From 46c97bb5b4fe7f29b58476c3ee9cd1b910e5bc99 Mon Sep 17 00:00:00 2001
From: liangzai <2440983361@qq.com>
Date: Tue, 24 Feb 2026 16:47:49 +0800
Subject: [PATCH 1/3] add ali captcha

---
 index.html                          | 116 ++++++++++++++++----------
 src/auto-imports.d.ts               |   1 +
 src/components/InquireForm.vue      |  92 +++++++++++----------
 src/components/LoginDialog.vue      |  71 +++++++---------
 src/composables/useAliyunCaptcha.js | 122 ++++++++++++++++++++++++++++
 src/views/Login.vue                 |  61 ++++++--------
 6 files changed, 304 insertions(+), 159 deletions(-)
 create mode 100644 src/composables/useAliyunCaptcha.js
diff --git a/index.html b/index.html
index a8d28ec..2083869 100644
--- a/index.html
+++ b/index.html
@@ -1,21 +1,33 @@
-<!DOCTYPE html>
+<!doctype html>
 <html lang="zh-CN">
     <head>
         <meta charset="UTF-8" />
         <link rel="icon" href="/favicon.ico" />
-        <link rel="apple-touch-icon" sizes="180x180" href="/apple-touch-icon.png">
-        <link rel="icon" type="image/png" sizes="32x32" href="/favicon-32x32.png">
-        <link rel="icon" type="image/png" sizes="16x16" href="/favicon-16x16.png">
-        <link rel="manifest" href="/site.webmanifest">
+        <link
+            rel="apple-touch-icon"
+            sizes="180x180"
+            href="/apple-touch-icon.png"
+        />
+        <link
+            rel="icon"
+            type="image/png"
+            sizes="32x32"
+            href="/favicon-32x32.png"
+        />
+        <link
+            rel="icon"
+            type="image/png"
+            sizes="16x16"
+            href="/favicon-16x16.png"
+        />
+        <link rel="manifest" href="/site.webmanifest" />
         <meta
             name="viewport"
             content="width=device-width, initial-scale=1, maximum-scale=3, user-scalable=no"
         />
-        
+
         <!-- 基础SEO信息 -->
-        <title>
-            天远查官网_企业与婚姻关联风险核验_综合履约背景核验
-        </title>
+        <title>天远查官网_企业与婚姻关联风险核验_综合履约背景核验</title>
         <meta
             name="description"
             content="天远查官网(TianYuanCha)聚合官方公示数据，专注于商业安全与资产背调。提供企业工商画像、婚姻状态关联风险、司法涉诉筛查及配偶债务核验。数据实时同步，助您精准规避投资、交易及家庭结合中的经济与法律风险。"
@@ -28,21 +40,33 @@
         <meta name="robots" content="index, follow" />
         <meta name="googlebot" content="index, follow" />
         <meta name="baidu-site-verification" content="" />
-        
+
         <!-- Open Graph / Facebook -->
         <meta property="og:type" content="website" />
         <meta property="og:url" content="https://www.zhinengcha.cn/" />
-        <meta property="og:title" content="天远查官网_企业与婚姻关联风险核验_综合履约背景核验" />
-        <meta property="og:description" content="天远查官网(TianYuanCha)聚合官方公示数据，专注于商业安全与资产背调。提供企业工商画像、婚姻状态关联风险、司法涉诉筛查及配偶债务核验。数据实时同步，助您精准规避投资、交易及家庭结合中的经济与法律风险。" />
+        <meta
+            property="og:title"
+            content="天远查官网_企业与婚姻关联风险核验_综合履约背景核验"
+        />
+        <meta
+            property="og:description"
+            content="天远查官网(TianYuanCha)聚合官方公示数据，专注于商业安全与资产背调。提供企业工商画像、婚姻状态关联风险、司法涉诉筛查及配偶债务核验。数据实时同步，助您精准规避投资、交易及家庭结合中的经济与法律风险。"
+        />
         <meta property="og:site_name" content="天远查" />
         <meta property="og:locale" content="zh_CN" />
-        
+
         <!-- Twitter -->
         <meta property="twitter:card" content="summary" />
         <meta property="twitter:url" content="https://www.zhinengcha.cn/" />
-        <meta property="twitter:title" content="天远查官网_企业与婚姻关联风险核验_综合履约背景核验" />
-        <meta property="twitter:description" content="天远查官网(TianYuanCha)聚合官方公示数据，专注于商业安全与资产背调。提供企业工商画像、婚姻状态关联风险、司法涉诉筛查及配偶债务核验。数据实时同步，助您精准规避投资、交易及家庭结合中的经济与法律风险。" />
-        
+        <meta
+            property="twitter:title"
+            content="天远查官网_企业与婚姻关联风险核验_综合履约背景核验"
+        />
+        <meta
+            property="twitter:description"
+            content="天远查官网(TianYuanCha)聚合官方公示数据，专注于商业安全与资产背调。提供企业工商画像、婚姻状态关联风险、司法涉诉筛查及配偶债务核验。数据实时同步，助您精准规避投资、交易及家庭结合中的经济与法律风险。"
+        />
+
         <!-- 其他重要meta标签 -->
         <meta name="theme-color" content="#3498db" />
         <meta name="msapplication-TileColor" content="#3498db" />
@@ -50,31 +74,31 @@
         <meta name="apple-mobile-web-app-title" content="天远查" />
         <meta name="apple-mobile-web-app-capable" content="yes" />
         <meta name="apple-mobile-web-app-status-bar-style" content="default" />
-        
+
         <!-- 结构化数据 -->
         <script type="application/ld+json">
-        {
-            "@context": "https://schema.org",
-            "@type": "WebSite",
-            "name": "天远查",
-            "url": "https://www.zhinengcha.cn/",
-            "description": "专业大数据风险报告查询与代理平台，支持个人信用查询、小微企业风控、贷前风险背调等多场景报告应用",
-            "potentialAction": {
-                "@type": "SearchAction",
-                "target": "https://www.zhinengcha.cn/search?q={search_term_string}",
-                "query-input": "required name=search_term_string"
+            {
+                "@context": "https://schema.org",
+                "@type": "WebSite",
+                "name": "天远查",
+                "url": "https://www.zhinengcha.cn/",
+                "description": "专业大数据风险报告查询与代理平台，支持个人信用查询、小微企业风控、贷前风险背调等多场景报告应用",
+                "potentialAction": {
+                    "@type": "SearchAction",
+                    "target": "https://www.zhinengcha.cn/search?q={search_term_string}",
+                    "query-input": "required name=search_term_string"
+                }
             }
-        }
         </script>
-        
+
         <script type="application/ld+json">
-        {
-            "@context": "https://schema.org",
-            "@type": "Organization",
-            "name": "天远查",
-            "url": "https://www.zhinengcha.cn/",
-            "description": "专业大数据风险报告查询与代理平台，支持个人和企业多场景风控应用"
-        }
+            {
+                "@context": "https://schema.org",
+                "@type": "Organization",
+                "name": "天远查",
+                "url": "https://www.zhinengcha.cn/",
+                "description": "专业大数据风险报告查询与代理平台，支持个人和企业多场景风控应用"
+            }
         </script>
 
