This commit is contained in:
Mrx
2026-05-09 12:15:25 +08:00
parent 7aa4fb60f6
commit 93886e2e90
11 changed files with 413 additions and 40 deletions

View File

@@ -59,6 +59,10 @@ type (
PayTimeEnd string `form:"pay_time_end,optional"` // 支付时间结束
RefundTimeStart string `form:"refund_time_start,optional"` // 退款时间开始
RefundTimeEnd string `form:"refund_time_end,optional"` // 退款时间结束
// 被查询人(与 query_subject_index 密文一致,多条件为 AND
QuerySubjectName string `form:"query_subject_name,optional"` // 姓名(明文,服务端转密文查询)
QuerySubjectMobile string `form:"query_subject_mobile,optional"` // 手机号
QuerySubjectIdCard string `form:"query_subject_id_card,optional"` // 身份证
}
// 列表响应
AdminGetOrderListResp {

View File

@@ -79,6 +79,11 @@ func RegisterHandlers(server *rest.Server, serverCtx *svc.ServiceContext) {
Path: "/list",
Handler: admin_agent.AdminGetAgentListHandler(serverCtx),
},
{
Method: http.MethodPost,
Path: "/mobile/update",
Handler: admin_agent.AdminUpdateAgentMobileHandler(serverCtx),
},
{
Method: http.MethodGet,
Path: "/order/list",
@@ -94,11 +99,6 @@ func RegisterHandlers(server *rest.Server, serverCtx *svc.ServiceContext) {
Path: "/product_config/update",
Handler: admin_agent.AdminUpdateAgentProductConfigHandler(serverCtx),
},
{
Method: http.MethodPost,
Path: "/mobile/update",
Handler: admin_agent.AdminUpdateAgentMobileHandler(serverCtx),
},
{
Method: http.MethodGet,
Path: "/real_name/list",

View File

@@ -2,12 +2,16 @@ package admin_order
import (
"context"
"encoding/hex"
"strings"
"sync"
"ycc-server/app/main/api/internal/svc"
"ycc-server/app/main/api/internal/types"
"ycc-server/app/main/model"
"ycc-server/common/globalkey"
"ycc-server/common/xerr"
"ycc-server/pkg/lzkit/crypto"
"github.com/Masterminds/squirrel"
"github.com/pkg/errors"
@@ -72,6 +76,44 @@ func (l *AdminGetOrderListLogic) AdminGetOrderList(req *types.AdminGetOrderListR
if req.RefundTimeEnd != "" {
builder = builder.Where("refund_time <= ?", req.RefundTimeEnd)
}
if req.QuerySubjectName != "" || req.QuerySubjectMobile != "" || req.QuerySubjectIdCard != "" {
key, decodeErr := hex.DecodeString(l.svcCtx.Config.Encrypt.SecretKey)
if decodeErr != nil {
return nil, errors.Wrapf(xerr.NewErrCode(xerr.SERVER_COMMON_ERROR),
"AdminGetOrderList, AES密钥解析失败 err: %v", decodeErr)
}
conds := []string{"del_state = ?"}
args := []interface{}{globalkey.DelStateNo}
if req.QuerySubjectName != "" {
enc, _, encErr := crypto.EncryptDeterministicOptional(req.QuerySubjectName, key)
if encErr != nil {
return nil, errors.Wrapf(xerr.NewErrCode(xerr.SERVER_COMMON_ERROR),
"AdminGetOrderList, 加密筛选姓名失败 err: %v", encErr)
}
conds = append(conds, "enc_real_name = ?")
args = append(args, enc)
}
if req.QuerySubjectMobile != "" {
enc, encErr := crypto.EncryptMobile(req.QuerySubjectMobile, l.svcCtx.Config.Encrypt.SecretKey)
if encErr != nil {
return nil, errors.Wrapf(xerr.NewErrCode(xerr.SERVER_COMMON_ERROR),
"AdminGetOrderList, 加密筛选手机号失败 err: %v", encErr)
}
conds = append(conds, "enc_mobile = ?")
args = append(args, enc)
}
if req.QuerySubjectIdCard != "" {
enc, encErr := crypto.EncryptIDCard(req.QuerySubjectIdCard, key)
if encErr != nil {
return nil, errors.Wrapf(xerr.NewErrCode(xerr.SERVER_COMMON_ERROR),
"AdminGetOrderList, 加密筛选身份证失败 err: %v", encErr)
}
conds = append(conds, "enc_id_card = ?")
args = append(args, enc)
}
subSQL := "id IN (SELECT order_id FROM query_subject_index WHERE " + strings.Join(conds, " AND ") + ")"
builder = builder.Where(subSQL, args...)
}
// 并发获取总数和列表
var total int64

