批量优化

This commit is contained in:
hero920103 committed 2026-10-03 23:46:55 +08:00
1 parent e3db229f41
commit aa92ca40a2
79 files changed
+7495 -1104

No files matched your search

+234
View File
@@ -0,0 +1,234 @@
package wechatmini
import (
"bytes"
"encoding/json"
"fmt"
"io"
"net/http"
"net/url"
"sync"
"time"
)
// =============================================================
// 微信小程序服务端 API
// 1. GET /sns/jscode2session code → openid / unionid / session_key
// 2. POST /wxa/business/getuserphonenumber phone_code → 手机号(需 access_token)
// =============================================================
const apiBase = "https://api.weixin.qq.com"
var httpClient = &http.Client{Timeout: 10 * time.Second}
// APIError 微信接口业务错误(HTTP 200 但 errcode 非 0)
type APIError struct {
API string
Code int
Msg string
}
func (e *APIError) Error() string {
return fmt.Sprintf("%s 失败:errcode=%d errmsg=%s", e.API, e.Code, e.Msg)
}
// Explain 返回常见 errcode 的中文排查建议;未知错误码返回空串
func (e *APIError) Explain() string {
switch e.Code {
case 40029:
return "code 无效或已过期:请重新调用 wx.login / uni.login 获取 code 后立即重试"
case 40163:
return "code 已被使用:同一次 code 只能兑换一次,请重新获取"
case 40013:
return "AppID 无效:请核对小程序后台「开发 → 开发管理」中的 AppID"
case 40125:
return "AppSecret 错误:请在小程序后台重置后复制新的 AppSecret 填入本页"
case 40226:
return "该小程序未开通手机号快速验证能力:请在「开发管理 → 接口设置」中开通"
case 45009:
return "接口调用频次超限:请稍后重试"
}
return ""
}
// ExplainError 提取中文排查建议;无可用建议时返回 ("", false)
func ExplainError(err error) (string, bool) {
if ae, ok := err.(*APIError); ok {
if hint := ae.Explain(); hint != "" {
return hint, true
}
}
return "", false
}
// ============================ code 换 openid ============================
// Session jscode2session 返回结果
type Session struct {
OpenID string `json:"openid"`
UnionID string `json:"unionid"`
SessionKey string `json:"session_key"`
}
// Code2Session 用 wx.login / uni.login 拿到的 code 换 openid(+ unionid)
func Code2Session(cfg *Config, code string) (*Session, error) {
if cfg == nil || cfg.AppID == "" || cfg.AppSecret == "" {
return nil, ErrNotConfigured
}
api := fmt.Sprintf("%s/sns/jscode2session?appid=%s&secret=%s&js_code=%s&grant_type=authorization_code",
apiBase, url.QueryEscape(cfg.AppID), url.QueryEscape(cfg.AppSecret), url.QueryEscape(code))
var resp struct {
OpenID string `json:"openid"`
UnionID string `json:"unionid"`
SessionKey string `json:"session_key"`
ErrCode int `json:"errcode"`
ErrMsg string `json:"errmsg"`
}
if err := httpGetJSON(api, &resp); err != nil {
return nil, err
}
if resp.OpenID == "" {
return nil, &APIError{API: "code 换取 openid", Code: resp.ErrCode, Msg: resp.ErrMsg}
}
return &Session{OpenID: resp.OpenID, UnionID: resp.UnionID, SessionKey: resp.SessionKey}, nil
}
// ============================ 手机号快速验证 ============================
// PhoneNumber getuserphonenumber 返回结果
type PhoneNumber struct {
PhoneNumber string `json:"phoneNumber"`
PurePhoneNumber string `json:"purePhoneNumber"`
CountryCode string `json:"countryCode"`
}
// GetPhoneNumber 用 getPhoneNumber 事件返回的动态 code 换真实手机号。
// 仅企业主体小程序可用;未开通该能力时微信返回 40226。
func GetPhoneNumber(cfg *Config, phoneCode string) (*PhoneNumber, error) {
if cfg == nil || cfg.AppID == "" || cfg.AppSecret == "" {
return nil, ErrNotConfigured
}
token, err := getAccessToken(cfg)
if err != nil {
return nil, err