         <script src="https://res.wx.qq.com/open/js/jweixin-1.6.0.js"></script>
@@ -82,13 +106,19 @@
             window.jWeixin = window.wx;
             delete window.wx;
         </script>
-        
+        <script>
+            window.AliyunCaptchaConfig = { region: "cn", prefix: "12zxnj" };
+        </script>
+        <script
+            type="text/javascript"
+            src="https://o.alicdn.com/captcha-frontend/aliyunCaptcha/AliyunCaptcha.js"
+        ></script>
         <!-- 预加载关键资源 -->
-        <link rel="preconnect" href="https://www.zhinengcha.cn">
-        <link rel="preconnect" href="https://res.wx.qq.com">
-        <link rel="dns-prefetch" href="https://www.zhinengcha.cn">
-        <link rel="dns-prefetch" href="https://res.wx.qq.com">
-        
+        <link rel="preconnect" href="https://www.zhinengcha.cn" />
+        <link rel="preconnect" href="https://res.wx.qq.com" />
+        <link rel="dns-prefetch" href="https://www.zhinengcha.cn" />
+        <link rel="dns-prefetch" href="https://res.wx.qq.com" />
+
         <style>
             /* 基础样式 */
             html {
@@ -181,6 +211,8 @@
             <div class="loading-text">加载中</div>
         </div>
         <div id="app"></div>
+        <!-- 阿里云验证码渲染容器（弹出式可隐藏） -->
+        <div id="captcha-element" style="display: none;"></div>
 
