fix phone auth

feat: phone validate
feat: update phone validation
2025-12-20 13:06:09 +08:00 · 2025-12-20 12:56:06 +08:00 · 2025-12-20 11:52:08 +08:00
19 changed files with 494 additions and 134 deletions
--- a/backend_v1/app/http/admin/routes.gen.go
+++ b/backend_v1/app/http/admin/routes.gen.go
@@ -5,12 +5,11 @@
 package admin

 import (
+	"go.ipao.vip/gen/field"
 	"quyun/v2/app/middlewares"
 	"quyun/v2/app/requests"
 	"quyun/v2/database/models"

-	"go.ipao.vip/gen/field"
-
 	"github.com/gofiber/fiber/v3"
 	log "github.com/sirupsen/logrus"
 	_ "go.ipao.vip/atom"
@@ -21,7 +20,7 @@ import (
 // Routes implements the HttpRoute contract and provides route registration
 // for all controllers in the admin module.
 //
-//	@provider	contracts.HttpRoute atom.GroupRoutes
+// @provider contracts.HttpRoute atom.GroupRoutes
 type Routes struct {
 	log         *log.Entry `inject:"false"`
 	middlewares *middlewares.Middlewares
--- a/backend_v1/app/http/auth.go
+++ b/backend_v1/app/http/auth.go
@@ -1,28 +1,30 @@
 package http

 import (
-	_ "embed"
-	"errors"
-
 	"quyun/v2/app/services"
+	"quyun/v2/providers/jwt"

 	"github.com/gofiber/fiber/v3"
+	"github.com/pkg/errors"
 	"gorm.io/gorm"
 )

 // @provider
-type auth struct{}
+type auth struct {
+	jwt *jwt.JWT
+}

 // Phone
 //
 //	@Summary	手机验证
 //	@Tags		Auth
 //	@Produce	json
-//	@Success	200	{object}	requests.Pager{items=PostItem}	"成功"
-//	@Router		/v1/auth/:phone [post]
-//	@Bind		phone path
-func (ctl *posts) Phone(ctx fiber.Ctx, phone string) error {
-	_, err := services.Users.FindByPhone(ctx, phone)
+//	@Param		form	body		PhoneValidationForm	true	"手机号"
+//	@Success	200		{object}	any					"成功"
+//	@Router		/v1/auth/phone [post]
+//	@Bind		form body
+func (ctl *auth) Phone(ctx fiber.Ctx, form *PhoneValidationForm) error {
+	_, err := services.Users.FindByPhone(ctx, form.Phone)
 	if err != nil {
 		if errors.Is(err, gorm.ErrRecordNotFound) {
 			return errors.New("手机号未注册，请联系管理员开通")
@@ -32,3 +34,40 @@ func (ctl *posts) Phone(ctx fiber.Ctx, phone string) error {
 	// TODO: send sms
 	return nil
 }
+
+type PhoneValidationForm struct {
+	Phone string  `json:"phone,omitempty"`
+	Code  *string `json:"code,omitempty"`
+}
+
+type TokenResponse struct {
+	Token string `json:"token,omitempty"`
+}
+
+// Validate
+//
+//	@Summary	手机验证
+//	@Tags		Auth
+//	@Produce	json
+//	@Param		body	body		PhoneValidationForm	true	"请求体"
+//	@Success	200		{object}	any					"成功"
+//	@Router		/v1/auth/validate [post]
+//	@Bind		body body
+func (ctl *auth) Validate(ctx fiber.Ctx, body *PhoneValidationForm) (*TokenResponse, error) {
+	user, err := services.Users.FindByPhone(ctx, body.Phone)
+	if err != nil {
+		return nil, errors.New("手机号未注册，请联系管理员开通")
+	}
+
+	if body.Code == nil || *body.Code != "1234" {
+		return nil, errors.New("验证码错误")
+	}
+
+	// generate token for user
+	jwtToken, err := ctl.jwt.CreateToken(ctl.jwt.CreateClaims(jwt.BaseClaims{UserID: user.ID}))
+	if err != nil {
+		return nil, errors.Wrap(err, "failed to create token")
+	}
+
+	return &TokenResponse{Token: jwtToken}, nil
+}
--- a/backend_v1/app/http/posts.go
+++ b/backend_v1/app/http/posts.go
@@ -69,7 +69,7 @@ func (ctl *posts) List(
 	}

 	postIds := lo.Map(pager.Items.([]*models.Post), func(item *models.Post, _ int) int64 { return item.ID })
-	if len(postIds) > 0 {
+	if len(postIds) > 0 && user != nil {
 		userBoughtIds, err := services.Users.BatchCheckHasBought(ctx, user.ID, postIds)
 		if err != nil {
 			log.WithError(err).Errorf("BatchCheckHasBought err: %v", err)
@@ -146,9 +146,13 @@ func (ctl *posts) Show(ctx fiber.Ctx, post *models.Post, user *models.User) (*Po
 		return nil, fiber.ErrNotFound
 	}

