gper/Gnuboard7
1
0 Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

v7.0.0-beta.4 release

Browse Source
This commit is contained in:
HeuJung committed 2026-05-11 11:29:41 +09:00
1 parent 05db17887d
commit 1db039ff34
1545 files changed
+136783 -11634
Download Patch File Download Diff File Expand all files Collapse all files

No files matched your search

app/Database/Sample/AbstractIdentityVerificationLogSampleSeeder.php
+295
View File
@@ -0,0 +1,295 @@
<?php
namespace App\Database\Sample;
use App\Enums\IdentityOriginType;
use App\Enums\IdentityVerificationStatus;
use App\Extension\IdentityVerification\IdentityVerificationManager;
use App\Models\IdentityPolicy;
use App\Models\IdentityVerificationLog;
use App\Models\User;
use App\Traits\HasSeederCounts;
use Illuminate\Database\Eloquent\Builder;
use Illuminate\Database\Seeder;
use Illuminate\Support\Carbon;
use Illuminate\Support\Str;
/**
* 본인인증 이력 샘플 시더 추상 베이스.
*
* 코어/모듈/플러그인이 각자 영역의 IDV 이력을 채울 수 있도록 공통 골격을 제공한다.
* - 등록된 IdentityPolicy 중 자기 영역 정책만 추려서 사용
* - user_id = 실제 등록된 G7 사용자
* - provider_id = IdentityVerificationManager 에 등록된 실제 프로바이더
* - 상태 분포 = 운영 트래픽 비율 (verified 55, expired 15, failed 12, sent 7,
* cancelled 5, requested 3, policy_violation_logged 3)
* - attempts/expires_at/verified_at/consumed_at = 상태별 라이프사이클 일관성 보장
*
* 서브클래스는 영역 필터(applyPolicyScope) + 카운트 키/기본값 + 라벨을 정의한다.
*/
abstract class AbstractIdentityVerificationLogSampleSeeder extends Seeder
{
use HasSeederCounts;
/**
* 상태별 가중치 (총합 100).
*
* @var array<int, array{0: IdentityVerificationStatus, 1: int}>
*/
protected array $statusBuckets;
/**
* 한국/해외 IP 풀.
*
* @var array<int, string>
*/
protected array $ips = [
'121.78.45.12', '211.234.111.5', '125.142.88.91', '210.94.0.74',
'203.241.185.20', '180.182.50.7', '175.223.18.143', '218.236.42.61',
'14.45.110.222', '112.184.99.180', '61.43.232.18', '59.16.7.205',
'110.45.234.12', '106.247.83.190', '220.86.55.121',
'203.0.113.42', '198.51.100.7', '172.217.27.142',
'8.8.8.8', '1.1.1.1',
];
/**
* 데스크톱/모바일 UA 풀.
*
* @var array<int, string>
*/
protected array $userAgents = [
'Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/130.0.0.0 Safari/537.36',
'Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36 Edg/131.0.0.0',
'Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.6 Safari/605.1.15',
'Mozilla/5.0 (iPhone; CPU iPhone OS 17_5 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.5 Mobile/15E148 Safari/604.1',
'Mozilla/5.0 (Linux; Android 14; SM-S921N) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/130.0.0.0 Mobile Safari/537.36',
'Mozilla/5.0 (iPad; CPU OS 17_5 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.5 Mobile/15E148 Safari/604.1',
'Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/130.0.0.0 Safari/537.36',
'Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:130.0) Gecko/20100101 Firefox/130.0',
];
public function __construct()
{
$this->statusBuckets = [
[IdentityVerificationStatus::Verified, 55],
[IdentityVerificationStatus::Expired, 15],
[IdentityVerificationStatus::Failed, 12],
[IdentityVerificationStatus::Sent, 7],
[IdentityVerificationStatus::Cancelled, 5],
[IdentityVerificationStatus::Requested, 3],
[IdentityVerificationStatus::PolicyViolationLogged, 3],
];
}
/**
* IdentityPolicy 쿼리에 영역 필터를 적용한다.
*
* @param Builder $query IdentityPolicy 쿼리
* @return Builder 영역 필터가 적용된 쿼리
*/
abstract protected function applyPolicyScope(Builder $query): Builder;
/**
* 카운트 옵션 키.
*
* @return string 카운트 옵션 키
*/
abstract protected function countKey(): string;
/**
* 기본 생성 건수.
*
* @return int 기본 건수
*/
abstract protected function defaultCount(): int;
/**
* 콘솔 메시지에 사용할 영역 라벨.
*
* @return string 영역 라벨
*/
abstract protected function scopeLabel(): string;
/**
* 시더 실행.
*/
public function run(): void
{
$count = $this->getSeederCount($this->countKey(), $this->defaultCount());
$label = $this->scopeLabel();
$users = User::query()->get(['id', 'name', 'email']);
if ($users->isEmpty()) {
$this->command->warn("사용자 데이터가 없어 {$label} 본인인증 이력 시더를 건너뜁니다.");
return;
}
$policies = $this->applyPolicyScope(IdentityPolicy::query())
->get(['key', 'purpose', 'source_type', 'source_identifier', 'provider_id']);
if ($policies->isEmpty()) {
$this->command->warn("{$label} 영역 IdentityPolicy 가 없어 시더를 건너뜁니다.");
return;
}
