ef19f6860e
1、修复了用户详情与人脸/DISC 展示、手机号与资料校验、相机页与测试选择等体验问题。 2、新增了 SystemDefaultEnterprise、discDisplay、管理端设置扩展接口；CrmReport/Test/Analyze 等 API 与路由能力补强。 3、优化了 resultFormat、descriptions、payment、企业上下文；海报与 PDP/DISC 文案；超管 Commerce/Users 与 admin Settings/Users。 Made-with: Cursor
596 lines
21 KiB
PHP
596 lines
21 KiB
PHP
<?php
|
||
namespace app\controller\admin;
|
||
|
||
use app\BaseController;
|
||
use app\common\service\FeishuLeadWebhookService;
|
||
use app\model\SystemConfig as SystemConfigModel;
|
||
use app\model\User as UserModel;
|
||
use think\facade\Request;
|
||
use think\facade\Db;
|
||
|
||
/**
|
||
* 系统设置控制器（普通管理员）
|
||
*/
|
||
class Settings extends BaseController
|
||
{
|
||
/**
|
||
* 获取系统配置
|
||
* @return \think\response\Json
|
||
*/
|
||
public function index()
|
||
{
|
||
$user = $this->request->user ?? null;
|
||
|
||
if (!$user) {
|
||
return error('未登录', 401);
|
||
}
|
||
|
||
// 验证是否为管理员
|
||
if (!in_array($user['role'], ['admin', 'enterprise_admin'])) {
|
||
return error('无权限访问', 403);
|
||
}
|
||
|
||
try {
|
||
// 获取当前管理员用户名
|
||
$jwtUsername = $user['username'] ?? null;
|
||
$username = 'admin';
|
||
|
||
if ($jwtUsername) {
|
||
$currentUser = UserModel::where('username', $jwtUsername)
|
||
->whereIn('role', ['admin', 'enterprise_admin'])
|
||
->find();
|
||
if ($currentUser) {
|
||
$username = $currentUser->username;
|
||
} else {
|
||
$username = $jwtUsername;
|
||
}
|
||
}
|
||
|
||
return success([
|
||
'username' => $username
|
||
]);
|
||
} catch (\Exception $e) {
|
||
return error('获取配置失败：' . $e->getMessage(), 500);
|
||
}
|
||
}
|
||
|
||
/**
|
||
* 获取可用字体列表
|
||
* GET /api/v1/admin/settings/fonts
|
||
*/
|
||
public function getFonts()
|
||
{
|
||
$user = $this->request->user ?? null;
|
||
if (!$user || !in_array($user['role'], ['admin', 'enterprise_admin'])) {
|
||
return error('无权限访问', 403);
|
||
}
|
||
$fonts = \app\common\service\PosterService::getAvailableFonts();
|
||
return success([
|
||
'fonts' => $fonts,
|
||
'fontDir' => root_path() . 'public/fonts/',
|
||
'dirExist' => is_dir(root_path() . 'public/fonts/'),
|
||
]);
|
||
}
|
||
|
||
/**
|
||
* 获取海报配置
|
||
* GET /api/v1/admin/settings/poster
|
||
* 有 enterpriseId 则读企业专属行，否则读全局（enterprise_id=0）
|
||
*/
|
||
public function getPosterConfig()
|
||
{
|
||
$user = $this->request->user ?? null;
|
||
if (!$user || !in_array($user['role'], ['admin', 'enterprise_admin'])) {
|
||
return error('无权限访问', 403);
|
||
}
|
||
|
||
$eid = (int)($user['enterpriseId'] ?? 0);
|
||
$row = self::getConfig('poster_config', $eid);
|
||
$poster = $row ?: ['bgColor' => '#ffffff', 'bgImage' => '', 'elements' => []];
|
||
return success(['poster' => $poster]);
|
||
}
|
||
|
||
/**
|
||
* 保存海报配置
|
||
* PUT /api/v1/admin/settings/poster
|
||
*/
|
||
public function updatePosterConfig()
|
||
{
|
||
$user = $this->request->user ?? null;
|
||
if (!$user || !in_array($user['role'], ['admin', 'enterprise_admin'])) {
|
||
return error('无权限访问', 403);
|
||
}
|
||
|
||