         <script type="module" src="/src/main.js"></script>
     </body>
diff --git a/src/auto-imports.d.ts b/src/auto-imports.d.ts
index 3a7330e..6c334e4 100644
--- a/src/auto-imports.d.ts
+++ b/src/auto-imports.d.ts
@@ -117,6 +117,7 @@ declare global {
   const useActiveElement: typeof import('@vueuse/core')['useActiveElement']
   const useAgent: typeof import('./composables/useAgent.js')['useAgent']
   const useAgentStore: typeof import('./stores/agentStore.js')['useAgentStore']
+  const useAliyunCaptcha: typeof import('./composables/useAliyunCaptcha.js')['useAliyunCaptcha']
   const useAnimate: typeof import('@vueuse/core')['useAnimate']
   const useApiFetch: typeof import('./composables/useApiFetch.js')['default']
   const useArrayDifference: typeof import('@vueuse/core')['useArrayDifference']
diff --git a/src/components/InquireForm.vue b/src/components/InquireForm.vue
index 4121d6d..36c8739 100644
--- a/src/components/InquireForm.vue
+++ b/src/components/InquireForm.vue
@@ -461,6 +461,7 @@ import { useDialogStore } from "@/stores/dialogStore";
 import { useEnv } from "@/composables/useEnv";
 import { showConfirmDialog, showToast, DatePicker } from "vant";
 import { useInquireForm } from "@/composables/useInquireForm";
+import { useAliyunCaptcha } from "@/composables/useAliyunCaptcha";
 
 import Payment from "@/components/Payment.vue";
 import BindPhoneDialog from "@/components/BindPhoneDialog.vue";
@@ -557,6 +558,7 @@ const featureData = computed(() => props.featureData || {});
 
 // 使用通用查询表单 composable（根据 feature 自动决定字段）
 const { formData, isPhoneNumberValid, isIdCardValid, isHasInput, buildRequestPayload } = useInquireForm(feature);
+const { runWithCaptcha } = useAliyunCaptcha();
 
 const userTypeOptions = [
     { text: "ETC开户人", value: "1" },
@@ -998,69 +1000,77 @@ function handleSubmit() {
     if (!userStore.mobile) {
         pendingPayment.value = true;
         dialogStore.openBindPhone();
-    } else {
+    } else if (isHasInput("verificationCode")) {
         submitRequest();
+    } else {
+        // 无短信验证码时，查询前先过滑块
+        runWithCaptcha(
+            (captchaVerifyParam) => doQueryPost(captchaVerifyParam),
+            (res) => {
+                if (res?.code === 200 && res?.data) handleQueryResult(res);
+            }
+        );
     }
 }
 
-async function submitRequest() {
-    // 根据当前 feature 与字段配置组装请求体
+function handleQueryResult(res) {
+    queryId.value = res.data.id;
+    if (props.type === "promotion") {
+        localStorage.setItem("token", res.data.accessToken);
+        localStorage.setItem("refreshAfter", res.data.refreshAfter);
+        localStorage.setItem("accessExpire", res.data.accessExpire);
+    }
+    showPayment.value = true;
+    emit("submit-success", res.data);
+}
+
+function doQueryPost(captchaVerifyParam) {
     const req = buildRequestPayload();
     const reqStr = JSON.stringify(req);
     const encodeData = aesEncrypt(reqStr, "ff83609b2b24fc73196aac3d3dfb874f");
-
-    let apiUrl = '';
-    let requestData = { data: encodeData };
-
-    if (props.type === 'promotion') {
+    let apiUrl = "";
+    const requestData = { data: encodeData };
+    if (captchaVerifyParam) requestData.captchaVerifyParam = captchaVerifyParam;
+    if (props.type === "promotion") {
         apiUrl = `/query/service_agent/${props.feature}`;
         requestData.agent_identifier = props.linkIdentifier;
     } else {
         apiUrl = `/query/service/${props.feature}`;
     }
+    return useApiFetch(apiUrl).post(requestData).json();
+}
 