View File

@@ -0,0 +1,60 @@
package querysubject
import (
"strings"
)
func isNameField(key string) bool {
key = strings.ToLower(key)
if isPhoneField(key) || isIDCardField(key) {
return false
}
return strings.Contains(key, "name") || strings.Contains(key, "姓名") ||
strings.Contains(key, "owner") || strings.Contains(key, "main")
}
func isIDCardField(key string) bool {
key = strings.ToLower(key)
return strings.Contains(key, "idcard") || strings.Contains(key, "id_card") ||
strings.Contains(key, "身份证") || strings.Contains(key, "证件号")
}
func isPhoneField(key string) bool {
key = strings.ToLower(key)
return strings.Contains(key, "phone") || strings.Contains(key, "mobile") ||
strings.Contains(key, "手机") || strings.Contains(key, "电话")
}
// ExtractPlainSubject 从解密后的 query 参数 map 中提取被查询人姓名、手机、身份证(首次匹配优先)
func ExtractPlainSubject(m map[string]interface{}) (name, mobile, idCard string) {
walkMap(m, &name, &mobile, &idCard)
return name, mobile, idCard
}
func walkMap(m map[string]interface{}, name, mobile, idCard *string) {
for k, v := range m {
switch val := v.(type) {
case string:
assignSubjectField(k, val, name, mobile, idCard)
case map[string]interface{}:
walkMap(val, name, mobile, idCard)
}
}
}
func assignSubjectField(key, val string, name, mobile, idCard *string) {
if val == "" {
return
}
if *idCard == "" && isIDCardField(key) {
*idCard = val
return
}
if *mobile == "" && isPhoneField(key) {
*mobile = val
return
}
if *name == "" && isNameField(key) {
*name = val
}
}

