fullData = leaiApiClient.fetchWorkDetail(remoteWorkId);
+ if (fullData != null) {
+ savePageList(workId, fullData.get("pageList"));
+ } else {
+ log.warn("[乐读派] 补充拉取页面数据失败: workId={}, remoteWorkId={}", workId, remoteWorkId);
+ }
+ }
+
/**
* 通过 remoteWorkId 查找本地作品
*/
diff --git a/backend-java/src/main/java/com/competition/modules/leai/task/LeaiReconcileTask.java b/backend-java/src/main/java/com/competition/modules/leai/task/LeaiReconcileTask.java
index 0eab89d..ef9a739 100644
--- a/backend-java/src/main/java/com/competition/modules/leai/task/LeaiReconcileTask.java
+++ b/backend-java/src/main/java/com/competition/modules/leai/task/LeaiReconcileTask.java
@@ -16,7 +16,7 @@ import java.util.Map;
/**
* 定时任务：B3 对账 + Webhook 失败重试
*
- * 1. 每 30 分钟调用 B3 接口对账，补偿 Webhook 遗漏
+ * 1. B3 对账：开发/测试环境每 1 分钟，生产环境每 30 分钟（配置项 leai.reconcile-interval）
* 2. 每 10 分钟重试失败的 Webhook 事件（最多 3 次）
*/
@Slf4j
@@ -35,9 +35,9 @@ public class LeaiReconcileTask {
/**
* B3 定时对账
- * 每 30 分钟执行，初始延迟 60 秒
+ * 间隔由 leai.reconcile-interval 配置（开发/测试: 1分钟，生产: 30分钟）
*/
- @Scheduled(fixedRate = 30 * 60 * 1000, initialDelay = 60 * 1000)
+ @Scheduled(fixedRateString = "${leai.reconcile-interval:1800000}", initialDelayString = "${leai.reconcile-initial-delay:60000}")
public void reconcile() {
log.info("[B3对账] 开始执行...");
diff --git a/backend-java/src/main/java/com/competition/modules/leai/vo/LeaiTokenVO.java b/backend-java/src/main/java/com/competition/modules/leai/vo/LeaiTokenVO.java
index 7d766c4..bec3c40 100644
--- a/backend-java/src/main/java/com/competition/modules/leai/vo/LeaiTokenVO.java
+++ b/backend-java/src/main/java/com/competition/modules/leai/vo/LeaiTokenVO.java
@@ -15,10 +15,4 @@ public class LeaiTokenVO {
@Schema(description = "机构ID（对应本项目的租户 code，即 tenant_code）")
private String orgId;
-
- @Schema(description = "H5 前端地址")
- private String h5Url;
-
- @Schema(description = "用户手机号")
- private String phone;
}
diff --git a/backend-java/src/main/java/com/competition/modules/pub/config/SmsConfig.java b/backend-java/src/main/java/com/competition/modules/pub/config/SmsConfig.java
new file mode 100644
index 0000000..cc42252
--- /dev/null
+++ b/backend-java/src/main/java/com/competition/modules/pub/config/SmsConfig.java
@@ -0,0 +1,29 @@
+package com.competition.modules.pub.config;
+
+import lombok.Data;
+import org.springframework.boot.context.properties.ConfigurationProperties;
+import org.springframework.stereotype.Component;
+
+/**
+ * 阿里云短信服务配置
+ */
+@Data
+@Component
+@ConfigurationProperties(prefix = "aliyun.sms")
+public class SmsConfig {
+
+ /** 阿里云短信 AccessKey ID */
+ private String accessKeyId;
+
+ /** 阿里云短信 AccessKey Secret */
+ private String accessKeySecret;
+
+ /** 短信签名名称 */
+ private String signName = "乐绘世界";
+
+ /** 验证码模板 CODE */
+ private String templateCode;
+
+ /** 是否启用真实短信发送（false 时验证码输出到日志） */
+ private boolean enabled = false;
+}
diff --git a/backend-java/src/main/java/com/competition/modules/pub/controller/PublicAuthController.java b/backend-java/src/main/java/com/competition/modules/pub/controller/PublicAuthController.java
index 6a85a11..963fb92 100644
--- a/backend-java/src/main/java/com/competition/modules/pub/controller/PublicAuthController.java
+++ b/backend-java/src/main/java/com/competition/modules/pub/controller/PublicAuthController.java
@@ -5,7 +5,9 @@ import com.competition.common.result.Result;
import com.competition.common.util.SecurityUtil;
import com.competition.modules.pub.dto.PublicLoginDto;
import com.competition.modules.pub.dto.PublicRegisterDto;
+import com.competition.modules.pub.dto.SendSmsCodeDto;
import com.competition.modules.pub.service.PublicAuthService;
+import com.competition.modules.pub.service.SmsCodeService;
import com.competition.security.annotation.Public;
import io.swagger.v3.oas.annotations.Operation;
import io.swagger.v3.oas.annotations.tags.Tag;
@@ -22,6 +24,7 @@ import java.util.Map;
public class PublicAuthController {
private final PublicAuthService publicAuthService;
+ private final SmsCodeService smsCodeService;
@Public
@PostMapping("/register")
@@ -39,6 +42,15 @@ public class PublicAuthController {
return Result.success(publicAuthService.login(dto));
}
+ @Public
+ @PostMapping("/sms/send")
+ @RateLimit(permits = 1, duration = 60)
+ @Operation(summary = "发送短信验证码")
+ public Result sendSmsCode(@Valid @RequestBody SendSmsCodeDto dto) {
+ smsCodeService.sendCode(dto.getPhone());
+ return Result.success(null);
+ }
+
@PostMapping("/switch-child")
@Operation(summary = "切换到子女账号")
public Result> switchChild(@RequestBody Map body) {
diff --git a/backend-java/src/main/java/com/competition/modules/pub/dto/PublicRegisterDto.java b/backend-java/src/main/java/com/competition/modules/pub/dto/PublicRegisterDto.java
index 60661a2..f77c5ea 100644
--- a/backend-java/src/main/java/com/competition/modules/pub/dto/PublicRegisterDto.java
+++ b/backend-java/src/main/java/com/competition/modules/pub/dto/PublicRegisterDto.java
