714 lines
19 KiB
JavaScript
714 lines
19 KiB
JavaScript
|
const crypto = require("crypto");
|
|||
|
|
const client = require("./client");
|
|||
|
|
const { getDatabase } = require("../mongodb");
|
|||
|
|
const { defaults, credentials, verification } = require("./config");
|
|||
|
|
|
|||
|
|
const COLLECTION_NAME = "sms-verification";
|
|||
|
|
let ensureIndexesPromise = null;
|
|||
|
|
|
|||
|
|
exports.main = async (event) => {
|
|||
|
|
try {
|
|||
|
|
switch (event.type) {
|
|||
|
|
case "sendVerificationCode":
|
|||
|
|
return await sendVerificationCode(event);
|
|||
|
|
case "verifyVerificationCode":
|
|||
|
|
return await verifyVerificationCode(event);
|
|||
|
|
case "sendMasSms":
|
|||
|
|
return await sendPlainSms(event);
|
|||
|
|
case "sendMasTemplateSms":
|
|||
|
|
return await sendTemplateSms(event);
|
|||
|
|
case "fetchMasReport":
|
|||
|
|
return await fetchReport(event);
|
|||
|
|
case "fetchMasDeliver":
|
|||
|
|
return await fetchDeliver(event);
|
|||
|
|
default:
|
|||
|
|
return {
|
|||
|
|
success: false,
|
|||
|
|
message: "未找到对应的方法",
|
|||
|
|
};
|
|||
|
|
}
|
|||
|
|
} catch (error) {
|
|||
|
|
return {
|
|||
|
|
success: false,
|
|||
|
|
message: error.message || "请求失败",
|
|||
|
|
};
|
|||
|
|
}
|
|||
|
|
};
|
|||
|
|
|
|||
|
|
/**
|
|||
|
|
* 发送验证码（新逻辑：使用 corp-member 表的 phone 字段）
|
|||
|
|
* 不再向下兼容旧逻辑
|
|||
|
|
*/
|
|||
|
|
async function sendVerificationCode(event) {
|
|||
|
|
// 1. 参数校验
|
|||
|
|
const corpId = typeof event.corpId === "string" ? event.corpId.trim() : "";
|
|||
|
|
const loginMobile = normalizeSingleMobile(event.mobile);
|
|||
|
|
|
|||
|
|
if (!corpId) {
|
|||
|
|
return { success: false, message: "corpId 不能为空" };
|
|||
|
|
}
|
|||
|
|
if (!loginMobile) {
|
|||
|
|
return { success: false, message: "登录账号不能为空" };
|
|||
|
|
}
|
|||
|
|
|
|||
|
|
try {
|
|||
|
|
// 2. 查询 corp-member 表，获取 phone 字段
|
|||
|
|
const { getDatabase } = require("../mongodb");
|
|||
|
|
const corpDB = await getDatabase("corp");
|
|||
|
|
const account = await corpDB.collection("corp-member").findOne(
|
|||
|
|
{ corpId, mobile: loginMobile },
|
|||
|
|
{ projection: { phone: 1, _id: 1 } }
|
|||
|
|
);
|
|||
|
|
|
|||
|
|
if (!account) {
|
|||
|
|
return { success: false, message: "账号不存在" };
|
|||
|
|
}
|
|||
|
|
|
|||
|
|
const phone = typeof account.phone === "string" ? account.phone.trim() : "";
|
|||
|
|
if (!phone) {
|
|||
|
|
return { success: false, message: "账号未绑定手机号，请联系管理员" };
|
|||
|
|
}
|
|||
|
|
|
|||
|
|
// 3. 验证码生成和存储逻辑
|
|||
|
|
const collection = await getVerificationCollection();
|
|||
|
|
const codeLength = Number.isInteger(event.codeLength)
|
|||
|
|
? event.codeLength
|
|||
|
|
: verification.codeLength;
|
|||
|
|
