mm_os 2.9.2 → 2.9.3

package/demo/app/user/plugin/main/api_user_client/phone_code/phone_code.js

@@ -0,0 +1,297 @@
+class Phone_code {
+	/**
+	 * 构造函数
+	 * @param {Object} config 配置参数
+	 */
+	constructor(config) {
+		this.config = {
+			// 验证码有效时长
+			expires: 15,
+			// 短信发送地址
+			url: "http://api.smsbao.com/sms?u=${username}&p=${password}&m=${phone}&c=${content}",
+			// 用户名
+			username: "31772309",
+			// 密码
+			password: "asd159357"
+		}
+	}
+}
+
+/**
+ * 新建验证码
+ * @param {String} method 请求方法
+ * @param {String} phone 手机号码
+ * @return {String} 返回验证码
+ */
+Phone_code.prototype.new_code = async function(key) {
+	var code;
+	var num = Math.ceil(Math.random() * 1000);
+	if (num < 10) {
+		code = "0" + num + "0" + num;
+	} else if (num < 100) {
+		code = "00" + num;
+	} else if (num < 1000) {
+		code = "0" + num;
+	}
+	await $.cache.set(key + "_click", code, 60);
+	var bl = await $.cache.set(key, code, this.config.expires * 60);
+	if (bl) {
+		return code;
+	} else {
+		return null;
+	}
+};
+
+/**
+ * 发送验证码
+ * @param {String} method 请求方法
+ * @param {String} phone 手机号码
+ * @return {Object} 返回发送结果
+ */
+Phone_code.prototype.send = async function(method, phone) {
+	var {
+		username,
+		password,
+		expires,
+		url
+	} = this.config;
+	var key = "code_" + method + "_" + phone;
+	var value = await $.cache.get(key + "_click");
+	var code;
+	if (value) {
+		return $.ret.bl(true, "已发送验证码，请注意查收！");
+	} else {
+		code = await this.new_code(key);
+	}
+	if (code) {
+		password = password.md5();
+		var web_name = await $.config.get('web_name');
+		
+		// 发送验证码
+		var content = encodeURIComponent(`【${web_name}】您的验证码为${code}，在${expires}分钟内有效。`);
+		var u = eval("`" + url + "`");
+		var http = new $.Http();
+		var web = await http.get(u);
+		var errno = web.body;
+		if (errno) {
+			errno = Number(errno);
+			if (errno == 0) {
+				return $.ret.bl(true, "发送成功！");
+			} else {
+				var meaage = "";
+				switch (errno) {
+					case -1:
+						meaage = "参数不全"
+						break
+					case -2:
+						meaage = "服务器空间不支持,请确认支持curl或者fsocket，联系您的空间商解决或者更换空间！"
+						break
+					case 30:
+						meaage = "密码错误";
+						break;
+					case 40:
+						meaage = "账号不存在";
+						break;
+					case 41:
+						meaage = "余额不足";
+						break;
+					case 43:
+						meaage = "IP地址受限";
+						break;
+					case 50:
+						meaage = "内容含有敏感词";
+						break;
+					case 51:
+						meaage = "手机号码不正确";
+						break;
+				}
+				return $.ret.error(11000 + errno, meaage);
+			}
+		} else {
+			return $.ret.error(10000, "请求短信服务端失败！");
+		}
+	} else {
+		return $.ret.error(10000, "缓存验证码失败！");
+	}
+};
+
+/**
+ * 发送验证码
+ * @param {String} query 查询参
+ * @param {Object} db 数据库管理器
+ * @return {Object} 执行结果
+ */
+Phone_code.prototype.set_delivery_address = async function(query, db, ctx) {
+	var {
+		username,
+		phone
+	} = query;
+	var user = await db.getObj({
+		username
+	});
+	if (user) {
+		return $.ret.bl(false, "用户已存在！");
+	}
+	return await this.send("set_delivery_address", phone);
+};
+
+/**
+ * 注册、登录
+ * @param {String} query 查询参
+ * @param {Object} db 数据库管理器
+ * @return {Object} 执行结果
