kate522/wordpress-theme-aksrt
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

登录注册体系的源码级硬切换

Browse Source
This commit is contained in:
kate522
2026-08-23 20:30:01 +08:00
parent 73fcd4ed72
commit af52f9e94d
72 changed files with 1666 additions and 6576 deletions
Download Patch File Download Diff File Expand all files Collapse all files
src/Admin/UserControllerAuthPhoneOperations.php
+359 -258
View File
@@ -1,5 +1,7 @@
<?php
/**
* Shared public authentication REST operations.
*
* @package AKSRT
*/
@@ -9,286 +11,385 @@ defined('ABSPATH') || exit;
trait UserControllerAuthPhoneOperations {
/**
* POST /auth/modal-login — 弹窗登录
*/
public function modal_login(\WP_REST_Request $request): \WP_REST_Response {
$params = $this->get_json_params($request);
$payload = is_array($params) ? $params : [];
$login = sanitize_text_field((string) ($payload['log'] ?? $payload['login'] ?? ''));
$password = (string) ($payload['pwd'] ?? $payload['password'] ?? '');
private function auth_payload(\WP_REST_Request $request): array {
$params = $this->get_json_params($request);
return is_array($params) ? $params : [];
}
if ($login === '' || $password === '') {
return $this->error('请输入用户名和密码');
}
private function auth_verify_rest_nonce(\WP_REST_Request $request, array $payload): bool {
$nonce = sanitize_text_field((string) ($request->get_header('X-WP-Nonce') ?: ($payload['_wpnonce'] ?? '')));
return $nonce !== '' && (bool) wp_verify_nonce($nonce, 'wp_rest');
}
if (!class_exists('\AKSRT\Auth\Service')) {
return $this->error('认证服务不可用', 500);
}
private function auth_rate_key(string $action, string $subject = ''): string {
$ip = sanitize_text_field((string) ($_SERVER['REMOTE_ADDR'] ?? '0.0.0.0'));
return 'aksrt_auth_rate_' . md5($action . '|' . strtolower($subject) . '|' . $ip);
}
$result = \AKSRT\Auth\Service::login_user([
...$payload,
'log' => $login,
'pwd' => $password,
'rememberme' => !empty($payload['rememberme']) ? (string) $payload['rememberme'] : 'forever',
], true, true);
private function auth_rate_limited(string $action, string $subject = '', int $limit = 8, int $ttl = 600): bool {
$key = $this->auth_rate_key($action, $subject);
$count = (int) get_transient($key);
if ($count >= $limit) {
return true;
}
set_transient($key, $count + 1, $ttl);
return false;
}
if (empty($result['success'])) {
$error = $result['error'] ?? '登录失败';
$verify_url = $result['verify_url'] ?? '';
$response = ['success' => false, 'message' => $error];
if ($verify_url) {
$response['verify_url'] = $verify_url;
}
return new \WP_REST_Response($response, 401);
}
private function auth_code_key(string $scene, string $target): string {
return 'aksrt_auth_code_' . md5($scene . '|' . strtolower(trim($target)));
}
$user = wp_get_current_user();
return $this->success([
'message' => __('登录成功', 'aksrt'),
'redirect' => $result['redirect'] ?? home_url('/'),
'user' => [
'id' => $user->ID,
'display_name' => $user->display_name,
'avatar_url' => function_exists('aksrt_get_avatar_url')
? aksrt_get_avatar_url($user->ID, ['size' => 48])
: get_avatar_url($user->ID, ['size' => 48]),
],
]);
}
private function auth_store_email_code(string $scene, string $target, string $code): void {
set_transient($this->auth_code_key($scene, $target), [
'hash' => wp_hash_password($code),
'attempts' => 0,
], 10 * MINUTE_IN_SECONDS);
}
/**
* POST /auth/modal-register — 弹窗注册
*/
public function modal_register(\WP_REST_Request $request): \WP_REST_Response {
$params = $this->get_json_params($request);
$payload = is_array($params) ? $params : [];
$username = sanitize_user((string) ($payload['user_login'] ?? $payload['username'] ?? ''), true);
$email = sanitize_email((string) ($payload['user_email'] ?? $payload['email'] ?? ''));