-	bought, err := services.Users.HasBought(ctx, user.ID, post.ID)
-	if err != nil {
-		return nil, err
+	var err error
+	bought := false
+	if user != nil {
+		bought, err = services.Users.HasBought(ctx, user.ID, post.ID)
+		if err != nil {
+			return nil, err
+		}
 	}

 	medias, err := services.Posts.GetMediasByIds(ctx, post.HeadImages.Data())
@@ -200,10 +204,14 @@ func (ctl *posts) Play(ctx fiber.Ctx, post *models.Post, user *models.User) (*Pl
 	// 	Url: "https://github.com/mediaelement/mediaelement-files/raw/refs/heads/master/big_buck_bunny.mp4",
 	// }, nil

-	preview := false
+	preview := true
 	bought, err := services.Users.HasBought(ctx, user.ID, post.ID)
-	if !bought || err != nil {
-		preview = true
+	if err != nil {
+		preview = false
+	}
+
+	if bought {
+		preview = false
 	}

 	log.Infof("Fetching play URL for post ID: %d", post.ID)
--- a/backend_v1/app/http/provider.gen.go
+++ b/backend_v1/app/http/provider.gen.go
@@ -5,6 +5,7 @@ import (
 	"quyun/v2/providers/ali"
 	"quyun/v2/providers/app"
 	"quyun/v2/providers/job"
+	"quyun/v2/providers/jwt"

 	"go.ipao.vip/atom"
 	"go.ipao.vip/atom/container"
@@ -13,6 +14,17 @@ import (
 )

 func Provide(opts ...opt.Option) error {
+	if err := container.Container.Provide(func(
+		jwt *jwt.JWT,
+	) (*auth, error) {
+		obj := &auth{
+			jwt: jwt,
+		}
+
+		return obj, nil
+	}); err != nil {
+		return err
+	}
 	if err := container.Container.Provide(func(
 		app *app.Config,
 		job *job.Job,
@@ -29,11 +41,13 @@ func Provide(opts ...opt.Option) error {
 		return err
 	}
 	if err := container.Container.Provide(func(
+		auth *auth,
 		middlewares *middlewares.Middlewares,
 		posts *posts,
 		users *users,
 	) (contracts.HttpRoute, error) {
 		obj := &Routes{
+			auth:        auth,
 			middlewares: middlewares,
 			posts:       posts,
 			users:       users,
--- a/backend_v1/app/http/routes.gen.go
+++ b/backend_v1/app/http/routes.gen.go
@@ -5,12 +5,11 @@
 package http

 import (
+	"go.ipao.vip/gen/field"
 	"quyun/v2/app/middlewares"
 	"quyun/v2/app/requests"
 	"quyun/v2/database/models"