+ */
+Phone_code.prototype.sign_up = async function(query, db, ctx) {
+	var {
+		phone
+	} = query;
+	var user = await db.getObj({
+		phone
+	});
+	if (user) {
+		return $.ret.error(10001, '该手机号已被使用，请换一个！');
+	}
+	return await this.send("sign_up", phone);
+};
+
+/**
+ * 登录
+ * @param {String} query 查询参
+ * @param {Object} db 数据库管理器
+ * @return {Object} 执行结果
+ */
+Phone_code.prototype.sign_in = async function(query, db, ctx) {
+	var {
+		phone
+	} = query;
+	var user = await db.getObj({
+		phone
+	});
+	if (!user) {
+		return $.ret.error(10000, '用户不存在！');
+	}
+	return await this.send("sign_in", phone);
+};
+
+/**
+ * 忘记密码
+ * @param {String} query 查询参
+ * @param {Object} db 数据库管理器
+ * @return {Object} 执行结果
+ */
+Phone_code.prototype.forgot = async function(query, db, ctx) {
+	var {
+		username,
+		phone
+	} = query;
+	var user = await db.getObj({
+		phone
+	});
+	if (!user) {
+		return $.ret.error(10000, "用户不存在！");
+	}
+	return await this.send("forgot", phone);
+};
+
+/**
+ * 修改密码
+ * @param {String} query 查询参
+ * @param {Object} db 数据库管理器
+ * @return {Object} 执行结果
+ */
+Phone_code.prototype.password = async function(query, db, ctx) {
+	var {
+		username,
+		phone
+	} = query;
+	var user = ctx.session.user
+	if (!user) {
+		return $.ret.error(10000, "账号未登录！");
+	}
+	var phone = user.phone
+	return await this.send("password", phone);
+};
+
+
+/**
+ * 发送验证码 - 设置支付密码
+ * @param {String} query 查询参
+ * @param {Object} db 数据库管理器
+ * @return {Object} 执行结果
+ */
+Phone_code.prototype.pay_password = async function(query, db, ctx) {
+	var {
+		phone
+	} = query;
+	var user = ctx.session.user;
+	if (!user) {
+		return $.ret.error(6000, "账户未登录！");
+	}
+
+	if (user.phone !== phone) {
+		return $.ret.error(10000, "输入的号码与绑定的手机号码不同！");
+	}
+	return await this.send("pay_password", phone);
+};
+
+/**
+ * 绑定手机
+ * @param {String} query 查询参
+ * @param {Object} db 数据库管理器
+ * @return {Object} 执行结果
+ */
+Phone_code.prototype.bind = async function(query, db, ctx) {
+	var {
+		username,
+		phone
+	} = query;
+	var user = await db.getObj({
+		username
+	});
+	if (!user) {
+		return $.ret.error(10000, "用户不存在！");
+	} else {
+		phone = user.phone;
+	}
+	return await this.send("bind", phone);
+};
+
+/**
+ * 注销账户
+ * @param {String} query 查询参
+ * @param {Object} db 数据库管理器
+ * @return {Object} 执行结果
+ */
+Phone_code.prototype.unsubscribe = async function(query, db, ctx) {
+	var {
+		phone
+	} = query;
+	var user = ctx.session.user;
+	if (!user) {
+		return $.ret.error(6000, "账户未登录！");
+	}
+	if (!phone) {
+		return $.ret.error(10000, "手机号码（phone）不能为空！");
+	}
+	if (user.phone !== phone) {
+		return $.ret.error(10000, "输入的号码与绑定的手机号码不同！");
+	}
+	return await this.send("unsubscribe", phone);
+};
+
+/**
+ * 执行
+ * @param {Object} query
+ * @param {Object} db
+ */
+Phone_code.prototype.run = async function(query, db, ctx) {
+	var method = query.method;
+	var param = Object.assign({}, query, ctx.request.body);
+	if (this[method]) {
+		return await this[method](param, db, ctx);
+	} else {
+		return $.ret.error(10000, "错误的请求！");
+	}
+};
+
+module.exports = Phone_code;