$input = json_decode($this->request->getContent(), true);
|
||
if (!is_array($input)) {
|
||
$input = [];
|
||
}
|
||
$data = [
|
||
'bgColor' => $input['bgColor'] ?? '#ffffff',
|
||
'bgImage' => $input['bgImage'] ?? '',
|
||
'elements' => $input['elements'] ?? []
|
||
];
|
||
$eid = (int)($user['enterpriseId'] ?? 0);
|
||
|
||
try {
|
||
self::saveConfig('poster_config', $data, $eid, '分销海报可视化配置');
|
||
return success(null, '海报配置已保存');
|
||
} catch (\Exception $e) {
|
||
return error('保存失败：' . $e->getMessage(), 500);
|
||
}
|
||
}
|
||
|
||
/**
|
||
* 读取配置：key + enterprise_id，有企业专属则取，否则降级到 enterprise_id=0
|
||
*/
|
||
private static function getConfig(string $key, int $enterpriseId = 0, bool $fallbackGlobal = false): ?array
|
||
{
|
||
$row = Db::name('system_config')
|
||
->where('key', $key)
|
||
->where('enterprise_id', $enterpriseId)
|
||
->find();
|
||
if ($row && !empty($row['value'])) {
|
||
$val = is_string($row['value']) ? json_decode($row['value'], true) : $row['value'];
|
||
if (is_array($val)) return $val;
|
||
}
|
||
if ($fallbackGlobal && $enterpriseId > 0) {
|
||
$row = Db::name('system_config')
|
||
->where('key', $key)
|
||
->where('enterprise_id', 0)
|
||
->find();
|
||
if ($row && !empty($row['value'])) {
|
||
$val = is_string($row['value']) ? json_decode($row['value'], true) : $row['value'];
|
||
if (is_array($val)) return $val;
|
||
}
|
||
}
|
||
return null;
|
||
}
|
||
|
||
/**
|
||
* 保存配置：key + enterprise_id，存在则 update，否则 insert
|
||
*/
|
||
private static function saveConfig(string $key, array $value, int $enterpriseId = 0, string $description = ''): void
|
||
{
|
||
$now = time();
|
||
$json = json_encode($value, JSON_UNESCAPED_UNICODE);
|
||
$exists = Db::name('system_config')
|
||
->where('key', $key)
|
||
->where('enterprise_id', $enterpriseId)
|
||
->find();
|
||
if ($exists) {
|
||
Db::name('system_config')
|
||
->where('key', $key)
|
||
->where('enterprise_id', $enterpriseId)
|
||
->update(['value' => $json, 'updatedAt' => $now]);
|
||
} else {
|
||
Db::name('system_config')->insert([
|
||
'key' => $key,
|
||
'enterprise_id' => $enterpriseId,
|
||
'value' => $json,
|
||
'description' => $description,
|
||
'createdAt' => $now,
|
||
'updatedAt' => $now,
|
||
]);
|
||
}
|
||
}
|
||
|
||
/**
|
||
* 存客宝 Key 默认结构（人脸/MBTI/PDP/DISC × 企业版与个人版）
|
||
*/
|
||
private static function defaultCunkebaoKeysStructure(): array
|
||
{
|
||
$blank = ['enterprise' => '', 'personal' => '', 'reportTiming' => 'after_paid'];
|
||
|
||
return [
|
||
'face' => $blank,
|
||
'pdp' => $blank,
|
||
'disc' => $blank,
|
||
'mbti' => $blank,
|
||
];
|
||
}
|
||
|
||
/**
|
||
* @param mixed $raw 已解码的配置或 null
|
||
*/
|
||
private static function normalizeCunkebaoKeysPayload($raw): array
|
||
{
|
||
$out = self::defaultCunkebaoKeysStructure();
|
||
if (!is_array($raw)) {
|
||
return $out;
|
||
}
|
||
foreach (array_keys($out) as $type) {
|
||
if (!isset($raw[$type]) || !is_array($raw[$type])) {
|
||
continue;
|
||
}
|
||
$row = $raw[$type];