$password = (string) ($payload['user_pass'] ?? $payload['password'] ?? '');
$confirm = (string) ($payload['user_pass_confirm'] ?? $payload['password_confirm'] ?? $payload['confirm_password'] ?? $password);
$ref = sanitize_key((string) ($payload['ref'] ?? ''));
$register_nonce = sanitize_text_field((string) ($payload['_register_nonce'] ?? ''));
$agree_terms = !empty($payload['agree_terms']) ? '1' : '';
private function auth_consume_code(string $scene, string $target, string $code, string $channel): bool {
if ($channel === 'phone') {
if (!class_exists('\AKSRT\Sms\SMS')) {
return false;
}
$result = \AKSRT\Sms\SMS::get_instance()->verify_code($target, $code);
return !empty($result['success']);
}
if ($username === '' || $email === '' || $password === '') {
return $this->error('请填写所有必填项');
}
$key = $this->auth_code_key($scene, $target);
$stored = get_transient($key);
if (!is_array($stored) || empty($stored['hash'])) {
return false;
}
$attempts = (int) ($stored['attempts'] ?? 0) + 1;
if ($attempts > 6 || !wp_check_password($code, (string) $stored['hash'])) {
$stored['attempts'] = $attempts;
set_transient($key, $stored, 10 * MINUTE_IN_SECONDS);
return false;
}
delete_transient($key);
return true;
}
if (!is_email($email)) {
return $this->error('邮箱格式不正确');
}
private function auth_channel(string $target, string $requested = ''): string {
if ($requested === 'phone' || preg_match('/^1[3-9]\d{9}$/', $target)) {
return 'phone';
}
return 'email';
}
if (strlen($password) < 6) {
return $this->error('密码至少 6 位');
}
private function auth_channel_allowed(string $configured, string $channel): bool {
return $configured === 'email_phone' || $configured === $channel;
}
if (!class_exists('\AKSRT\Auth\Service')) {
return $this->error('认证服务不可用', 500);
}
private function auth_safe_redirect(string $requested, string $fallback = ''): string {
$fallback = $fallback !== '' ? $fallback : home_url('/');
return wp_validate_redirect($requested, $fallback);
}
$payload['user_login'] = $username;
$payload['user_email'] = $email;
$payload['user_pass'] = $password;
$payload['user_pass_confirm'] = $confirm;
$payload['ref'] = $ref;
$payload['_register_nonce'] = $register_nonce;
$payload['agree_terms'] = $agree_terms;
private function auth_registration_error(string $error): string {
if (str_contains($error, '已被') || str_contains($error, '已注册') || str_contains($error, '已使用')) {
return __('注册信息不可用，请检查后重试', 'aksrt');
}
return $error;
}
$result = \AKSRT\Auth\Service::register_user($payload);
private function auth_find_user(string $target, string $channel) {
if ($channel === 'phone') {
$users = get_users([
'meta_key' => 'aksrt_phone',
'meta_value' => $target,
'number' => 1,
]);
return $users[0] ?? null;
}
return is_email($target)
? get_user_by('email', sanitize_email($target))
: get_user_by('login', sanitize_user($target, true));
}
if (empty($result['success'])) {
return $this->error($result['error'] ?? '注册失败');
}
public function auth_code(\WP_REST_Request $request): \WP_REST_Response {
$payload = $this->auth_payload($request);
if (!$this->auth_verify_rest_nonce($request, $payload)) {
return $this->error(__('安全验证失败，请刷新页面重试', 'aksrt'), 403);
}
$verification_required = !empty($result['verification_required']);
$login_url = function_exists('aksrt_get_login_url') ? aksrt_get_login_url() : wp_login_url();
$registered_user = null;
$current_user = wp_get_current_user();
if (
$current_user instanceof \WP_User
&& $current_user->ID > 0
&& !empty($result['user_id'])
&& (int) $result['user_id'] === (int) $current_user->ID
) {
$registered_user = $current_user;
}
$user = $current_user;
$needs_verify = $verification_required;
$scene = sanitize_key((string) ($payload['scene'] ?? ''));