-	"go.ipao.vip/gen/field"
-
 	"github.com/gofiber/fiber/v3"
 	log "github.com/sirupsen/logrus"
 	_ "go.ipao.vip/atom"
@@ -21,11 +20,12 @@ import (
 // Routes implements the HttpRoute contract and provides route registration
 // for all controllers in the http module.
 //
-//	@provider	contracts.HttpRoute atom.GroupRoutes
+// @provider contracts.HttpRoute atom.GroupRoutes
 type Routes struct {
 	log         *log.Entry `inject:"false"`
 	middlewares *middlewares.Middlewares
 	// Controller instances
+	auth  *auth
 	posts *posts
 	users *users
 }
@@ -45,6 +45,17 @@ func (r *Routes) Name() string {
 // Register registers all HTTP routes with the provided fiber router.
 // Each route is registered with its corresponding controller action and parameter bindings.
 func (r *Routes) Register(router fiber.Router) {
+	// Register routes for controller: auth
+	r.log.Debugf("Registering route: Post /v1/auth/phone -> auth.Phone")
+	router.Post("/v1/auth/phone"[len(r.Path()):], Func1(
+		r.auth.Phone,
+		Body[PhoneValidationForm]("form"),
+	))
+	r.log.Debugf("Registering route: Post /v1/auth/validate -> auth.Validate")
+	router.Post("/v1/auth/validate"[len(r.Path()):], DataFunc1(
+		r.auth.Validate,
+		Body[PhoneValidationForm]("body"),
+	))
 	// Register routes for controller: posts
 	r.log.Debugf("Registering route: Get /v1/posts -> posts.List")
 	router.Get("/v1/posts"[len(r.Path()):], DataFunc3(
--- a/backend_v1/app/http/v1/routes.gen.go
+++ b/backend_v1/app/http/v1/routes.gen.go
@@ -20,7 +20,7 @@ import (
 // Routes implements the HttpRoute contract and provides route registration
 // for all controllers in the v1 module.
 //
-//	@provider	contracts.HttpRoute atom.GroupRoutes
+// @provider contracts.HttpRoute atom.GroupRoutes
 type Routes struct {
 	log         *log.Entry `inject:"false"`
 	middlewares *middlewares.Middlewares
--- a/backend_v1/app/middlewares/mid_auth_frontend.go
+++ b/backend_v1/app/middlewares/mid_auth_frontend.go
@@ -16,6 +16,16 @@ func (f *Middlewares) AuthFrontend(ctx fiber.Ctx) error {
 		return ctx.Next()
 	}

+	if ctx.Path() == "/v1/posts" {
+		return ctx.Next()
+	}
+	if strings.HasPrefix(ctx.Path(), "/v1/posts/") && strings.HasSuffix(ctx.Path(), "show") {
+		return ctx.Next()
+	}
+	if strings.HasPrefix(ctx.Path(), "/v1/posts/") && strings.HasSuffix(ctx.Path(), "play") {
+		return ctx.Next()
+	}
+
 	if f.app.IsDevMode() && false {
 		user, err := services.Users.FindByID(ctx.Context(), 1001)
 		if err != nil {
@@ -36,10 +46,9 @@ func (f *Middlewares) AuthFrontend(ctx fiber.Ctx) error {
 	u.Path = "/v1/auth/phone"
 	fullUrl = u.String()

-	// check cookie exists
-	cookie := ctx.Cookies("token")
-	log.Infof("cookie: %s", cookie)
-	if cookie == "" {
+	// 仅使用 Header 的 Bearer Token（前端 localStorage 存储，随请求透传）。
+	token := ctx.Get("Authorization")
+	if token == "" {
 		log.Infof("auth redirect_uri: %s", fullUrl)
 		if ctx.XHR() {
 			return ctx.SendStatus(fiber.StatusUnauthorized)
@@ -47,10 +56,8 @@ func (f *Middlewares) AuthFrontend(ctx fiber.Ctx) error {
 		return ctx.Redirect().To(fullUrl)
 	}

-	jwt, err := f.jwt.Parse(cookie)
+	jwt, err := f.jwt.Parse(token)
 	if err != nil {
-		// remove cookie
-		ctx.ClearCookie("token")
 		if ctx.XHR() {
 			return ctx.SendStatus(fiber.StatusUnauthorized)
 		}
@@ -59,8 +66,6 @@ func (f *Middlewares) AuthFrontend(ctx fiber.Ctx) error {

