62 lines
1.8 KiB
Python
62 lines
1.8 KiB
Python
"""认证：密码哈希、令牌签发/校验、短信验证码（兼容原 mock 方案）"""
|
||
import base64
|
||
import hashlib
|
||
import json
|
||
import time
|
||
import random
|
||
import re
|
||
|
||
SECRET = "pine-mock-secret-2026"
|
||
TOKEN_TTL_MS = 1000 * 60 * 60 * 12 # 12h
|
||
PHONE_RE = re.compile(r"^1\d{10}$")
|
||
CODE_TTL = 5 * 60 # 5 min
|
||
|
||
# 演示环境：内存验证码 map（phone -> {code, exp}），响应返回 debugCode
|
||
sms_codes: dict[str, dict] = {}
|
||
|
||
|
||
def hash_password(s: str) -> str:
|
||
return hashlib.sha256(str(s).encode()).hexdigest()
|
||
|
||
|
||
def b64url(data: bytes) -> str:
|
||
return base64.urlsafe_b64encode(data).rstrip(b"=").decode()
|
||
|
||
|
||
def make_token(username: str) -> str:
|
||
payload = b64url(json.dumps({"username": username, "exp": int(time.time() * 1000) + TOKEN_TTL_MS}).encode())
|
||
sig = b64url((SECRET + "." + payload).encode())
|
||
return f"{payload}.{sig}"
|
||
|
||
|
||
def verify_token(token: str):
|
||
if not token or not isinstance(token, str):
|
||
return None
|
||
parts = token.split(".")
|
||
if len(parts) != 2:
|
||
return None
|
||
payload_part, sig_part = parts
|
||
if b64url((SECRET + "." + payload_part).encode()) != sig_part:
|
||
return None
|
||
try:
|
||
payload = json.loads(base64.urlsafe_b64decode(payload_part + "=" * (-len(payload_part) % 4)).decode())
|
||
if not payload.get("exp") or payload["exp"] < time.time() * 1000:
|
||
return None
|
||
return {"username": payload["username"]}
|
||
except Exception:
|
||
return None
|
||
|
||
|
||
def send_sms_code(phone: str) -> str:
|
||
code = str(random.randint(100000, 999999))
|
||
sms_codes[phone] = {"code": code, "exp": time.time() + CODE_TTL}
|
||
return code
|
||
|
||
|
||
def check_sms_code(phone: str, code: str) -> bool:
|
||
rec = sms_codes.get(phone)
|
||
if not rec or rec["code"] != str(code) or time.time() > rec["exp"]:
|
||
return False
|
||
sms_codes.pop(phone, None)
|
||
return True
|