feat: add scene qr login

common/login-session-manager.go

@@ -0,0 +1,204 @@
+package common
+
+import (
+	"crypto/rand"
+	"encoding/hex"
+	"fmt"
+	"sync"
+	"time"
+
+	"github.com/gin-gonic/gin"
+)
+
+type LoginSessionStatus string
+
+const (
+	SessionStatusPending LoginSessionStatus = "pending"
+	SessionStatusSuccess LoginSessionStatus = "success"
+	SessionStatusExpired LoginSessionStatus = "expired"
+)
+
+type WeChatUserInfo struct {
+	OpenID string `json:"openid"`
+}
+
+type LoginSession struct {
+	LoginToken string             `json:"login_token"` // 前端查询令牌
+	SceneID    string             `json:"scene_id"`    // 微信场景值
+	Status     LoginSessionStatus `json:"status"`      // 会话状态
+	WeChatID   string             `json:"wechat_id"`   // 微信用户ID
+	AuthCode   string             `json:"auth_code"`   // 授权给clinx的代码
+	UserInfo   *WeChatUserInfo    `json:"user_info"`   // 用户详细信息
+	CreatedAt  time.Time          `json:"created_at"`  // 创建时间
+	ExpiredAt  time.Time          `json:"expired_at"`  // 过期时间
+}
+
+type LoginSessionManager struct {
+	sessions map[string]*LoginSession // key: login_token
+	scenes   map[string]string        // key: scene_id, value: login_token
+	mutex    sync.RWMutex
+	cleanup  *time.Ticker
+}
+
+var sessionManager = &LoginSessionManager{
+	sessions: make(map[string]*LoginSession),
+	scenes:   make(map[string]string),
+	cleanup:  time.NewTicker(1 * time.Minute),
+}
+
+func init() {
+	go sessionManager.startCleanup()
+}
+
+func (m *LoginSessionManager) generateLoginToken() string {
+	bytes := make([]byte, 16)
+	rand.Read(bytes)
+	return hex.EncodeToString(bytes)
+}
+
+func (m *LoginSessionManager) generateSceneID() string {
+	timestamp := time.Now().Unix()
+	randomBytes := make([]byte, 8)
+	rand.Read(randomBytes)
+	randomStr := hex.EncodeToString(randomBytes)
+	return fmt.Sprintf("login_%d_%s", timestamp, randomStr)
+}
+
+func (m *LoginSessionManager) CreateSession() *LoginSession {
+	m.mutex.Lock()
+	defer m.mutex.Unlock()
+
+	loginToken := m.generateLoginToken()
+	sceneID := m.generateSceneID()
+	authCode := m.generateLoginToken() // 生成授权码
+
+	session := &LoginSession{
+		LoginToken: loginToken,
+		SceneID:    sceneID,
+		Status:     SessionStatusPending,
+		AuthCode:   authCode,
+		CreatedAt:  time.Now(),
+		ExpiredAt:  time.Now().Add(10 * time.Minute), // 10分钟过期
+	}
+
+	m.sessions[loginToken] = session
+	m.scenes[sceneID] = loginToken
+
+	SysLog(fmt.Sprintf("Created login session: token=%s, scene=%s", loginToken, sceneID))
+	return session
+}
+
+func (m *LoginSessionManager) GetSession(loginToken string) *LoginSession {
+	m.mutex.RLock()
+	defer m.mutex.RUnlock()
+
+	session, exists := m.sessions[loginToken]
+	if !exists {
+		return nil
+	}
+
+	if session.ExpiredAt.Before(time.Now()) {
+		delete(m.sessions, loginToken)
+		delete(m.scenes, session.SceneID)
+		return nil
+	}
+
+	return session
+}
+
+func (m *LoginSessionManager) GetSessionByScene(sceneID string) *LoginSession {
+	m.mutex.RLock()
+	defer m.mutex.RUnlock()
+
+	loginToken, exists := m.scenes[sceneID]
+	if !exists {
+		return nil
+	}
+
+	session, exists := m.sessions[loginToken]
+	if !exists || session.ExpiredAt.Before(time.Now()) {
+		delete(m.scenes, sceneID)
+		if exists {
+			delete(m.sessions, loginToken)
+		}
+		return nil
+	}
+
+	return session
+}
+
+func (m *LoginSessionManager) UpdateSessionByScene(sceneID, wechatID string, userInfo *WeChatUserInfo) bool {
+	m.mutex.Lock()
+	defer m.mutex.Unlock()
+
+	loginToken, exists := m.scenes[sceneID]
+	if !exists {
+		return false
+	}
+
+	session, sessionExists := m.sessions[loginToken]
+	if !sessionExists {
+		return false
+	}
+
+	session.WeChatID = wechatID
+	session.UserInfo = userInfo
+	session.Status = SessionStatusSuccess
+
+	SysLog(fmt.Sprintf("Updated login session: wechat_id=%s, status=success", wechatID))
+	return true
+}
+
+func (m *LoginSessionManager) startCleanup() {
+	for range m.cleanup.C {
+		m.mutex.Lock()
+		now := time.Now()
+
+		for loginToken, session := range m.sessions {
+			if session.ExpiredAt.Before(now) {
+				session.Status = SessionStatusExpired
+				delete(m.sessions, loginToken)
+				delete(m.scenes, session.SceneID)
+			}
+		}
+
+		SysLog(fmt.Sprintf("Cleanup completed, active sessions: %d", len(m.sessions)))
+		m.mutex.Unlock()
+	}
+}
+
+func (m *LoginSessionManager) GetActiveSessionCount() int {
+	m.mutex.RLock()
+	defer m.mutex.RUnlock()
+	return len(m.sessions)
+}
+
+func FindWeChatIDByAuthCode(c *gin.Context) (string, error) {
+	code := c.Query("code")
+	if code == "" {
+		return "", fmt.Errorf("无效的参数")
+	}
+	weChatAppID := sessionManager.findWeChatIDByAuthCode(code)
+	if weChatAppID == "" {
+		return "", fmt.Errorf("授权码无效或已过期")
+	}
+	return weChatAppID, nil
+}
+
+func (m *LoginSessionManager) findWeChatIDByAuthCode(authCode string) string {
+	m.mutex.RLock()
+	defer m.mutex.RUnlock()
+
+	for _, session := range m.sessions {
+		if session.AuthCode == authCode && session.Status == SessionStatusSuccess {
+			return session.WeChatID
+		}
+	}
+
+	return ""
+}
+
+// 导出全局访问器
+func GetSessionManager() *LoginSessionManager {
+	return sessionManager
+}

