($res_token)) {
            echo json_encode(array('status' => -1, 'msg' => '帐号认证过期!'));
            exit();
        }
        //token检测通过 获取用户id
        $this->openid = $res_token['openid'];
        $this->session_key = $res_token['session_key'];
    }
    /**
     * @description: 获取用户手机号 并将手机号写入数据库 并给前端返回 隐藏中间4位的手机号
     */
    public function getPhoneNumber()
    {
        // 检查 sessionKey iv 长度是否合法
        if (strlen($this->session_key) != 24 || strlen($_REQUEST['iv']) != 24) {
            echo json_encode(array('status' => 0, 'msg' => '非法操作1！'));
            exit();
        }
        // Base64 解码 sessionKey
        $aesKey = base64_decode($this->session_key);
        // Base64 解码 iv
        $aesIV = base64_decode($_REQUEST['iv']);
        // Base64 解码加密数据
        $aesCipher = base64_decode($_REQUEST['encryptedData']);
        // 使用 openssl_decrypt 函数进行解密
        $result = openssl_decrypt($aesCipher, "AES-128-CBC", $aesKey, OPENSSL_RAW_DATA, $aesIV);
        // 将解密后的字符串转换为 JSON 对象
        $dataObj = json_decode($result);
        // 检查解密后的数据是否为 NULL
        if ($dataObj == NULL) {
            echo json_encode(array('status' => 0, 'msg' => '非法操作2！'));
            exit();
        }
        // 检查解密后的数据中的 appid 是否与传入的 appid 一致
        $wx_config = C('weixin');
        $appid = $wx_config['appid'];
        if ($dataObj->watermark->appid != $appid) {
            echo json_encode(array('status' => 0, 'msg' => '非法操作3！'));
            exit();
        }
        //更新数据库  录入获取到的用户手机号
        $where['openid'] = $this->openid;
        $data['tel'] = $dataObj->phoneNumber;
        $userDb = D('user');
        $userDb->where($where)->data($data)->save();
        // 返回解密后的数据对象
        $phoneNumber = $this->maskPhoneNumber($data['tel']);
        echo json_encode(array('status' => 1, 'phoneNumber' => $phoneNumber));
    }
    /**
     * @description: 提交订单
     */
    public function checkout()
    {
        //解构购物车列表 检查合法性 合成product_snapshot快照字段  totol_weight总重字段  totol_num总数量字段(即所有sku的总数)  totol_price总价格字段
        $product_snapshot = array(); //声明product_snapshot快照字段
        $total_num = 0; //声明totol_num字段
        $total_weight = 0; //声明 totol_weight总重字段
        $total_price = 0; //声明totol_price字段
        $cartList = json_decode($_REQUEST['cartList'], true);
        $spuDb = D('spu');
        $skuDb = D('sku');
        $where['shop_id'] = $_REQUEST['shop_id'];

        foreach ($cartList as $index => $cart) {
            $where['id'] = intval($cart['spu_id']);
            $spu = $spuDb->where($where)->find();
            $product_snapshot[$index]['spu_id'] = $spu['id'];
            $product_snapshot[$index]['spu_name'] = $spu['name'];
            $product_snapshot[$index]['spu_number'] = $spu['spu_number'];
            // 确保 spu_photo 是 JSON 数组
            $product_snapshot[$index]['spu_photo'] = json_decode($spu['photo'], true);

            foreach ($cart['skuG'] as $key => $value) {
                $where['id'] = $value;
                $sku = $skuDb->where($where)->find();
                $product_snapshot[$index]['sku_arr'][$key]['arr_name'] = json_decode($spu['bind_sku'], true)[$key]['tit'];
                $product_snapshot[$index]['sku_arr'][$key]['sku_id'] = $sku['id'];
                $product_snapshot[$index]['sku_arr'][$key]['sku_name'] = $sku['name'];
                $product_snapshot[$index]['sku_arr'][$key]['sku_number'] = $sku['sku_number'];
                $product_snapshot[$index]['sku_arr'][$key]['sku_weight'] = $sku['weight']; //重量
                $product_snapshot[$index]['sku_arr'][$key]['sku_price'] = $sku['price']; //单价
                $product_snapshot[$index]['sku_arr'][$key]['sku_totol'] = $cart['countG'][$key]; //数量
                $product_snapshot[$index]['sku_arr'][$key]['sku_unit'] = $sku['unit'];
                // 确保 sku_photo 是 JSON 数组
                $product_snapshot[$index]['sku_arr'][$key]['sku_photo'] = json_decode($sku['photo'], true);
                $product_snapshot[$index]['sku_arr'][$key]['sku_purchase_channel'] = $sku['purchase_channel'];
                //累计重量 价格 数量
                $total_num += $cart['countG'][$key];
                $total_weight += $cart['countG'][$key] * $sku['weight'];
                $total_price += $cart['countG'][$key] * $sku['price'];
            }
        }

        //后台校验总价格 和 前端总价格
        if ($total_price != $_REQUEST['total']) {
            echo json_encode(array('status' => 1, 'msg' => '价格不符！'));
            exit(); //有问题跳出
        }

        // 创建订单
        $data['shop_id'] = $_REQUEST['shop_id'];
        $data['order_sn'] = $data['order_sn'] = date('ymdHi') . str_pad(mt_rand(1, 999999), 6, '0', STR_PAD_LEFT);
        $data['total_weight'] = $total_weight;
        $data['total_price'] = $total_price;
        $data['total_num'] = $total_num;
        $data['openid'] = $this->openid;

        $userDb = D('user');
        $whereUser['openid'] = $this->openid;
        $user = $userDb->where($whereUser)->find();
        $data['receiver'] = $user['name'];
        $data['tel'] = $user['tel'];

        // 再次校验手机号
        if ($user['tel'] == null || $user['tel'] == "") {
            echo json_encode(array('status' => 0, 'msg' => '用户手机号未填'));
            exit(); //没有电话 有问题跳出
        }

        $siteDb = D('receive_site');
        $whereSite['id'] = $_REQUEST['site_id'];
        $whereSite['shop_id'] = $_REQUEST['shop_id'];
        $site = $siteDb->where($whereSite)->find();
        $data['receive_site_id'] = $_REQUEST['site_id'];
        $data['receive_site_name'] = $site['sitename'];
        $data['product_snapshot'] = json_encode($product_snapshot, JSON_UNESCAPED_UNICODE);
        $data['remark'] = $_REQUEST['remark'];
        $data['addtime'] = time();

        $orderDb = D('order');
        $isAdd = $orderDb->data($data)->add();
        // 返回订单信息
        if ($isAdd) {
            echo json_encode(array('status' => 1, 'order_sn' => $data['order_sn']));
        } else {
            echo json_encode(array('status' => 0, 'msg' => '订单添加失败'));
        }
    }
}