@@ -30,6 +30,11 @@ public class PublicRegisterDto {
@Schema(description = "手机号")
private String phone;
+ @NotBlank(message = "短信验证码不能为空")
+ @Size(min = 6, max = 6, message = "验证码为6位数字")
+ @Schema(description = "短信验证码")
+ private String smsCode;
+
@Schema(description = "城市")
private String city;
}
diff --git a/backend-java/src/main/java/com/competition/modules/pub/dto/SendSmsCodeDto.java b/backend-java/src/main/java/com/competition/modules/pub/dto/SendSmsCodeDto.java
new file mode 100644
index 0000000..2979cf0
--- /dev/null
+++ b/backend-java/src/main/java/com/competition/modules/pub/dto/SendSmsCodeDto.java
@@ -0,0 +1,19 @@
+package com.competition.modules.pub.dto;
+
+import io.swagger.v3.oas.annotations.media.Schema;
+import jakarta.validation.constraints.NotBlank;
+import jakarta.validation.constraints.Pattern;
+import lombok.Data;
+
+/**
+ * 发送短信验证码请求
+ */
+@Data
+@Schema(description = "发送短信验证码请求")
+public class SendSmsCodeDto {
+
+ @NotBlank(message = "手机号不能为空")
+ @Pattern(regexp = "^1[3-9]\\d{9}$", message = "手机号格式不正确")
+ @Schema(description = "手机号")
+ private String phone;
+}
diff --git a/backend-java/src/main/java/com/competition/modules/pub/service/PublicAuthService.java b/backend-java/src/main/java/com/competition/modules/pub/service/PublicAuthService.java
index 1640e8f..67dc843 100644
--- a/backend-java/src/main/java/com/competition/modules/pub/service/PublicAuthService.java
+++ b/backend-java/src/main/java/com/competition/modules/pub/service/PublicAuthService.java
@@ -43,12 +43,16 @@ public class PublicAuthService {
private final PasswordEncoder passwordEncoder;
private final JwtUtil jwtUtil;
private final StringRedisTemplate stringRedisTemplate;
+ private final SmsCodeService smsCodeService;
/**
* 公众端注册
*/
@Transactional
public Map register(PublicRegisterDto dto) {
+ // 校验短信验证码
+ smsCodeService.verifyCode(dto.getPhone(), dto.getSmsCode());
+
// 查找公众租户
SysTenant publicTenant = sysTenantMapper.selectOne(
new LambdaQueryWrapper().eq(SysTenant::getCode, TenantConstants.CODE_PUBLIC));
diff --git a/backend-java/src/main/java/com/competition/modules/pub/service/SmsCodeService.java b/backend-java/src/main/java/com/competition/modules/pub/service/SmsCodeService.java
new file mode 100644
index 0000000..543d66b
--- /dev/null
+++ b/backend-java/src/main/java/com/competition/modules/pub/service/SmsCodeService.java
@@ -0,0 +1,132 @@
+package com.competition.modules.pub.service;
+
+import com.competition.common.constants.CacheConstants;
+import com.competition.common.enums.ErrorCode;
+import com.competition.common.exception.BusinessException;
+import lombok.RequiredArgsConstructor;
+import lombok.extern.slf4j.Slf4j;
+import org.springframework.data.redis.core.StringRedisTemplate;
+import org.springframework.stereotype.Service;
+
+import java.time.Duration;
+import java.time.LocalDateTime;
+import java.time.LocalTime;
+import java.util.concurrent.TimeUnit;
+
+/**
+ * 短信验证码业务服务
+ * 负责：生成验证码、存储到 Redis、校验验证码
+ */
+@Slf4j
+@Service
+@RequiredArgsConstructor
+public class SmsCodeService {
+
+ private final SmsService smsService;
+ private final StringRedisTemplate stringRedisTemplate;
+
+ /**
+ * 发送短信验证码
+ *
+ * @param phone 手机号
+ */
+ public void sendCode(String phone) {
+ // 检查 60 秒发送间隔
+ String intervalKey = CacheConstants.SMS_INTERVAL_PREFIX + phone;
+ if (Boolean.TRUE.equals(stringRedisTemplate.hasKey(intervalKey))) {
+ throw new BusinessException(ErrorCode.SMS_SEND_TOO_FREQUENT.getCode(),
+ ErrorCode.SMS_SEND_TOO_FREQUENT.getMessage());
+ }
+
+ // 检查每日发送次数上限
+ String dailyKey = CacheConstants.SMS_DAILY_PREFIX + phone;
+ String dailyCountStr = stringRedisTemplate.opsForValue().get(dailyKey);
+ int dailyCount = dailyCountStr != null ? Integer.parseInt(dailyCountStr) : 0;
+ if (dailyCount >= CacheConstants.SMS_DAILY_LIMIT) {
+ throw new BusinessException(ErrorCode.SMS_DAILY_LIMIT_EXCEEDED.getCode(),
+ ErrorCode.SMS_DAILY_LIMIT_EXCEEDED.getMessage());
+ }
+
+ // 生成验证码
+ String code = smsService.generateCode();
+
+ // 调用短信服务发送
+ smsService.sendVerifyCode(phone, code);
+
+ // 存储验证码到 Redis（5 分钟有效）
+ String codeKey = CacheConstants.SMS_CODE_PREFIX + phone;
+ stringRedisTemplate.opsForValue().set(codeKey, code,
+ Duration.ofMinutes(CacheConstants.SMS_CODE_EXPIRE_MINUTES));
+
+ // 设置发送间隔（60 秒）
+ stringRedisTemplate.opsForValue().set(intervalKey, "1",
+ Duration.ofSeconds(CacheConstants.SMS_INTERVAL_SECONDS));
+
+ // 递增每日发送次数（TTL 到当天 24:00）
+ stringRedisTemplate.opsForValue().increment(dailyKey);
+ if (dailyCount == 0) {
+ // 首次发送，设置过期时间到当天结束
+ long secondsUntilMidnight = Duration.between(
+ LocalDateTime.now(),
+ LocalDateTime.now().toLocalDate().plusDays(1).atTime(LocalTime.MIDNIGHT)
+ ).getSeconds();
+ stringRedisTemplate.expire(dailyKey, secondsUntilMidnight, TimeUnit.SECONDS);
+ }
+
+ log.info("验证码已发送：手机号={}", phone);
+ }
+
+ /**
+ * 校验短信验证码
+ *