-    const { data, error } = await useApiFetch(apiUrl)
-        .post(requestData)
-        .json();
-
-    if (data.value.code === 200) {
-        queryId.value = data.value.data.id;
-
-        // 推广查询需要保存token
-        if (props.type === 'promotion') {
-            localStorage.setItem("token", data.value.data.accessToken);
-            localStorage.setItem("refreshAfter", data.value.data.refreshAfter);
-            localStorage.setItem("accessExpire", data.value.data.accessExpire);
-        }
-
-        showPayment.value = true;
-        emit('submit-success', data.value.data);
+async function submitRequest() {
+    const { data, error } = await doQueryPost();
+    if (data.value?.code === 200 && data.value?.data) {
+        handleQueryResult(data.value);
     }
 }
 
-async function sendVerificationCode() {
+function sendVerificationCode() {
     if (isCountingDown.value || !isPhoneNumberValid.value) return;
     if (!isPhoneNumberValid.value) {
         showToast({ message: "请输入有效的手机号" });
         return;
     }
-
-    const { data, error } = await useApiFetch("/auth/sendSms")
-        .post({ mobile: formData.mobile, actionType: "query" })
-        .json();
-
-    if (!error.value && data.value.code === 200) {
-        showToast({ message: "验证码发送成功", type: "success" });
-        startCountdown();
-        nextTick(() => {
-            const verificationCodeInput = document.getElementById('verificationCode');
-            if (verificationCodeInput) {
-                verificationCodeInput.focus();
+    runWithCaptcha(
+        (captchaVerifyParam) =>
+            useApiFetch("/auth/sendSms")
+                .post({ mobile: formData.mobile, actionType: "query", captchaVerifyParam })
+                .json(),
+        (res) => {
+            if (res?.code === 200) {
+                showToast({ message: "验证码发送成功", type: "success" });
+                startCountdown();
+                nextTick(() => {
+                    const el = document.getElementById("verificationCode");
+                    if (el) el.focus();
+                });
+            } else {
+                showToast({ message: res?.msg || "验证码发送失败，请重试" });
             }
-        });
-    } else {
-        showToast({ message: "验证码发送失败，请重试" });
-    }
+        }
+    );
 }
 
 let timer = null;
diff --git a/src/components/LoginDialog.vue b/src/components/LoginDialog.vue
index 23930fc..a2f3267 100644
--- a/src/components/LoginDialog.vue
+++ b/src/components/LoginDialog.vue
@@ -3,10 +3,12 @@ import { ref, computed, nextTick } from 'vue'
 import { showToast } from 'vant'
 import { useDialogStore } from '@/stores/dialogStore'
 import { useUserStore } from '@/stores/userStore'
+import { useAliyunCaptcha } from '@/composables/useAliyunCaptcha'
 
 const emit = defineEmits(['login-success'])
 const dialogStore = useDialogStore()
 const userStore = useUserStore()
+const { runWithCaptcha } = useAliyunCaptcha()
 
 const phoneNumber = ref('')
 const verificationCode = ref('')
@@ -35,31 +37,30 @@ const canLogin = computed(() => {
     }
 })
 
-async function sendVerificationCode() {
+function sendVerificationCode() {
     if (isCountingDown.value || !isPhoneNumberValid.value) return
     if (!isPhoneNumberValid.value) {
         showToast({ message: "请输入有效的手机号" });
         return
     }
-    const { data, error } = await useApiFetch('auth/sendSms')
-        .post({ mobile: phoneNumber.value, actionType: 'login' })
-        .json()
-
-    if (data.value && !error.value) {
-        if (data.value.code === 200) {
-            showToast({ message: "获取成功" });
-            startCountdown()
-            // 聚焦到验证码输入框
-            nextTick(() => {
-                const verificationCodeInput = document.getElementById('verificationCode');
-                if (verificationCodeInput) {
-                    verificationCodeInput.focus();
-                }
-            });
-        } else {
-            showToast(data.value.msg)
+    runWithCaptcha(
+        (captchaVerifyParam) =>
+            useApiFetch('auth/sendSms')
+                .post({ mobile: phoneNumber.value, actionType: 'login', captchaVerifyParam })
+                .json(),
+        (res) => {
+            if (res?.code === 200) {
+                showToast({ message: "获取成功" });
+                startCountdown();
+                nextTick(() => {
+                    const el = document.getElementById('verificationCode');
+                    if (el) el.focus();
+                });
+            } else {
+                showToast(res?.msg || "获取失败");
+            }
         }
-    }
+    );
 }
 