const code = generateVerificationCode(codeLength);
|
|||
|
|
|
|||
|
|
console.log("====>code", code);
|
|||
|
|
const nowTs = Date.now();
|
|||
|
|
const expireAt = nowTs + verification.expireSeconds * 1000;
|
|||
|
|
|
|||
|
|
let previousDoc = null;
|
|||
|
|
let docId = null;
|
|||
|
|
const current = await collection.findOne({ mobile: phone });
|
|||
|
|
console.log("====>current", current);
|
|||
|
|
|
|||
|
|
if (current) {
|
|||
|
|
previousDoc = current;
|
|||
|
|
// 检查频率限制
|
|||
|
|
const waitSeconds = calculateWaitSeconds(current, nowTs);
|
|||
|
|
if (waitSeconds > 0) {
|
|||
|
|
return {
|
|||
|
|
success: false,
|
|||
|
|
message: `发送频繁，请${waitSeconds}s后重试`,
|
|||
|
|
data: { waitSeconds },
|
|||
|
|
};
|
|||
|
|
}
|
|||
|
|
console.log("====>waitSeconds", waitSeconds);
|
|||
|
|
// 更新已有记录
|
|||
|
|
const u = await collection.updateOne(
|
|||
|
|
{ _id: current._id },
|
|||
|
|
{
|
|||
|
|
$set: {
|
|||
|
|
code: code,
|
|||
|
|
expireAt,
|
|||
|
|
lastSentAt: nowTs,
|
|||
|
|
updatedAt: nowTs,
|
|||
|
|
verifiedAt: null,
|
|||
|
|
attempts: 0,
|
|||
|
|
expireAtDate: new Date(expireAt),
|
|||
|
|
},
|
|||
|
|
$inc: { sendCount: 1 },
|
|||
|
|
}
|
|||
|
|
);
|
|||
|
|
console.log("====>u", u);
|
|||
|
|
docId = current._id;
|
|||
|
|
} else {
|
|||
|
|
// 插入新文档
|
|||
|
|
const insertDoc = {
|
|||
|
|
mobile: phone,
|
|||
|
|
corpId,
|
|||
|
|
loginMobile,
|
|||
|
|
code: code,
|
|||
|
|
expireAt,
|
|||
|
|
lastSentAt: nowTs,
|
|||
|
|
updatedAt: nowTs,
|
|||
|
|
verifiedAt: null,
|
|||
|
|
attempts: 0,
|
|||
|
|
createdAt: nowTs,
|
|||
|
|
sendCount: 1,
|
|||
|
|
expireAtDate: new Date(expireAt),
|
|||
|
|
};
|
|||
|
|
console.log("====>insertDoc", insertDoc);
|
|||
|
|
const ins = await collection.insertOne(insertDoc);
|
|||
|
|
console.log("====>ins", ins);
|
|||
|
|
docId = ins.insertedId;
|
|||
|
|
}
|
|||
|
|
|
|||
|
|
// 4. 发送短信
|
|||
|
|
const expireMinutes = Math.ceil(verification.expireSeconds / 60) || 1;
|
|||
|
|
const smsEvent = {
|
|||
|
|
ecName: event.ecName || credentials.ecName,
|
|||
|
|
apId: event.apId || credentials.apId,
|
|||
|
|
secretKey: event.secretKey || credentials.secretKey,
|
|||
|
|
sign: event.sign || credentials.sign,
|
|||
|
|
addSerial:
|
|||
|
|
event.addSerial !== undefined ? event.addSerial : credentials.addSerial,
|
|||
|
|
mobiles: phone,
|
|||
|
|
templateId: "e9e7e6a631ea4dfabffdb0476bc39bfb",
|
|||
|
|
params: [code, String(expireMinutes)],
|
|||
|
|
baseUrl: event.baseUrl || defaults.baseUrl,
|
|||
|
|
};
|
|||
|
|
|
|||
|
|
// 检查是否禁用网关
|
|||
|
|
const { gatewayDisabled } = require("./config");
|
|||
|
|
if (gatewayDisabled) {
|
|||
|
|
await collection.updateOne(
|
|||
|
|
{ _id: docId },
|
|||
|