+ * @param phone 手机号
+ * @param code 用户输入的验证码
+ * @return 校验是否通过
+ */
+ public boolean verifyCode(String phone, String code) {
+ if (code == null || code.isBlank()) {
+ throw new BusinessException(ErrorCode.SMS_CODE_INVALID.getCode(),
+ "验证码不能为空");
+ }
+
+ String codeKey = CacheConstants.SMS_CODE_PREFIX + phone;
+ String storedCode = stringRedisTemplate.opsForValue().get(codeKey);
+
+ // 验证码不存在或已过期
+ if (storedCode == null) {
+ throw new BusinessException(ErrorCode.SMS_CODE_EXPIRED.getCode(),
+ ErrorCode.SMS_CODE_EXPIRED.getMessage());
+ }
+
+ // 验证码匹配
+ if (storedCode.equals(code)) {
+ // 验证成功：删除验证码（一次性使用）
+ stringRedisTemplate.delete(codeKey);
+ // 清除验证失败次数
+ stringRedisTemplate.delete(CacheConstants.SMS_VERIFY_PREFIX + phone);
+ log.info("验证码校验通过：手机号={}", phone);
+ return true;
+ }
+
+ // 验证失败：递增失败次数
+ String verifyKey = CacheConstants.SMS_VERIFY_PREFIX + phone;
+ Long failCount = stringRedisTemplate.opsForValue().increment(verifyKey);
+ if (failCount != null && failCount == 1) {
+ // 首次失败，设置过期时间
+ stringRedisTemplate.expire(verifyKey,
+ Duration.ofMinutes(CacheConstants.SMS_CODE_EXPIRE_MINUTES));
+ }
+
+ // 失败次数达到上限，删除验证码
+ if (failCount != null && failCount >= CacheConstants.SMS_VERIFY_FAIL_LIMIT) {
+ stringRedisTemplate.delete(codeKey);
+ stringRedisTemplate.delete(verifyKey);
+ log.warn("验证码错误次数超限，已清除：手机号={}", phone);
+ throw new BusinessException(ErrorCode.SMS_CODE_EXPIRED.getCode(),
+ "验证码错误次数过多，请重新获取验证码");
+ }
+
+ throw new BusinessException(ErrorCode.SMS_CODE_INVALID.getCode(),
+ ErrorCode.SMS_CODE_INVALID.getMessage());
+ }
+}
diff --git a/backend-java/src/main/java/com/competition/modules/pub/service/SmsService.java b/backend-java/src/main/java/com/competition/modules/pub/service/SmsService.java
new file mode 100644
index 0000000..78b4aa4
--- /dev/null
+++ b/backend-java/src/main/java/com/competition/modules/pub/service/SmsService.java
@@ -0,0 +1,81 @@
+package com.competition.modules.pub.service;
+
+import cn.hutool.core.util.RandomUtil;
+import com.competition.modules.pub.config.SmsConfig;
+import lombok.RequiredArgsConstructor;
+import lombok.extern.slf4j.Slf4j;
+import org.springframework.stereotype.Service;
+
+/**
+ * 短信发送服务
+ * 封装阿里云短信 SDK，开发模式下验证码输出到日志
+ */
+@Slf4j
+@Service
+@RequiredArgsConstructor
+public class SmsService {
+
+ private final SmsConfig smsConfig;
+
+ /**
+ * 发送验证码短信
+ *
+ * @param phone 手机号
+ * @param code 验证码
+ */
+ public void sendVerifyCode(String phone, String code) {
+ if (!smsConfig.isEnabled()) {
+ // 开发模式：验证码输出到日志
+ log.info("【开发模式】短信验证码：手机号={}, 验证码={}", phone, code);
+ return;
+ }
+
+ // 生产模式：调用阿里云短信 SDK
+ try {
+ com.aliyun.dysmsapi20170525.Client client = createClient();
+ com.aliyun.dysmsapi20170525.models.SendSmsRequest request =
+ new com.aliyun.dysmsapi20170525.models.SendSmsRequest()
+ .setPhoneNumbers(phone)
+ .setSignName(smsConfig.getSignName())
+ .setTemplateCode(smsConfig.getTemplateCode())
+ .setTemplateParam("{\"code\":\"" + code + "\"}");
+
+ com.aliyun.dysmsapi20170525.models.SendSmsResponse response = client.sendSms(request);
+
+ if (response.getBody() == null || !"OK".equals(response.getBody().getCode())) {
+ String errMsg = response.getBody() != null
+ ? response.getBody().getMessage() : "响应为空";
+ log.error("短信发送失败：手机号={}, 错误码={}, 错误信息={}",
+ phone,
+ response.getBody() != null ? response.getBody().getCode() : "null",
+ errMsg);
+ throw new RuntimeException("短信发送失败：" + errMsg);
+ }
+
+ log.info("短信发送成功：手机号={}", phone);
+ } catch (RuntimeException e) {
+ throw e;
+ } catch (Exception e) {
+ log.error("短信发送异常：手机号={}", phone, e);
+ throw new RuntimeException("短信发送异常", e);
+ }
+ }
+
+ /**
+ * 生成6位数字验证码
+ */
+ public String generateCode() {
+ return RandomUtil.randomNumbers(6);
+ }
+
+ /**
+ * 创建阿里云短信客户端
+ */
+ private com.aliyun.dysmsapi20170525.Client createClient() throws Exception {
+ com.aliyun.teaopenapi.models.Config config = new com.aliyun.teaopenapi.models.Config()
+ .setAccessKeyId(smsConfig.getAccessKeyId())
+ .setAccessKeySecret(smsConfig.getAccessKeySecret());
+ config.endpoint = "dysmsapi.aliyuncs.com";
+ return new com.aliyun.dysmsapi20170525.Client(config);
+ }
+}
diff --git a/backend-java/src/main/java/com/competition/modules/sys/entity/SysUser.java b/backend-java/src/main/java/com/competition/modules/sys/entity/SysUser.java
index 767c2f3..665299c 100644
--- a/backend-java/src/main/java/com/competition/modules/sys/entity/SysUser.java
+++ b/backend-java/src/main/java/com/competition/modules/sys/entity/SysUser.java
@@ -34,7 +34,7 @@ public class SysUser extends BaseEntity {
@Schema(description = "邮箱")
private String email;
- @Schema(description = "手机号（全局唯一）")
+ @Schema(description = "手机号（租户内唯一）")
private String phone;
@Schema(description = "微信OpenID")
diff --git a/backend-java/src/main/resources/application-dev.yml b/backend-java/src/main/resources/application-dev.yml
index 387a543..c29d42e 100644
