用户系统

// config/user.php
return [
    // 允许注册
    'allow_register' => true,

    // 需要邮箱验证
    'email_verify' => true,

    // 需要手机验证
    'phone_verify' => false,

    // 默认用户组
    'default_group' => 'member',

    // 初始积分
    'init_points' => 100,
];

'user_levels' => [
    [
        'level' => 1,
        'name' => '新手上路',
        'points' => 0,
        'icon' => 'level1.png'
    ],
    [
        'level' => 2,
        'name' => '初级会员',
        'points' => 100,
        'icon' => 'level2.png'
    ],
    [
        'level' => 3,
        'name' => '中级会员',
        'points' => 500,
        'icon' => 'level3.png'
    ],
    [
        'level' => 4,
        'name' => '高级会员',
        'points' => 2000,
        'icon' => 'level4.png'
    ],
    [
        'level' => 5,
        'name' => 'VIP 会员',
        'points' => 5000,
        'icon' => 'level5.png'
    ],
],

// config/points.php
return [
    'register' => 100,          // 注册
    'login' => 10,              // 登录
    'publish_article' => 20,    // 发布文章
    'comment' => 5,             // 评论
    'article_liked' => 2,       // 文章被赞
    'download' => -10,          // 下载
];

'wechat' => [
    'app_id' => 'your_app_id',
    'app_secret' => 'your_app_secret',
    'callback' => 'http://your-domain.com/auth/wechat/callback',
],

use Overtrue\Socialite\SocialiteManager;

// 跳转到微信授权页
public function wechat()
{
    $config = config('oauth.wechat');
    $socialite = new SocialiteManager($config);

    return redirect($socialite->driver('wechat')->redirect());
}

// 回调处理
public function wechatCallback()
{
    $config = config('oauth.wechat');
    $socialite = new SocialiteManager($config);

    $user = $socialite->driver('wechat')->user();

    // 查找或创建用户
    $localUser = $this->findOrCreateUser($user, 'wechat');

    // 登录
    session('user_id', $localUser->id);

    return redirect('/');
}

'password' => [
    'min_length' => 8,
    'require_uppercase' => true,
    'require_lowercase' => true,
    'require_number' => true,
    'require_special' => false,
],

// 使用 bcrypt 加密
$password = password_hash($plainPassword, PASSWORD_BCRYPT);

// 验证密码
if (password_verify($plainPassword, $hashedPassword)) {
    // 密码正确
}

// 5次失败锁定30分钟
$attempts = Cache::get('login_attempts_' . $username, 0);

if ($attempts >= 5) {
    throw new \Exception('登录失败次数过多，请30分钟后重试');
}

// 登录失败
Cache::set('login_attempts_' . $username, $attempts + 1, 1800);

// 检测异地登录
$lastLoginIp = $user->last_login_ip;
$currentIp = request()->ip();

if ($lastLoginIp && $lastLoginIp != $currentIp) {
    // 发送提醒邮件
    Mail::send('mail/login_alert', [
        'user' => $user,
        'ip' => $currentIp,
        'time' => date('Y-m-d H:i:s')
    ], function($message) use ($user) {
        $message->to($user->email)
            ->subject('异地登录提醒');
    });
}

use PragmaRX\Google2FA\Google2FA;

// 生成密钥
$google2fa = new Google2FA();
$secret = $google2fa->generateSecretKey();

// 验证码
$valid = $google2fa->verifyKey($secret, $code);