|
{
|
|||
|
|
$set: {
|
|||
|
|
lastResponse: { skipped: true, reason: "sms gateway disabled" },
|
|||
|
|
lastResponseAt: nowTs,
|
|||
|
|
updatedAt: nowTs,
|
|||
|
|
},
|
|||
|
|
}
|
|||
|
|
);
|
|||
|
|
return {
|
|||
|
|
success: true,
|
|||
|
|
message: "验证码已发送",
|
|||
|
|
data: {
|
|||
|
|
expireAt,
|
|||
|
|
resendInterval: verification.resendIntervalSeconds,
|
|||
|
|
skipped: true,
|
|||
|
|
phone: maskMobile(phone),
|
|||
|
|
},
|
|||
|
|
};
|
|||
|
|
}
|
|||
|
|
|
|||
|
|
// 真实发送
|
|||
|
|
try {
|
|||
|
|
const sendResult = await sendTemplateSms(smsEvent);
|
|||
|
|
const gatewayData = sendResult.data;
|
|||
|
|
if (!isGatewaySuccess(gatewayData)) {
|
|||
|
|
throw new Error(getGatewayMessage(gatewayData) || "短信发送失败");
|
|||
|
|
}
|
|||
|
|
await collection.updateOne(
|
|||
|
|
{ _id: docId },
|
|||
|
|
{
|
|||
|
|
$set: {
|
|||
|
|
lastResponse: sanitizeGatewayResponse(gatewayData),
|
|||
|
|
lastResponseAt: nowTs,
|
|||
|
|
updatedAt: nowTs,
|
|||
|
|
},
|
|||
|
|
}
|
|||
|
|
);
|
|||
|
|
return {
|
|||
|
|
success: true,
|
|||
|
|
message: "验证码已发送",
|
|||
|
|
data: {
|
|||
|
|
expireAt,
|
|||
|
|
resendInterval: verification.resendIntervalSeconds,
|
|||
|
|
phone: maskMobile(phone),
|
|||
|
|
},
|
|||
|
|
};
|
|||
|
|
} catch (error) {
|
|||
|
|
await rollbackVerificationDocument(collection, docId, previousDoc);
|
|||
|
|
return {
|
|||
|
|
success: false,
|
|||
|
|
message: error.message || "短信发送失败",
|
|||
|
|
};
|
|||
|
|
}
|
|||
|
|
} catch (error) {
|
|||
|
|
return {
|
|||
|
|
success: false,
|
|||
|
|
message: error.message || "发送验证码失败",
|
|||
|
|
};
|
|||
|
|
}
|
|||
|
|
}
|
|||
|
|
|
|||
|
|
/**
|
|||
|
|
* 验证验证码（新逻辑：使用 corp-member 表的 phone 字段）
|
|||
|
|
* 不再向下兼容旧逻辑
|
|||
|
|
*/
|
|||
|
|
async function verifyVerificationCode(event) {
|
|||
|
|
// 1. 参数校验
|
|||
|
|
const corpId = typeof event.corpId === "string" ? event.corpId.trim() : "";
|
|||
|
|
const loginMobile = normalizeSingleMobile(event.mobile);
|
|||
|
|
const code = typeof event.code === "string" ? event.code.trim() : "";
|
|||
|
|
|
|||
|
|
if (!corpId) {
|
|||
|
|
return { success: false, message: "corpId 不能为空" };
|
|||
|
|
}
|
|||
|
|
if (!loginMobile) {
|
|||
|
|
return { success: false, message: "登录账号不能为空" };
|
|||
|
|
}
|
|||
|
|
if (!code) {
|
|||
|
|
return { success: false, message: "验证码不能为空" };
|
|||
|
|
}
|
|||
|
|
|
|||
|
|
try {
|
|||
|
|
// 2. 查询 corp-member 表，获取 phone 字段
|
|||
|
|
const { getDatabase } = require("../mongodb");
|
|||
|
|
const corpDB = await getDatabase("corp");
|
|||
|
|
const account = await corpDB.collection("corp-member").findOne(
|
|||
|
|
{ corpId, mobile: loginMobile },
|
|||
|
|
{ projection: { phone: 1, _id: 1 } }
|
|||
|
|
);
|