}
api := fmt.Sprintf("%s/wxa/business/getuserphonenumber?access_token=%s", apiBase, url.QueryEscape(token))
payload := map[string]interface{}{"code": phoneCode}
var resp struct {
PhoneInfo struct {
PhoneNumber string `json:"phoneNumber"`
PurePhoneNumber string `json:"purePhoneNumber"`
CountryCode string `json:"countryCode"`
} `json:"phone_info"`
ErrCode int `json:"errcode"`
ErrMsg string `json:"errmsg"`
}
if err := httpPostJSON(api, payload, &resp); err != nil {
return nil, err
}
if resp.ErrCode != 0 || resp.PhoneInfo.PhoneNumber == "" {
return nil, &APIError{API: "获取手机号", Code: resp.ErrCode, Msg: resp.ErrMsg}
}
return &PhoneNumber{
PhoneNumber: resp.PhoneInfo.PhoneNumber,
PurePhoneNumber: resp.PhoneInfo.PurePhoneNumber,
CountryCode: resp.PhoneInfo.CountryCode,
}, nil
}
// ============================ access_token 缓存 ============================
type tokenEntry struct {
appID string
token string
expiresAt time.Time
}
var (
tokenMu sync.Mutex
tokenCache tokenEntry
tokenMinTTL = 5 * time.Minute
)
// GetAccessToken 获取小程序 access_token(内存缓存,提前 5 分钟刷新)
func GetAccessToken(cfg *Config) (string, error) { return getAccessToken(cfg) }
func getAccessToken(cfg *Config) (string, error) {
tokenMu.Lock()
if tokenCache.appID == cfg.AppID && tokenCache.token != "" && time.Now().Before(tokenCache.expiresAt) {
t := tokenCache.token
tokenMu.Unlock()
return t, nil
}
tokenMu.Unlock()
api := fmt.Sprintf("%s/cgi-bin/token?grant_type=client_credential&appid=%s&secret=%s",
apiBase, url.QueryEscape(cfg.AppID), url.QueryEscape(cfg.AppSecret))
var resp struct {
AccessToken string `json:"access_token"`
ExpiresIn int `json:"expires_in"`
ErrCode int `json:"errcode"`
ErrMsg string `json:"errmsg"`
}
if err := httpGetJSON(api, &resp); err != nil {
return "", err
}
if resp.AccessToken == "" {
return "", &APIError{API: "获取 access_token", Code: resp.ErrCode, Msg: resp.ErrMsg}
}
ttl := time.Duration(resp.ExpiresIn) * time.Second
if ttl <= tokenMinTTL {
ttl = time.Hour
}
tokenMu.Lock()
tokenCache = tokenEntry{appID: cfg.AppID, token: resp.AccessToken, expiresAt: time.Now().Add(ttl - tokenMinTTL)}
tokenMu.Unlock()
return resp.AccessToken, nil
}
// ============================ HTTP 辅助 ============================
func httpGetJSON(api string, out interface{}) error {
resp, err := httpClient.Get(api)
if err != nil {
return fmt.Errorf("请求微信接口失败: %w", err)
}
defer resp.Body.Close()
body, err := io.ReadAll(resp.Body)
if err != nil {
return fmt.Errorf("读取微信响应失败: %w", err)
}
if err := json.Unmarshal(body, out); err != nil {
return fmt.Errorf("解析微信响应失败: %w(body: %s)", err, truncate(string(body), 200))
}
return nil
}
func httpPostJSON(api string, payload interface{}, out interface{}) error {
bs, err := json.Marshal(payload)
if err != nil {
return err
}
resp, err := httpClient.Post(api, "application/json; charset=utf-8", bytes.NewReader(bs))
if err != nil {
return fmt.Errorf("请求微信接口失败: %w", err)
}
defer resp.Body.Close()
body, err := io.ReadAll(resp.Body)
if err != nil {
return fmt.Errorf("读取微信响应失败: %w", err)
}
if err := json.Unmarshal(body, out); err != nil {
return fmt.Errorf("解析微信响应失败: %w(body: %s)", err, truncate(string(body), 200))
}
return nil
}
func truncate(s string, n int) string {
if len(s) <= n {
return s
}
return s[:n] + "..."