 	user, err := services.Users.FindByID(ctx.Context(), jwt.UserID)
 	if err != nil {
-		// remove cookie
-		ctx.ClearCookie("token")
 		if ctx.XHR() {
 			return ctx.SendStatus(fiber.StatusUnauthorized)
 		}
--- a/backend_v1/docs/docs.go
+++ b/backend_v1/docs/docs.go
@@ -698,7 +698,7 @@ const docTemplate = `{
                }
            }
        },
-        "/v1/auth/{phone}": {
+        "/v1/auth/phone": {
            "post": {
                "produces": [
                    "application/json"
@@ -707,25 +707,50 @@ const docTemplate = `{
                    "Auth"
                ],
                "summary": "手机验证",
+                "parameters": [
+                    {
+                        "description": "手机号",
+                        "name": "form",
+                        "in": "body",
+                        "required": true,
+                        "schema": {
+                            "$ref": "#/definitions/http.PhoneValidationForm"
+                        }
+                    }
+                ],
                "responses": {
                    "200": {
                        "description": "成功",
+                        "schema": {}
+                    }
+                }
+            }
+        },
+        "/v1/auth/validate": {
+            "post": {
+                "produces": [
+                    "application/json"
+                ],
+                "tags": [
+                    "Auth"
+                ],
+                "summary": "手机验证",
+                "parameters": [
+                    {
+                        "description": "请求体",
+                        "name": "body",
+                        "in": "body",
+                        "required": true,
                        "schema": {
-                            "allOf": [
-                                {
-                                    "$ref": "#/definitions/requests.Pager"
-                                },
-                                {
-                                    "type": "object",
-                                    "properties": {
-                                        "items": {
-                                            "$ref": "#/definitions/http.PostItem"
-                                        }
-                                    }
-                                }
-                            ]
+                            "$ref": "#/definitions/http.PhoneValidationForm"
                        }
                    }
+                ],
+                "responses": {
+                    "200": {
+                        "description": "成功",
+                        "schema": {}
+                    }
                }
            }
        },
@@ -1280,6 +1305,17 @@ const docTemplate = `{
                }
            }
        },
+        "http.PhoneValidationForm": {
+            "type": "object",
+            "properties": {
+                "code": {
+                    "type": "string"
+                },
+                "phone": {
+                    "type": "string"
+                }
+            }
+        },
        "http.PlayUrl": {
            "type": "object",
            "properties": {
@@ -1379,10 +1415,7 @@ const docTemplate = `{
                    "type": "integer"
                },
                "metas": {
-                    "type": "array",
-                    "items": {
-                        "type": "integer"
-                    }
+                    "$ref": "#/definitions/types.JSONType-fields_MediaMetas"
                },
                "mime_type": {
                    "type": "string"
@@ -1589,6 +1622,9 @@ const docTemplate = `{
        "types.JSONType-array_string": {
            "type": "object"
        },
+        "types.JSONType-fields_MediaMetas": {
+            "type": "object"
+        },
        "types.JSONType-fields_OrderMeta": {
            "type": "object"
        },
--- a/backend_v1/docs/swagger.json
+++ b/backend_v1/docs/swagger.json
@@ -692,7 +692,7 @@
                }
            }
        },
-        "/v1/auth/{phone}": {
+        "/v1/auth/phone": {
            "post": {
                "produces": [
                    "application/json"
@@ -701,25 +701,50 @@
                    "Auth"
                ],
                "summary": "手机验证",
+                "parameters": [
+                    {
+                        "description": "手机号",
+                        "name": "form",
+                        "in": "body",
+                        "required": true,
+                        "schema": {
+                            "$ref": "#/definitions/http.PhoneValidationForm"
+                        }
+                    }
+                ],
                "responses": {
                    "200": {
                        "description": "成功",
+                        "schema": {}
+                    }
+                }
+            }
+        },
+        "/v1/auth/validate": {
+            "post": {
+                "produces": [
+                    "application/json"
+                ],
+                "tags": [
+                    "Auth"
+                ],
+                "summary": "手机验证",
+                "parameters": [
+                    {
+                        "description": "请求体",
+                        "name": "body",
+                        "in": "body",
+                        "required": true,
                        "schema": {
-                            "allOf": [
-                                {
-                                    "$ref": "#/definitions/requests.Pager"
-                                },
-                                {
-                                    "type": "object",
-                                    "properties": {
-                                        "items": {
-                                            "$ref": "#/definitions/http.PostItem"
-                                        }
-                                    }
-                                }
-                            ]
+                            "$ref": "#/definitions/http.PhoneValidationForm"
                        }
                    }
+                ],
+                "responses": {
+                    "200": {
+                        "description": "成功",
+                        "schema": {}
+                    }
                }
            }
        },
@@ -1274,6 +1299,17 @@
                }
            }
        },
+        "http.PhoneValidationForm": {
+            "type": "object",
+            "properties": {
+                "code": {
+                    "type": "string"
+                },
+                "phone": {
+                    "type": "string"
+                }
+            }
+        },
        "http.PlayUrl": {
            "type": "object",
            "properties": {
@@ -1373,10 +1409,7 @@
                    "type": "integer"
                },
                "metas": {
-                    "type": "array",
-                    "items": {
-                        "type": "integer"
-                    }
+                    "$ref": "#/definitions/types.JSONType-fields_MediaMetas"
                },
                "mime_type": {
                    "type": "string"
@@ -1583,6 +1616,9 @@
        "types.JSONType-array_string": {
            "type": "object"
        },
+        "types.JSONType-fields_MediaMetas": {
+            "type": "object"
+        },
        "types.JSONType-fields_OrderMeta": {
            "type": "object"
        },
--- a/backend_v1/docs/swagger.yaml
+++ b/backend_v1/docs/swagger.yaml
@@ -164,6 +164,13 @@ definitions:
        description: Valid is true if Time is not NULL
        type: boolean
    type: object
+  http.PhoneValidationForm:
+    properties:
+      code:
+        type: string
+      phone:
+        type: string
+    type: object
  http.PlayUrl:
    properties:
      url:
@@ -229,9 +236,7 @@ definitions:
      id:
        type: integer
      metas:
-        items:
-          type: integer
-        type: array
+        $ref: '#/definitions/types.JSONType-fields_MediaMetas'
      mime_type:
        type: string
      name:
@@ -367,6 +372,8 @@ definitions:
    type: object
  types.JSONType-array_string:
    type: object
+  types.JSONType-fields_MediaMetas:
+    type: object
  types.JSONType-fields_OrderMeta:
    type: object
  types.JSONType-fields_UserAuthToken:
@@ -830,20 +837,39 @@ paths:
      summary: 调整用户余额
      tags:
      - Admin Users
-  /v1/auth/{phone}:
+  /v1/auth/phone:
    post:
+      parameters:
+      - description: 手机号
+        in: body
+        name: form
+        required: true
+        schema:
+          $ref: '#/definitions/http.PhoneValidationForm'
      produces:
      - application/json
      responses:
        "200":
          description: 成功
-          schema:
-            allOf:
-            - $ref: '#/definitions/requests.Pager'
-            - properties:
-                items:
-                  $ref: '#/definitions/http.PostItem'
-              type: object
+          schema: {}
+      summary: 手机验证
+      tags:
+      - Auth
+  /v1/auth/validate:
+    post:
+      parameters:
+      - description: 请求体
+        in: body
+        name: body
+        required: true
+        schema:
+          $ref: '#/definitions/http.PhoneValidationForm'
+      produces:
+      - application/json
+      responses:
+        "200":
+          description: 成功
+          schema: {}
      summary: 手机验证
      tags:
      - Auth
--- a/frontend/wechat/src/api/authApi.js
+++ b/frontend/wechat/src/api/authApi.js
@@ -0,0 +1,14 @@
+import client from "./client";
+
+export const authApi = {
+    sendPhoneSms(phone) {
+        return client.post("/auth/phone", { phone: String(phone || "").trim() });
+    },
+    validateSmsCode(phone, code) {
+        return client.post("/auth/validate", {
+            phone: String(phone || "").trim(),
+            code: String(code || "").trim(),
+        });
+    },
+};
+
--- a/frontend/wechat/src/api/client.js
+++ b/frontend/wechat/src/api/client.js
@@ -1,10 +1,15 @@
 import axios from 'axios';