|||
|
|
|
|||
|
|
if (!account) {
|
|||
|
|
return { success: false, message: "账号不存在" };
|
|||
|
|
}
|
|||
|
|
|
|||
|
|
const phone = typeof account.phone === "string" ? account.phone.trim() : "";
|
|||
|
|
if (!phone) {
|
|||
|
|
return { success: false, message: "账号未绑定手机号，请联系管理员" };
|
|||
|
|
}
|
|||
|
|
|
|||
|
|
// 3. 验证码校验逻辑
|
|||
|
|
const collection = await getVerificationCollection();
|
|||
|
|
const doc = await collection.findOne({ mobile: phone });
|
|||
|
|
|
|||
|
|
if (!doc) {
|
|||
|
|
return {
|
|||
|
|
success: false,
|
|||
|
|
message: "验证码不存在或已过期",
|
|||
|
|
};
|
|||
|
|
}
|
|||
|
|
|
|||
|
|
const nowTs = Date.now();
|
|||
|
|
if (doc.expireAt && doc.expireAt < nowTs) {
|
|||
|
|
return {
|
|||
|
|
success: false,
|
|||
|
|
message: "验证码已过期，请重新获取",
|
|||
|
|
};
|
|||
|
|
}
|
|||
|
|
|
|||
|
|
if (doc.verifiedAt) {
|
|||
|
|
return {
|
|||
|
|
success: false,
|
|||
|
|
message: "验证码已使用，请重新获取",
|
|||
|
|
};
|
|||
|
|
}
|
|||
|
|
|
|||
|
|
if (doc.corpId && corpId && corpId !== doc.corpId) {
|
|||
|
|
return {
|
|||
|
|
success: false,
|
|||
|
|
message: "验证码不适用于当前机构",
|
|||
|
|
};
|
|||
|
|
}
|
|||
|
|
|
|||
|
|
const attempts = doc.attempts || 0;
|
|||
|
|
if (attempts >= verification.maxAttempts) {
|
|||
|
|
return {
|
|||
|
|
success: false,
|
|||
|
|
message: "验证码尝试次数过多，请重新获取",
|
|||
|
|
};
|
|||
|
|
}
|
|||
|
|
|
|||
|
|
if (doc.code !== code) {
|
|||
|
|
await collection.updateOne(
|
|||
|
|
{ _id: doc._id },
|
|||
|
|
{
|
|||
|
|
$inc: { attempts: 1 },
|
|||
|
|
$set: { updatedAt: nowTs },
|
|||
|
|
}
|
|||
|
|
);
|
|||
|
|
return {
|
|||
|
|
success: false,
|
|||
|
|
message: "验证码不正确",
|
|||
|
|
};
|
|||
|
|
}
|
|||
|
|
|
|||
|
|
const newExpireAt = nowTs + 60 * 1000;
|
|||
|
|
await collection.updateOne(
|
|||
|
|
{ _id: doc._id },
|
|||
|
|
{
|
|||
|
|
$set: {
|
|||
|
|
verifiedAt: nowTs,
|
|||
|
|
updatedAt: nowTs,
|
|||
|
|
expireAt: newExpireAt,
|
|||
|
|
expireAtDate: new Date(newExpireAt),
|
|||
|
|
},
|
|||
|
|
$unset: {
|
|||
|
|
code: "",
|
|||
|
|
},
|
|||
|
|
}
|
|||
|
|
);
|
|||
|
|
|
|||
|
|
return {
|
|||
|
|
success: true,
|
|||
|
|
message: "验证通过",
|
|||
|
|
};
|
|||
|
|
} catch (error) {
|
|||
|
|
return {
|
|||
|
|
success: false,
|
|||
|
|
message: error.message || "验证失败",
|
|||
|
|
};
|
|||
|
|
}
|
|||
|
|
}
|
|||
|
|
|
|||
|
|
async function sendPlainSms(event) {
|
|||
|
|
const {
|
|||
|
|
ecName,
|
|||
|
|
apId,
|
|||
|
|
secretKey,
|
|||
|
|
sign,
|
|||
|
|
addSerial = "",
|
|||
|
|
mobiles,
|
|||
|
|
content,
|
|||
|
|
messageList,
|
|||
|
|
baseUrl,
|
|||
|
|
} = event;
|
|||
|
|
|
|||
|
|
assertRequired(ecName, "ecName");
|
|||
|
|
assertRequired(apId, "apId");
|
|||
|
|
assertRequired(secretKey, "secretKey");