View File

@@ -2,15 +2,18 @@ package queue
import (
"context"
"database/sql"
"encoding/hex"
"encoding/json"
"fmt"
"os"
"regexp"
"strings"
"ycc-server/app/main/api/internal/pkg/querysubject"
"ycc-server/app/main/api/internal/svc"
"ycc-server/app/main/api/internal/types"
"ycc-server/app/main/model"
"ycc-server/common/globalkey"
"ycc-server/pkg/lzkit/crypto"
"ycc-server/pkg/lzkit/lzUtils"
@@ -73,6 +76,11 @@ func (l *PaySuccessNotifyUserHandler) ProcessTask(ctx context.Context, t *asynq.
return fmt.Errorf("解密参数失败: %+v", aesdecryptErr)
}
var userInfo map[string]interface{}
if err := json.Unmarshal(decryptData, &userInfo); err != nil {
return fmt.Errorf("解析用户信息失败: %+v", err)
}
query := &model.Query{
Id: uuid.NewString(),
OrderId: order.Id,
@@ -86,6 +94,10 @@ func (l *PaySuccessNotifyUserHandler) ProcessTask(ctx context.Context, t *asynq.
return fmt.Errorf("保存查询失败: %+v", insertQueryErr)
}
if err := l.insertQuerySubjectIndex(ctx, query.Id, order.Id, userInfo, key); err != nil {
logx.Errorf("写入被查询人密文索引失败 order=%s query=%s err=%v", order.Id, query.Id, err)
}
// 插入后使用预生成的查询ID
queryId := query.Id
@@ -95,12 +107,6 @@ func (l *PaySuccessNotifyUserHandler) ProcessTask(ctx context.Context, t *asynq.
return fmt.Errorf("获取插入后的查询记录失败: %+v", err)
}
// 解析解密后的参数获取用户信息
var userInfo map[string]interface{}
if err := json.Unmarshal(decryptData, &userInfo); err != nil {
return fmt.Errorf("解析用户信息失败: %+v", err)
}
// 生成授权书
authDoc, err := l.svcCtx.AuthorizationService.GenerateAuthorizationDocument(
ctx, order.UserId, order.Id, queryId, userInfo,
@@ -262,6 +268,42 @@ func (l *PaySuccessNotifyUserHandler) handleError(ctx context.Context, err error
return asynq.SkipRetry
}
func (l *PaySuccessNotifyUserHandler) insertQuerySubjectIndex(
ctx context.Context,
queryId, orderId string,
userInfo map[string]interface{},
aesKey []byte,
) error {
name, mobile, idCard := querysubject.ExtractPlainSubject(userInfo)
if name == "" && mobile == "" && idCard == "" {
return nil
}
row := &model.QuerySubjectIndex{
Id: uuid.New().String(),
QueryId: queryId,
OrderId: orderId,
DelState: globalkey.DelStateNo,
Version: 0,
}
if enc, ok, err := crypto.EncryptDeterministicOptional(name, aesKey); err != nil {
return err
} else if ok {
row.EncRealName = sql.NullString{String: enc, Valid: true}
}
if enc, ok, err := crypto.EncryptDeterministicOptional(mobile, aesKey); err != nil {
return err
} else if ok {
row.EncMobile = sql.NullString{String: enc, Valid: true}
}
if enc, ok, err := crypto.EncryptDeterministicOptional(idCard, aesKey); err != nil {
return err
} else if ok {
row.EncIdCard = sql.NullString{String: enc, Valid: true}
}
_, err := l.svcCtx.QuerySubjectIndexModel.Insert(ctx, row)
return err
}
// desensitizeParams 对敏感数据进行脱敏处理
func (l *PaySuccessNotifyUserHandler) desensitizeParams(data []byte) ([]byte, error) {
// 解析JSON数据到map

View File

@@ -47,6 +47,7 @@ type ServiceContext struct {
OrderModel model.OrderModel
OrderRefundModel model.OrderRefundModel
QueryModel model.QueryModel
QuerySubjectIndexModel model.QuerySubjectIndexModel
QueryCleanupLogModel model.QueryCleanupLogModel
QueryCleanupDetailModel model.QueryCleanupDetailModel
QueryCleanupConfigModel model.QueryCleanupConfigModel
@@ -143,6 +144,7 @@ func NewServiceContext(c config.Config) *ServiceContext {
// ============================== 订单相关模型 ==============================
orderModel := model.NewOrderModel(db, cacheConf)
queryModel := model.NewQueryModel(db, cacheConf)
querySubjectIndexModel := model.NewQuerySubjectIndexModel(db, cacheConf)
orderRefundModel := model.NewOrderRefundModel(db, cacheConf)
queryCleanupLogModel := model.NewQueryCleanupLogModel(db, cacheConf)
queryCleanupDetailModel := model.NewQueryCleanupDetailModel(db, cacheConf)
@@ -261,6 +263,7 @@ func NewServiceContext(c config.Config) *ServiceContext {
// 订单相关模型
OrderModel: orderModel,
QueryModel: queryModel,
QuerySubjectIndexModel: querySubjectIndexModel,
OrderRefundModel: orderRefundModel,
QueryCleanupLogModel: queryCleanupLogModel,
QueryCleanupDetailModel: queryCleanupDetailModel,