$manager = app(IdentityVerificationManager::class);
$providerIds = array_keys($manager->all());
if (empty($providerIds)) {
$this->command->warn("등록된 본인인증 프로바이더가 없어 {$label} 시더를 건너뜁니다.");
return;
}
$this->command->info("{$label} 본인인증 이력 시딩 시작... ({$count}건)");
$ttlMinutes = (int) config('settings.identity.challenge_ttl_minutes', 15);
$maxAttempts = (int) config('settings.identity.max_attempts', 5);
$now = Carbon::now();
$batch = [];
for ($i = 0; $i < $count; $i++) {
$user = $users->random();
$policy = $policies->random();
$providerId = $policy->provider_id ?: $providerIds[array_rand($providerIds)];
$status = $this->pickStatus();
$renderHint = mt_rand(1, 100) <= 70 ? 'text_code' : 'email_link';
$createdAt = $this->randomCreatedAt($now);
[$expiresAt, $verifiedAt, $consumedAt, $attempts] = $this->buildLifecycle(
$status,
$createdAt,
$ttlMinutes,
$maxAttempts,
);
$properties = $renderHint === 'text_code'
? ['code_length' => 6]
: ['link_hint' => 'email_link'];
$metadata = $status === IdentityVerificationStatus::PolicyViolationLogged
? ['violation_reason' => 'fail_mode_log_only']
: ['hint_used' => $renderHint];
$batch[] = [
'id' => (string) Str::uuid(),
'provider_id' => $providerId,
'purpose' => $policy->purpose,
'channel' => 'email',
'user_id' => $user->id,
'target_hash' => hash('sha256', mb_strtolower($user->email)),
'status' => $status->value,
'render_hint' => $renderHint,
'attempts' => $attempts,
'max_attempts' => $maxAttempts,
'ip_address' => $this->ips[array_rand($this->ips)],
'user_agent' => $this->userAgents[array_rand($this->userAgents)],
// 본 시더의 모든 challenge 는 IdentityPolicy enforce 경로를 통한 것이므로
// origin_type 은 'policy' 로 분류한다 (이전 버전에서는 source_type 을 잘못 매핑).
'origin_type' => IdentityOriginType::Policy->value,
'origin_identifier' => $policy->source_identifier,
'origin_policy_key' => $policy->key,
'properties' => json_encode($properties, JSON_UNESCAPED_UNICODE),
'metadata' => json_encode($metadata, JSON_UNESCAPED_UNICODE),
'verification_token' => $status === IdentityVerificationStatus::Verified
? bin2hex(random_bytes(32))
: null,
'expires_at' => $expiresAt,
'verified_at' => $verifiedAt,
'consumed_at' => $consumedAt,
'created_at' => $createdAt,
'updated_at' => $verifiedAt ?? $createdAt,
];
}
foreach (array_chunk($batch, 100) as $chunk) {
IdentityVerificationLog::insert($chunk);
}
$this->command->info("{$label} 본인인증 이력 시딩 완료 ({$count}건)");
}
/**
* 가중치 기반 상태 선택.
*
* @return IdentityVerificationStatus 선택된 상태
*/
protected function pickStatus(): IdentityVerificationStatus
{
$r = mt_rand(1, 100);
$acc = 0;
foreach ($this->statusBuckets as [$status, $weight]) {
$acc += $weight;
if ($r <= $acc) {
return $status;
}
}
return IdentityVerificationStatus::Verified;
}
/**
* 상태별 라이프사이클 일관성 있게 구성.
*
* @param IdentityVerificationStatus $status Challenge 상태
* @param Carbon $createdAt 생성 시각
* @param int $ttlMinutes TTL (분)
* @param int $maxAttempts 최대 시도 횟수
* @return array{0: Carbon|null, 1: Carbon|null, 2: Carbon|null, 3: int} [expires_at, verified_at, consumed_at, attempts]
*/
protected function buildLifecycle(
IdentityVerificationStatus $status,
Carbon $createdAt,
int $ttlMinutes,
int $maxAttempts,
): array {
$expiresAt = (clone $createdAt)->addMinutes($ttlMinutes);
$verifiedAt = null;
$consumedAt = null;
$attempts = 0;
switch ($status) {
case IdentityVerificationStatus::Verified:
$attempts = mt_rand(1, 3);
$verifiedAt = (clone $createdAt)->addSeconds(mt_rand(20, 600));
if (mt_rand(0, 1)) {
$consumedAt = (clone $verifiedAt)->addSeconds(mt_rand(1, 30));
}
break;
case IdentityVerificationStatus::Expired:
$attempts = mt_rand(0, 2);
break;
case IdentityVerificationStatus::Failed:
$attempts = $maxAttempts;
break;
case IdentityVerificationStatus::Cancelled:
$attempts = mt_rand(0, 2);
break;
case IdentityVerificationStatus::Sent:
case IdentityVerificationStatus::Requested:
$attempts = 0;
break;
case IdentityVerificationStatus::PolicyViolationLogged:
$expiresAt = null;
$attempts = 0;
break;
}
return [$expiresAt, $verifiedAt, $consumedAt, $attempts];
}
/**
* 최근 60일 내 임의 생성 시각.
*
* @param Carbon $now 기준 시각
* @return Carbon Challenge 생성 시각
*/
protected function randomCreatedAt(Carbon $now): Carbon
{
return (clone $now)
->subDays(mt_rand(0, 60))
->subHours(mt_rand(0, 23))
->subMinutes(mt_rand(0, 59))
->subSeconds(mt_rand(0, 59));
}
}