common/wechat-message.go

@@ -1,6 +1,10 @@
 package common
 
-import "encoding/xml"
+import (
+	"encoding/xml"
+	"fmt"
+	"strings"
+)
 
 type WeChatMessageRequest struct {
 	XMLName      xml.Name `xml:"xml"`
@@ -12,6 +16,10 @@ type WeChatMessageRequest struct {
 	MsgId        int64    `xml:"MsgId"`
 	MsgDataId    int64    `xml:"MsgDataId"`
 	Idx          int64    `xml:"Idx"`
+	// 事件相关字段
+	Event    string `xml:"Event,omitempty"`
+	EventKey string `xml:"EventKey,omitempty"`
+	Ticket   string `xml:"Ticket,omitempty"`
 }
 
 type WeChatMessageResponse struct {
@@ -24,10 +32,68 @@ type WeChatMessageResponse struct {
 }
 
 func ProcessWeChatMessage(req *WeChatMessageRequest, res *WeChatMessageResponse) {
-	switch req.Content {
-	case "验证码":
-		code := GenerateAllNumberVerificationCode(6)
-		RegisterWeChatCodeAndID(code, req.FromUserName)
-		res.Content = code
+	SysLog(fmt.Sprintf("Received WeChat message: type=%s, from=%s, event=%s, key=%s, content=%s",
+		req.MsgType, req.FromUserName, req.Event, req.EventKey, req.Content))
+
+	switch {
+	case req.MsgType == "event" && (req.Event == "subscribe" || req.Event == "SCAN"):
+		handleQRCodeScanEvent(req, res)
+
+	case req.MsgType == "text":
+		switch req.Content {
+		case "验证码":
+			handleVerificationCode(req, res)
+		default:
+			res.Content = "发送「验证码」获取登录验证码"
+		}
+
+	default:
+		res.Content = "欢迎使用！发送「验证码」获取登录验证码"
+	}
+}
+
+func handleQRCodeScanEvent(req *WeChatMessageRequest, res *WeChatMessageResponse) {
+	var sceneID string
+
+	if req.Event == "subscribe" && strings.HasPrefix(req.EventKey, "qrscene_") {
+		sceneID = strings.TrimPrefix(req.EventKey, "qrscene_")
+		res.Content = "欢迎关注！登录成功，请返回网页继续操作"
+
+	} else if req.Event == "SCAN" {
+		sceneID = req.EventKey
+		res.Content = "登录成功，请返回网页继续操作"
+
+	} else {
+		res.Content = "欢迎关注！发送「验证码」获取登录验证码，或使用扫码登录功能"
+		return
 	}
+
+	session := GetSessionManager().GetSessionByScene(sceneID)
+	if session == nil {
+		SysLog(fmt.Sprintf("No session found for scene: %s", sceneID))
+		if req.Event == "subscribe" {
+			res.Content = "欢迎关注！二维码可能已过期，请重新生成"
+		}
+		return
+	}
+
+	userInfo := &WeChatUserInfo{
+		OpenID: req.FromUserName,
+	}
+
+	success := GetSessionManager().UpdateSessionByScene(sceneID, req.FromUserName, userInfo)
+	if success {
+		SysLog(fmt.Sprintf("Successfully updated login session: scene=%s, wechat=%s",
+			sceneID, req.FromUserName))
+	} else {
+		SysLog(fmt.Sprintf("Failed to update login session: scene=%s", sceneID))
+		res.Content = "登录失败，请重新扫码"
+	}
+}
+
+func handleVerificationCode(req *WeChatMessageRequest, res *WeChatMessageResponse) {
+	code := GenerateAllNumberVerificationCode(6)
+	RegisterWeChatCodeAndID(code, req.FromUserName)
+	res.Content = code
+	SysLog(fmt.Sprintf("Generated verification code: %s for user: %s", code, req.FromUserName))
 }