}
+126
View File
@@ -0,0 +1,126 @@
// Package wechatmini 微信小程序服务端能力:配置、code 换 openid、手机号快速验证。
//
// 与 services/wechatmp(公众号)分开:小程序走 sns/jscode2session 与
// wxa/business/getuserphonenumber,两者的 AppID / AppSecret 互不相通。
package wechatmini
import (
"errors"
"strings"
"time"
"github.com/beego/beego/v2/client/orm"
"server/models"
"server/services/wechatmp"
)
// Config 小程序运行配置(敏感字段已解密)
type Config struct {
ID uint64
AppID string
AppSecret string // 明文
Enabled bool
AutoBind bool
Remark string
}
// ErrNotConfigured 未配置或未启用
var ErrNotConfigured = errors.New("微信小程序未配置或未启用")
// LoadConfig 读取小程序配置(单行,敏感字段解密);未配置返回 ErrNotConfigured
func LoadConfig() (*Config, error) {
var row models.WechatMiniConfig
err := models.Orm.QueryTable(new(models.WechatMiniConfig)).OrderBy("id").One(&row)
if err != nil {
if err == orm.ErrNoRows {
return nil, ErrNotConfigured
}
return nil, err
}
cfg := &Config{
ID: row.ID,
AppID: strings.TrimSpace(row.AppID),
Enabled: row.Enabled == 1,
AutoBind: row.AutoBind != 0,
Remark: row.Remark,
}
if row.AppSecret != "" {
plain, derr := wechatmp.DecryptSecret(row.AppSecret)
if derr != nil {
return nil, derr
}
cfg.AppSecret = plain
}
return cfg, nil
}
// LoadEnabledConfig 读取并校验启用状态
func LoadEnabledConfig() (*Config, error) {
cfg, err := LoadConfig()
if err != nil {
return nil, err
}
if !cfg.Enabled || cfg.AppID == "" || cfg.AppSecret == "" {
return nil, ErrNotConfigured
}
return cfg, nil
}
// SaveInput 保存配置入参(AppSecret 支持掩码表示不修改)
type SaveInput struct {
AppID string
AppSecret string // 掩码 / 空串 = 保持不变
Enabled bool
AutoBind bool
Remark string
}
// SaveConfig 保存小程序配置(不存在则创建)
func SaveConfig(in SaveInput) error {
if strings.TrimSpace(in.AppID) == "" {
return errors.New("AppID 不能为空")
}
var row models.WechatMiniConfig
err := models.Orm.QueryTable(new(models.WechatMiniConfig)).OrderBy("id").One(&row)
now := time.Now()
isNew := false
if err != nil {
if err != orm.ErrNoRows {
return err
}
isNew = true
row = models.WechatMiniConfig{}
}
secret := strings.TrimSpace(in.AppSecret)
if secret != "" && !wechatmp.IsMasked(secret) {
enc, eerr := wechatmp.EncryptSecret(secret)
if eerr != nil {
return eerr
}
row.AppSecret = enc
}
row.AppID = strings.TrimSpace(in.AppID)
row.Remark = strings.TrimSpace(in.Remark)
if in.Enabled {
row.Enabled = 1
} else {
row.Enabled = 0
}
if in.AutoBind {
row.AutoBind = 1
} else {
row.AutoBind = 0
}
row.UpdateTime = &now
if isNew {
row.CreateTime = now
_, err = models.Orm.Insert(&row)
return err
}
_, err = models.Orm.Update(&row)
return err
}