更新

server/app/adminapi/logic/firstvisit/WecomPromotionLogic.php

@@ -0,0 +1,336 @@
+<?php
+
+declare(strict_types=1);
+
+namespace app\adminapi\logic\firstvisit;
+
+use app\common\service\DataScope\DataScopeService;
+use app\common\service\qywx\QywxPromotionOpenWorkService;
+use RuntimeException;
+use think\facade\Db;
+
+/** 一诊 / 企业微信推广助手管理逻辑。 */
+class WecomPromotionLogic
+{
+    public static function overview(int $adminId, array $adminInfo, string $domain): array
+    {
+        $visibleIds = DataScopeService::getVisibleAdminIds($adminId, $adminInfo);
+        $accountsQuery = Db::name('qywx_promotion_account')->alias('a')
+            ->leftJoin('admin u', 'u.id = a.owner_admin_id')
+            ->leftJoin('dept d', 'd.id = a.dept_id')
+            ->whereNull('a.delete_time');
+        $accounts = $accountsQuery
+            ->field('a.id,a.corp_id,a.corp_name,a.agent_id,a.auth_status,a.owner_admin_id,a.dept_id,a.authorized_at,a.last_refresh_at,a.create_time,u.name as owner_name,d.name as dept_name')
+            ->order('a.auth_status', 'desc')
+            ->order('a.id', 'desc')
+            ->select()->toArray();
+        foreach ($accounts as &$account) {
+            $account['corp_id_masked'] = self::mask((string) ($account['corp_id'] ?? ''));
+            unset($account['corp_id']);
+        }
+        unset($account);
+
+        $poolsQuery = Db::name('qywx_promotion_pool')->alias('p')
+            ->leftJoin('admin u', 'u.id = p.owner_admin_id')
+            ->leftJoin('dept d', 'd.id = p.dept_id')
+            ->whereNull('p.delete_time');
+        self::applyOwnerScope($poolsQuery, 'p', $visibleIds);
+        $pools = $poolsQuery
+            ->field('p.id,p.name,p.public_key,p.status,p.fallback_url,p.click_count,p.owner_admin_id,p.dept_id,p.create_time,p.update_time,u.name as owner_name,d.name as dept_name')
+            ->order('p.id', 'desc')
+            ->select()->toArray();
+
+        $poolIds = array_values(array_filter(array_map('intval', array_column($pools, 'id'))));
+        $links = [];
+        if ($poolIds !== []) {
+            $links = Db::name('qywx_promotion_link')->alias('l')
+                ->leftJoin('qywx_promotion_account a', 'a.id = l.account_id AND a.delete_time IS NULL')
+                ->whereNull('l.delete_time')
+                ->whereIn('l.pool_id', $poolIds)
+                ->field('l.id,l.pool_id,l.account_id,l.name,l.group_name,l.wecom_url,l.weight,l.status,l.daily_limit,l.today_count,l.today_date,l.active_start,l.active_end,l.click_count,l.last_click_time,l.remark,l.create_time,l.update_time,a.corp_name,a.auth_status')
+                ->order('l.status', 'desc')
+                ->order('l.weight', 'desc')
+                ->order('l.id', 'desc')
+                ->select()->toArray();
+        }
+
+        $domain = rtrim($domain, '/');
+        foreach ($pools as &$pool) {
+            $key = (string) $pool['public_key'];
+            $scriptUrl = $domain . '/api/qywx-promotion/js/' . $key;
+            $goUrl = $domain . '/api/qywx-promotion/go/' . $key;
+            $pool['script_url'] = $scriptUrl;
+            $pool['go_url'] = $goUrl;
+            $pool['install_code'] = '<script src="' . $scriptUrl . '" defer></script>';
+            $pool['trigger_code'] = '<a href="#" data-wecom-promotion="' . $key . '">添加企业微信</a>';
+        }
+        unset($pool);
+
+        $today = date('Y-m-d');
+        $todayClicks = 0;
+        $onlineLinks = 0;
+        foreach ($links as $link) {
+            if ((int) ($link['status'] ?? 0) === 1) {
+                $onlineLinks++;
+            }
+            if ((string) ($link['today_date'] ?? '') === $today) {
+                $todayClicks += (int) ($link['today_count'] ?? 0);
+            }
+        }
+
+        $config = QywxPromotionOpenWorkService::configurationStatus();
+        $config['provider_callback_url'] = $domain . '/api/qywx-promotion/provider/callback';
+        $config['auth_callback_url'] = QywxPromotionOpenWorkService::configuredRedirectUri(
+            $domain . '/api/qywx-promotion/auth/callback'
+        );
+
+        return [
+            'meta' => [
