feat(api-key): add api_key table, source fields, model and auth middleware

app/model/ApiKey.php

@@ -0,0 +1,138 @@
+<?php
+
+namespace app\model;
+
+use app\common\model\Base;
+use think\model\concern\SoftDelete;
+
+/**
+ * @mixin think\Model
+ */
+class ApiKey extends Base
+{
+    use SoftDelete;
+
+    protected $name = 'api_key';
+
+    protected $defaultSoftDelete = 0;
+
+    public function admin()
+    {
+        return $this->belongsTo(Admin::class, 'admin_id');
+    }
+
+    /**
+     * 生成API Key
+     *
+     * @param int    $admin_id
+     * @param string $name
+     * @param int    $can_write_own
+     * @param int    $can_write_other
+     * @param int    $can_delete
+     *
+     * @return string 明文Key，仅此一次返回
+     */
+    public static function generateKey($admin_id, $name = '', $can_write_own = 0, $can_write_other = 0, $can_delete = 0)
+    {
+        $raw_key = 'ak_' . bin2hex(random_bytes(16));
+        $hash = md5($raw_key);
+
+        self::create([
+            'admin_id' => $admin_id,
+            'name' => $name,
+            'api_key' => $hash,
+            'can_write_own' => $can_write_own,
+            'can_write_other' => $can_write_other,
+            'can_delete' => $can_delete,
+            'status' => 1,
+        ]);
+
+        return $raw_key;
+    }
+
+    /**
+     * 验证API Key
+     *
+     * @param string $raw_key
+     *
+     * @return static|null
+     */
+    public static function verifyKey($raw_key)
+    {
+        $hash = md5($raw_key);
+
+        return self::where('api_key', $hash)->where('status', 1)->find();
+    }
+
+    /**
+     * 重新生成Key
+     *
+     * @param int $id
+     *
+     * @return string 新的明文Key
+     */
+    public static function regenerateKey($id)
+    {
+        $record = self::find($id);
+        if (empty($record)) {
+            return '';
+        }
+
+        $raw_key = 'ak_' . bin2hex(random_bytes(16));
+        $hash = md5($raw_key);
+
+        $record->api_key = $hash;
+        $record->save();
+
+        return $raw_key;
+    }
+
+    /**
+     * 是否可写自己的文章
+     *
+     * @return bool
+     */
+    public function canWriteOwn()
+    {
+        return $this->can_write_own == 1;
+    }
+
+    /**
+     * 是否可写他人的文章
+     *
+     * @return bool
+     */
+    public function canWriteOther()
+    {
+        return $this->can_write_other == 1;
+    }
+
+    /**
+     * 是否可删除
+     * can_delete=0: 不可删除
+     * can_delete=1: 仅API来源可删除
+     * can_delete=2: 可删除
+     *
+     * @param string|null $source
+     *
+     * @return bool
+     */
+    public function canDelete($source = null)
+    {
+        $can_delete = (int) $this->can_delete;
+
+        if ($can_delete === 0) {
+            return false;
+        }
+
+        if ($can_delete === 1) {
+            return $source === 'api';
+        }
+
+        if ($can_delete === 2) {
+            return true;
+        }
+
+        return false;
+    }
+}