public static string GetLoginHash(string md5pass)
{
var passContent = $"=={md5pass}.{Config.Config.Options.PassHashKey1}";
var hashedPass = HashTools.HmacSha1Base64(passContent, Config.Config.Options.PassHashKey2);
return(hashedPass);
}
/// <summary>
/// authLevel 认证等级（0-被封禁 1-标准用户 2-组员 3-组长 4-出题组 5-管理员）
/// onlyInGaming 是否为在比赛允许时间内才可调用的API（默认为false，设为true时只有比赛期间内可以调用）
/// </summary>
/// <param name="request"></param>
/// <param name="response"></param>
/// <param name="authLevel"></param>
/// <param name="onlyInGaming"></param>
/// <returns></returns>
public static async Task <UserSession> Check(Request request, Response response, AuthLevel authLevel, bool onlyInGaming = false)
{
IDictionary <string, object> headers = request.Header;
if (!headers.ContainsKey("user-token"))
{
await response.BadRequest("请求格式不完整：User-Token 不可为空。");
return(null);
}
var token = headers["user-token"].ToString();
if (!headers.ContainsKey("x-auth-token"))
{
await response.BadRequest("请求格式不完整：X-Auth-Token 不可为空。");
return(null);
}
var xAuthToken = headers["x-auth-token"].ToString();
var xAuth = xAuthToken?.Split(" ").Select(it => it.Trim()).ToList();
if (xAuth == null || xAuth.Count != 3)
{
await response.BadRequest("请求格式错误：X-Auth-Token 结构不正确。");
return(null);
}
if (xAuth[0] != "Ccxc-Auth")
{
await response.BadRequest("请求格式错误：X-Auth-Token 认证失败。");
return(null);
}
var ts = xAuth[1];
var sign = xAuth[2];
//ts判断，客户端与前端钟差不能大于5min
long.TryParse(ts, out var tsNum);
var signedTime = UnixTimestamp.FromTimestamp(tsNum);
var diff = Math.Abs((DateTime.Now - signedTime).TotalMinutes);
if (diff > 5)
{
await response.Unauthorized($"客户端时钟不准，无法完成加密认证。请调整至正确的时间。服务器时间：{DateTime.Now:yyyy-MM-dd HH:mm:ss}");
return(null);
}
//从缓存中取出Session
var cache = DbFactory.GetCache();
var sessionKey = cache.GetUserSessionKey(token);
var userSession = await cache.Get <UserSession>(sessionKey);
if (userSession == null) //Session不存在
{
await response.Unauthorized("登录已经过期，请重新登录。");
return(null);
}
if (userSession.is_active != 1) //Session无效
{
await response.Unauthorized(userSession.inactive_message);
return(null);
}
//是否在比赛期间认证
if (onlyInGaming)
{
var now = DateTime.Now;
var startTime = UnixTimestamp.FromTimestamp(Config.Config.Options.StartTime);
var endTime = UnixTimestamp.FromTimestamp(Config.Config.Options.EndTime);
if (userSession.is_betaUser != 1)
{
if (now < startTime)
{
await response.BadRequest("未到开赛时间");
return(null);
}
if (now >= endTime)
{
await response.BadRequest("比赛时间已过，感谢您的参与！");
return(null);
}
}
}
//计算签名
var sk = userSession.sk;
var unsingedString = $"token={token}&ts={ts}&bodyString={request.BodyString}";
var calcedSign = HashTools.HmacSha1Base64(unsingedString, sk);
if (sign != calcedSign) //签名不匹配
{
await response.Unauthorized("认证失败");
return(null);
}
//判断用户权限等级是否满足
var authLevelNumber = (int)authLevel;
if (userSession.roleid < authLevelNumber)
{
await response.Unauthorized("权限不足");
return(null);
}
//认证通过，Session续期
userSession.last_update = DateTime.Now;
await cache.Put(sessionKey, userSession, Config.Config.Options.UserSessionTimeout * 1000);
return(userSession);
}