--- a/backend-java/src/main/resources/application-dev.yml
+++ b/backend-java/src/main/resources/application-dev.yml
@@ -48,6 +48,13 @@ aliyun:
# 前端直传跨域：启动时自动配置 OSS CORS
cors-enabled: ${OSS_CORS_ENABLED:true}
cors-allowed-origins: ${OSS_CORS_ORIGINS:*}
+ # 短信服务配置（开发环境关闭真实发送，验证码输出到日志）
+ sms:
+ access-key-id: ${SMS_ACCESS_KEY_ID:LTAI5tKZhPofbThbSzDSiWoK}
+ access-key-secret: ${SMS_ACCESS_KEY_SECRET:FtcsC7oQX3T0NaChaa9FYq2aoysQFM}
+ sign-name: ${SMS_SIGN_NAME:乐读派}
+ template-code: ${SMS_TEMPLATE_CODE:SMS_490225426}
+ enabled: true
logging:
level:
@@ -62,4 +69,5 @@ leai:
org-id: ${LEAI_ORG_ID:gdlib}
app-secret: ${LEAI_APP_SECRET:leai_mnoi9q1a_mtcawrn8y}
api-url: ${LEAI_API_URL:http://192.168.1.120:8080}
- h5-url: ${LEAI_H5_URL:http://192.168.1.120:3001}
+ reconcile-interval: 60000 # B3对账间隔：1分钟（开发环境）
+ reconcile-initial-delay: 30000 # 初始延迟：30秒
diff --git a/backend-java/src/main/resources/application-prod.yml b/backend-java/src/main/resources/application-prod.yml
index 24caf0f..f515f5b 100644
--- a/backend-java/src/main/resources/application-prod.yml
+++ b/backend-java/src/main/resources/application-prod.yml
@@ -43,6 +43,14 @@ logging:
level:
com.competition: info
+# 乐读派 AI 创作系统配置
+leai:
+ org-id: ${LEAI_ORG_ID:gdlib}
+ app-secret: ${LEAI_APP_SECRET:leai_mnoi9q1a_mtcawrn8y}
+ api-url: ${LEAI_API_URL:http://192.168.1.120:8080}
+ reconcile-interval: 1800000 # B3对账间隔：30分钟（生产环境）
+ reconcile-initial-delay: 60000 # 初始延迟：60秒
+
# 阿里云 OSS 配置（开发环境）
aliyun:
oss:
@@ -53,4 +61,11 @@ aliyun:
max-file-size: ${OSS_MAX_FILE_SIZE:10485760}
# 前端直传跨域：启动时自动配置 OSS CORS
cors-enabled: ${OSS_CORS_ENABLED:true}
- cors-allowed-origins: ${OSS_CORS_ORIGINS:*}
\ No newline at end of file
+ cors-allowed-origins: ${OSS_CORS_ORIGINS:*}
+ # 短信服务配置（生产环境）
+ sms:
+ access-key-id: ${SMS_ACCESS_KEY_ID:LTAI5tKZhPofbThbSzDSiWoK}
+ access-key-secret: ${SMS_ACCESS_KEY_SECRET:FtcsC7oQX3T0NaChaa9FYq2aoysQFM}
+ sign-name: ${SMS_SIGN_NAME:乐读派}
+ template-code: ${SMS_TEMPLATE_CODE:SMS_490225426}
+ enabled: true
diff --git a/backend-java/src/main/resources/application-test.yml b/backend-java/src/main/resources/application-test.yml
index 2e2149d..34fc7d0 100644
--- a/backend-java/src/main/resources/application-test.yml
+++ b/backend-java/src/main/resources/application-test.yml
@@ -44,6 +44,13 @@ aliyun:
# 前端直传跨域：启动时自动配置 OSS CORS
cors-enabled: ${OSS_CORS_ENABLED:true}
cors-allowed-origins: ${OSS_CORS_ORIGINS:*}
+ # 短信服务配置（测试环境）
+ sms:
+ access-key-id: ${SMS_ACCESS_KEY_ID:LTAI5tKZhPofbThbSzDSiWoK}
+ access-key-secret: ${SMS_ACCESS_KEY_SECRET:FtcsC7oQX3T0NaChaa9FYq2aoysQFM}
+ sign-name: ${SMS_SIGN_NAME:乐读派}
+ template-code: ${SMS_TEMPLATE_CODE:SMS_490225426}
+ enabled: true
logging:
level:
@@ -54,4 +61,5 @@ leai:
org-id: ${LEAI_ORG_ID:gdlib}
app-secret: ${LEAI_APP_SECRET:leai_mnoi9q1a_mtcawrn8y}
api-url: ${LEAI_API_URL:http://192.168.1.120:8080}
- h5-url: ${LEAI_H5_URL:http://192.168.1.120:3001}
+ reconcile-interval: 60000 # B3对账间隔：1分钟（测试环境）
+ reconcile-initial-delay: 30000 # 初始延迟：30秒
diff --git a/backend-java/src/main/resources/db/migration/V13__fix_user_unique_indexes.sql b/backend-java/src/main/resources/db/migration/V13__fix_user_unique_indexes.sql
new file mode 100644
index 0000000..f5a322f
--- /dev/null
+++ b/backend-java/src/main/resources/db/migration/V13__fix_user_unique_indexes.sql
@@ -0,0 +1,43 @@
+-- V13: 修复 t_sys_user 唯一索引 — phone/username 改为 (tenant_id, ...) 联合唯一
+-- 日期: 2026-04-09
+-- 背景: 多租户场景下同一手机号/用户名应可在不同租户下注册，需改为联合唯一索引
+
+-- =====================================================
+-- 1. phone: 删除旧的独立唯一索引，创建 (tenant_id, phone) 联合唯一索引
+-- =====================================================
+
+-- 安全删除已存在的 phone 唯一索引（索引名可能是 phone 或其他自定义名）
+SET @exist := (SELECT COUNT(*) FROM information_schema.STATISTICS
+ WHERE TABLE_SCHEMA = DATABASE()
+ AND TABLE_NAME = 't_sys_user'
+ AND INDEX_NAME = 'phone'
+ AND NON_UNIQUE = 0);
+SET @sqlstmt := IF(@exist > 0,
+ 'ALTER TABLE t_sys_user DROP INDEX phone',
+ 'SELECT ''phone 唯一索引不存在，跳过删除''');
+PREPARE stmt FROM @sqlstmt;
+EXECUTE stmt;
+DEALLOCATE PREPARE stmt;
+
+-- 创建联合唯一索引（IF NOT EXISTS 防止重复创建）
+CREATE UNIQUE INDEX uk_sys_user_tenant_phone ON t_sys_user(tenant_id, phone);
+
+-- =====================================================
+-- 2. username: 删除旧的独立唯一索引，创建 (tenant_id, username) 联合唯一索引
+-- =====================================================
+
+-- 安全删除已存在的 username 唯一索引
+SET @exist := (SELECT COUNT(*) FROM information_schema.STATISTICS
+ WHERE TABLE_SCHEMA = DATABASE()
+ AND TABLE_NAME = 't_sys_user'
+ AND INDEX_NAME = 'username'
+ AND NON_UNIQUE = 0);
+SET @sqlstmt := IF(@exist > 0,
+ 'ALTER TABLE t_sys_user DROP INDEX username',
+ 'SELECT ''username 唯一索引不存在，跳过删除''');
+PREPARE stmt FROM @sqlstmt;
+EXECUTE stmt;
+DEALLOCATE PREPARE stmt;
+
+-- 创建联合唯一索引
+CREATE UNIQUE INDEX uk_sys_user_tenant_username ON t_sys_user(tenant_id, username);
