feat:APP端验证码登录及联调

“mitao”

2026-04-07 4ba9020b7c67cc318448a8aeac741492b23b4189

 tcm-training-admin-backend/src/main/java/com/tcm/training/admin/config/SaTokenWebConfig.java

@@ -1,5 +1,6 @@
package com.tcm.training.admin.config;

import com.tcm.training.admin.app.auth.support.StpAppUserUtil;
import cn.dev33.satoken.interceptor.SaInterceptor;
import cn.dev33.satoken.context.SaHolder;
import cn.dev33.satoken.stp.StpUtil;
@@ -27,30 +28,73 @@
        this.xssParamInterceptor = xssParamInterceptor;
    }

    /**
     * 注册 Sa-Token 与 XSS 拦截器。
     */
    @Override
    public void addInterceptors(InterceptorRegistry registry) {
        registry.addInterceptor(new SaInterceptor(handle -> {
                    if ("OPTIONS".equalsIgnoreCase(SaHolder.getRequest().getMethod())) {
                        return;
                    }
                    StpUtil.checkLogin();
                }))
        registry.addInterceptor(new SaInterceptor(handle -> handleAuth()))
                .addPathPatterns("/api/**", "/api/v1/**")
                .excludePathPatterns(
                        "/api/auth/login",
                        "/api/auth/captcha",
                        "/api/app-version-settings/check",
                        "/api/v1/app-version-settings/check"
                        pathPrefix + "/**"
                );

        registry.addInterceptor(xssParamInterceptor)
                .addPathPatterns("/api/**", "/api/v1/**");
    }

    /** 将本地上传目录映射为静态资源，可通过 /uploads/** 访问 */
    /**
     * 按请求路径切换管理员鉴权与 APP 鉴权。
     */
    private void handleAuth() {
        if ("OPTIONS".equalsIgnoreCase(SaHolder.getRequest().getMethod())) {
            return;
        }
        String requestPath = SaHolder.getRequest().getRequestPath();
        if (isAppApi(requestPath)) {
            if (isPublicAppApi(requestPath)) {
                return;
            }
            StpAppUserUtil.checkLogin();
            return;
        }
        if (isPublicAdminApi(requestPath)) {
            return;
        }
        StpUtil.checkLogin();
    }

    /**
     * 判断是否属于 APP 路由空间。
     */
    private boolean isAppApi(String requestPath) {
        return requestPath.startsWith("/api/app/") || requestPath.startsWith("/api/v1/app/");
    }

    /**
     * 判断当前 APP 路由是否允许匿名访问。
     */
    private boolean isPublicAppApi(String requestPath) {
        return requestPath.startsWith("/api/app/auth/")
                || requestPath.startsWith("/api/v1/app/auth/")
                || "/api/app/version/check".equals(requestPath)
                || "/api/v1/app/version/check".equals(requestPath);
    }

    /**
     * 判断当前后台路由是否允许匿名访问。
     */
    private boolean isPublicAdminApi(String requestPath) {
        return "/api/auth/login".equals(requestPath)
                || "/api/auth/captcha".equals(requestPath);
    }

    /**
     * 将本地上传目录映射为静态资源，可通过 /uploads/** 访问。
     */
    @Override
    public void addResourceHandlers(ResourceHandlerRegistry registry) {
        // 转为绝对路径，确保 file: 协议正确
        // 转为绝对路径，确保 file: 协议正确。
        String absPath = new File(uploadDir).getAbsolutePath();
        registry.addResourceHandler(pathPrefix + "/**")
                .addResourceLocations("file:" + absPath + "/");