|
||
$out[$type]['enterprise'] = isset($row['enterprise']) ? trim((string) $row['enterprise']) : '';
|
||
$out[$type]['personal'] = isset($row['personal']) ? trim((string) $row['personal']) : '';
|
||
$out[$type]['reportTiming'] = in_array($row['reportTiming'] ?? '', ['after_paid', 'after_test'], true)
|
||
? $row['reportTiming']
|
||
: 'after_paid';
|
||
}
|
||
|
||
return $out;
|
||
}
|
||
|
||
/**
|
||
* JWT 中的企业 ID（企业管理员必有关联企业）
|
||
*/
|
||
private function adminBoundEnterpriseId($user): int
|
||
{
|
||
if (!is_array($user)) {
|
||
return 0;
|
||
}
|
||
$eid = (int) ($user['enterpriseId'] ?? $user['enterprise_id'] ?? 0);
|
||
|
||
return $eid > 0 ? $eid : 0;
|
||
}
|
||
|
||
/**
|
||
* GET /api/v1/admin/settings/cunkebao-keys
|
||
* 按当前管理员所属企业读取（system_config.enterprise_id = 企业 ID）
|
||
*/
|
||
public function getCunkebaoKeys()
|
||
{
|
||
$user = $this->request->user ?? null;
|
||
if (!$user || !in_array($user['role'], ['admin', 'enterprise_admin'])) {
|
||
return error('无权限访问', 403);
|
||
}
|
||
$eid = $this->adminBoundEnterpriseId($user);
|
||
if ($eid <= 0) {
|
||
return error('当前账号未关联企业，无法配置存客宝 Key', 403);
|
||
}
|
||
|
||
$row = self::getConfig('cunkebao_keys', $eid, false);
|
||
|
||
return success([
|
||
'cunkebaoKeys' => self::normalizeCunkebaoKeysPayload($row),
|
||
]);
|
||
}
|
||
|
||
/**
|
||
* PUT /api/v1/admin/settings/cunkebao-keys
|
||
*/
|
||
public function updateCunkebaoKeys()
|
||
{
|
||
$user = $this->request->user ?? null;
|
||
if (!$user || !in_array($user['role'], ['admin', 'enterprise_admin'])) {
|
||
return error('无权限访问', 403);
|
||
}
|
||
$eid = $this->adminBoundEnterpriseId($user);
|
||
if ($eid <= 0) {
|
||
return error('当前账号未关联企业，无法配置存客宝 Key', 403);
|
||
}
|
||
|
||
$raw = $this->request->getContent();
|
||
$input = $raw ? json_decode($raw, true) : [];
|
||
if (!is_array($input)) {
|
||
$input = [];
|
||
}
|
||
$payload = $input['cunkebaoKeys'] ?? [];
|
||
if (!is_array($payload)) {
|
||
return error('存客宝 Key 格式错误', 400);
|
||
}
|
||
|
||
$sanitized = self::normalizeCunkebaoKeysPayload($payload);
|
||
|
||
try {
|
||
self::saveConfig('cunkebao_keys', $sanitized, $eid, '存客宝 Key（本企业 · 人脸/MBTI/PDP/DISC）');
|
||
|
||
return success($sanitized, '存客宝 Key 已保存');
|
||
} catch (\Exception $e) {
|
||
return error('保存失败：' . $e->getMessage(), 500);
|
||
}
|
||
}
|
||
|
||
/**
|
||
* 安全解码 JSON（处理可能的多重编码）
|
||
*/
|
||
private static function decodeJsonSafe($raw): ?array
|
||
{
|
||
if (!$raw) return null;
|
||
$val = $raw;
|
||
for ($i = 0; $i < 5 && is_string($val); $i++) {
|
||
$decoded = json_decode($val, true);
|
||
if ($decoded === null && json_last_error() !== JSON_ERROR_NONE) break;
|
||
$val = $decoded;
|
||
}
|
||
return is_array($val) ? $val : null;
|
||
}
|
||
|
||
/**
|
||
* 获取小程序配置
|
||
* 读取全局 text_config（enterprise_id=0）作为默认值，再用企业专属行覆盖
|
||
* GET /api/v1/admin/settings/miniprogram
|
||
*/
|
||
public function getMiniprogramConfig()
|
||
{
|
||
$user = $this->request->user ?? null;