diff --git a/frontend/e2e/leai/auth-api.spec.ts b/frontend/e2e/leai/auth-api.spec.ts
index a41b52c..29a9fbd 100644
--- a/frontend/e2e/leai/auth-api.spec.ts
+++ b/frontend/e2e/leai/auth-api.spec.ts
@@ -3,9 +3,8 @@ import { test, expect } from '../fixtures/auth.fixture'
/**
* P0: 认证 API 测试
*
- * 测试 LeaiAuthController 的三个接口：
+ * 测试 LeaiAuthController 的两个接口：
* - GET /leai-auth/token（iframe 主入口）
- * - GET /leai-auth（302 重定向）
* - GET /leai-auth/refresh-token（Token 刷新）
*/
@@ -19,7 +18,7 @@ test.describe('乐读派认证 API', () => {
expect(resp.status()).toBe(401)
})
- test('已登录 — 返回 token + orgId + h5Url + phone', async ({ authedApi }) => {
+ test('已登录 — 返回 token + orgId', async ({ authedApi }) => {
const resp = await authedApi.get(`${API_BASE}/leai-auth/token`)
expect(resp.status()).toBe(200)
@@ -30,11 +29,8 @@ test.describe('乐读派认证 API', () => {
const data = json.data
expect(data).toHaveProperty('token')
expect(data).toHaveProperty('orgId')
- expect(data).toHaveProperty('h5Url')
- expect(data).toHaveProperty('phone')
expect(data.token).toBeTruthy()
expect(data.orgId).toBeTruthy()
- expect(data.h5Url).toContain('http')
})
test('返回的 token 为非空字符串', async ({ authedApi }) => {
@@ -59,7 +55,6 @@ test.describe('乐读派认证 API', () => {
expect(json.code).toBe(200)
expect(json.data).toHaveProperty('token')
expect(json.data).toHaveProperty('orgId')
- expect(json.data).toHaveProperty('phone')
})
test('连续两次刷新返回不同 token', async ({ authedApi }) => {
@@ -78,38 +73,4 @@ test.describe('乐读派认证 API', () => {
expect(json1.data.token).not.toBe(json2.data.token)
})
})
-
- test.describe('GET /leai-auth（302 重定向）', () => {
- test('未登录 — 返回 401', async ({ request }) => {
- const resp = await request.get(`${API_BASE}/leai-auth`, {
- maxRedirects: 0,
- })
- // 可能是 401 或 302 到登录页
- expect([302, 401]).toContain(resp.status())
- })
-
- test('已登录 — 302 重定向到 H5', async ({ authedApi }) => {
- const resp = await authedApi.get(`${API_BASE}/leai-auth`, {
- maxRedirects: 0,
- })
- expect(resp.status()).toBe(302)
-
- const location = resp.headers()['location']
- expect(location).toBeDefined()
- expect(location).toContain('token=')
- expect(location).toContain('orgId=')
- expect(location).toContain('phone=')
- })
-
- test('带 returnPath — 重定向 URL 包含 returnPath', async ({ authedApi }) => {
- const resp = await authedApi.get(`${API_BASE}/leai-auth?returnPath=/edit-info/test123`, {
- maxRedirects: 0,
- })
- expect(resp.status()).toBe(302)
-
- const location = resp.headers()['location']
- expect(location).toContain('returnPath=')
- expect(location).toContain('edit-info')
- })
- })
})
diff --git a/frontend/e2e/leai/creation-iframe.spec.ts b/frontend/e2e/leai/creation-iframe.spec.ts
index 5a11e68..40702fc 100644
--- a/frontend/e2e/leai/creation-iframe.spec.ts
+++ b/frontend/e2e/leai/creation-iframe.spec.ts
@@ -56,7 +56,6 @@ test.describe('创作页 iframe 嵌入', () => {
data: {
token: 'mock_session_token_xxx',
orgId: 'gdlib',
- h5Url: 'http://localhost:3001',
phone: '13800001111',
},
}),
@@ -106,7 +105,6 @@ test.describe('创作页 iframe 嵌入', () => {
data: {
token: 'mock_token',
orgId: 'gdlib',
- h5Url: 'http://localhost:3001',
phone: '13800001111',
},
}),
@@ -175,7 +173,6 @@ test.describe('创作页 iframe 嵌入', () => {
data: {
token: 'retry_token_success',
orgId: 'gdlib',
- h5Url: 'http://localhost:3001',
phone: '13800001111',
},
}),
@@ -216,7 +213,6 @@ test.describe('创作页 iframe 嵌入', () => {
data: {
token: 'mock_token',
orgId: 'gdlib',
- h5Url: 'http://localhost:3001',
phone: '13800001111',
},
}),
diff --git a/frontend/e2e/leai/e2e-flow.spec.ts b/frontend/e2e/leai/e2e-flow.spec.ts
index e3c56c0..5697e71 100644
--- a/frontend/e2e/leai/e2e-flow.spec.ts
+++ b/frontend/e2e/leai/e2e-flow.spec.ts
@@ -25,7 +25,6 @@ test.describe('端到端：创作完整流程', () => {
data: {
token: 'e2e_test_token',
orgId: 'gdlib',
- h5Url: 'http://localhost:3001',
phone: '13800001111',
},
}),
@@ -100,7 +99,7 @@ test.describe('端到端：创作完整流程', () => {
contentType: 'application/json',
body: JSON.stringify({
code: 200,
- data: { token: 'initial_token', orgId: 'gdlib', h5Url: 'http://localhost:3001', phone: '13800001111' },
+ data: { token: 'initial_token', orgId: 'gdlib', phone: '13800001111' },
}),
})
})
@@ -198,7 +197,7 @@ test.describe('端到端：创作完整流程', () => {
contentType: 'application/json',
body: JSON.stringify({
code: 200,
- data: { token: 'retry_token', orgId: 'gdlib', h5Url: 'http://localhost:3001', phone: '13800001111' },
+ data: { token: 'retry_token', orgId: 'gdlib', phone: '13800001111' },
}),
})
})
diff --git a/frontend/e2e/leai/keepalive-tab-switch.spec.ts b/frontend/e2e/leai/keepalive-tab-switch.spec.ts
index 6d5ce95..d720c80 100644
--- a/frontend/e2e/leai/keepalive-tab-switch.spec.ts
+++ b/frontend/e2e/leai/keepalive-tab-switch.spec.ts
@@ -28,7 +28,6 @@ async function setupMockRoutes(page: import('@playwright/test').Page) {
data: {
token: 'mock_keepalive_token',
orgId: 'gdlib',
- h5Url: 'http://localhost:3001',
phone: '13800001111',
