add smsabuse

app/main/api/internal/config/config.go

@@ -11,6 +11,7 @@ type Config struct {
 	CacheRedis    cache.CacheConf
 	JwtAuth       JwtAuth // JWT 鉴权相关配置
 	VerifyCode    VerifyCode
+	Captcha       CaptchaConfig // 阿里云验证码配置
 	Encrypt       Encrypt
 	Alipay        AlipayConfig
 	Wxpay         WxpayConfig
@@ -40,6 +41,15 @@ type VerifyCode struct {
 	TemplateCode    string
 	ValidTime       int
 }
+
+type CaptchaConfig struct {
+	AccessKeyID     string
+	AccessKeySecret string
+	EndpointURL     string
+	SceneID         string
+	EKey            string // 加密模式用的 ekey（Base64）
+}
+
 type Encrypt struct {
 	SecretKey string
 }

app/main/api/internal/handler/captcha/getencryptedsceneidhandler.go

@@ -0,0 +1,21 @@
+package captcha
+
+import (
+	"net/http"
+
+	"github.com/zeromicro/go-zero/rest/httpx"
+	"qnc-server/app/main/api/internal/logic/captcha"
+	"qnc-server/app/main/api/internal/svc"
+)
+
+func GetEncryptedSceneIdHandler(svcCtx *svc.ServiceContext) http.HandlerFunc {
+	return func(w http.ResponseWriter, r *http.Request) {
+		l := captcha.NewGetEncryptedSceneIdLogic(r.Context(), svcCtx)
+		resp, err := l.GetEncryptedSceneId()
+		if err != nil {
+			httpx.ErrorCtx(r.Context(), w, err)
+		} else {
+			httpx.OkJsonCtx(r.Context(), w, resp)
+		}
+	}
+}

app/main/api/internal/handler/routes.go

@@ -21,6 +21,7 @@ import (
 	app "qnc-server/app/main/api/internal/handler/app"
 	auth "qnc-server/app/main/api/internal/handler/auth"
 	authorization "qnc-server/app/main/api/internal/handler/authorization"
+	captcha "qnc-server/app/main/api/internal/handler/captcha"
 	notification "qnc-server/app/main/api/internal/handler/notification"
 	pay "qnc-server/app/main/api/internal/handler/pay"
 	product "qnc-server/app/main/api/internal/handler/product"
@@ -852,6 +853,18 @@ func RegisterHandlers(server *rest.Server, serverCtx *svc.ServiceContext) {
 		rest.WithPrefix("/api/v1"),
 	)
 
+	server.AddRoutes(
+		[]rest.Route{
+			{
+				// get encrypted scene id for aliyun captcha
+				Method:  http.MethodPost,
+				Path:    "/captcha/encryptedSceneId",
+				Handler: captcha.GetEncryptedSceneIdHandler(serverCtx),
+			},
+		},
+		rest.WithPrefix("/api/v1"),
+	)
+
 	server.AddRoutes(
 		[]rest.Route{
 			{

app/main/api/internal/logic/auth/sendsmslogic.go

@@ -3,6 +3,7 @@ package auth
 import (
 	"context"
 	"qnc-server/common/xerr"
+	"qnc-server/pkg/captcha"
 	"qnc-server/pkg/lzkit/crypto"
 	"fmt"
 	"math/rand"
@@ -35,6 +36,17 @@ func NewSendSmsLogic(ctx context.Context, svcCtx *svc.ServiceContext) *SendSmsLo
 }
 
 func (l *SendSmsLogic) SendSms(req *types.SendSmsReq) error {
+	// 1. 图形验证码校验
+	cfg := l.svcCtx.Config.Captcha
+	if err := captcha.Verify(captcha.Config{
+		AccessKeyID:     cfg.AccessKeyID,
+		AccessKeySecret: cfg.AccessKeySecret,
+		EndpointURL:     cfg.EndpointURL,
+		SceneID:         cfg.SceneID,
+	}, req.CaptchaVerifyParam); err != nil {
+		return err
+	}
+
 	secretKey := l.svcCtx.Config.Encrypt.SecretKey
 	encryptedMobile, err := crypto.EncryptMobile(req.Mobile, secretKey)
 	if err != nil {

app/main/api/internal/logic/captcha/getencryptedsceneidlogic.go

@@ -0,0 +1,37 @@
+package captcha
+
+import (
+	"context"
+
+	"qnc-server/app/main/api/internal/svc"
+	"qnc-server/app/main/api/internal/types"
+	"qnc-server/pkg/captcha"
+
+	"github.com/zeromicro/go-zero/core/logx"
+)
+
+type GetEncryptedSceneIdLogic struct {
+	logx.Logger
+	ctx    context.Context
+	svcCtx *svc.ServiceContext
+}
+
+func NewGetEncryptedSceneIdLogic(ctx context.Context, svcCtx *svc.ServiceContext) *GetEncryptedSceneIdLogic {
+	return &GetEncryptedSceneIdLogic{
+		Logger: logx.WithContext(ctx),
+		ctx:    ctx,
+		svcCtx: svcCtx,
+	}
+}
+
+func (l *GetEncryptedSceneIdLogic) GetEncryptedSceneId() (*types.GetEncryptedSceneIdResp, error) {
+	cfg := l.svcCtx.Config.Captcha
+	encrypted, err := captcha.GenerateEncryptedSceneID(cfg.SceneID, cfg.EKey, 3600)
+	if err != nil {
+		l.Errorf("generate encrypted scene id error: %+v", err)
+		return nil, err
+	}
+	return &types.GetEncryptedSceneIdResp{
+		EncryptedSceneId: encrypted,
+	}, nil
+}

app/main/api/internal/types/types.go

@@ -1329,6 +1329,10 @@ type GetCommissionListResp struct {
 	List  []CommissionItem `json:"list"`  // 列表
 }
 
+type GetEncryptedSceneIdResp struct {
+	EncryptedSceneId string `json:"encryptedSceneId"`
+}
+
 type GetInviteCodeListReq struct {
 	Page     int64 `form:"page"`            // 页码
 	PageSize int64 `form:"page_size"`       // 每页数量
@@ -1758,7 +1762,7 @@ type OrderListItem struct {
 	CreateTime         string  `json:"create_time"`          // 创建时间
 	PayTime            string  `json:"pay_time"`             // 支付时间
 	RefundTime         string  `json:"refund_time"`          // 退款时间
-	UpdateTime         string  `json:"update_time"`           // 更新时间
+	UpdateTime         string  `json:"update_time"`          // 更新时间
 	IsAgentOrder       bool    `json:"is_agent_order"`       // 是否是代理订单
 	AgentProcessStatus string  `json:"agent_process_status"` // 代理事务处理状态：not_agent-非代理订单，success-处理成功，failed-处理失败，pending-待处理
 }
@@ -2271,6 +2275,7 @@ type GetAppVersionResp struct {
 }
 
 type SendSmsReq struct {
-	Mobile     string `json:"mobile" validate:"required,mobile"`
-	ActionType string `json:"actionType" validate:"required,oneof=login register query agentApply realName bindMobile"`
+	Mobile             string `json:"mobile" validate:"required,mobile"`
+	ActionType         string `json:"actionType" validate:"required,oneof=login register query agentApply realName bindMobile"`
+	CaptchaVerifyParam string `json:"captchaVerifyParam,optional"`
 }