$target = trim(sanitize_text_field((string) ($payload['target'] ?? '')));
$channel = $this->auth_channel($target, sanitize_key((string) ($payload['channel'] ?? '')));
$obk = sanitize_text_field((string) ($payload['obk'] ?? ''));
$oauth_bind = $obk !== '' && class_exists('\AKSRT\Auth\Service') && is_array(\AKSRT\Auth\Service::get_oauth_bind_context($obk));
if (!in_array($scene, ['login', 'register', 'resetpassword'], true)) {
return $this->error(__('请求类型无效', 'aksrt'));
}
if (class_exists('\AKSRT\Settings\Settings')) {
if (\AKSRT\Settings\Settings::close_sign()) return $this->error(__('登录注册已关闭', 'aksrt'), 403);
if (($scene === 'login' || $scene === 'resetpassword') && \AKSRT\Settings\Settings::close_signin() && !$oauth_bind) return $this->error(__('当前登录方式已关闭', 'aksrt'), 403);
if ($scene === 'register' && !\AKSRT\Settings\Settings::registration_enabled() && !$oauth_bind) return $this->error(__('当前已关闭新用户注册', 'aksrt'), 403);
$type = $scene === 'login' ? \AKSRT\Settings\Settings::passwordless_login_type() : ($scene === 'register' ? \AKSRT\Settings\Settings::signup_verification_type() : \AKSRT\Settings\Settings::reset_password_verification_type());
$enabled = $scene === 'login' ? \AKSRT\Settings\Settings::passwordless_login_enabled() : ($scene === 'register' ? \AKSRT\Settings\Settings::signup_verification_enabled() : true);
if (!$enabled || ($type !== 'email_phone' && $type !== $channel)) return $this->error(__('当前验证方式不可用', 'aksrt'), 403);
}
if (($channel === 'email' && !is_email($target)) || ($channel === 'phone' && !preg_match('/^1[3-9]\d{9}$/', $target))) {
return $this->error(__('请输入有效的邮箱或手机号', 'aksrt'));
}
if ($this->auth_rate_limited('code:' . $scene, $target, 5, HOUR_IN_SECONDS)) {
return $this->error(__('请求过于频繁，请稍后再试', 'aksrt'), 429);
}
if (function_exists('aksrt_require_captcha')) {
$captcha_scene = $scene === 'resetpassword' ? 'lostpassword' : $scene;
$captcha = aksrt_require_captcha($captcha_scene, $payload);
if ($captcha !== true) {
return $this->error((string) $captcha);
}
}
return $this->success([
'message' => $needs_verify ? __('注册成功，请验证邮箱', 'aksrt') : __('注册成功', 'aksrt'),
'needs_verification' => $needs_verify,
'verify_url' => $result['verify_url'] ?? '',
'redirect' => $verification_required ? ($result['verify_url'] ?? '') : $login_url,
'verification_required' => $verification_required,
'login_url' => $login_url,
'user_login' => $result['user_login'] ?? $username,
'user_email' => $email,
'notice' => (string) ($result['notice'] ?? ''),
'user' => $registered_user ? [
'id' => $registered_user->ID,
'display_name' => $registered_user->display_name,
'avatar_url' => function_exists('aksrt_get_avatar_url')
? aksrt_get_avatar_url($registered_user->ID, ['size' => 48])
: get_avatar_url($registered_user->ID, ['size' => 48]),
] : ($user->ID ? [
'id' => $user->ID,
'display_name' => $user->display_name,
'avatar_url' => function_exists('aksrt_get_avatar_url')
? aksrt_get_avatar_url($user->ID, ['size' => 48])
: get_avatar_url($user->ID, ['size' => 48]),
] : null),
]);
}
$generic = __('如果信息有效，验证码将发送到该账号', 'aksrt');
if ($scene !== 'register' && !$this->auth_find_user($target, $channel)) {
return $this->success(['message' => $generic, 'countdown' => 60]);
}
/**
* GET /auth/me — 当前用户信息（用于 AJAX 刷新）
*/
public function get_current_user_info(): \WP_REST_Response {
$user = wp_get_current_user();
if (!$user->ID) {
return $this->error('未登录', 401);
}
if ($channel === 'phone') {
if (!class_exists('\AKSRT\Sms\SMS')) {
return $this->error(__('短信服务不可用', 'aksrt'), 503);
}
$result = \AKSRT\Sms\SMS::get_instance()->send_code($target);
if (empty($result['success'])) {
return $this->error((string) ($result['message'] ?? __('验证码发送失败', 'aksrt')));