},
}),
diff --git a/frontend/e2e/leai/postmessage.spec.ts b/frontend/e2e/leai/postmessage.spec.ts
index 864e8e6..3acfe2f 100644
--- a/frontend/e2e/leai/postmessage.spec.ts
+++ b/frontend/e2e/leai/postmessage.spec.ts
@@ -49,7 +49,6 @@ test.describe('postMessage 通信', () => {
data: {
token: 'mock_token_for_postmessage_test',
orgId: 'gdlib',
- h5Url: 'http://localhost:3001',
phone: '13800001111',
},
}),
diff --git a/frontend/e2e/utils/webhook-helper.ts b/frontend/e2e/utils/webhook-helper.ts
index 4c50d50..2f2307a 100644
--- a/frontend/e2e/utils/webhook-helper.ts
+++ b/frontend/e2e/utils/webhook-helper.ts
@@ -10,7 +10,6 @@ export const LEAI_TEST_CONFIG = {
orgId: 'gdlib',
appSecret: 'leai_mnoi9q1a_mtcawrn8y',
apiUrl: 'http://192.168.1.120:8080',
- h5Url: 'http://192.168.1.120:3001',
testPhone: '13800001111',
}
diff --git a/frontend/src/api/aicreate/index.ts b/frontend/src/api/aicreate/index.ts
index 3b45bb1..189bfe3 100644
--- a/frontend/src/api/aicreate/index.ts
+++ b/frontend/src/api/aicreate/index.ts
@@ -1,122 +1,23 @@
/**
* AI 创作 API 层
- * 从 lesingle-aicreate-client/src/api/index.js 迁移
*
- * 独立 axios 实例，直连乐读派后端（VITE_LEAI_API_URL + /api/v1）
- * 认证：Bearer sessionToken（企业模式）
+ * 所有请求经由后端代理 /leai-proxy/* 转发到乐读派
+ * 前端不持有 phone/orgId/appSecret，仅通过 JWT 认证调后端代理
+ * 后端自动注入 orgId + phone 并使用 HMAC 签名
*/
-import axios from 'axios'
import OSS from 'ali-oss'
-import { signRequest } from '@/utils/aicreate/hmac'
-import { useAicreateStore } from '@/stores/aicreate'
-import { leaiApi } from '@/api/public'
+import publicApi from '@/api/public'
import type { StsTokenData, CreateStoryParams } from './types'
-// 乐读派后端地址（从环境变量读取，直连，不走代理）
-const leaiBaseUrl = import.meta.env.VITE_LEAI_API_URL || ''
-
-const api = axios.create({
- baseURL: leaiBaseUrl ? leaiBaseUrl + '/api/v1' : '/api/v1',
- timeout: 120000
-})
-
-// ─── 请求拦截器：双模式认证 ───
-api.interceptors.request.use((config) => {
- // 需要从 store 获取最新状态，不能用模块级缓存
- const store = useAicreateStore()
- if (store.sessionToken) {
- config.headers['Authorization'] = 'Bearer ' + store.sessionToken
- } else if (store.orgId && store.appSecret) {
- const queryParams: Record = {}
- if (config.params) {
- Object.entries(config.params).forEach(([k, v]) => {
- if (v != null) queryParams[k] = String(v)
- })
- }
- const headers = signRequest(store.orgId, store.appSecret, queryParams)
- Object.assign(config.headers, headers)
- }
- return config
-})
-
-// ─── Token 刷新状态管理 ───
-let isRefreshing = false
-let pendingRequests: Array<(token: string | null) => void> = []
-
-async function handleTokenExpired(failedConfig: any): Promise {
- if (!isRefreshing) {
- isRefreshing = true
- try {
- const data = await leaiApi.refreshToken()
- const store = useAicreateStore()
- store.setSession(data.orgId || store.orgId, data.token)
- if (data.phone) store.setPhone(data.phone)
- isRefreshing = false
- pendingRequests.forEach(cb => cb(data.token))
- pendingRequests = []
- } catch {
- isRefreshing = false
- pendingRequests.forEach(cb => cb(null))
- pendingRequests = []
- }
- }
- return new Promise((resolve, reject) => {
- if (pendingRequests.length >= 20) {
- reject(new Error('TOO_MANY_PENDING_REQUESTS'))
- return
- }
- pendingRequests.push((newToken) => {
- if (newToken) {
- if (failedConfig.__retried) {
- reject(new Error('TOKEN_REFRESH_FAILED'))
- return
- }
- failedConfig.__retried = true
- failedConfig.headers['Authorization'] = 'Bearer ' + newToken
- delete failedConfig.headers['X-App-Key']
- delete failedConfig.headers['X-Timestamp']
- delete failedConfig.headers['X-Nonce']
- delete failedConfig.headers['X-Signature']
- resolve(api(failedConfig))
- } else {
- reject(new Error('TOKEN_REFRESH_FAILED'))
- }
- })
- })
-}
-
-// ─── 响应拦截器 ───
-api.interceptors.response.use(
- (res) => {
- const d = res.data
- if (d?.code !== 0 && d?.code !== 200) {
- const store = useAicreateStore()
- // Token 过期
- if (store.sessionToken && (d?.code === 20010 || d?.code === 20009)) {
- return handleTokenExpired(res.config)
- }
- return Promise.reject(new Error(d?.msg || '请求失败'))
- }
- return d
- },
- (err) => {
- const store = useAicreateStore()
- if (store.sessionToken && err.response?.status === 401) {
- return handleTokenExpired(err.config)
- }
- return Promise.reject(err)
- }
-)
-
// ═══════════════════════════════════════════════════════════
-// API 函数
+// API 函数（全部走后端代理）
// ═══════════════════════════════════════════════════════════
/** 图片上传 */
export function uploadImage(file: File) {
const form = new FormData()
form.append('file', file)
- return api.post('/creation/upload', form, {
+ return publicApi.post('/leai-proxy/upload', form, {
headers: { 'Content-Type': 'multipart/form-data' },
timeout: 30000
})
@@ -124,23 +25,15 @@ export function uploadImage(file: File) {
/** 角色提取 */
export function extractCharacters(imageUrl: string, opts: { saveOriginal?: boolean; title?: string } = {}) {