 function startCountdown() {
@@ -95,31 +96,17 @@ async function handleLogin() {
         showToast({ message: "请先同意用户协议" });
         return
     }
-    // 直接执行登录逻辑
-    await performLogin()
-}
-
-// 执行实际的登录逻辑
-async function performLogin() {
     const { data, error } = await useApiFetch('/user/mobileCodeLogin')
         .post({ mobile: phoneNumber.value, code: verificationCode.value })
-        .json()
-
-    if (data.value && !error.value) {
-        if (data.value.code === 200) {
-            localStorage.setItem('token', data.value.data.accessToken)
-            localStorage.setItem('refreshAfter', data.value.data.refreshAfter)
-            localStorage.setItem('accessExpire', data.value.data.accessExpire)
-
-            // 更新用户信息
-            await userStore.fetchUserInfo()
-
-            showToast({ message: "登录成功" });
-            closeDialog();
-            emit('login-success');
-        } else {
-            showToast(data.value.msg);
-        }
+        .json();
+    if (data.value && !error.value && data.value.code === 200 && data.value.data) {
+        localStorage.setItem('token', data.value.data.accessToken);
+        localStorage.setItem('refreshAfter', data.value.data.refreshAfter);
+        localStorage.setItem('accessExpire', data.value.data.accessExpire);
+        await userStore.fetchUserInfo();
+        showToast({ message: "登录成功" });
+        closeDialog();
+        emit('login-success');
     }
 }
 
diff --git a/src/composables/useAliyunCaptcha.js b/src/composables/useAliyunCaptcha.js
new file mode 100644
index 0000000..2717dcd
--- /dev/null
+++ b/src/composables/useAliyunCaptcha.js
@@ -0,0 +1,122 @@
+import { showToast } from "vant";
+import useApiFetch from "@/composables/useApiFetch";
+
+// 阿里云验证码场景 ID，请在控制台获取后替换
+const ALIYUN_CAPTCHA_SCENE_ID = "wynt39to";
+
+let captchaInitialised = false;
+/** 首次初始化后，SDK 会异步调用 getInstance，用此 Promise 在实例就绪后再 show */
+let captchaReadyPromise = null;
+let captchaReadyResolve = null;
+
+async function ensureCaptchaInit() {
+    if (captchaInitialised || typeof window === "undefined") return;
+    if (typeof window.initAliyunCaptcha !== "function") return;
+
+    captchaInitialised = true;
+    window.captcha = null;
+    window.__lastBizResponse = null;
+    window.__onCaptchaBizSuccess = null;
+    captchaReadyPromise = new Promise((resolve) => {
+        captchaReadyResolve = resolve;
+    });
+
+    // 向后端获取加密后的 EncryptedSceneId
+    const { data, error } = await useApiFetch("/captcha/encryptedSceneId")
+        .post()
+        .json();
+    const resp = data?.value;
+    if (error?.value || !resp || !resp.data.encryptedSceneId) {
+        showToast({ message: "获取验证码参数失败，请稍后重试" });
+        captchaInitialised = false;
+        captchaReadyPromise = null;
+        captchaReadyResolve = null;
+        return;
+    }
+
+    window.initAliyunCaptcha({
+        SceneId: ALIYUN_CAPTCHA_SCENE_ID,
+        EncryptedSceneId: resp.data.encryptedSceneId,
+        mode: "popup",
+        element: "#captcha-element",
+        getInstance(instance) {
+            window.captcha = instance;
+            if (typeof captchaReadyResolve === "function") {
+                captchaReadyResolve();
+                captchaReadyResolve = null;
+            }
+        },
+        captchaVerifyCallback(param) {
+            return typeof window.__captchaVerifyCallback === "function"
+                ? window.__captchaVerifyCallback(param)
+                : Promise.resolve({ captchaResult: false, bizResult: false });
+        },
+        onBizResultCallback(bizResult) {
+            if (typeof window.__onBizResultCallback === "function") {
+                window.__onBizResultCallback(bizResult);
+            }
+            window.__lastBizResponse = null;
+            window.__onCaptchaBizSuccess = null;
+        },
+        slideStyle: { width: 360, height: 40 },
+        language: "cn",
+    });
+}
+
+/**
+ * 阿里云滑块验证码通用封装。
+ * 依赖 index.html 中已加载的 AliyunCaptcha.js；初始化在首次调起时执行。
+ *
+ * @param { (captchaVerifyParam: string) => Promise<{ data: Ref, error: Ref }> } bizVerify - 业务请求函数，接收滑块参数，返回 useApiFetch 的 { data, error }
+ * @param { (res: any) => void } [onSuccess] - 业务成功回调（code===200 时调用，传入接口返回的 data.value）
+ */
+export function useAliyunCaptcha() {
+    /**
+     * 先弹出滑块，通过后执行 bizVerify(captchaVerifyParam)，再根据结果调用 onSuccess。
+     */
+    async function runWithCaptcha(bizVerify, onSuccess) {
+        if (typeof window === "undefined") {
+            showToast({ message: "验证码仅支持浏览器环境" });
+            return;
+        }
+
+        window.__captchaVerifyCallback = async (captchaVerifyParam) => {
+            window.__lastBizResponse = null;
+            const { data, error } = await bizVerify(captchaVerifyParam);
+            const result = data?.value ?? data;
+            if (error?.value || !result) {
+                return { captchaResult: false, bizResult: false };
+            }
+            window.__lastBizResponse = result;
+            const captchaOk = result.captchaVerifyResult !== false;
+            const bizOk = result.code === 200;
+            return { captchaResult: captchaOk, bizResult: bizOk };
+        };
+
+        window.__onBizResultCallback = (bizResult) => {
+            if (
+                bizResult === true &&
+                window.__lastBizResponse &&
+                typeof window.__onCaptchaBizSuccess === "function"
+            ) {
+                window.__onCaptchaBizSuccess(window.__lastBizResponse);
+            }
+        };
+
+        await ensureCaptchaInit();
+
+        // 首次初始化时 SDK 会异步调用 getInstance，需等待实例就绪后再 show
+        if (captchaReadyPromise) {
+            await captchaReadyPromise;
+            captchaReadyPromise = null;
+        }
+        if (!window.captcha) {
+            showToast({ message: "验证码未加载，请刷新页面重试" });
+            return;
+        }
+        window.__onCaptchaBizSuccess = onSuccess;
+        window.captcha.show();
+    }
+
+    return { runWithCaptcha };
+}
diff --git a/src/views/Login.vue b/src/views/Login.vue
index a2d74b0..5108510 100644
--- a/src/views/Login.vue
+++ b/src/views/Login.vue
@@ -1,8 +1,10 @@
 <script setup>
 import { ref, computed, onUnmounted, nextTick } from 'vue'
 import { showToast } from 'vant'
+import { useAliyunCaptcha } from '@/composables/useAliyunCaptcha'
 