|
|||
|
|
assertRequired(sign, "sign");
|
|||
|
|
|
|||
|
|
let payloadMobiles = "";
|
|||
|
|
let payloadContent = "";
|
|||
|
|
|
|||
|
|
if (Array.isArray(messageList) && messageList.length > 0) {
|
|||
|
|
const contentMap = buildContentMap(messageList);
|
|||
|
|
payloadMobiles = "";
|
|||
|
|
payloadContent = JSON.stringify(contentMap);
|
|||
|
|
} else if (isPlainObject(content)) {
|
|||
|
|
const contentMap = buildContentMapFromObject(content);
|
|||
|
|
payloadMobiles = "";
|
|||
|
|
payloadContent = JSON.stringify(contentMap);
|
|||
|
|
} else {
|
|||
|
|
const normalizedMobiles = normalizeMobiles(mobiles);
|
|||
|
|
assertRequired(normalizedMobiles, "mobiles");
|
|||
|
|
if (typeof content !== "string" || content.trim() === "") {
|
|||
|
|
throw new Error("content 必须为非空字符串");
|
|||
|
|
}
|
|||
|
|
payloadMobiles = normalizedMobiles;
|
|||
|
|
payloadContent = content;
|
|||
|
|
}
|
|||
|
|
|
|||
|
|
const payload = {
|
|||
|
|
ecName,
|
|||
|
|
apId,
|
|||
|
|
mobiles: payloadMobiles,
|
|||
|
|
content: payloadContent,
|
|||
|
|
sign,
|
|||
|
|
addSerial,
|
|||
|
|
};
|
|||
|
|
|
|||
|
|
payload.mac = client.buildMac([
|
|||
|
|
payload.ecName,
|
|||
|
|
payload.apId,
|
|||
|
|
secretKey,
|
|||
|
|
payload.mobiles,
|
|||
|
|
payload.content,
|
|||
|
|
payload.sign,
|
|||
|
|
payload.addSerial,
|
|||
|
|
]);
|
|||
|
|
|
|||
|
|
const data = await client.post("/sms/submit", payload, { baseUrl });
|
|||
|
|
return {
|
|||
|
|
success: true,
|
|||
|
|
message: "请求成功",
|
|||
|
|
data,
|
|||
|
|
};
|
|||
|
|
}
|
|||
|
|
|
|||
|
|
async function sendTemplateSms(event) {
|
|||
|
|
const {
|
|||
|
|
ecName,
|
|||
|
|
apId,
|
|||
|
|
secretKey,
|
|||
|
|
templateId,
|
|||
|
|
mobiles,
|
|||
|
|
params,
|
|||
|
|
sign,
|
|||
|
|
addSerial = "",
|
|||
|
|
baseUrl,
|
|||
|
|
} = event;
|
|||
|
|
|
|||
|
|
assertRequired(ecName, "ecName");
|
|||
|
|
assertRequired(apId, "apId");
|
|||
|
|
assertRequired(secretKey, "secretKey");
|
|||
|
|
assertRequired(templateId, "templateId");
|
|||
|
|
assertRequired(sign, "sign");
|
|||
|
|
|
|||
|
|
const normalizedMobiles = normalizeMobiles(mobiles);
|
|||
|
|
assertRequired(normalizedMobiles, "mobiles");
|
|||
|
|
|
|||
|
|
const paramsString = normalizeParams(params);
|
|||
|
|
|
|||
|
|
const payload = {
|
|||
|
|
ecName,
|
|||
|
|
apId,
|
|||
|
|
templateId,
|
|||
|
|
mobiles: normalizedMobiles,
|
|||
|
|
params: paramsString,
|
|||
|
|
sign,
|
|||
|
|
addSerial,
|
|||
|
|
};
|
|||
|
|
|
|||
|
|
payload.mac = client.buildMac([
|
|||
|
|
payload.ecName,
|
|||
|
|
payload.apId,
|
|||
|
|
secretKey,
|
|||
|
|
payload.templateId,
|
|||
|
|
payload.mobiles,
|
|||
|
|
payload.params,
|
|||
|
|
payload.sign,
|