+function getCurrentPathWithQueryHash() {
+    const { pathname, search, hash } = window.location;
+    return `${pathname}${search}${hash}`;
+}
+
 // Create axios instance with default config
 const client = axios.create({
    baseURL: '/v1',
    timeout: 10000,
-    withCredentials: true,
+    withCredentials: false,
    headers: {
        'Content-Type': 'application/json',
        'X-Requested-With': 'XMLHttpRequest',
@@ -16,6 +21,11 @@ const client = axios.create({
 // Request interceptor
 client.interceptors.request.use(
    config => {
+        const token = localStorage.getItem('token');
+        if (token) {
+            config.headers = config.headers || {};
+            config.headers['Authorization'] = token.startsWith('Bearer ') ? token : `Bearer ${token}`;
+        }
        return config;
    },
    error => {
@@ -29,13 +39,20 @@ client.interceptors.response.use(
        return response
    },
    error => {
+        const noAuthRedirect = Boolean(error?.config?.meta?.noAuthRedirect);
        // Handle HTTP errors here
        if (error.response) {
            // Handle 401 Unauthorized error
            if (error.response.status === 401) {
-                const redirectUrl = encodeURIComponent(window.location.href);
-                window.location.href = `/v1/auth/wechat?redirect=${redirectUrl}`;
-                return;
+                if (noAuthRedirect) {
+                    return Promise.reject(error);
+                }
+                const redirectPath = encodeURIComponent(getCurrentPathWithQueryHash());
+                sessionStorage.setItem('post_auth_redirect', getCurrentPathWithQueryHash());
+                sessionStorage.removeItem('phone_verified');
+                localStorage.removeItem('token');
+                window.location.href = `/verify-phone?redirect=${redirectPath}`;
+                return Promise.reject(error);
            }
            // Server responded with error status
            console.error('API Error:', error.response.status, error.response.data);
--- a/frontend/wechat/src/api/postApi.js
+++ b/frontend/wechat/src/api/postApi.js
@@ -3,6 +3,7 @@ import client from './client';
 export const postApi = {
    list({ page = 1, limit = 10, keyword = '' } = {}) {
        return client.get('/posts', {
+            meta: { noAuthRedirect: true },
            params: {
                page,
                limit,
@@ -12,10 +13,10 @@ export const postApi = {
    },