 const router = useRouter()
+const { runWithCaptcha } = useAliyunCaptcha()
 const phoneNumber = ref('')
 const verificationCode = ref('')
 const password = ref('')
@@ -30,31 +32,30 @@ const canLogin = computed(() => {
     }
 })
 
-async function sendVerificationCode() {
+function sendVerificationCode() {
     if (isCountingDown.value || !isPhoneNumberValid.value) return
     if (!isPhoneNumberValid.value) {
         showToast({ message: "请输入有效的手机号" });
         return
     }
-    const { data, error } = await useApiFetch('auth/sendSms')
-        .post({ mobile: phoneNumber.value, actionType: 'login' })
-        .json()
-
-    if (data.value && !error.value) {
-        if (data.value.code === 200) {
-            showToast({ message: "获取成功" });
-            startCountdown()
-            // 聚焦到验证码输入框
-            nextTick(() => {
-                const verificationCodeInput = document.getElementById('verificationCode');
-                if (verificationCodeInput) {
-                    verificationCodeInput.focus();
-                }
-            });
-        } else {
-            showToast(data.value.msg)
+    runWithCaptcha(
+        (captchaVerifyParam) =>
+            useApiFetch('auth/sendSms')
+                .post({ mobile: phoneNumber.value, actionType: 'login', captchaVerifyParam })
+                .json(),
+        (res) => {
+            if (res?.code === 200) {
+                showToast({ message: "获取成功" });
+                startCountdown();
+                nextTick(() => {
+                    const el = document.getElementById('verificationCode');
+                    if (el) el.focus();
+                });
+            } else {
+                showToast(res?.msg || "获取失败");
+            }
         }
-    }
+    );
 }
 