}
return $this->success(['message' => $generic, 'countdown' => (int) ($result['remaining_time'] ?? 60)]);
}
$credits = 0;
if (class_exists('\AKSRT\Credits\Credits')) {
$credits = \AKSRT\Credits\Credits::balance($user->ID);
}
$code = (string) random_int(100000, 999999);
$this->auth_store_email_code($scene, $target, $code);
$subject = sprintf(__('[%s] 登录注册验证码', 'aksrt'), get_bloginfo('name'));
$message = sprintf(__('您的验证码是：%s，10 分钟内有效。', 'aksrt'), $code);
if (!wp_mail($target, $subject, $message)) {
delete_transient($this->auth_code_key($scene, $target));
if ($scene !== 'register') {
return $this->success(['message' => $generic, 'countdown' => 60]);
}
return $this->error(__('验证码发送失败，请稍后再试', 'aksrt'), 500);
}
return $this->success(['message' => $generic, 'countdown' => 60]);
}
return $this->success([
'data' => [
'id' => $user->ID,
'display_name' => $user->display_name,
'user_email' => $user->user_email,
'avatar_url' => function_exists('aksrt_get_avatar_url')
? aksrt_get_avatar_url($user->ID, ['size' => 48])
: get_avatar_url($user->ID, ['size' => 48]),
'is_admin' => current_user_can('manage_options'),
'credits' => $credits,
],
]);
}
public function auth_login(\WP_REST_Request $request): \WP_REST_Response {
$payload = $this->auth_payload($request);
if (!$this->auth_verify_rest_nonce($request, $payload)) {
return $this->error(__('安全验证失败，请刷新页面重试', 'aksrt'), 403);
}
$target = trim(sanitize_text_field((string) ($payload['target'] ?? $payload['log'] ?? '')));
$obk = sanitize_text_field((string) ($payload['obk'] ?? ''));
$oauth_data = $obk !== '' && class_exists('\AKSRT\Auth\Service')
? \AKSRT\Auth\Service::get_oauth_bind_context($obk)
: null;
if ($obk !== '' && !$oauth_data) {
return $this->error(__('绑定会话已过期，请重新使用第三方登录', 'aksrt'), 410);
}
if (
class_exists('\AKSRT\Settings\Settings')
&& (\AKSRT\Settings\Settings::close_sign() || (!$oauth_data && \AKSRT\Settings\Settings::close_signin()))
) {
return $this->error(__('当前登录方式已关闭', 'aksrt'), 403);
}
if ($target === '' || (preg_match('/^1[3-9]\d{9}$/', $target) && empty($payload['code']) && class_exists('\AKSRT\Settings\Settings') && !\AKSRT\Settings\Settings::signin_phone_enabled())) {
return $this->error(__('账号或密码错误', 'aksrt'), 401);
}
if ($this->auth_rate_limited('login', $target)) {
return $this->error(__('请求过于频繁，请稍后再试', 'aksrt'), 429);
}
if (function_exists('aksrt_require_captcha')) {
$captcha = aksrt_require_captcha($oauth_data ? 'bind' : 'login', $payload);
if ($captcha !== true) {
return $this->error((string) $captcha);
}
}
$redirect = $this->auth_safe_redirect((string) ($payload['redirect_to'] ?? ''), home_url('/'));
/**
* POST /auth/send-sms-code — 发送短信验证码
*/
public function auth_send_sms_code(\WP_REST_Request $request): \WP_REST_Response {
$params = $this->get_json_params($request);
$phone = sanitize_text_field((string) ($params['phone'] ?? ''));
$scene = sanitize_key((string) ($params['scene'] ?? 'register'));
if (!array_key_exists($scene, function_exists('aksrt_captcha_scenes') ? aksrt_captcha_scenes() : [])) {
$scene = 'register';
}
if (!empty($payload['code'])) {
if (!class_exists('\AKSRT\Settings\Settings') || !\AKSRT\Settings\Settings::passwordless_login_enabled()) {
return $this->error(__('当前未开启免密登录', 'aksrt'));
}
$channel = $this->auth_channel($target, sanitize_key((string) ($payload['channel'] ?? '')));
$configured = \AKSRT\Settings\Settings::passwordless_login_type();
if (!$this->auth_channel_allowed($configured, $channel)) {
return $this->error(__('当前验证方式不可用', 'aksrt'), 403);
}
$user = $this->auth_find_user($target, $channel);
if (!$user || !$this->auth_consume_code('login', $target, sanitize_text_field((string) $payload['code']), $channel)) {