    play(id) {
-        return client.get(`/posts/${id}/play`);
+        return client.get(`/posts/${id}/play`, { meta: { noAuthRedirect: true } });
    },
    show(id) {
-        return client.get(`/posts/${id}/show`);
+        return client.get(`/posts/${id}/show`, { meta: { noAuthRedirect: true } });
    },
    mine({ page = 1, limit = 10 } = {}) {
        return client.get('/posts/mine', {
@@ -28,4 +29,4 @@ export const postApi = {
    buy(id) {
        return client.post(`/posts/${id}/buy`);
    }
-}
+}
--- a/frontend/wechat/src/layouts/MainLayout.vue
+++ b/frontend/wechat/src/layouts/MainLayout.vue
@@ -5,6 +5,7 @@ import { useRouter } from 'vue-router'

 const router = useRouter()
 const activeTab = ref(0)
+const isAuthed = () => Boolean(localStorage.getItem('token'))

 const tabs = [
    { label: '列表', route: '/', icon: AiOutlineHome },
@@ -13,6 +14,11 @@ const tabs = [
 ]

 const switchTab = (index, route) => {
+    if ((route === '/purchased' || route === '/profile') && !isAuthed()) {
+        const redirect = encodeURIComponent(route)
+        router.replace(`/verify-phone?redirect=${redirect}`)
+        return
+    }
    activeTab.value = index
    router.replace(route)
 }
--- a/frontend/wechat/src/router.js
+++ b/frontend/wechat/src/router.js
@@ -27,6 +27,11 @@ const routes = [
        path: '/posts/:id',
        name: 'article-detail',
        component: () => import('@/views/ArticleDetail.vue')
+    },
+    {
+        path: '/verify-phone',
+        name: 'verify-phone',
+        component: () => import('@/views/VerifyPhone.vue')
    }
 ]

--- a/frontend/wechat/src/views/ArticleDetail.vue
+++ b/frontend/wechat/src/views/ArticleDetail.vue
@@ -87,6 +87,11 @@ const updateMediaSource = async () => {
 };

 const handleBuy = async () => {
+    if (!localStorage.getItem('token')) {
+        const redirect = encodeURIComponent(router.currentRoute.value.fullPath);
+        router.replace(`/verify-phone?redirect=${redirect}`);
+        return;
+    }
    // confirm
    if (!confirm("确认购买该曲谱？")) {
        return;
@@ -137,7 +142,7 @@ const handleBuy = async () => {
    } catch (error) {
        console.error("Failed to initiate payment:", error);
        // alert("发起支付失败，请稍后重试");
-        alert(error.response?.data || "发起支付失败，请稍后重试");
+        alert(error.response?.data?.message || "发起支付失败，请稍后重试");
    } finally {
        buying.value = false;
    }
@@ -209,7 +214,8 @@ onUnmounted(() => {

