111 lines
2.8 KiB
C#
111 lines
2.8 KiB
C#
using Asp.Versioning;
|
||
using Microsoft.AspNetCore.Authorization;
|
||
using Microsoft.AspNetCore.Mvc;
|
||
using StoreHub.Framework.Commons;
|
||
using StoreHub.Framework.Security;
|
||
using StoreHub.Services;
|
||
using StoreHub.Services.Dtos;
|
||
using System.Security.Claims;
|
||
|
||
namespace StoreHub.Controllers
|
||
{
|
||
[ApiController]
|
||
[ApiVersion("1.0")]
|
||
[Route("api/v{version:apiVersion}/[controller]/[action]")]
|
||
public class AuthController : ControllerBase
|
||
{
|
||
private readonly IUserService _userService;
|
||
private readonly ITokenService _tokenService;
|
||
private readonly ICurrentUser _currentUser;
|
||
private readonly IOnlineUserStore _onlineUserStore;
|
||
|
||
public AuthController(IUserService userService, ITokenService tokenService, ICurrentUser currentUser, IOnlineUserStore onlineUserStore)
|
||
{
|
||
_userService = userService;
|
||
_tokenService = tokenService;
|
||
_currentUser = currentUser;
|
||
_onlineUserStore = onlineUserStore;
|
||
}
|
||
|
||
/// <summary>
|
||
/// 登录：校验用户名/密码，签发 JWT（单点登录：同用户的新登录会使旧令牌失效）
|
||
/// </summary>
|
||
[HttpPost]
|
||
[AllowAnonymous]
|
||
public async Task<ApiResult<object?>> Login([FromBody] LoginRequest request)
|
||
{
|
||
if (request is null || string.IsNullOrWhiteSpace(request.UserName) || string.IsNullOrWhiteSpace(request.Password))
|
||
{
|
||
return ApiResult.Error("用户名或密码不能为空", 400);
|
||
}
|
||
|
||
UserDto? user = await _userService.LoginAsync(request.UserName, request.Password);
|
||
if (user is null)
|
||
{
|
||
return ApiResult.Error("用户名或密码错误", 401);
|
||
}
|
||
|
||
var claims = new List<Claim>
|
||
{
|
||
new(JwtClaimTypes.UserName, user.UserName),
|
||
new(JwtClaimTypes.NickName, user.NickName),
|
||
};
|
||
|
||
TokenResult token = _tokenService.CreateToken(claims);
|
||
return ApiResult.Success<object?>(token);
|
||
}
|
||
|
||
/// <summary>
|
||
/// 退出登录：销毁当前用户的服务端在线会话，令牌立即失效
|
||
/// </summary>
|
||
[HttpPost]
|
||
[Authorize]
|
||
public ApiResult<object?> Logout()
|
||
{
|
||
if (_currentUser.UserName is string username)
|
||
{
|
||
_onlineUserStore.SignOut(username);
|
||
}
|
||
|
||
return ApiResult.Success<object?>(null);
|
||
}
|
||
|
||
/// <summary>
|
||
/// 获取当前登录用户信息（需携带 Bearer Token）
|
||
/// </summary>
|
||
[HttpGet]
|
||
[Authorize]
|
||
public ApiResult<object?> Me()
|
||
{
|
||
return ApiResult.Success<object?>(new
|
||
{
|
||
UserName = _currentUser.UserName,
|
||
NickName = _currentUser.NickName,
|
||
});
|
||
}
|
||
|
||
/// <summary>
|
||
/// 在线人员列表（需携带 Bearer Token）
|
||
/// </summary>
|
||
[HttpGet]
|
||
[Authorize]
|
||
public ApiResult<object?> OnlineUsers()
|
||
{
|
||
IReadOnlyList<OnlineUserInfo> users = _onlineUserStore.GetOnlineUsers();
|
||
return ApiResult.Success<object?>(new
|
||
{
|
||
Count = users.Count,
|
||
Users = users,
|
||
});
|
||
}
|
||
}
|
||
|
||
public class LoginRequest
|
||
{
|
||
public string UserName { get; set; } = string.Empty;
|
||
|
||
public string Password { get; set; } = string.Empty;
|
||
}
|
||
}
|
||
|