Add files via upload

backend/app/api/login.go

@@ -0,0 +1,162 @@
+package api
+
+import (
+	"ALLinSSL/backend/public"
+	"crypto/md5"
+	"encoding/hex"
+	"github.com/gin-contrib/sessions"
+	"github.com/gin-gonic/gin"
+	"strings"
+	"time"
+)
+
+func Sign(c *gin.Context) {
+	var form struct {
+		Username string `form:"username" binding:"required"`
+		Password string `form:"password" binding:"required"`
+		Code     string `form:"code"`
+	}
+	err := c.Bind(&form)
+	if err != nil {
+		// c.JSON(http.StatusBadRequest, public.ResERR(err.Error()))
+		public.FailMsg(c, err.Error())
+		// return
+	}
+	form.Username = strings.TrimSpace(form.Username)
+	form.Code = strings.TrimSpace(form.Code)
+
+	// 从数据库拿用户
+	s, err := public.NewSqlite("data/data.db", "")
+	if err != nil {
+		// c.JSON(http.StatusBadRequest, public.ResERR(err.Error()))
+		public.FailMsg(c, err.Error())
+		return
+	}
+	s.Connect()
+	defer s.Close()
+	s.TableName = "users"
+	res, err := s.Where("username=?", []interface{}{form.Username}).Select()
+	if err != nil {
+		// c.JSON(http.StatusBadRequest, public.ResERR(err.Error()))
+		public.FailMsg(c, err.Error())
+		return
+	}
+
+	session := sessions.Default(c)
+	now := time.Now()
+
+	loginErrCount := session.Get("__loginErrCount")
+	loginErrEnd := session.Get("__loginErrEnd")
+	ErrCount := 0
+	ErrEnd := now
+	// 获取登录错误次数
+	if __loginErrCount, ok := loginErrCount.(int); ok {
+		ErrCount = __loginErrCount
+	}
+	// 获取登录错误时间
+	if __loginErrEnd, ok := loginErrEnd.(time.Time); ok {
+		ErrEnd = __loginErrEnd
+	}
+
+	// fmt.Println(ErrCount, ErrEnd)
+
+	// 判断登录错误次数
+	switch {
+	case ErrCount >= 5:
+		// 登录错误次数超过5次，15分钟内禁止登录
+		if now.Sub(ErrEnd) < 15*time.Minute {
+			// c.JSON(http.StatusBadRequest, public.ResERR("登录次数过多，请15分钟后再试"))
+			public.FailMsg(c, "登录次数过多，请15分钟后再试")
+			return
+		}
+		session.Delete("__loginErrEnd")
+	case ErrCount > 0:
+		if form.Code == "" {
+			// c.JSON(http.StatusBadRequest, public.ResERR("验证码错误1"))
+			public.FailMsg(c, "验证码错误1")
+			return
+		} else {
+			// 这里添加验证码的逻辑
+			verifyCode := session.Get("_verifyCode")
+			if _verifyCode, ok := verifyCode.(string); ok {
+				if !strings.EqualFold(form.Code, _verifyCode) {
+					// c.JSON(http.StatusBadRequest, public.ResERR("验证码错误2"))
+					public.FailMsg(c, "验证码错误2")
+					return
+				}
+			} else {
+				// c.JSON(http.StatusBadRequest, public.ResERR("验证码错误3"))
+				public.FailMsg(c, "验证码错误3")
+				return
+			}
+		}
+	}
+
+	// 判断用户是否存在
+	if len(res) == 0 {
+		session.Set("__loginErrCount", ErrCount+1)
+		session.Set("__loginErrEnd", now)
+		_ = session.Save()
+		// c.JSON(http.StatusBadRequest, public.ResERR("用户不存在"))
+		// 设置cookie
+		c.SetCookie("must_code", "1", 0, "/", "", false, true)
+		public.FailMsg(c, "用户不存在")
+		return
+	}
+	// 判断密码是否正确
+	// qSalt := "_bt_all_in_ssl"
+	// password := md5.Sum([]byte(form.Password + qSalt))
+	// passwordMd5 := hex.EncodeToString(password[:])
+	// fmt.Println(passwordMd5)
+	salt, ok := res[0]["salt"].(string)
+	if !ok {
+		salt = "_bt_all_in_ssl"
+	}
+	passwd := form.Password + salt
+	// fmt.Println(passwd)
+	keyMd5 := md5.Sum([]byte(passwd))
+	passwdMd5 := hex.EncodeToString(keyMd5[:])
+	// fmt.Println(passwdMd5)
+
+	if res[0]["password"] != passwdMd5 {
+		session.Set("__loginErrCount", ErrCount+1)
+		session.Set("__loginErrEnd", now)
+		_ = session.Save()
+		// c.JSON(http.StatusBadRequest, public.ResERR("密码错误"))
+		// 设置cookie
+		c.SetCookie("must_code", "1", 0, "/", "", false, false)
+		public.FailMsg(c, "密码错误")
+		return
+	}
+
+	// session := sessions.Default(c)
+	session.Set("__loginErrCount", 0)
+	session.Delete("__loginErrEnd")
+	session.Set("login", true)
+	session.Set("__login_key", public.GetSettingIgnoreError("login_key"))
+	_ = session.Save()
+	// c.JSON(http.StatusOK, public.ResOK(0, nil, "登录成功"))
+	// 设置cookie
+	c.SetCookie("must_code", "1", -1, "/", "", false, true)
+	public.SuccessMsg(c, "登录成功")
+	return
+}
+
+func GetCode(c *gin.Context) {
+	_, bs64, code, _ := public.GenerateCode()
+	session := sessions.Default(c)
+
+	session.Set("_verifyCode", code)
+	_ = session.Save()
+	public.SuccessData(c, bs64, 0)
+	return
+}
+
+func SignOut(c *gin.Context) {
+	session := sessions.Default(c)
+	session.Delete("login")
+	_ = session.Save()
+	// c.JSON(http.StatusOK, public.ResOK(0, nil, "登出成功"))
+	public.SuccessMsg(c, "登出成功")
+	return
+}