- const store = useAicreateStore()
- const body: Record = {
- orgId: store.orgId,
- phone: store.phone,
- imageUrl
- }
+ const body: Record = { imageUrl }
if (opts.saveOriginal) body.saveOriginal = true
if (opts.title) body.title = opts.title
- return api.post('/creation/extract-original', body, { timeout: 120000 })
+ return publicApi.post('/leai-proxy/extract', body, { timeout: 120000 })
}
/** 图片故事创作 */
export function createStory(params: CreateStoryParams) {
- const store = useAicreateStore()
const body: Record = {
- orgId: store.orgId,
- phone: store.phone,
imageUrl: params.imageUrl,
storyHint: params.storyHint,
style: params.style,
@@ -151,41 +44,27 @@ export function createStory(params: CreateStoryParams) {
if (params.author) body.author = params.author
if (params.heroCharId) body.heroCharId = params.heroCharId
if (params.extractId) body.extractId = params.extractId
- return api.post('/creation/image-story', body)
+ return publicApi.post('/leai-proxy/create-story', body)
}
/** 查询作品详情 */
export function getWorkDetail(workId: string) {
- const store = useAicreateStore()
- return api.get(`/query/work/${workId}`, {
- params: { orgId: store.orgId, phone: store.phone }
- })
+ return publicApi.get(`/leai-proxy/work/${workId}`)
}
/** 额度校验 */
export function checkQuota() {
- const store = useAicreateStore()
- return api.post('/query/validate', {
- orgId: store.orgId,
- phone: store.phone,
- apiType: 'A3'
- })
+ return publicApi.post('/leai-proxy/validate', { apiType: 'A3' })
}
/** 编辑绘本信息 */
export function updateWork(workId: string, data: Record) {
- return api.put(`/update/work/${workId}`, data)
+ return publicApi.put(`/leai-proxy/work/${workId}`, data)
}
/** 批量更新配音 URL */
export function batchUpdateAudio(workId: string, pages: any[]) {
- const store = useAicreateStore()
- return api.post('/update/batch-audio', {
- orgId: store.orgId,
- phone: store.phone,
- workId,
- pages
- })
+ return publicApi.post('/leai-proxy/batch-audio', { workId, pages })
}
/** 完成配音 */
@@ -195,24 +74,15 @@ export function finishDubbing(workId: string) {
/** AI 配音 */
export function voicePage(data: Record) {
- const store = useAicreateStore()
- return api.post('/creation/voice', {
- orgId: store.orgId,
- phone: store.phone,
- ...data
- }, { timeout: 120000 })
+ return publicApi.post('/leai-proxy/voice', data, { timeout: 120000 })
}
-/** STS 临时凭证 */
+/** STS 临时凭证（经后端代理获取） */
export function getStsToken() {
- const store = useAicreateStore()
- return api.post('/oss/sts-token', {
- orgId: store.orgId,
- phone: store.phone
- })
+ return publicApi.post('/leai-proxy/sts-token')
}
-// ─── OSS 直传 ───
+// ─── OSS 直传 ──
let _ossClient: OSS | null = null
let _stsData: StsTokenData | null = null
@@ -224,7 +94,7 @@ async function getOssClient() {
}
}
const res = await getStsToken()
- _stsData = res.data
+ _stsData = res as StsTokenData
_ossClient = new OSS({
region: _stsData.region,
accessKeyId: _stsData.accessKeyId,
@@ -234,7 +104,7 @@ async function getOssClient() {
endpoint: _stsData.endpoint,
refreshSTSToken: async () => {
const r = await getStsToken()
- _stsData = r.data
+ _stsData = r as StsTokenData
return {
accessKeyId: _stsData.accessKeyId,
accessKeySecret: _stsData.accessKeySecret,
@@ -284,5 +154,3 @@ export async function ossListFiles() {
url: obj.url
}))
}
-
-export default api
diff --git a/frontend/src/api/public.ts b/frontend/src/api/public.ts
index 54598a5..c1aae60 100644
--- a/frontend/src/api/public.ts
+++ b/frontend/src/api/public.ts
@@ -45,11 +45,17 @@ function isTokenExpired(token: string): boolean {
publicApi.interceptors.response.use(
(response) => {
// 后端返回格式：{ code: 200, message: "success", data: xxx }
- // 当 data 为 null 时，直接返回 null
- if (response.data) {
- return response.data.data !== undefined ? response.data.data : response.data
+ // 检查业务状态码，非 200 视为业务错误
+ const resData = response.data
+ if (resData && resData.code !== undefined && resData.code !== 200) {
+ const error: any = new Error(resData.message || "请求失败")
+ error.response = { data: resData }
+ return Promise.reject(error)
}
- return response.data
+ if (resData) {
+ return resData.data !== undefined ? resData.data : resData
+ }
+ return resData
},
(error) => {
if (error.response?.status === 401) {
@@ -71,6 +77,7 @@ export interface PublicRegisterParams {
password: string
nickname: string
phone?: string
+ smsCode?: string
city?: string
}
@@ -108,6 +115,10 @@ export const publicAuthApi = {
login: (data: PublicLoginParams): Promise =>
publicApi.post("/public/auth/login", data),
+
+ /** 发送短信验证码 */
+ sendSmsCode: (phone: string): Promise =>
+ publicApi.post("/public/auth/sms/send", { phone }),
}
// ==================== 个人信息 ====================
@@ -503,15 +514,12 @@ export const leaiApi = {
getToken: (): Promise<{
token: string
orgId: string
- h5Url: string
- phone: string
}> => publicApi.get("/leai-auth/token"),
// 刷新 Token（TOKEN_EXPIRED 时调用）