|||
|
|
payload.addSerial,
|
|||
|
|
]);
|
|||
|
|
|
|||
|
|
const data = await client.post("/sms/tmpsubmit", payload, { baseUrl });
|
|||
|
|
return {
|
|||
|
|
success: true,
|
|||
|
|
message: "请求成功",
|
|||
|
|
data,
|
|||
|
|
};
|
|||
|
|
}
|
|||
|
|
|
|||
|
|
async function fetchReport(event) {
|
|||
|
|
const { ecName, apId, secretKey, baseUrl } = event;
|
|||
|
|
|
|||
|
|
assertRequired(ecName, "ecName");
|
|||
|
|
assertRequired(apId, "apId");
|
|||
|
|
assertRequired(secretKey, "secretKey");
|
|||
|
|
|
|||
|
|
const payload = {
|
|||
|
|
ecName,
|
|||
|
|
apId,
|
|||
|
|
secretKey,
|
|||
|
|
};
|
|||
|
|
|
|||
|
|
const data = await client.post("/sms/report", payload, { baseUrl });
|
|||
|
|
return {
|
|||
|
|
success: true,
|
|||
|
|
message: "请求成功",
|
|||
|
|
data,
|
|||
|
|
};
|
|||
|
|
}
|
|||
|
|
|
|||
|
|
async function fetchDeliver(event) {
|
|||
|
|
const { ecName, apId, secretKey, baseUrl } = event;
|
|||
|
|
|
|||
|
|
assertRequired(ecName, "ecName");
|
|||
|
|
assertRequired(apId, "apId");
|
|||
|
|
assertRequired(secretKey, "secretKey");
|
|||
|
|
|
|||
|
|
const payload = {
|
|||
|
|
ecName,
|
|||
|
|
apId,
|
|||
|
|
secretKey,
|
|||
|
|
};
|
|||
|
|
|
|||
|
|
const data = await client.post("/sms/deliver", payload, { baseUrl });
|
|||
|
|
return {
|
|||
|
|
success: true,
|
|||
|
|
message: "请求成功",
|
|||
|
|
data,
|
|||
|
|
};
|
|||
|
|
}
|
|||
|
|
|
|||
|
|
async function getVerificationCollection() {
|
|||
|
|
const db = await getDatabase("admin");
|
|||
|
|
const collection = db.collection(COLLECTION_NAME);
|
|||
|
|
if (!ensureIndexesPromise) {
|
|||
|
|
ensureIndexesPromise = ensureVerificationIndexes(collection);
|
|||
|
|
}
|
|||
|
|
await ensureIndexesPromise;
|
|||
|
|
return collection;
|
|||
|
|
}
|
|||
|
|
|
|||
|
|
async function ensureVerificationIndexes(collection) {
|
|||
|
|
try {
|
|||
|
|
// 检查已存在索引，避免因同名但 key 不同产生冲突
|
|||
|
|
const existingIndexes = await collection.indexes();
|
|||
|
|
const ttlIndex = existingIndexes.find((idx) => idx.name === "ttl_expireAt");
|
|||
|
|
if (ttlIndex) {
|
|||
|
|
const hasExpireAtDate = ttlIndex.key && ttlIndex.key.expireAtDate;
|
|||
|
|
if (!hasExpireAtDate) {
|
|||
|
|
// 旧索引不是基于 expireAtDate，为避免冲突先删除再创建
|
|||
|
|
try {
|
|||
|
|
await collection.dropIndex("ttl_expireAt");
|
|||
|
|
} catch (err) {
|
|||
|
|
// 如果删除失败，清空 ensureIndexesPromise 并抛出错误
|
|||
|
|
ensureIndexesPromise = null;
|
|||
|
|
throw err;
|
|||
|
|
}
|
|||
|
|
}
|
|||
|
|
}
|
|||
|
|
|
|||
|
|
await collection.createIndexes([
|
|||
|
|
{
|
|||
|
|
key: { mobile: 1 },
|
|||
|
|
unique: true,
|
|||
|
|
name: "uniq_mobile",
|
|||
|
|
},
|
|||
|
|
// expireAt 为时间戳（ms），仍然可以使用 TTL，但 MongoDB TTL 基于秒的 Date field.
