login.php

<?php
/**
 * 登录
 * 使用POST，传递学号(username)和密码(passwd)
 * cookie使用JWT标准保存
 * JWT结构：
 * {
 * username: String,
 * stu_type: Number, //学生类别，1=本科生，2=格院，3=研究生
 * cookie:{
 *          idas: String,
 *          uestc: String,
 *          eams: String,
 *          ecard: String
 *      }
 * }
 */
header('Content-type: application/json');

require_once __DIR__ . '/lib/dbconf.php';
require_once __DIR__ . '/lib/url.php';
require_once __DIR__ . '/lib/exception.php';
require_once __DIR__ . '/lib/3rd_lib/simple_html_dom.php';
require_once __DIR__ . '/lib/checkstr.php';
require_once __DIR__ . '/lib/jwt_parse.php';
require_once __DIR__ . '/lib/eams_login.php';
require_once __DIR__ . '/lib/ecard_login.php';

require_once __DIR__ . '/vendor/autoload.php';

use GuzzleHttp\Client;
use GuzzleHttp\Exception\GuzzleException;
use GuzzleHttp\Exception\RequestException;
use GuzzleHttp\Cookie\CookieJar;

$status = array(
    'idas' => false,
    'eams' => false,
    'ecard' => false
);

$token_json = [
    'username' => '',
    'cookie' => []
];

//log
//file_put_contents('log.php', date('c') . ',' . $_SERVER['REMOTE_ADDR'] . ',' . "login,\n", FILE_APPEND);
stdlog($_SERVER['REMOTE_ADDR'], 'login');

function master_login(string $u, string $p)
{
    global $status, $token_json;
}

try {
    if ($_SERVER['REQUEST_METHOD'] != 'POST') {
        throw new UMBException(206);
    }
    if (!(array_key_exists('username', $_POST) &&
        array_key_exists('passwd', $_POST))) {
        throw new UMBException(206);
    }
    if (array_key_exists('cap', $_POST)) {
        //验证码登录，需要token
        if (!array_key_exists('token', $_POST)) {
            throw new UMBException(206);
        }
    }

//检测用户输入
    if (!check_username($_POST['username'])) {
        throw new UMBException(204);
    }
    $token_json['username'] = $_POST['username'];
    if (strlen($_POST['username']) === 12) {
        $token_json['stu_type'] = 3;
        //研究生登录通道
        master_login($_POST['username'], $_POST['passwd']);
        exit;
    } else if (substr($token_json['username'], 4, 2) === '19')//格院
        $token_json['stu_type'] = 2;
    else
        $token_json['stu_type'] = 1;


//URL
    define('URL', 'https://idas.uestc.edu.cn/authserver/login');
    define('CapURL', 'https://idas.uestc.edu.cn/authserver/needCaptcha.html?username=' .
        $_POST['username'] . '&pwdEncrypt2=pwdEncryptSalt&_=');
    define('CapIMGURL', 'https://idas.uestc.edu.cn/authserver/captcha.html');

    $response = get(URL);
    if ($response === null) {
        throw new UMBException(203);
    }

    $cookie_str = '';//提取cookie字符串
    if (array_key_exists('cap', $_POST)) {//携带验证码，提取cookie，同时验证token
        $query_res = jwt_decode($_POST['token']);
        $cookie_str = $query_res['cookie']['idas'];
    } else {//读取新的cookie
        foreach ($response['header']['Set-Cookie'] as $value) {
            $cookie_str = strpos($value, ';') ?
                $cookie_str . substr($value, 0, strpos($value, ';')) . ';' :
                $cookie_str . $value . ';';
        }
        $cookie_str = substr($cookie_str, 0, strlen($cookie_str) - 1);//去掉末尾的分号
    }

//确定是否需要验证码
    if (strpos(get(CapURL . (string)time() . '000')['body'], 'false') === false) {
        //需要验证码
        if (!array_key_exists('cap', $_POST)) {//请求中不含验证码
            //cookie存入JWT，抛异常
            $token_json['cookie']['idas'] = $cookie_str;
            throw new UMBException(102);
        }
    }

    //不知道需不需要，需要应该也能登录的吧

    //2019-03-18更新，学校似乎又加上这玩意了。。。
    //2019-02-28更新，学校似乎又移除前端加密这个东西了
    //2019-01-27更新，添加密码加密配合新的idas

    preg_match('/pwdDefaultEncryptSalt\s\=\s\\"(.*?)\\"\;/', $response['body'], $secret);
    //加密密码字符串，适应idas接口
    $passwd = openssl_encrypt(
        str_repeat('fuckidas', 8) . $_POST['passwd'],
        'AES-128-CBC',
        $secret[1], 0, str_repeat('fuckidas', 2));