refreshToken: (): Promise<{
token: string
orgId: string
- phone: string
}> => publicApi.get("/leai-auth/refresh-token"),
}
diff --git a/frontend/src/layouts/PublicLayout.vue b/frontend/src/layouts/PublicLayout.vue
index f957f31..5a7e0f2 100644
--- a/frontend/src/layouts/PublicLayout.vue
+++ b/frontend/src/layouts/PublicLayout.vue
@@ -108,7 +108,14 @@ const aicreateStore = useAicreateStore()
const isLoggedIn = computed(() => !!localStorage.getItem("public_token"))
const user = computed(() => {
const data = localStorage.getItem("public_user")
- return data ? JSON.parse(data) : null
+ if (!data || data === "undefined" || data === "null") return null
+ try {
+ return JSON.parse(data)
+ } catch {
+ // 数据损坏时清除并返回 null
+ localStorage.removeItem("public_user")
+ return null
+ }
})
const userAvatar = computed(() => user.value?.avatar || undefined)
diff --git a/frontend/src/stores/aicreate.ts b/frontend/src/stores/aicreate.ts
index 7610a8d..64ba2ba 100644
--- a/frontend/src/stores/aicreate.ts
+++ b/frontend/src/stores/aicreate.ts
@@ -1,17 +1,15 @@
/**
* AI 创作全局状态（Pinia Store）
*
- * 从 lesingle-aicreate-client/utils/store.js 迁移
- * 保留原有字段和方法，适配 Pinia setup 语法
+ * 敏感信息（phone/orgId/appSecret）不再存储在 localStorage
+ * orgId 仅存 sessionStorage（会话级），sessionToken 判断是否已初始化
*/
import { defineStore } from 'pinia'
import { ref } from 'vue'
export const useAicreateStore = defineStore('aicreate', () => {
- // ─── 认证信息 ───
- const phone = ref(localStorage.getItem('le_phone') || '')
- const orgId = ref(localStorage.getItem('le_orgId') || '')
- const appSecret = ref(localStorage.getItem('le_appSecret') || '')
+ // ─── 认证信息（不再存储敏感信息到 localStorage） ───
+ const orgId = ref(sessionStorage.getItem('le_orgId') || '')
const sessionToken = ref(sessionStorage.getItem('le_sessionToken') || '')
// ─── 创作流程数据 ───
@@ -23,35 +21,23 @@ export const useAicreateStore = defineStore('aicreate', () => {
const storyData = ref(null)
const workId = ref('')
const workDetail = ref(null)
- const authRedirectUrl = ref('')
// ─── Tab 切换状态保存 ───
const lastCreateRoute = ref('')
// ─── 方法 ───
- function setPhone(val: string) {
- phone.value = val
- localStorage.setItem('le_phone', val)
- }
-
- function setOrg(id: string, secret: string) {
- orgId.value = id
- appSecret.value = secret
- localStorage.setItem('le_orgId', id)
- localStorage.setItem('le_appSecret', secret)
- }
-
function setSession(id: string, token: string) {
orgId.value = id
sessionToken.value = token
- localStorage.setItem('le_orgId', id)
sessionStorage.setItem('le_orgId', id)
sessionStorage.setItem('le_sessionToken', token)
}
function clearSession() {
sessionToken.value = ''
+ orgId.value = ''
sessionStorage.removeItem('le_sessionToken')
+ sessionStorage.removeItem('le_orgId')
}
function setLastCreateRoute(path: string) {
@@ -72,11 +58,8 @@ export const useAicreateStore = defineStore('aicreate', () => {
workId.value = ''
workDetail.value = null
lastCreateRoute.value = ''
- // 清除所有 localStorage 中的创作相关数据
+ // 只清除创作流程数据，保留认证信息
localStorage.removeItem('le_workId')
- localStorage.removeItem('le_phone')
- localStorage.removeItem('le_orgId')
- localStorage.removeItem('le_appSecret')
// 清除 sessionStorage 中的恢复数据
sessionStorage.removeItem('le_recovery')
}
@@ -116,8 +99,8 @@ export const useAicreateStore = defineStore('aicreate', () => {
return {
// 认证
- phone, orgId, appSecret, sessionToken, authRedirectUrl,
- setPhone, setOrg, setSession, clearSession,
+ orgId, sessionToken,
+ setSession, clearSession,
// 创作流程
imageUrl, extractId, characters, selectedCharacter,
selectedStyle, storyData, workId, workDetail,
diff --git a/frontend/src/utils/aicreate/hmac.ts b/frontend/src/utils/aicreate/hmac.ts
deleted file mode 100644
index a2885bd..0000000
--- a/frontend/src/utils/aicreate/hmac.ts
+++ /dev/null
@@ -1,26 +0,0 @@
-/**
- * HMAC-SHA256 签名工具
- * 从 lesingle-aicreate-client/utils/hmac.js 迁移
- *
- * 签名规则：排序的 query params + nonce + timestamp，用 & 拼接
- * POST JSON body 不参与签名
- */
-import CryptoJS from 'crypto-js'
-
-export function signRequest(orgId: string, appSecret: string, queryParams: Record = {}) {
- const timestamp = String(Date.now())
- const nonce = Math.random().toString(36).substring(2, 15) + Date.now().toString(36)
-
- const allParams: Record = { ...queryParams, nonce, timestamp }
- const sorted = Object.keys(allParams).sort()
- const signStr = sorted.map(k => `${k}=${allParams[k]}`).join('&')
-
- const signature = CryptoJS.HmacSHA256(signStr, appSecret).toString(CryptoJS.enc.Hex)
-
- return {
- 'X-App-Key': orgId,
- 'X-Timestamp': timestamp,
- 'X-Nonce': nonce,
- 'X-Signature': signature
- }
-}
diff --git a/frontend/src/views/public/Login.vue b/frontend/src/views/public/Login.vue
index a7c80d1..e16ecef 100644
--- a/frontend/src/views/public/Login.vue
+++ b/frontend/src/views/public/Login.vue
@@ -31,6 +31,27 @@
/>
+
+
+
+
+ {{ smsCountdown > 0 ? `${smsCountdown}s 后重发` : "获取验证码" }}
+
+