                <div v-if="article && !article.bought" class="bg-white border-b border-gray-200">
                    <div v-if="article.recharge_wechat" class="text-sm bg-orange-500 text-white px-4 py-2">
-                        注意：未购买视频仅可预览 1 分钟，购买后可观看全集。账户充值购买联系微信：<span class="font-bold">{{ article.recharge_wechat }}</span>
+                        注意：未购买视频仅可预览 1 分钟，购买后可观看全集。账户充值购买联系微信：<span class="font-bold">{{ article.recharge_wechat
+                            }}</span>
                    </div>
                    <div class="flex items-center justify-between max-w-md mx-auto p-4">
                        <div class="text-orange-600 text-2xl">
--- a/frontend/wechat/src/views/VerifyPhone.vue
+++ b/frontend/wechat/src/views/VerifyPhone.vue
@@ -0,0 +1,129 @@
+<script setup>
+import { authApi } from "@/api/authApi";
+import { computed, onMounted, ref } from "vue";
+import { useRoute, useRouter } from "vue-router";
+
+const route = useRoute();
+const router = useRouter();
+
+const phone = ref("");
+const code = ref("");
+const sending = ref(false);
+const verifying = ref(false);
+const countdown = ref(0);
+let countdownTimer = null;
+
+const canSend = computed(() => !sending.value && countdown.value <= 0 && phone.value.trim().length >= 6);
+const canVerify = computed(() => !verifying.value && phone.value.trim() !== "" && code.value.trim() !== "");
+
+const startCountdown = (seconds = 60) => {
+    countdown.value = seconds;
+    if (countdownTimer) clearInterval(countdownTimer);
+    countdownTimer = setInterval(() => {
+        countdown.value -= 1;
+        if (countdown.value <= 0) {
+            clearInterval(countdownTimer);
+            countdownTimer = null;
+        }
+    }, 1000);
+};
+
+const handleSend = async () => {
+    if (!canSend.value) return;
+    sending.value = true;
+    try {
+        await authApi.sendPhoneSms(phone.value);
+        startCountdown(60);
+        alert("验证码已发送");
+    } catch (error) {
+        console.log(error)
+        alert(error?.response?.data?.message || "发送验证码失败");
+    } finally {
+        sending.value = false;
+    }
+};
+
+const normalizeRedirect = (value) => {
+    if (!value) return null;
+    try {
+        const decoded = decodeURIComponent(String(value));
+        if (decoded.startsWith("/")) return decoded;
+        return null;
+    } catch {
+        return null;
+    }
+};
+
+const handleVerify = async () => {
+    if (!canVerify.value) return;
+    verifying.value = true;
+    try {
+        const resp = await authApi.validateSmsCode(phone.value, code.value);
+        const token = resp?.data?.token || resp?.data?.Token;
+        if (!token) {
+            alert("验证失败：未返回 token");
+            return;
+        }
+        localStorage.setItem("token", String(token));
+        sessionStorage.setItem("phone_verified", "1");
+        const redirect =
+            normalizeRedirect(route.query.redirect) ||
+            normalizeRedirect(sessionStorage.getItem("post_auth_redirect")) ||
+            "/";
+        sessionStorage.removeItem("post_auth_redirect");
+        router.replace(redirect);
+    } catch (error) {
+        alert(error?.response?.data?.message || "验证失败");
+    } finally {
+        verifying.value = false;
+    }
+};
+
+onMounted(() => {
+    const redirect = normalizeRedirect(route.query.redirect);
+    if (redirect) sessionStorage.setItem("post_auth_redirect", redirect);
+});
+</script>
+
+<template>
+    <div class="min-h-screen bg-gray-50 flex items-center justify-center px-4">
+        <div class="w-full max-w-[420px] bg-white rounded-2xl shadow-sm border border-gray-100 p-6">
+            <h1 class="text-xl font-semibold text-gray-900">手机号验证</h1>
+            <p class="text-sm text-gray-500 mt-2">
+                未认证用户需要验证手机号后才能访问「已购买」「我的」并进行购买操作。
+            </p>
+
+            <div class="mt-6 space-y-4">
+                <div>
+                    <label class="block text-sm font-medium text-gray-700 mb-1">手机号</label>
+                    <input v-model="phone" inputmode="tel" autocomplete="tel" placeholder="请输入手机号"
+                        class="w-full rounded-xl border border-gray-200 px-4 py-3 outline-none focus:ring-2 focus:ring-primary-200 focus:border-primary-300" />
+                </div>
+
+                <div>
+                    <label class="block text-sm font-medium text-gray-700 mb-1">验证码</label>
+                    <div class="flex gap-2">
+                        <input v-model="code" inputmode="numeric" autocomplete="one-time-code" placeholder="请输入短信验证码"
+                            class="flex-1 rounded-xl border border-gray-200 px-4 py-3 outline-none focus:ring-2 focus:ring-primary-200 focus:border-primary-300" />
+                        <button :disabled="!canSend" @click="handleSend"
+                            class="whitespace-nowrap rounded-xl px-4 py-3 text-sm font-medium border transition-colors"
+                            :class="canSend ? 'bg-primary-600 text-white border-primary-600 hover:bg-primary-700 active:bg-primary-800' : 'bg-gray-100 text-gray-400 border-gray-200'">
+                            <span v-if="countdown > 0">{{ countdown }}s</span>
+                            <span v-else>发送验证码</span>
+                        </button>
+                    </div>
+                </div>
+
+                <button :disabled="!canVerify" @click="handleVerify"
+                    class="w-full rounded-xl px-4 py-3 font-semibold transition-colors"
+                    :class="canVerify ? 'bg-primary-600 text-white hover:bg-primary-700 active:bg-primary-800' : 'bg-gray-100 text-gray-400'">
+                    {{ verifying ? "验证中..." : "验证并继续" }}
+                </button>
+
+                <button class="w-full text-sm text-gray-500 hover:text-gray-700" @click="router.replace('/')">
+                    暂不验证，返回首页
+                </button>
+            </div>
+        </div>
+    </div>
+</template>
--- a/frontend/wechat/stats.html
+++ b/frontend/wechat/stats.html
--- a/frontend/wechat/vite.config.js
+++ b/frontend/wechat/vite.config.js
@@ -4,53 +4,61 @@ import { visualizer } from 'rollup-plugin-visualizer';
 import { defineConfig } from 'vite';
 import compression from 'vite-plugin-compression';