View File

@@ -559,21 +559,24 @@ type AdminGetOrderDetailResp struct {
}
type AdminGetOrderListReq struct {
Page int64 `form:"page,default=1"` // 页码
PageSize int64 `form:"pageSize,default=20"` // 每页数量
OrderNo string `form:"order_no,optional"` // 商户订单号
PlatformOrderId string `form:"platform_order_id,optional"` // 支付订单号
ProductName string `form:"product_name,optional"` // 产品名称
PaymentPlatform string `form:"payment_platform,optional"` // 支付方式
PaymentScene string `form:"payment_scene,optional"` // 支付平台
Amount float64 `form:"amount,optional"` // 金额
Status string `form:"status,optional"` // 支付状态pending-待支付paid-已支付refunded-已退款closed-已关闭failed-支付失败
CreateTimeStart string `form:"create_time_start,optional"` // 创建时间开始
CreateTimeEnd string `form:"create_time_end,optional"` // 创建时间结束
PayTimeStart string `form:"pay_time_start,optional"` // 支付时间开始
PayTimeEnd string `form:"pay_time_end,optional"` // 支付时间结束
RefundTimeStart string `form:"refund_time_start,optional"` // 退款时间开始
RefundTimeEnd string `form:"refund_time_end,optional"` // 退款时间结束
Page int64 `form:"page,default=1"` // 页码
PageSize int64 `form:"pageSize,default=20"` // 每页数量
OrderNo string `form:"order_no,optional"` // 商户订单号
PlatformOrderId string `form:"platform_order_id,optional"` // 支付订单号
ProductName string `form:"product_name,optional"` // 产品名称
PaymentPlatform string `form:"payment_platform,optional"` // 支付方式
PaymentScene string `form:"payment_scene,optional"` // 支付平台
Amount float64 `form:"amount,optional"` // 金额
Status string `form:"status,optional"` // 支付状态pending-待支付paid-已支付refunded-已退款closed-已关闭failed-支付失败
CreateTimeStart string `form:"create_time_start,optional"` // 创建时间开始
CreateTimeEnd string `form:"create_time_end,optional"` // 创建时间结束
PayTimeStart string `form:"pay_time_start,optional"` // 支付时间开始
PayTimeEnd string `form:"pay_time_end,optional"` // 支付时间结束
RefundTimeStart string `form:"refund_time_start,optional"` // 退款时间开始
RefundTimeEnd string `form:"refund_time_end,optional"` // 退款时间结束
QuerySubjectName string `form:"query_subject_name,optional"` // 姓名(明文,服务端转密文查询)
QuerySubjectMobile string `form:"query_subject_mobile,optional"` // 手机号
QuerySubjectIdCard string `form:"query_subject_id_card,optional"` // 身份证
}
type AdminGetOrderListResp struct {
@@ -693,10 +696,10 @@ type AdminGetQueryDetailByOrderIdReq struct {
}
type AdminGetQueryDetailByOrderIdResp struct {
Id string `json:"id"` // 主键ID
OrderId string `json:"order_id"` // 订单ID
UserId string `json:"user_id"` // 用户ID
ProductName string `json:"product_name"` // 产品名称
Id string `json:"id"` // 主键ID
OrderId string `json:"order_id"` // 订单ID
UserId string `json:"user_id"` // 用户ID
ProductName string `json:"product_name"` // 产品名称
QueryParams map[string]interface{} `json:"query_params"`
QueryData []AdminQueryItem `json:"query_data"`
CreateTime string `json:"create_time"` // 创建时间
@@ -872,6 +875,15 @@ type AdminUpdateAgentConfigResp struct {
Success bool `json:"success"`
}
type AdminUpdateAgentMobileReq struct {
AgentId string `json:"agent_id"` // 代理ID
Mobile string `json:"mobile"` // 新手机号
}
type AdminUpdateAgentMobileResp struct {
Success bool `json:"success"`
}
type AdminUpdateAgentProductConfigReq struct {
Id string `json:"id"` // 主键
BasePrice float64 `json:"base_price"` // 基础底价
@@ -884,16 +896,6 @@ type AdminUpdateAgentProductConfigResp struct {
Success bool `json:"success"`
}
// 代理手机号修改
type AdminUpdateAgentMobileReq struct {
AgentId string `json:"agent_id"` // 代理ID
Mobile string `json:"mobile"` // 新手机号
}
type AdminUpdateAgentMobileResp struct {
Success bool `json:"success"`
}
type AdminUpdateApiReq struct {
Id string `path:"id"`
ApiName string `json:"api_name"`