|
|||
|
|
// 我们同时保留一个 Date 视图字段以便 TTL 生效（expireAtDate）。
|
|||
|
|
{
|
|||
|
|
key: { expireAtDate: 1 },
|
|||
|
|
expireAfterSeconds: 0,
|
|||
|
|
name: "ttl_expireAt",
|
|||
|
|
},
|
|||
|
|
{
|
|||
|
|
key: { lastSentAt: 1 },
|
|||
|
|
name: "idx_lastSentAt",
|
|||
|
|
},
|
|||
|
|
]);
|
|||
|
|
} catch (error) {
|
|||
|
|
ensureIndexesPromise = null;
|
|||
|
|
throw error;
|
|||
|
|
}
|
|||
|
|
}
|
|||
|
|
|
|||
|
|
function generateVerificationCode(length) {
|
|||
|
|
const size = Number.isInteger(length) && length > 0 ? length : 6;
|
|||
|
|
let code = "";
|
|||
|
|
for (let i = 0; i < size; i += 1) {
|
|||
|
|
code += crypto.randomInt(0, 10);
|
|||
|
|
}
|
|||
|
|
return code;
|
|||
|
|
}
|
|||
|
|
|
|||
|
|
function hashVerificationCode(mobile, code) {
|
|||
|
|
const source = `${mobile}:${code}:${verification.codeSalt}`;
|
|||
|
|
return crypto.createHash("sha256").update(source, "utf8").digest("hex");
|
|||
|
|
}
|
|||
|
|
|
|||
|
|
function formatVerificationContent(code, template) {
|
|||
|
|
const expireMinutes = Math.ceil(verification.expireSeconds / 60) || 1;
|
|||
|
|
return template
|
|||
|
|
.replace(/\{code\}/g, code)
|
|||
|
|
.replace(/\{expire\}/g, String(expireMinutes));
|
|||
|
|
}
|
|||
|
|
|
|||
|
|
function calculateWaitSeconds(doc, nowTs) {
|
|||
|
|
// nowTs: numeric timestamp (ms)
|
|||
|
|
// 如果不存在记录或记录没有 lastSentAt，允许立即发送
|
|||
|
|
if (!doc || !doc.lastSentAt) return 0;
|
|||
|
|
// doc.lastSentAt may be a Date or a number; normalize to ms
|
|||
|
|
const lastTs =
|
|||
|
|
doc.lastSentAt && typeof doc.lastSentAt.getTime === "function"
|
|||
|
|
? doc.lastSentAt.getTime()
|
|||
|
|
: Number(doc.lastSentAt) || 0;
|
|||
|
|
const elapsed = Math.floor((nowTs - lastTs) / 1000);
|
|||
|
|
const remain = verification.resendIntervalSeconds - elapsed;
|
|||
|
|
return remain > 0 ? remain : 0;
|
|||
|
|
}
|
|||
|
|
|
|||
|
|
function normalizeSingleMobile(value) {
|
|||
|
|
if (typeof value === "string") {
|
|||
|
|
return value.trim();
|
|||
|
|
}
|
|||
|
|
if (Array.isArray(value) && value.length > 0) {
|
|||
|
|
return String(value[0]).trim();
|
|||
|
|
}
|
|||
|
|
return "";
|
|||
|
|
}
|
|||
|
|
|
|||
|
|
function maskMobile(mobile) {
|
|||
|
|
if (!mobile || typeof mobile !== 'string') return '';
|
|||
|
|
const s = mobile.trim();
|
|||
|
|
// 常见手机号 11 位：前3 后4 掩码
|
|||
|
|
if (s.length === 11) {
|
|||
|
|
return `${s.slice(0,3)}****${s.slice(7)}`;
|
|||
|
|
}
|
|||
|
|
// 较短或较长的手机号，根据长度中间打星
|
|||
|
|
const len = s.length;
|
|||
|
|
if (len <= 4) return '*'.repeat(len);
|
|||
|
|
const prefixLen = Math.floor((len - 4) / 2);
|
|||
|
|
const suffixLen = len - 4 - prefixLen;
|
|||
|
|
return `${s.slice(0,prefixLen)}${'*'.repeat(4)}${s.slice(len - suffixLen)}`;
|
|||
|
|
}
|
|||
|
|
|
|||
|
|
function isGatewaySuccess(response) {
|
|||
|
|
if (!response) return true;
|
|||
|
|
if (typeof response === "object") {
|
|||
|
|
if (response.success === false) return false;
|
|||
|
|
if (response.rspcod && response.rspcod !== "success") return false;
|
|||
|
|
}
|
|||
|
|
return true;