|
||
if (!$user || !in_array($user['role'], ['admin', 'enterprise_admin'])) {
|
||
return error('无权限访问', 403);
|
||
}
|
||
|
||
try {
|
||
$eid = (int)($user['enterpriseId'] ?? 0);
|
||
|
||
// 全局小程序名称（仅超管可改，此处只读）
|
||
$miniprogramName = '神仙团队AI性格测试';
|
||
$siteInfo = Db::name('system_config')
|
||
->where('key', 'site_info')
|
||
->where('enterprise_id', 0)
|
||
->find();
|
||
if ($siteInfo && !empty($siteInfo['value'])) {
|
||
$val = is_string($siteInfo['value']) ? json_decode($siteInfo['value'], true) : $siteInfo['value'];
|
||
$miniprogramName = (string) ($val['miniprogramName'] ?? $val['siteName'] ?? $miniprogramName);
|
||
}
|
||
|
||
$tcDefaults = [
|
||
'analyzingTitle' => '正在分析中',
|
||
'startButtonText' => '开始面相测试',
|
||
'startButtonEnterprise' => '开始面部测试',
|
||
'reportTitle' => '分析报告',
|
||
'aiAnalysisText' => '智能分析',
|
||
];
|
||
|
||
// 全局文案（enterprise_id=0）作为基础
|
||
$globalTc = self::getConfig('text_config', 0);
|
||
$textConfigData = $globalTc
|
||
? array_merge($tcDefaults, array_intersect_key($globalTc, $tcDefaults))
|
||
: $tcDefaults;
|
||
|
||
// 企业专属文案 + 小程序名称 覆盖
|
||
if ($eid > 0) {
|
||
$eidTc = self::getConfig('text_config', $eid);
|
||
if ($eidTc) {
|
||
$textConfigData = array_merge($textConfigData, array_intersect_key($eidTc, $tcDefaults));
|
||
if (!empty($eidTc['miniprogramName'])) {
|
||
$miniprogramName = (string) $eidTc['miniprogramName'];
|
||
}
|
||
}
|
||
}
|
||
|
||
return success([
|
||
'miniprogramName' => $miniprogramName,
|
||
'textConfig' => $textConfigData,
|
||
]);
|
||
} catch (\Exception $e) {
|
||
return error('获取配置失败：' . $e->getMessage(), 500);
|
||
}
|
||
}
|
||
|
||
/**
|
||
* 飞书获客 Webhook（全局 enterprise_id=0）
|
||
* GET /api/v1/admin/settings/feishu-lead
|
||
*/
|
||
public function getFeishuLeadConfig()
|
||
{
|
||
$user = $this->request->user ?? null;
|
||
if (!$user || !in_array($user['role'], ['admin', 'enterprise_admin'])) {
|
||
return error('无权限访问', 403);
|
||
}
|
||
$cfg = FeishuLeadWebhookService::getConfig();
|
||
return success([
|
||
'enabled' => !empty($cfg['enabled']),
|
||
'webhookUrl' => (string) ($cfg['webhookUrl'] ?? ''),
|
||
'contactPerson' => (string) ($cfg['contactPerson'] ?? '运营'),
|
||
]);
|
||
}
|
||
|
||
/**
|
||
* PUT /api/v1/admin/settings/feishu-lead
|
||
*/
|
||
public function updateFeishuLeadConfig()
|
||
{
|
||
$user = $this->request->user ?? null;
|
||
if (!$user || !in_array($user['role'], ['admin', 'enterprise_admin'])) {
|
||
return error('无权限访问', 403);
|
||
}
|
||
$raw = $this->request->getContent();
|
||
$input = $raw ? json_decode($raw, true) : [];
|
||
if (!is_array($input)) {
|
||
$input = [];
|
||
}
|
||
$enabled = !empty($input['enabled']);
|
||
$webhookUrl = trim((string) ($input['webhookUrl'] ?? ''));
|
||
$contactPerson = trim((string) ($input['contactPerson'] ?? '运营'));
|
||
if ($contactPerson === '') {
|
||
$contactPerson = '运营';
|
||
}
|
||
if ($enabled && $webhookUrl !== '' && stripos($webhookUrl, 'http') !== 0) {
|
||