+                'scope_label' => DataScopeService::scopeLabel(DataScopeService::getEffectiveScope($adminInfo)),
+                'can_authorize' => self::canAuthorize($adminId, $adminInfo),
+                'generated_at' => date('Y-m-d H:i:s'),
+            ],
+            'config' => $config,
+            'summary' => [
+                'authorized_accounts' => count(array_filter($accounts, static fn (array $row): bool => (int) ($row['auth_status'] ?? 0) === 1)),
+                'pool_count' => count($pools),
+                'online_links' => $onlineLinks,
+                'today_clicks' => $todayClicks,
+            ],
+            'accounts' => $accounts,
+            'pools' => $pools,
+            'links' => $links,
+            'allowed_link_hosts' => array_values((array) config('qywx_promotion.allowed_link_hosts', [])),
+        ];
+    }
+
+    public static function authorizationUrl(int $adminId, array $adminInfo, string $domain): array
+    {
+        if (!self::canAuthorize($adminId, $adminInfo)) {
+            throw new RuntimeException('只有系统管理员可以发起企业微信应用授权');
+        }
+        $redirectUri = rtrim($domain, '/') . '/api/qywx-promotion/auth/callback';
+
+        return ['url' => QywxPromotionOpenWorkService::authorizationUrl($adminId, $redirectUri)];
+    }
+
+    public static function verifyAccount(int $id, int $adminId, array $adminInfo): array
+    {
+        if (!self::canAuthorize($adminId, $adminInfo)) {
+            throw new RuntimeException('只有系统管理员可以验证企业微信授权凭证');
+        }
+        self::assertAuthorizedAccount($id, false);
+
+        return QywxPromotionOpenWorkService::verifyAccount($id);
+    }
+
+    public static function savePool(array $params, int $adminId, array $adminInfo): array
+    {
+        $id = max(0, (int) ($params['id'] ?? 0));
+        $name = trim((string) ($params['name'] ?? ''));
+        if ($name === '' || mb_strlen($name) > 60) {
+            throw new RuntimeException('请输入 1-60 个字符的分流方案名称');
+        }
+        $fallback = trim((string) ($params['fallback_url'] ?? ''));
+        if (!QywxPromotionOpenWorkService::isAllowedPromotionUrl($fallback, true)) {
+            throw new RuntimeException('兜底链接必须是已允许的 HTTPS 企业微信链接');
+        }
+        $now = time();
+        $data = [
+            'name' => $name,
+            'status' => (int) ($params['status'] ?? 1) === 1 ? 1 : 0,
+            'fallback_url' => $fallback,
+            'update_time' => $now,
+        ];
+        if ($id > 0) {
+            self::assertScopedRow('qywx_promotion_pool', $id, $adminId, $adminInfo);
+            Db::name('qywx_promotion_pool')->where('id', $id)->update($data);
+        } else {
+            $data += [
+                'public_key' => bin2hex(random_bytes(16)),
+                'owner_admin_id' => $adminId,
+                'dept_id' => self::primaryDeptId($adminId),
+                'click_count' => 0,
+                'create_time' => $now,
+            ];
+            $id = (int) Db::name('qywx_promotion_pool')->insertGetId($data);
+        }
+
+        return ['id' => $id];
+    }
+
+    public static function deletePool(int $id, int $adminId, array $adminInfo): void
+    {
+        self::assertScopedRow('qywx_promotion_pool', $id, $adminId, $adminInfo);
+        $now = time();
+        Db::transaction(function () use ($id, $now): void {
+            Db::name('qywx_promotion_pool')->where('id', $id)->update(['delete_time' => $now, 'update_time' => $now]);
+            Db::name('qywx_promotion_link')->where('pool_id', $id)->whereNull('delete_time')->update(['delete_time' => $now, 'update_time' => $now]);
+        });
+    }
+
+    public static function saveLink(array $params, int $adminId, array $adminInfo): array
+    {
+        $id = max(0, (int) ($params['id'] ?? 0));
+        $poolId = max(0, (int) ($params['pool_id'] ?? 0));
+        $pool = self::assertScopedRow('qywx_promotion_pool', $poolId, $adminId, $adminInfo);
+        $name = trim((string) ($params['name'] ?? ''));
+        if ($name === '' || mb_strlen($name) > 80) {
+            throw new RuntimeException('请输入 1-80 个字符的推广链接名称');
+        }
+        $url = trim((string) ($params['wecom_url'] ?? ''));
+        if (!QywxPromotionOpenWorkService::isAllowedPromotionUrl($url)) {