return $this->error(__('账号或验证码错误', 'aksrt'), 401);
}
wp_set_current_user((int) $user->ID);
wp_set_auth_cookie((int) $user->ID, !empty($payload['rememberme']));
do_action('wp_login', $user->user_login, $user);
if ($oauth_data) {
\AKSRT\Auth\Service::finalize_oauth_binding((int) $user->ID, $oauth_data, $obk);
$redirect = function_exists('aksrt_get_user_center_url') ? aksrt_get_user_center_url() : $redirect;
}
return $this->success(['message' => $oauth_data ? __('账号绑定成功', 'aksrt') : __('登录成功', 'aksrt'), 'redirect' => $redirect]);
}
if (function_exists('aksrt_require_captcha')) {
$captcha_result = aksrt_require_captcha($scene, is_array($params) ? $params : []);
if ($captcha_result !== true) {
return $this->error((string) $captcha_result, 400);
}
}
if (!class_exists('\AKSRT\Auth\Service')) {
return $this->error(__('认证服务不可用', 'aksrt'), 500);
}
$payload['log'] = $target;
$payload['pwd'] = (string) ($payload['password'] ?? $payload['pwd'] ?? '');
$payload['redirect_to'] = $redirect;
$result = \AKSRT\Auth\Service::login_user($payload, $oauth_data ? 'bind' : 'login');
if (empty($result['success'])) {
return $this->error(__('账号或密码错误', 'aksrt'), 401);
}
if ($oauth_data) {
$user_id = get_current_user_id();
if ($user_id <= 0) {
return $this->error(__('账号或密码错误', 'aksrt'), 401);
}
\AKSRT\Auth\Service::finalize_oauth_binding($user_id, $oauth_data, $obk);
$redirect = function_exists('aksrt_get_user_center_url') ? aksrt_get_user_center_url() : $redirect;
}
return $this->success(['message' => $oauth_data ? __('账号绑定成功', 'aksrt') : __('登录成功', 'aksrt'), 'redirect' => $redirect]);
}
if (!class_exists('\AKSRT\Sms\SMS')) {
return $this->error('短信服务不可用');
}
public function auth_register(\WP_REST_Request $request): \WP_REST_Response {
$payload = $this->auth_payload($request);
if (!$this->auth_verify_rest_nonce($request, $payload)) {
return $this->error(__('安全验证失败，请刷新页面重试', 'aksrt'), 403);
}
$obk = sanitize_text_field((string) ($payload['obk'] ?? ''));
$oauth_data = $obk !== '' && class_exists('\AKSRT\Auth\Service')
? \AKSRT\Auth\Service::get_oauth_bind_context($obk)
: null;
if ($obk !== '' && !$oauth_data) {
return $this->error(__('绑定会话已过期，请重新使用第三方登录', 'aksrt'), 410);
}
if (class_exists('\AKSRT\Settings\Settings') && (\AKSRT\Settings\Settings::close_sign() || (!$oauth_data && !\AKSRT\Settings\Settings::registration_enabled()))) {
return $this->error(__('当前已关闭新用户注册', 'aksrt'), 403);
}
if ($this->auth_rate_limited('register')) {
return $this->error(__('请求过于频繁，请稍后再试', 'aksrt'), 429);
}
$target = trim(sanitize_text_field((string) ($payload['target'] ?? $payload['user_email'] ?? $payload['phone'] ?? '')));
$channel = $this->auth_channel($target, sanitize_key((string) ($payload['channel'] ?? '')));
$signup_verification = class_exists('\AKSRT\Settings\Settings') && \AKSRT\Settings\Settings::signup_verification_enabled();
$configured = $signup_verification ? \AKSRT\Settings\Settings::signup_verification_type() : 'email';
if (!$this->auth_channel_allowed($configured, $channel)) {
return $this->error(__('当前注册方式不可用', 'aksrt'), 403);
}
if (($channel === 'email' && !is_email($target)) || ($channel === 'phone' && !preg_match('/^1[3-9]\d{9}$/', $target))) {
return $this->error(__('请输入有效的邮箱或手机号', 'aksrt'));
}
if (function_exists('aksrt_require_captcha')) {
$captcha = aksrt_require_captcha('register', $payload);
if ($captcha !== true) {
return $this->error((string) $captcha);
}
}
if ($signup_verification) {
if (!$this->auth_consume_code('register', $target, sanitize_text_field((string) ($payload['code'] ?? '')), $channel)) {
return $this->error(__('验证码错误或已过期', 'aksrt'));
}
$payload['_auth_code_verified'] = true;
}
if (!class_exists('\AKSRT\Auth\Service')) {