package/demo/app/user/plugin/main/api_user_client/realname/api.json

@@ -0,0 +1,21 @@
+{
+	// 路由路径
+	"path": "/api/user/realname",
+	// 名称, 用于动态增删改API配置
+	"name": "user_realname",
+	// 标题, 用于开发文档显示
+	"title": "实名认证",
+	// 描述, 用于介绍该路由的作用
+	"description": "这是用户提交实名认证信息的接口",
+	// 函数文件, 用于驱动脚本, 实现业务 
+	"func_file": "./index.js",
+	// 请求方法, 选填 GET, POST, ALL。 ALL指同时支持GET/POST
+	"method": "POST",
+	// 参数配置路径, 用于校验API请求参数是否正确, 同时显示在API文档中 
+	"param_path": "./param.json",
+	/* 授权协议 */
+	"oauth": {
+		// 是否需要登录, true表示需要登录才能访问该接口
+		"signIn": true
+	}
+}

package/demo/app/user/plugin/main/api_user_client/realname/index.js

@@ -0,0 +1,45 @@
+
+/**
+ * 接口主函数
+ * @param {Object} ctx HTTP上下文
+ * @param {Object} db 数据管理器,如: { next: async function{}, ret: {} }
+ * @return {Object} 执行结果
+ */
+async function main(ctx, db) {
+	// 获取请求参数
+	var req = ctx.request;
+	var {
+		query,
+		body
+	} = req;
+	
+
+	console.log(body)
+	const login_user = ctx.session.user
+	const qy = {
+		user_id: login_user.user_id
+	};
+	if (!login_user) {
+		return $.ret.error(10000, '获取登录用户失败');
+	}
+	db.table = "user_info";
+	let user_info = await db.getObj(qy);
+	var obj = {
+		//设置图片
+		img_idcard_front: body.img_idcard_front,
+		img_idcard_back: body.img_idcard_back,
+		img_hand_held: body.img_hand_held,
+		name: body.name,
+		idcard: body.idcard,
+		idcard_state: 2
+	};
+	var bl;
+	if (user_info) {
+		bl = await db.set(qy, obj);
+	} else {
+		bl = await db.add(Object.assign({}, qy, obj));
+	}
+	return bl > 0 ? $.ret.bl(true, "提交成功，请耐心等待审核") : $.ret.error(10000, "提交失败！" + JSON.stringify(db.error))
+};
+
+exports.main = main;

package/demo/app/user/plugin/main/api_user_client/realname/param.json

@@ -0,0 +1,74 @@
+{
+	"name": "user_realname",
+	"title": "实名认证",
+	"post": {
+		"body": [
+			"name",
+			"idcard",
+			"img_idcard_front",
+			"img_idcard_back",
+			"img_hand_held"
+		]
+	},
+	"list": [{
+			"name": "user_id",
+			"title": "用户ID",
+			"description": "",
+			"type": "number",
+			"dataType": "mediumint",
+			"number": {
+				"max": 8388607
+			}
+		},
+		{
+			"name": "name",
+			"title": "姓名",
+			"description": "",
+			"type": "string",
+			"dataType": "varchar",
+			"number": {
+				"max": 32
+			}
+		},
+		{
+			"name": "idcard",
+			"title": "证件号",
+			"description": "",
+			"type": "string",
+			"dataType": "varchar",
+			"string": {
+				"max": 64
+			}
+		},
+		{
+			"name": "img_idcard_front",
+			"title": "身份证正面",
+			"description": "",
+			"type": "string",
+			"dataType": "varchar",
+			"string": {
+				"max": 255
+			}
+		},
+		{
+			"name": "img_idcard_back",
+			"title": "身份证反面",
+			"description": "",
+			"type": "string",
+			"dataType": "varchar",
+			"string": {
+				"max": 255
+			}
+		},
+		{
+			"name": "img_hand_held",
+			"title": "手持身份证",
+			"description": "",
+			"type": "string",
+			"dataType": "varchar",
+			"string": {
+				"max": 255
+			}
+		}
+	]
+}

package/demo/app/user/plugin/main/api_user_client/servicer/api.json

@@ -0,0 +1,29 @@
+{
+	// 路由路径
+	"path": "/api/user/servicer",
+	// 名称, 用于动态增删改API配置
+	"name": "user_servicer",
+	// 标题, 用于开发文档显示
+	"title": "在线客服",
+	// 描述, 用于介绍该路由的作用
+	"description": "用于获取在线客服列表",
+	// 函数文件, 用于驱动脚本, 实现业务 
+	"func_file": "./index.js",
+	// 请求方法, 选填 GET, POST, ALL。 ALL指同时支持GET/POST
+	"method": "GET",
+	// 开放域, 如果域未开放, 则只有特定的协议头才能访问该API, 同时API文档不接见
+	"scope": true,
+	// 缓存时长, 单位: 分钟。使用缓存后, 二次访问API直接从缓存读取, 不重复执行业务脚本
+	"cache": 0,
+	// 是否客户端缓存, 使用客户端则不再访问服务器, 直接从浏览器中拿; 使用服务端缓存则会访问服务器   
+	"client_cache": false,
+	// SQL配置路径, 用于将请求参数拼接成SQL, 实现比较复杂的查询
+	"sql_path": "./sql.json",
+	// 参数配置路径, 用于校验API请求参数是否正确, 同时显示在API文档中 
+	"param_path": "./param.json",
+	/* 授权协议 */
+	"oauth": {
+		// 是否需要登录, true表示需要登录才能访问该接口
+		"signIn": false
+	}
+}