 function startCountdown() {
@@ -90,25 +91,17 @@ async function handleLogin() {
         showToast({ message: "请先同意用户协议" });
         return
     }
-    // 直接执行登录逻辑
-    await performLogin()
-}
-
-// 执行实际的登录逻辑
-async function performLogin() {
     const { data, error } = await useApiFetch('/user/mobileCodeLogin')
         .post({ mobile: phoneNumber.value, code: verificationCode.value })
-        .json()
-
-    if (data.value && !error.value) {
-        if (data.value.code === 200) {
-            localStorage.setItem('token', data.value.data.accessToken)
-            localStorage.setItem('refreshAfter', data.value.data.refreshAfter)
-            localStorage.setItem('accessExpire', data.value.data.accessExpire)
-            window.location.href = '/'
-        }
+        .json();
+    if (data.value && !error.value && data.value.code === 200 && data.value.data) {
+        localStorage.setItem('token', data.value.data.accessToken);
+        localStorage.setItem('refreshAfter', data.value.data.refreshAfter);
+        localStorage.setItem('accessExpire', data.value.data.accessExpire);
+        window.location.href = '/';
     }
 }
+
 function toUserAgreement() {
     router.push(`/userAgreement`)
 }

From b6bf036f8f9a996b247192dc9b4d9adeb4cdac14 Mon Sep 17 00:00:00 2001
From: liangzai <2440983361@qq.com>
Date: Tue, 24 Feb 2026 18:42:03 +0800
Subject: [PATCH 2/3] f

---
 src/composables/useAliyunCaptcha.js | 47 ++++++++++++++++++++++++++---
 1 file changed, 42 insertions(+), 5 deletions(-)

diff --git a/src/composables/useAliyunCaptcha.js b/src/composables/useAliyunCaptcha.js
index 2717dcd..02c27e7 100644
--- a/src/composables/useAliyunCaptcha.js
+++ b/src/composables/useAliyunCaptcha.js
@@ -1,8 +1,11 @@
 import { showToast } from "vant";
 import useApiFetch from "@/composables/useApiFetch";
 
-// 阿里云验证码场景 ID，请在控制台获取后替换
+// 阿里云验证码场景 ID
 const ALIYUN_CAPTCHA_SCENE_ID = "wynt39to";
+// 是否启用加密模式（通过环境变量控制，非加密模式时前端不调用后端获取 EncryptedSceneId）
+const ENABLE_ENCRYPTED =
+    import.meta.env.VITE_ALIYUN_CAPTCHA_ENCRYPTED === "false";
 
 let captchaInitialised = false;
 /** 首次初始化后，SDK 会异步调用 getInstance，用此 Promise 在实例就绪后再 show */
@@ -21,22 +24,56 @@ async function ensureCaptchaInit() {
         captchaReadyResolve = resolve;
     });
 
-    // 向后端获取加密后的 EncryptedSceneId
+    // 非加密模式：仅传 SceneId，不调用后端接口
+    if (!ENABLE_ENCRYPTED) {
+        window.initAliyunCaptcha({
+            SceneId: ALIYUN_CAPTCHA_SCENE_ID,
+            mode: "popup",
+            element: "#captcha-element",
+            getInstance(instance) {
+                window.captcha = instance;
+                if (typeof captchaReadyResolve === "function") {
+                    captchaReadyResolve();
+                    captchaReadyResolve = null;
+                }
+            },
+            captchaVerifyCallback(param) {
+                return typeof window.__captchaVerifyCallback === "function"
+                    ? window.__captchaVerifyCallback(param)
+                    : Promise.resolve({
+                          captchaResult: false,
+                          bizResult: false,
+                      });
+            },
+            onBizResultCallback(bizResult) {
+                if (typeof window.__onBizResultCallback === "function") {
+                    window.__onBizResultCallback(bizResult);
+                }
+                window.__lastBizResponse = null;
+                window.__onCaptchaBizSuccess = null;
+            },
+            slideStyle: { width: 360, height: 40 },
+            language: "cn",
+        });
+        return;
+    }
+
+    // 加密模式：先从后端获取 EncryptedSceneId，再初始化
     const { data, error } = await useApiFetch("/captcha/encryptedSceneId")
         .post()
         .json();
     const resp = data?.value;
-    if (error?.value || !resp || !resp.data.encryptedSceneId) {
+    const encryptedSceneId = resp?.data?.encryptedSceneId;
+    if (error?.value || !encryptedSceneId) {
         showToast({ message: "获取验证码参数失败，请稍后重试" });
         captchaInitialised = false;
         captchaReadyPromise = null;
         captchaReadyResolve = null;
         return;
     }
-
     window.initAliyunCaptcha({
         SceneId: ALIYUN_CAPTCHA_SCENE_ID,
-        EncryptedSceneId: resp.data.encryptedSceneId,
+        EncryptedSceneId: encryptedSceneId,
         mode: "popup",
         element: "#captcha-element",
         getInstance(instance) {

