postman 简单的实现接口登陆添加(php 生成token值验证)

<?php

namespace AppHttpControllersApi;

use IlluminateHttpRequest;
use AppHttpControllersController;
use IlluminateSupportFacadesDB;

class ApiController extends AppController
{      
       public function api(Request $request){
             //接受name，pwd值 
             $name = $request->post('name');
             $pwd = $request->post('password');

            //sql 查询
            $res =  DB::table('user')->where("user",'=',"$name")->where('password','=',"$pwd")->first();

            if ($res){
           //生成token
                  $num = rand(1000,9999);
                  $tokenName = 'hello';
                  $time = date('YmdHis',time());

                  $arr = array(
                    $num,$tokenName,$time
                  );
                   sort($arr,SORT_STRING);

                   $str = implode($arr);

                   $strStr = sha1($str);


                //判断是否存在文件  或者 当前时间-文件创建时间 如果大于7200  则 重新写入文件
                  if (!file_exists('token.txt') || time()-filemtime('token.txt') > 7200){

                      file_put_contents('token.txt',$strStr);


                  }else{
                 //否之读取文件token
                      $strs = file_get_contents('token.txt');
                  // 还剩多少秒过期
                      $ri = 7200 - (time()-filemtime('token.txt'));
                  //返回数组值
                      return [
                          'code' => 200,
                          'message' => '登陆成功',
                          'token'  => $strs,
                          'gtime'  => "token" .$ri . "秒后过期"

                      ];
                  }



            }else{
                //否之登陆失败
                return [
                    'code' => 300,
                    'message' => '登陆失败,请重新登陆'

                ];
            }

       }

        //此为添加方法
       public function add(Request $request){


             //接收获取的token值
               $token = $request->post('token');

               
                //将token值传入getAdd方法进行验证
               $res = $this->getAdd($token);


              //同样接收 对应值
               $name = $request->post('name');

               $password = $request->post('password');
              
               //转为为数组
               $arr = [
                   'user' => $name,
                   'password' => $password
               ];


                //判断返回值 ture 则进行添加 否之 返回 添加失败
               if ($res){

                  $res1 =  DB::table('user')->insert($arr);
   
                  if ($res1){

                      return [
                          'code' => 200,
                          'message' => '添加成功',
                      ];
                  }else{

                      return [
                          'code' => 300,
                          'message' => '添加失败'
                      ];
                  }
                
               }else{
                   //token值验证失败  返回对应内容
                   return [
                       'code' => 400,
                       'message' => 'token值不正确，请重新获取'
                   ];


               }





       }
       //检测传入token值是否正确
        public function getAdd($token){
  //读取本地 文件token值
               $tokens = file_get_contents('token.txt');


                if ($tokens == $token){

                    return 1;
                }else{

                    return false;
                }


        }
     //自己定义测试方法  当然也可选择 postman进行测试
       public function postMan(){

             $url = "http://www.laraval2.com/api/api";

             $urls = "http://www.laraval2.com/api/add";

           $arrLogin = [
               'name' => '2',
               'password' => '2',

           ];

             $arrAdd = [
                 'name' => '6',
                 'password' => '2',
                 'token' => '8e07f3548818817d2cd05e6c7c0fb3c5f17aefcb',

             ];

            //调用父级控制器的 getCurl方法 发送数据到客户端
            $res =  $this->getCurl($url,'post',$arrLogin);
             //接受返回值，并转为数组形式
             $arr = json_decode($res,true);
           //打印    
            var_dump($arr);


       }


}

对应的父级控制器 AppController.php :  Curl方法

       public function getCurl($url,$month='post',$can=null){

             $ch = curl_init();

             curl_setopt($ch,CURLOPT_URL,$url);
             curl_setopt($ch,CURLOPT_RETURNTRANSFER,1);

             curl_setopt($ch,CURLOPT_SSL_VERIFYPEER,0);


             if ($month=='post') {
                 curl_setopt($ch, CURLOPT_POST, 1);
                 curl_setopt($ch, CURLOPT_POSTFIELDS, $can);

             }
             $data = curl_exec($ch);


             curl_close($ch);

             return $data;



       }