<?php
// +----------------------------------------------------------------------
// | likeadmin快速开发前后端分离管理后台（PHP版）
// +----------------------------------------------------------------------
// | 欢迎阅读学习系统程序代码，建议反馈是我们前进的动力
// | 开源版本可自由商用，可去除界面版权logo
// | gitee下载：https://gitee.com/likeshop_gitee/likeadmin
// | github下载：https://github.com/likeshop-github/likeadmin
// | 访问官网：https://www.likeadmin.cn
// | likeadmin团队 版权所有 拥有最终解释权
// +----------------------------------------------------------------------
// | author: likeadminTeam
// +----------------------------------------------------------------------
namespace app\api\validate;

use app\common\validate\BaseValidate;
use app\common\model\user\{User,UserInfo};
use app\common\service\{ConfigService,UtilsService};
use app\common\model\notice\EmailRecord;
use app\common\cache\UserAccountSafeCache;

/**
 * 密码校验
 * Class PasswordValidate
 * @package app\api\validate
 */
class PasswordValidate extends BaseValidate
{

    protected $rule = [
        'mobile' => 'require|length:6,20|integer',
        'code' => 'require|length:6|integer',
        'password' => 'require|length:6,20|alphaNum',
        'password_confirm' => 'require|confirm',
        'password_pay' => 'require|length:6|integer',
        'password_pay_confirm' => 'require|confirm',
        'type' => 'require|checkReset',
    ];


    protected $message = [
        'mobile.require' => 'pwd.mobileEmpty',//请输入手机号
        'mobile.length' => 'pwd.mobileError',//请输入正确的手机号
        'mobile.integer' => 'pwd',//请输入正确的手机号
        'code.require' => 'captcha.captchaEmpty',//请输入验证码
        'code.length' => 'captcha.captchaError',//请输入正确的验证码
        'code.integer' => 'captcha.captchaError',//请输入正确的验证码
        'password.require' => 'pwd.newPwdEmpty',//请输入新密码
        'password.length' => 'pwd.newPwdLengthError',//密码须在6-20位之间
        'password.alphaNum' => 'pwd.newPwdFormatError',//密码须为字母数字组合
        'password_confirm.require' => 'pwd.confirmPwdEmpty',//请输入确认密码
        'password_confirm.confirm' => 'pwd.twoPwdError',//两次输入的密码不一致
        'password_pay.require' => 'pwd.newPwdEmpty',//请输入新密码
        'password_pay.length' => 'pwd.payPwdFormatError',//密码格式不正确
        'password_pay.integer' => 'pwd.payPwdFormatError',//密码格式不正确
        'password_pay_confirm.require' => 'pwd.confirmPwdEmpty',//请输入确认密码
        'password_pay_confirm.confirm' => 'pwd.twoPwdError',//两次输入的密码不一致
        'type.require' => 'network.parameterAbnormality',//验证方式异常
    ];


    /**
     * @notes 重置登录密码
     * @return PasswordValidate
     * @author 段誉
     * @date 2022/9/16 18:11
     */
    public function sceneResetPassword()
    {
        return $this->only(['mobile', 'code', 'password', 'password_confirm','type']);
    }


    /**
     * @notes 修改密码场景
     * @return PasswordValidate
     * @author 段誉
     * @date 2022/9/20 19:14
     */
    public function sceneChangePassword()
    {
        return $this->only(['password', 'password_confirm']);
    }
    
     /**
     * @notes 修改支付密码场景
     * @return PasswordValidate
     * @author 段誉
     * @date 2022/9/20 19:14
     */
    public function sceneChangePayPassword()
    {
        return $this->only(['password_pay', 'password_pay_confirm']);
    }
    
    /**
     * @notes 设置支付密码场景
     * @return PasswordValidate
     * @author 段誉
     * @date 2022/9/20 19:14
     */
    public function sceneSetPayPassword()
    {
        return $this->only(['password_pay', 'password_pay_confirm']);
    }
    
    /**
     * @notes 校验忘记密码
     * @param $money
     * @param $rule
     * @param $data
     * @return bool|string
     * @author 段誉
     * @date 2023/2/24 10:42
     */
    protected function checkReset($type, $rule, $data)
    {
        
        //账号安全机制，连续输错后锁定，防止账号密码暴力破解
        $userAccountSafeCache = new UserAccountSafeCache();
        if (!$userAccountSafeCache->isSafe()) {
            return 'network.frequentOperation';
            //密码连续' . $userAccountSafeCache->count . '次输入错误，请' . $userAccountSafeCache->minute . '分钟后重试
        }
        
        $type = $data['type'];
        
        $types = array(0,1);//0谷歌验证  1邮箱验证
         
        if(!in_array($type, $types)) {
            return 'network.parameterAbnormality';
        }
        
        $user = User::where(['mobile' => $data['mobile'],'country_code' => $data['country_code']])->findOrEmpty();
        
        if($user->isEmpty()) {
            $userAccountSafeCache->record();
            return 'login.userNoExist';//用户不存在
        }
        
        $userInfo = UserInfo::where(['user_id' => $user['id']])->findOrEmpty();
        if($userInfo->isEmpty()) {
            return 'network.parameterAbnormality';
        }
        
        switch ($type) {
            case 0:
                if($userInfo['auth_google'] == 0) {
                    $userAccountSafeCache->record();
                    return 'pwd.bindGoogleFirst';//请先绑定您的Google Authenticator
                }
                
                $valid = UtilsService::get_google_verify($userInfo['google_key'],$data['code']);
                if(!$valid) {
                    $userAccountSafeCache->record();
                    return 'captcha.captchaError';//验证码错误
                }
                
                break;
            case 1:
                if($userInfo['auth_email'] == 0) {
                    $userAccountSafeCache->record();
                    return 'pwd.bindEmailFirst';//请先绑定您的电子邮箱
                }
                
                if(!filter_var($data['email'], FILTER_VALIDATE_EMAIL)){
                    $userAccountSafeCache->record();
                    return 'auth.emailError';//请输入正确的邮箱地址
                }
                
                if($userInfo['email'] != $data['email']){
                    $userAccountSafeCache->record();
                    return 'auth.emailError';//请输入正确的邮箱地址
                }
                
                $time = time() - 5*60;//5分钟内有效
            
                $email = EmailRecord::where(['user_id' => $user['id'],'is_verify' => 0])->where("create_time > $time")->order('id desc')->findOrEmpty();
                
                if($email->isEmpty()) {
                    $userAccountSafeCache->record();
                    return 'captcha.captchaError';//验证码错误
                }
                if($email['code'] != $data['code']) {
                    $userAccountSafeCache->record();
                    return 'captcha.captchaError';//验证码错误
                }
                
                break;
        }
         
        $userAccountSafeCache->relieve();
        
        return true;
    }

}