From a48770eaa6533b303c074341cdc33fd6349dca53 Mon Sep 17 00:00:00 2001
From: liangzai <2440983361@qq.com>
Date: Tue, 24 Feb 2026 19:00:40 +0800
Subject: [PATCH 3/3] f

---
 src/composables/useAliyunCaptcha.js | 79 ++++++++++++++++-------------
 1 file changed, 45 insertions(+), 34 deletions(-)

diff --git a/src/composables/useAliyunCaptcha.js b/src/composables/useAliyunCaptcha.js
index 02c27e7..e50b624 100644
--- a/src/composables/useAliyunCaptcha.js
+++ b/src/composables/useAliyunCaptcha.js
@@ -1,4 +1,4 @@
-import { showToast } from "vant";
+import { showToast, showLoadingToast, closeToast } from "vant";
 import useApiFetch from "@/composables/useApiFetch";
 
 // 阿里云验证码场景 ID
@@ -117,42 +117,53 @@ export function useAliyunCaptcha() {
             return;
         }
 
-        window.__captchaVerifyCallback = async (captchaVerifyParam) => {
-            window.__lastBizResponse = null;
-            const { data, error } = await bizVerify(captchaVerifyParam);
-            const result = data?.value ?? data;
-            if (error?.value || !result) {
-                return { captchaResult: false, bizResult: false };
+        const loading = showLoadingToast({
+            message: "安全验证加载中...",
+            forbidClick: true,
+            duration: 0,
+            loadingType: "spinner",
+        });
+
+        try {
+            window.__captchaVerifyCallback = async (captchaVerifyParam) => {
+                window.__lastBizResponse = null;
+                const { data, error } = await bizVerify(captchaVerifyParam);
+                const result = data?.value ?? data;
+                if (error?.value || !result) {
+                    return { captchaResult: false, bizResult: false };
+                }
+                window.__lastBizResponse = result;
+                const captchaOk = result.captchaVerifyResult !== false;
+                const bizOk = result.code === 200;
+                return { captchaResult: captchaOk, bizResult: bizOk };
+            };
+
+            window.__onBizResultCallback = (bizResult) => {
+                if (
+                    bizResult === true &&
+                    window.__lastBizResponse &&
+                    typeof window.__onCaptchaBizSuccess === "function"
+                ) {
+                    window.__onCaptchaBizSuccess(window.__lastBizResponse);
+                }
+            };
+
+            await ensureCaptchaInit();
+
+            // 首次初始化时 SDK 会异步调用 getInstance，需等待实例就绪后再 show
+            if (captchaReadyPromise) {
+                await captchaReadyPromise;
+                captchaReadyPromise = null;
             }
-            window.__lastBizResponse = result;
-            const captchaOk = result.captchaVerifyResult !== false;
-            const bizOk = result.code === 200;
-            return { captchaResult: captchaOk, bizResult: bizOk };
-        };
-
-        window.__onBizResultCallback = (bizResult) => {
-            if (
-                bizResult === true &&
-                window.__lastBizResponse &&
-                typeof window.__onCaptchaBizSuccess === "function"
-            ) {
-                window.__onCaptchaBizSuccess(window.__lastBizResponse);
+            if (!window.captcha) {
+                showToast({ message: "验证码未加载，请刷新页面重试" });
+                return;
             }
-        };
-
-        await ensureCaptchaInit();
-
-        // 首次初始化时 SDK 会异步调用 getInstance，需等待实例就绪后再 show
-        if (captchaReadyPromise) {
-            await captchaReadyPromise;
-            captchaReadyPromise = null;
+            window.__onCaptchaBizSuccess = onSuccess;
+            window.captcha.show();
+        } finally {
+            closeToast();
         }
-        if (!window.captcha) {
-            showToast({ message: "验证码未加载，请刷新页面重试" });
-            return;
-        }
-        window.__onCaptchaBizSuccess = onSuccess;
-        window.captcha.show();
     }
 
     return { runWithCaptcha };
