8f01de4f9a
## 修复 1. 资源对接：去掉"擅长什么"只保留两项 2. 资源对接：需登录+购买章节才能使用 3. 手机号API：修复AppSecret配置错误 4. 小程序码API：修复AppSecret配置错误 5. 获取地址：增强错误处理 ## AppSecret统一 - qrcode/phone API统一使用正确的AppSecret Co-authored-by: Cursor <cursoragent@cursor.com>
87 lines
2.7 KiB
TypeScript
87 lines
2.7 KiB
TypeScript
/**
|
||
* 微信手机号解密API
|
||
* 获取用户手机号（需要小程序 getPhoneNumber 授权）
|
||
*/
|
||
|
||
import { NextRequest, NextResponse } from 'next/server'
|
||
import { query } from '@/lib/db'
|
||
|
||
const APPID = process.env.WECHAT_APPID || 'wxb8bbb2b10dec74aa'
|
||
const APPSECRET = process.env.WECHAT_APPSECRET || '3c1fb1f63e6e052222bbcead9d07fe0c'
|
||
|
||
/**
|
||
* POST - 解密手机号
|
||
*/
|
||
export async function POST(request: NextRequest) {
|
||
try {
|
||
const body = await request.json()
|
||
const { code, userId } = body
|
||
|
||
if (!code) {
|
||
return NextResponse.json({ success: false, message: '缺少code参数' }, { status: 400 })
|
||
}
|
||
|
||
// 1. 获取 access_token
|
||
const tokenUrl = `https://api.weixin.qq.com/cgi-bin/token?grant_type=client_credential&appid=${APPID}&secret=${APPSECRET}`
|
||
const tokenRes = await fetch(tokenUrl)
|
||
const tokenData = await tokenRes.json()
|
||
|
||
if (!tokenData.access_token) {
|
||
console.error('[Phone] 获取access_token失败:', tokenData)
|
||
return NextResponse.json({
|
||
success: false,
|
||
message: '获取access_token失败',
|
||
error: tokenData.errmsg
|
||
}, { status: 500 })
|
||
}
|
||
|
||
// 2. 获取手机号
|
||
const phoneUrl = `https://api.weixin.qq.com/wxa/business/getuserphonenumber?access_token=${tokenData.access_token}`
|
||
const phoneRes = await fetch(phoneUrl, {
|
||
method: 'POST',
|
||
headers: { 'Content-Type': 'application/json' },
|
||
body: JSON.stringify({ code })
|
||
})
|
||
const phoneData = await phoneRes.json()
|
||
|
||
if (phoneData.errcode !== 0) {
|
||
console.error('[Phone] 获取手机号失败:', phoneData)
|
||
return NextResponse.json({
|
||
success: false,
|
||
message: '获取手机号失败',
|
||
error: phoneData.errmsg
|
||
}, { status: 500 })
|
||
}
|
||
|
||
const phoneNumber = phoneData.phone_info?.phoneNumber || phoneData.phone_info?.purePhoneNumber
|
||
|
||
if (!phoneNumber) {
|
||
return NextResponse.json({ success: false, message: '未获取到手机号' }, { status: 500 })
|
||
}
|
||
|
||
// 3. 如果有userId，更新到数据库
|
||
if (userId) {
|
||
try {
|
||
await query('UPDATE users SET phone = ? WHERE id = ?', [phoneNumber, userId])
|
||
console.log('[Phone] 手机号已绑定到用户:', userId)
|
||
} catch (e) {
|
||
console.log('[Phone] 更新数据库失败，但返回手机号成功')
|
||
}
|
||
}
|
||
|
||
return NextResponse.json({
|
||
success: true,
|
||
phoneNumber,
|
||
countryCode: phoneData.phone_info?.countryCode || '86'
|
||
})
|
||
|
||
} catch (error) {
|
||
console.error('[Phone] Error:', error)
|
||
return NextResponse.json({
|
||
success: false,
|
||
message: '服务器错误',
|
||
error: String(error)
|
||
}, { status: 500 })
|
||
}
|
||
}
|