|
|||
|
|
}
|
|||
|
|
|
|||
|
|
function getGatewayMessage(response) {
|
|||
|
|
if (!response || typeof response !== "object") return "";
|
|||
|
|
return response.message || response.desc || response.rspcod || "";
|
|||
|
|
}
|
|||
|
|
|
|||
|
|
function sanitizeGatewayResponse(response) {
|
|||
|
|
if (!response || typeof response !== "object") {
|
|||
|
|
return response;
|
|||
|
|
}
|
|||
|
|
const { rspcod, msgGroup, success } = response;
|
|||
|
|
return { rspcod, msgGroup, success };
|
|||
|
|
}
|
|||
|
|
|
|||
|
|
async function rollbackVerificationDocument(collection, docId, previousDoc) {
|
|||
|
|
if (!docId) return;
|
|||
|
|
if (previousDoc) {
|
|||
|
|
await collection.replaceOne(
|
|||
|
|
{ _id: previousDoc._id },
|
|||
|
|
{
|
|||
|
|
...previousDoc,
|
|||
|
|
updatedAt: Date.now(),
|
|||
|
|
}
|
|||
|
|
);
|
|||
|
|
} else {
|
|||
|
|
await collection.deleteOne({ _id: docId });
|
|||
|
|
}
|
|||
|
|
}
|
|||
|
|
|
|||
|
|
function normalizeMobiles(value) {
|
|||
|
|
if (value === null || value === undefined) return "";
|
|||
|
|
if (Array.isArray(value)) {
|
|||
|
|
return value.filter((item) => !!item).join(",");
|
|||
|
|
}
|
|||
|
|
if (typeof value === "string") {
|
|||
|
|
return value.trim();
|
|||
|
|
}
|
|||
|
|
throw new Error("mobiles 格式不正确，应为字符串或数组");
|
|||
|
|
}
|
|||
|
|
|
|||
|
|
function normalizeParams(value) {
|
|||
|
|
if (value === undefined || value === null) {
|
|||
|
|
return '[""]';
|
|||
|
|
}
|
|||
|
|
if (typeof value === "string") {
|
|||
|
|
return value;
|
|||
|
|
}
|
|||
|
|
if (Array.isArray(value)) {
|
|||
|
|
return JSON.stringify(value);
|
|||
|
|
}
|
|||
|
|
throw new Error("params 格式不正确，应为字符串或数组");
|
|||
|
|
}
|
|||
|
|
|
|||
|
|
function buildContentMap(list) {
|
|||
|
|
return list.reduce((acc, item, index) => {
|
|||
|
|
if (!item || typeof item !== "object") {
|
|||
|
|
throw new Error(`messageList 第 ${index + 1} 项格式错误`);
|
|||
|
|
}
|
|||
|
|
const mobile = typeof item.mobile === "string" ? item.mobile.trim() : "";
|
|||
|
|
const text = typeof item.content === "string" ? item.content : "";
|
|||
|
|
if (!mobile) {
|
|||
|
|
throw new Error(`messageList 第 ${index + 1} 项缺少 mobile`);
|
|||
|
|
}
|
|||
|
|
if (!text) {
|
|||
|
|
throw new Error(`messageList 第 ${index + 1} 项缺少 content`);
|
|||
|
|
}
|
|||
|
|
acc[mobile] = text;
|
|||
|
|
return acc;
|
|||
|
|
}, {});
|
|||
|
|
}
|
|||
|
|
|
|||
|
|
function buildContentMapFromObject(value) {
|
|||
|
|
return Object.entries(value).reduce((acc, [mobile, text]) => {
|
|||
|
|
if (typeof text !== "string" || !text) {
|
|||
|
|
throw new Error(`content.${mobile} 必须为非空字符串`);
|
|||
|
|
}
|
|||
|
|
acc[mobile] = text;
|
|||
|
|
return acc;
|
|||
|
|
}, {});
|
|||
|
|
}
|
|||
|
|
|
|||
|
|
function assertRequired(value, field) {
|
|||
|
|
if (value === undefined || value === null || value === "") {
|
|||
|
|
throw new Error(`${field} 不能为空`);
|
|||
|
|
}
|
|||
|
|
}
|
|||
|
|
|
|||
|
|
function isPlainObject(value) {
|
|||
|
|
return Object.prototype.toString.call(value) === "[object Object]";
|
|||
|
|
}
|