package/demo/app/user/plugin/main/api_user_client/servicer/index.js

@@ -0,0 +1,19 @@
+/**
+ * 接口主函数
+ * @param {Object} ctx HTTP上下文
+ * @param {Object} db 数据管理器,如: { next: async function{}, ret: {} }
+ * @return {Object} 执行结果
+ */
+async function main(ctx, db) {
+	// 获取请求参数
+	var req = ctx.request;
+	var {
+		query,
+		body
+	} = req;
+	query.admin = '客服';
+	var ret = await this.sql.run(query, body, db);
+	return ret;
+};
+
+exports.main = main;

package/demo/app/user/plugin/main/api_user_client/servicer/param.json

@@ -0,0 +1,41 @@
+{
+	// 是否启用过滤, 启用过滤后, 不符合的参数会被过滤掉
+	"filter": true,
+	// 校验脚本文件, 可以使用脚本的方式加一步进行校验, 让传参更加安全
+	"func_file": "",
+	// get请求
+	"get": {
+		// 查询参数校验项
+		"query": [],
+		// 查询必填参数
+		"query_required": []
+	},
+	// post请求
+	"post": {
+		// 查询参数校验项
+		"query": [],
+		// 查询必填参数
+		"query_required": [],
+		// 正文参数校验项
+		"body": [],
+		// 正文必填参数
+		"body_required": []
+	},
+	// 校验列表
+	"list": [{
+			// 参数key名
+			"name": "user_id",
+			// 参数中文名
+			"title": "用户ID",
+			// 数据类型
+			"type": "number",
+			// 数字类型时设置
+			"number": {
+				// 最小数值
+				"min": 1
+			},
+			// 分隔参数，允许传多个值，为空则限制1个值
+			"splitter": "|"
+		}
+	]
+}