return error('Webhook 须以 http(s) 开头', 400);
|
||
}
|
||
$json = json_encode([
|
||
'enabled' => $enabled,
|
||
'webhookUrl' => $webhookUrl,
|
||
'contactPerson' => $contactPerson,
|
||
], JSON_UNESCAPED_UNICODE);
|
||
$now = time();
|
||
$key = FeishuLeadWebhookService::CONFIG_KEY;
|
||
$exists = Db::name('system_config')->where('key', $key)->where('enterprise_id', 0)->find();
|
||
if ($exists) {
|
||
Db::name('system_config')
|
||
->where('key', $key)
|
||
->where('enterprise_id', 0)
|
||
->update(['value' => $json, 'updatedAt' => $now]);
|
||
} else {
|
||
Db::name('system_config')->insert([
|
||
'key' => $key,
|
||
'enterprise_id' => 0,
|
||
'value' => $json,
|
||
'description' => '飞书获客 Webhook',
|
||
'createdAt' => $now,
|
||
'updatedAt' => $now,
|
||
]);
|
||
}
|
||
return success(null, '已保存');
|
||
}
|
||
|
||
/**
|
||
* 更新小程序配置
|
||
* 写入 text_config 行：enterprise_id={eid}（有企业）或 0（无企业）
|
||
* PUT /api/v1/admin/settings/miniprogram
|
||
*/
|
||
public function updateMiniprogramConfig()
|
||
{
|
||
$user = $this->request->user ?? null;
|
||
if (!$user || !in_array($user['role'], ['admin', 'enterprise_admin'])) {
|
||
return error('无权限访问', 403);
|
||
}
|
||
|
||
$rawBody = $this->request->getContent();
|
||
if (empty($rawBody)) {
|
||
$rawBody = file_get_contents('php://input');
|
||
}
|
||
$input = $rawBody ? json_decode($rawBody, true) : null;
|
||
if (!is_array($input)) {
|
||
$input = [
|
||
'miniprogramName' => Request::param('miniprogramName', ''),
|
||
'textConfig' => Request::param('textConfig', []),
|
||
];
|
||
}
|
||
|
||
$miniprogramName = trim((string) ($input['miniprogramName'] ?? ''));
|
||
$textConfig = $input['textConfig'] ?? [];
|
||
|
||
if ($miniprogramName === '') {
|
||
return error('小程序名称不能为空', 400);
|
||
}
|
||
|
||
$tcKeys = ['analyzingTitle', 'startButtonText', 'startButtonEnterprise', 'reportTitle', 'aiAnalysisText'];
|
||
$tcDefaults = [
|
||
'analyzingTitle' => '正在分析中',
|
||
'startButtonText' => '开始面相测试',
|
||
'startButtonEnterprise' => '开始面部测试',
|
||
'reportTitle' => '分析报告',
|
||
'aiAnalysisText' => '智能分析',
|
||
];
|
||
$tcData = is_array($textConfig) ? array_intersect_key($textConfig, array_flip($tcKeys)) : [];
|
||
$tcMerge = array_merge($tcDefaults, $tcData);
|
||
$eid = (int)($user['enterpriseId'] ?? 0);
|
||
|
||
try {
|
||
// eid=0：更新 site_info 的小程序名称（全局）
|
||
if ($eid === 0) {
|
||
$siteRow = Db::name('system_config')->where('key', 'site_info')->where('enterprise_id', 0)->find();
|
||
$siteInfo = $siteRow && !empty($siteRow['value'])
|
||
? (is_string($siteRow['value']) ? json_decode($siteRow['value'], true) : $siteRow['value'])
|
||
: [];
|
||
$siteInfo = is_array($siteInfo) ? $siteInfo : [];
|
||
$siteInfo['miniprogramName'] = $miniprogramName;
|
||
$siteInfo['siteName'] = $siteInfo['siteName'] ?? $miniprogramName;
|
||
$siteInfo['updatedAt'] = time();
|
||
self::saveConfig('site_info', $siteInfo, 0, '站点信息');
|
||
} else {
|
||
// 企业专属：把 miniprogramName 一并写入 text_config
|
||