-export default defineConfig({
-    plugins: [
-        vue(),
-        compression({
-            verbose: true,
-            disable: false,
-            threshold: 10240,
-            algorithm: 'gzip',
-            ext: '.gz',
-        }),
-        visualizer({
-            open: false,
-            gzipSize: true,
-            brotliSize: true,
-        }),
-    ],
-    resolve: {
-        alias: {
-            '@': resolve(__dirname, 'src')
-        }
-    },
-    server: {
-        host: '0.0.0.0',
-        allowedHosts: ['mp.jdwan.com'],
-        port: 3001,
-        open: true,
-        proxy: {
-            '/v1': 'http://localhost:8088',
-        }
-    },
-    build: {
-        sourceMap: true,
-        minify: 'terser',
-        chunkSizeWarningLimit: 1500,
-        rollupOptions: {
-            output: {
-                manualChunks: {
-                    'vue-vendor': ['vue', 'vue-router', 'pinia'],
-                    'player-vendor': ['xgplayer', 'xgplayer-mp4'],
-                }
+export default defineConfig(() => {
+    const backendUrl = process.env.VITE_BACKEND_URL || 'http://127.0.0.1:8088';
+
+    return {
+        plugins: [
+            vue(),
+            compression({
+                verbose: true,
+                disable: false,
+                threshold: 10240,
+                algorithm: 'gzip',
+                ext: '.gz',
+            }),
+            visualizer({
+                open: false,
+                gzipSize: true,
+                brotliSize: true,
+            }),
+        ],
+        resolve: {
+            alias: {
+                '@': resolve(__dirname, 'src')
            }
        },
-        terserOptions: {
-            compress: {
-                drop_console: true,
-                drop_debugger: true,
+        server: {
+            host: '0.0.0.0',
+            allowedHosts: ['mp.jdwan.com'],
+            port: 3001,
+            open: true,
+            proxy: {
+                '/v1': {
+                    target: backendUrl,
+                    changeOrigin: true,
+                    secure: false,
+                },
+            }
+        },
+        build: {
+            sourceMap: true,
+            minify: 'terser',
+            chunkSizeWarningLimit: 1500,
+            rollupOptions: {
+                output: {
+                    manualChunks: {
+                        'vue-vendor': ['vue', 'vue-router', 'pinia'],
+                        'player-vendor': ['xgplayer', 'xgplayer-mp4'],
+                    }
+                }
+            },
+            terserOptions: {
+                compress: {
+                    drop_console: true,
+                    drop_debugger: true,
+                }
            }
        }
-    }
+    };
 });
Author	SHA1	Message	Date
Rogee	12aa7a404a	fix phone auth Some checks failed build quyun / Build (push) Failing after 1m27s Details	2025-12-20 13:06:09 +08:00
Rogee	dbeb0a5733	feat: phone validate	2025-12-20 12:56:06 +08:00
Rogee	22e288bf98	feat: update phone validation	2025-12-20 11:52:08 +08:00