package/demo/app/user/plugin/main/api_user_client/servicer/sql.json

@@ -0,0 +1,113 @@
+{
+    "name": "user_account",
+    "title": "聊天客服",
+    "table": "user_account",
+    "key": "user_id",
+    "orderby_default": "`user_id` desc",
+    "field_obj": "`user_id`,`state`,`vip`,`gm`,`mc`,`group_id`,`admin_id`,`referee_id`,`login_time`,`invite_code`,`phone`,`phone_state`,`username`,`nickname`,`email`,`email_state`,`login_ip`,`signature`,`avatar`,`friends`,`time_create`,`wallet_address`",
+    "field_default": "`user_id`,`state`,`vip`,`gm`,`mc`,`group_id`,`invite_code`,`phone`,`username`,`nickname`,`email`,`signature`,`avatar`",
+    "method": "get get_obj avg sum count",
+    "query": {
+        "avatar": "`avatar` like '%{0}%'",
+        "time_create_min": "`time_create` >= '{0}'",
+        "time_create_max": "`time_create` <= '{0}'",
+        "email": "`email` like '%{0}%'",
+        "email_state_min": "`email_state` >= {0}",
+        "email_state_max": "`email_state` <= {0}",
+        "friends": "`friends` like '%{0}%'",
+        "gm_min": "`gm` >= {0}",
+        "gm_max": "`gm` <= {0}",
+        "invite_code": "`invite_code` like '%{0}%'",
+        "login_ip": "`login_ip` like '%{0}%'",
+        "login_time_min": "`login_time` >= '{0}'",
+        "login_time_max": "`login_time` <= '{0}'",
+        "mc_min": "`mc` >= {0}",
+        "mc_max": "`mc` <= {0}",
+        "nickname": "`nickname` like '%{0}%'",
+        "password": "`password` like '%{0}%'",
+        "phone": "`phone` like '%{0}%'",
+        "phone_state_min": "`phone_state` >= {0}",
+        "phone_state_max": "`phone_state` <= {0}",
+        "salt": "`salt` like '%{0}%'",
+        "signature": "`signature` like '%{0}%'",
+        "state_min": "`state` >= {0}",
+        "state_max": "`state` <= {0}",
+        "username": "`username` like '%{0}%'",
+        "vip_min": "`vip` >= {0}",
+        "vip_max": "`vip` <= {0}",
+        "keyword": "(`username` like '%{0}%' || `nickname` like '%{0}%')",
+        "wallet_address": "`wallet_address` like '%{0}%'",
+		"admin": "`admin_id` = (SELECT `admin_id` FROM `user_admin` WHERE `name` = '{0}')"
+    },
+	"query_default": {
+		"admin": "`admin_id` = (SELECT `admin_id` FROM `user_admin` WHERE `name` = '客服')"
+	},
+    "update": {
+        "email_state_add": "`email_state` = `email_state` + {0}",
+        "gm_add": "`gm` = `gm` + {0}",
+        "mc_add": "`mc` = `mc` + {0}",
+        "phone_state_add": "`phone_state` = `phone_state` + {0}",
+        "state_add": "`state` = `state` + {0}",
+        "vip_add": "`vip` = `vip` + {0}"
+    },
+    "format": [
+        {
+            "key": "state",
+            "title": "账户状态",
+            "list": [
+                "",
+                "可用",
+                "异常",
+                "已冻结",
+                "已注销"
+            ]
+        },
+        {
+            "key": "group_id",
+            "title": "所在用户组",
+            "table": "user_group",
+            "name": "name"
+        },
+        {
+            "key": "admin_id",
+            "title": "所在管理组",
+            "table": "user_admin",
+            "name": "name"
+        },
+        {
+            "key": "referee_id",
+            "title": "推荐人",
+            "table": "user_account",
+            "name": "nickname",
+            "id": "user_id"
+        },
+        {
+            "key": "phone_state",
+            "title": "手机认证",
+            "list": [
+                "未认证",
+                "审核中",
+                "已认证"
+            ]
+        },
+        {
+            "key": "email_state",
+            "title": "邮箱认证",
+            "list": [
+                "未认证",
+                "审核中",
+                "已认证"
+            ]
+        }
+    ],
+    "filter": {
+        "table": "table",
+        "page": "page",
+        "size": "size",
+        "method": "method",
+        "orderby": "orderby",
+        "field": "field",
+        "count_ret": "count_ret",
+        "user_id": "user_id"
+    }
+}

package/demo/app/user/plugin/main/api_user_client/set_address/api.json

@@ -0,0 +1,37 @@
+{
+	// 路由路径
+	"path": "/api/user/set_address",
+	// 名称, 用于动态增删改API配置
+	"name": "user_set_address",
+	// 标题, 用于开发文档显示
+	"title": "设置收货地址",
+	// 描述, 用于介绍该路由的作用
+	"description": "用于设置收货地址",
+	// 函数文件, 用于驱动脚本, 实现业务 
+	"func_file": "./index.js",
+	// 请求方法, 选填 GET, POST, ALL。 ALL指同时支持GET/POST
+	"method": "POST",
+	// 开放域, 如果域未开放, 则只有特定的协议头才能访问该API, 同时API文档不接见
+	"scope": true,
+	// 缓存时长, 单位: 分钟。使用缓存后, 二次访问API直接从缓存读取, 不重复执行业务脚本
+	"cache": 0,
+	// 是否客户端缓存, 使用客户端则不再访问服务器, 直接从浏览器中拿; 使用服务端缓存则会访问服务器   
+	"client_cache": false,
+	// 参数配置路径, 用于校验API请求参数是否正确, 同时显示在API文档中 
+	"param_path": "./param.json",
+	/* 授权协议 */
+	"oauth": {
+		// 是否需要登录, true表示需要登录才能访问该接口
+		"signIn": true,
+		// 会员权限级别, 如果小于该值, 则无法访问, 0为不限制
+		"vip": 0,
+		// 管理员权限级别, 如果小于该值, 则无法访问, 0为不限制
+		"gm": 0,
+		// 商户/第三方权限级别, 如果小于该值, 则无法访问, 0为不限制
+		"mc": 0,
+		// 用户组, 允许访问该接口的普通用户群体, 传ID数组，例如: [1,5]
+		"user_group": [],
+		// 管理组, 允许访问该接口的管理员群体, 传ID数组，例如: [1,5]
+		"user_admin": []
+	}
+}