    //$passwd = $_POST['passwd'];
    //装载html，准备POST数据，shd挺稳定的，暂时不用正则了
    $html = new simple_html_dom();
    $html->load($response['body']);
    $input = $html->find('input');//读取所有输入框
    $data = [
        'username' => $_POST['username'],
        'password' => $passwd,
        $input[3]->name => $input[3]->value,
        $input[4]->name => $input[4]->value,
        $input[5]->name => $input[5]->value,
        $input[6]->name => $input[6]->value,
        $input[7]->name => $input[7]->value
    ];

    //带验证码登录，已经从数据库加载cookie_str，在$data中添加验证码
    if (array_key_exists('cap', $_POST))
        $data['captchaResponse'] = $_POST['cap'];

//发送登录请求
    $res = post(URL . ';jsessionid=' . $response['cookie']['JSESSIONID'], $data, $cookie_str);

    if ($res['status'] !== 302) {
        //登录失败
        if ($res['status'] === 200) {
            //登录失败，密码错误或者需要验证码，读取cpatchaDiv
            if (strpos($res['body'], 'id="msg"')) {//错误消息的提示
                //这里很丑，但是我忘了怎么改了
                $msg = substr($res['body'],
                    strpos($res['body'], '>', strpos($res['body'], 'id="msg"')) + 1,
                    strpos($res['body'], '</span>', strpos($res['body'], 'id="msg"')) -
                    strpos($res['body'], '>', strpos($res['body'], 'id="msg"')) - 1);


                if ($msg == '您提供的用户名或者密码有误') {
                    throw new UMBException(204);
                } elseif ($msg == '请输入验证码') {
                    throw new UMBException(104);
                } elseif ($msg == '无效的验证码') {
                    throw new UMBException(104);
                } else
                    throw new UMBException(202);
            } else
                throw new UMBException(202);
        } else
            throw new UMBException(202);
    }

    $status['idas'] = true;
    //登录成功，继续登录eams，cookie写入jwt
    $iPlanetDirectoryPro = '';
    foreach ($res['cookie'] as $key => $value) {//提取cookie字符串
        //iPlanetDirectoryPro单独处理
        if ($key == 'iPlanetDirectoryPro') {
            $iPlanetDirectoryPro = 'iPlanetDirectoryPro' . '=' . $value;
            continue;
        }
        $cookie_str = $key . '=' . $value . ';' . $cookie_str;
    }

    if (!$iPlanetDirectoryPro) {//如果没有这个cookie，估计是有问题的，为了稳定性
        throw new UMBException(202);
    }

    //写入jwt
    $token_json['cookie']['idas'] = $cookie_str;
    $token_json['cookie']['uestc'] = $iPlanetDirectoryPro;

    //eams登录
    $new_cookies = eams_login($cookie_str, $iPlanetDirectoryPro);
    if ($new_cookies == null) {
        throw new UMBException(108);
    }
    $status['eams'] = true;
    if ($new_cookies['idas'] != '') {
        preg_replace('/JSESSIONID\_ids\d\=.*;/', $new_cookies['idas'] . ';', $cookie_str);//idas改变
    }
    if ($new_cookies['iplan'] != '') {
        $iPlanetDirectoryPro = $new_cookies['iplan'];
    }
    //写入jwt
    $token_json['cookie']['eams'] = $new_cookies['eams'];

    //登录ecard
    $ecard_cookie = ecard_login($_POST['username'], $_POST['passwd'], $token_json);
    $status['ecard'] = true;
    //写入jwt
    $token_json['cookie']['ecard'] = $ecard_cookie;

    //响应
    echo json_encode([
        'success' => true,
        'error_code' => null,
        'error_msg' => '',
        'token' => jwt_encode($token_json),
        'status' => $status
    ]);
} catch
(UMBException $e) {
    if ($e->getCode() === 102)
        //验证码
        echo json_encode([
            'success' => true,
            'error_code' => $e->getCode(),
            'error_msg' => $e->getMessage(),
            'token' => jwt_encode($token_json),
            'cap_img' => base64_encode(get(CapIMGURL, $token_json['cookie']['idas'])['body'])
        ]);
    else
        //失败
        echo json_encode([
            'success' => false,
            'error_code' => $e->getCode(),
            'error_msg' => $e->getMessage(),
            //'token' => jwt_encode($token_json),
            'status' => $status
        ]);

}