return $this->error(__('认证服务不可用', 'aksrt'), 500);
}
if ($channel === 'phone') {
$payload['phone'] = $target;
$result = \AKSRT\Auth\Service::register_by_phone($payload);
if (empty($result['success'])) {
return $this->error($this->auth_registration_error((string) ($result['error'] ?? __('注册失败', 'aksrt'))));
}
$user_id = (int) ($result['user_id'] ?? 0);
if ($oauth_data && $user_id > 0) {
\AKSRT\Auth\Service::finalize_oauth_binding($user_id, $oauth_data, $obk);
}
return $this->success(['message' => $oauth_data ? __('注册并绑定成功', 'aksrt') : __('注册成功', 'aksrt'), 'redirect' => $result['redirect'] ?? home_url('/'), 'notice' => (string) ($result['notice'] ?? '')]);
}
$payload['user_email'] = sanitize_email($target);
$payload['user_pass'] = (string) ($payload['password'] ?? '');
$payload['user_pass_confirm'] = (string) ($payload['password_confirm'] ?? $payload['password'] ?? '');
$result = \AKSRT\Auth\Service::register_user($payload);
if (empty($result['success'])) {
return $this->error($this->auth_registration_error((string) ($result['error'] ?? __('注册失败', 'aksrt'))));
}
$user_id = (int) ($result['user_id'] ?? 0);
if ($oauth_data && $user_id > 0) {
\AKSRT\Auth\Service::finalize_oauth_binding($user_id, $oauth_data, $obk);
}
return $this->success([
'message' => $oauth_data ? __('注册并绑定成功', 'aksrt') : __('注册成功', 'aksrt'),
'redirect' => $result['redirect'] ?? home_url('/'),
'notice' => (string) ($result['notice'] ?? ''),
]);
}
$result = \AKSRT\Sms\SMS::get_instance()->send_code($phone);
public function auth_reset_password(\WP_REST_Request $request): \WP_REST_Response {
$payload = $this->auth_payload($request);
if (!$this->auth_verify_rest_nonce($request, $payload)) {
return $this->error(__('安全验证失败，请刷新页面重试', 'aksrt'), 403);
}
$target = trim(sanitize_text_field((string) ($payload['target'] ?? '')));
$channel = $this->auth_channel($target, sanitize_key((string) ($payload['channel'] ?? '')));
if (class_exists('\AKSRT\Settings\Settings')) {
if (\AKSRT\Settings\Settings::close_sign() || \AKSRT\Settings\Settings::close_signin() || !$this->auth_channel_allowed(\AKSRT\Settings\Settings::reset_password_verification_type(), $channel)) {
return $this->error(__('当前验证方式不可用', 'aksrt'), 403);
}
}
if (($channel === 'email' && !is_email($target)) || ($channel === 'phone' && !preg_match('/^1[3-9]\d{9}$/', $target))) {
return $this->error(__('请输入有效的邮箱或手机号', 'aksrt'));
}
if ($this->auth_rate_limited('reset-password', $target, 8, HOUR_IN_SECONDS)) {
return $this->error(__('请求过于频繁，请稍后再试', 'aksrt'), 429);
}
if (function_exists('aksrt_require_captcha')) {
$captcha = aksrt_require_captcha('lostpassword', $payload);
if ($captcha !== true) {
return $this->error((string) $captcha);
}
}
$user = $this->auth_find_user($target, $channel);
$password = (string) ($payload['password'] ?? '');
$confirm = (string) ($payload['password_confirm'] ?? '');
if (!class_exists('\AKSRT\Auth\Service')) {
return $this->error(__('认证服务不可用', 'aksrt'), 500);
}
$password_check = \AKSRT\Auth\Service::validate_password($password, $confirm);
if ($password_check !== true) {
return $this->error((string) $password_check);
}
if (!$user || !$this->auth_consume_code('resetpassword', $target, sanitize_text_field((string) ($payload['code'] ?? '')), $channel)) {
return $this->error(__('账号或验证码错误', 'aksrt'));
}
wp_set_password($password, (int) $user->ID);
return $this->success(['message' => __('密码已重置，请重新登录', 'aksrt'), 'redirect' => function_exists('aksrt_get_sign_page_url') ? aksrt_get_sign_page_url('signin') : wp_login_url()]);
}
if (!empty($result['success'])) {
return $this->success([
'message' => $result['message'],
'remaining_time' => $result['remaining_time'] ?? 60,
]);
}