$tcMerge['miniprogramName'] = $miniprogramName;
|
||
}
|
||
|
||
// 统一写到 text_config（企业行已含 miniprogramName，全局行不含）
|
||
self::saveConfig('text_config', $tcMerge, $eid, $eid > 0 ? "小程序文案配置（企业{$eid}）" : '小程序文案配置（全局）');
|
||
return success([
|
||
'miniprogramName' => $miniprogramName,
|
||
'textConfig' => $tcMerge,
|
||
], '小程序配置已保存');
|
||
} catch (\Exception $e) {
|
||
return error('保存失败：' . $e->getMessage(), 500);
|
||
}
|
||
}
|
||
|
||
/**
|
||
* 更新管理员账户信息
|
||
* @return \think\response\Json
|
||
*/
|
||
public function updateCredentials()
|
||
{
|
||
$user = $this->request->user ?? null;
|
||
|
||
if (!$user) {
|
||
return error('未登录', 401);
|
||
}
|
||
|
||
// 验证是否为管理员
|
||
if (!in_array($user['role'], ['admin', 'enterprise_admin'])) {
|
||
return error('无权限访问', 403);
|
||
}
|
||
|
||
// 兼容 axios JSON PUT 与表单提交
|
||
$rawBody = $this->request->getContent();
|
||
if (empty($rawBody)) {
|
||
$rawBody = file_get_contents('php://input');
|
||
}
|
||
$input = $rawBody ? json_decode($rawBody, true) : null;
|
||
if (!is_array($input)) {
|
||
$input = [];
|
||
}
|
||
|
||
$username = trim((string)($input['username'] ?? Request::param('username', '')));
|
||
$currentPassword = (string)($input['currentPassword'] ?? Request::param('currentPassword', ''));
|
||
$newPassword = (string)($input['newPassword'] ?? Request::param('newPassword', ''));
|
||
$confirmPassword = (string)($input['confirmPassword'] ?? Request::param('confirmPassword', ''));
|
||
|
||
if (empty($username)) {
|
||
return error('用户名不能为空', 400);
|
||
}
|
||
|
||
try {
|
||
// 优先使用JWT中的username来查找用户
|
||
$jwtUsername = $user['username'] ?? null;
|
||
|
||
if (empty($jwtUsername)) {
|
||
return error('无法获取用户信息，请重新登录', 400);
|
||
}
|
||
|
||
// 直接通过username查找用户
|
||
$userModel = UserModel::where('username', $jwtUsername)
|
||
->whereIn('role', ['admin', 'enterprise_admin'])
|
||
->find();
|
||
|
||
if (!$userModel) {
|
||
return error('用户不存在，请检查登录状态', 404);
|
||
}
|
||
|
||
// 如果要修改密码，需要验证当前密码
|
||
if (!empty($newPassword)) {
|
||
if (empty($currentPassword)) {
|
||
return error('请输入当前密码', 400);
|
||
}
|
||
|
||
if ($newPassword !== $confirmPassword) {
|
||
return error('两次输入的密码不一致', 400);
|
||
}
|
||
|
||
// 验证当前密码（User 模型已有原始加密密码）
|
||
if (!password_verify($currentPassword, $userModel->password)) {
|
||
return error('当前密码错误', 400);
|
||
}
|
||
|
||
// 更新密码：传入明文，交由 User 模型的 setPasswordAttr 自动加密
|
||
$userModel->password = $newPassword;
|
||
}
|
||
|
||
// 更新用户名
|
||
if ($username !== $userModel->username) {
|
||
// 检查用户名是否已存在（排除当前用户）
|
||
$exists = UserModel::where('username', $username)
|
||
->where('id', '<>', $userModel->id)
|
||
->find();
|
||
|
||
if ($exists) {
|
||
return error('用户名已存在', 400);
|
||
}
|
||
|
||
$userModel->username = $username;
|
||
}
|
||
|
||
$userModel->save();
|
||
|
||
return success([
|
||
'username' => $userModel->username
|
||
], '账户信息已更新');
|
||
} catch (\Exception $e) {
|
||
return error('更新失败：' . $e->getMessage(), 500);
|
||
}
|
||
}
|
||
}
|
||
|