api/src/Topxia/Api/Resource/User/Password.php

这里只显示每个文件的开头 60 行。登录后可以解锁完整代码。

微信扫码关注公众号，代码整理好后第一时间通知你。

<?php

namespace Topxia\Api\Resource\User;

use Silex\Application;
use Topxia\Api\Util\SmsUtil;
use AppBundle\Common\SimpleValidator;
use Topxia\Api\Resource\BaseResource;
use AppBundle\Common\EncryptionToolkit;
use Topxia\Service\Common\ServiceKernel;
use Symfony\Component\HttpFoundation\Request;

class Password extends BaseResource
{
    public function post(Application $app, Request $request)
    {
        $password = $request->request->get('password');
        $smsCode = $request->request->get('sms_code');
        $smsToken = $request->request->get('verified_token');
        $type = $request->request->get('type');

        if (!in_array($type, array('sms', 'email'))) {
            return $this->error('500', '不存在此type对应的业务场景');
        }

        if (empty($smsCode)) {
            return $this->error('500', '短信验证码为空，请输入');
        }

        if (empty($smsToken)) {
            return $this->error('500', 'verified_token字段为空');
        }

        if (empty($password)) {
            return $this->error('500', '未输入新密码');
        }

        $password = EncryptionToolkit::XXTEADecrypt(base64_decode($password), $request->getHost());
        if (!SimpleValidator::password($password)) {
            return $this->error('500', '密码不符合要求');
        }

        if ($type == 'sms') {
            $smsUtil = new SmsUtil();
            $result = $smsUtil->verifySmsCode('sms_change_password', $smsCode, $smsToken);

            if ($result !== true) {
                if ($result == 'sms_code_expired') {
                    return $this->error('sms_code_expired', '验证码已过期');
                } else {
                    return $this->error('500', '验证码错误');
                }
            }

            $token = $this->getTokenService()->verifyToken('sms_change_password', $smsToken);

            $user = $this->getCurrentUser();

            if ($user->isLogin()) {
                $this->getUserService()->changeMobile($user['id'], $token['data']['mobile']);