public function user_phone_code(\WP_REST_Request $request): \WP_REST_Response {
$payload = $this->auth_payload($request);
if (!$this->auth_verify_rest_nonce($request, $payload)) {
return $this->error(__('安全验证失败', 'aksrt'), 403);
}
$phone = sanitize_text_field((string) ($payload['phone'] ?? ''));
if (!preg_match('/^1[3-9]\d{9}$/', $phone)) {
return $this->error(__('手机号格式不正确', 'aksrt'));
}
if (function_exists('aksrt_require_captcha')) {
$captcha = aksrt_require_captcha('bind_phone', $payload);
if ($captcha !== true) return $this->error((string) $captcha);
}
if (!class_exists('\AKSRT\Sms\SMS')) return $this->error(__('短信服务不可用', 'aksrt'), 503);
$result = \AKSRT\Sms\SMS::get_instance()->send_code($phone);
return !empty($result['success'])
? $this->success(['message' => __('验证码已发送', 'aksrt'), 'countdown' => (int) ($result['remaining_time'] ?? 60)])
: $this->error((string) ($result['message'] ?? __('发送失败', 'aksrt')));
}
$response = [
'success' => false,
'message' => $result['message'],
];
if (isset($result['remaining_time'])) {
$response['data'] = ['remaining_time' => $result['remaining_time']];
}
return new \WP_REST_Response($response, 400);
}
/**
* POST /auth/phone-register — 手机号注册
*/
public function auth_phone_register(\WP_REST_Request $request): \WP_REST_Response {
if (!class_exists('\AKSRT\Auth\Service')) {
return $this->error('认证服务不可用');
}
$params = $this->get_json_params($request);
$result = \AKSRT\Auth\Service::register_by_phone($params);
if (!empty($result['success'])) {
return $this->success([
'message' => $result['message'] ?? '注册成功',
'redirect' => $result['redirect'] ?? home_url('/'),
'user_id' => $result['user_id'] ?? 0,
'notice' => (string) ($result['notice'] ?? ''),
]);
}
return $this->error($result['error'] ?? '注册失败');
}
/**
* POST /auth/phone-login — 手机号 + 密码登录
*/
public function auth_phone_login(\WP_REST_Request $request): \WP_REST_Response {
if (!class_exists('\AKSRT\Auth\Service')) {
return $this->error('认证服务不可用');
}
$params = $this->get_json_params($request);
$result = \AKSRT\Auth\Service::login_by_phone_password($params);
if (!empty($result['success'])) {
return $this->success([
'redirect' => $result['redirect'] ?? home_url('/'),
]);
}
return $this->error($result['error'] ?? '登录失败');
}
/**
* POST /auth/phone-code-login — 手机号 + 验证码免密登录
*/
public function auth_phone_code_login(\WP_REST_Request $request): \WP_REST_Response {
if (!class_exists('\AKSRT\Auth\Service')) {
return $this->error('认证服务不可用');
}
$params = $this->get_json_params($request);
$result = \AKSRT\Auth\Service::login_by_phone_code($params);
if (!empty($result['success'])) {
return $this->success([
'redirect' => $result['redirect'] ?? home_url('/'),
]);
}
return $this->error($result['error'] ?? '登录失败');
}
/**
* POST /auth/bind-phone — 绑定手机号
*/
public function auth_bind_phone(\WP_REST_Request $request): \WP_REST_Response {
if (!class_exists('\AKSRT\Auth\Service')) {
return $this->error('认证服务不可用');
}
$params = $this->get_json_params($request);
$result = \AKSRT\Auth\Service::bind_phone($params);
if (!empty($result['success'])) {
return $this->success(['message' => $result['message']]);
}
return $this->error($result['error'] ?? '绑定失败');
}
public function user_bind_phone(\WP_REST_Request $request): \WP_REST_Response {
$payload = $this->auth_payload($request);
if (!$this->auth_verify_rest_nonce($request, $payload)) return $this->error(__('安全验证失败', 'aksrt'), 403);
if (!class_exists('\AKSRT\Auth\Service')) return $this->error(__('认证服务不可用', 'aksrt'), 500);
$result = \AKSRT\Auth\Service::bind_phone($payload);
return !empty($result['success']) ? $this->success(['message' => $result['message'] ?? __('绑定成功', 'aksrt')]) : $this->error((string) ($result['error'] ?? __('绑定失败', 'aksrt')));
}
}