+            throw new RuntimeException('推广链接必须是已允许的 HTTPS 企业微信链接');
+        }
+        $accountId = max(0, (int) ($params['account_id'] ?? 0));
+        if ($accountId > 0) {
+            self::assertAuthorizedAccount($accountId, true);
+        }
+        $startAt = self::parseTime($params['active_start'] ?? null);
+        $endAt = self::parseTime($params['active_end'] ?? null);
+        if ($startAt > 0 && $endAt > 0 && $startAt >= $endAt) {
+            throw new RuntimeException('生效结束时间必须晚于开始时间');
+        }
+        $now = time();
+        $data = [
+            'pool_id' => $poolId,
+            'account_id' => $accountId,
+            'name' => $name,
+            'group_name' => mb_substr(trim((string) ($params['group_name'] ?? '默认分组')), 0, 60),
+            'wecom_url' => $url,
+            'weight' => min(100, max(1, (int) ($params['weight'] ?? 1))),
+            'status' => (int) ($params['status'] ?? 1) === 1 ? 1 : 0,
+            'daily_limit' => min(1000000, max(0, (int) ($params['daily_limit'] ?? 0))),
+            'active_start' => $startAt,
+            'active_end' => $endAt,
+            'remark' => mb_substr(trim((string) ($params['remark'] ?? '')), 0, 255),
+            'update_time' => $now,
+        ];
+        if ($id > 0) {
+            self::assertScopedRow('qywx_promotion_link', $id, $adminId, $adminInfo);
+            Db::name('qywx_promotion_link')->where('id', $id)->update($data);
+        } else {
+            $data += [
+                'owner_admin_id' => (int) ($pool['owner_admin_id'] ?? 0) ?: $adminId,
+                'dept_id' => (int) ($pool['dept_id'] ?? 0) ?: self::primaryDeptId($adminId),
+                'click_count' => 0,
+                'today_count' => 0,
+                'today_date' => null,
+                'last_click_time' => 0,
+                'create_time' => $now,
+            ];
+            $id = (int) Db::name('qywx_promotion_link')->insertGetId($data);
+        }
+
+        return ['id' => $id];
+    }
+
+    public static function toggleLink(int $id, int $status, int $adminId, array $adminInfo): void
+    {
+        self::assertScopedRow('qywx_promotion_link', $id, $adminId, $adminInfo);
+        Db::name('qywx_promotion_link')->where('id', $id)->update([
+            'status' => $status === 1 ? 1 : 0,
+            'update_time' => time(),
+        ]);
+    }
+
+    public static function deleteLink(int $id, int $adminId, array $adminInfo): void
+    {
+        self::assertScopedRow('qywx_promotion_link', $id, $adminId, $adminInfo);
+        Db::name('qywx_promotion_link')->where('id', $id)->update([
+            'delete_time' => time(),
+            'update_time' => time(),
+        ]);
+    }
+
+    private static function assertScopedRow(string $table, int $id, int $adminId, array $adminInfo): array
+    {
+        if ($id <= 0) {
+            throw new RuntimeException('数据不存在');
+        }
+        $query = Db::name($table)->where('id', $id)->whereNull('delete_time');
+        $visibleIds = DataScopeService::getVisibleAdminIds($adminId, $adminInfo);
+        if ($visibleIds !== null) {
+            if ($visibleIds === []) {
+                throw new RuntimeException('无权访问该数据');
+            }
+            $query->whereIn('owner_admin_id', $visibleIds);
+        }
+        $row = $query->find();
+        if (!$row) {
+            throw new RuntimeException('数据不存在或超出当前权限范围');
+        }
+
+        return $row;
+    }
+
+    private static function assertAuthorizedAccount(int $id, bool $requireActive): array
+    {
+        if ($id <= 0) {
+            throw new RuntimeException('授权企业不存在');
+        }
+        $query = Db::name('qywx_promotion_account')->where('id', $id)->whereNull('delete_time');
+        if ($requireActive) {
+            $query->where('auth_status', 1);
+        }
+        $row = $query->find();
+        if (!$row) {
+            throw new RuntimeException($requireActive ? '授权企业无效或已取消授权' : '授权企业不存在');
+        }
+
+        return $row;
+    }
+
+    private static function applyOwnerScope($query, string $alias, ?array $visibleIds): void
+    {
+        if ($visibleIds === null) {
+            return;
+        }
+        if ($visibleIds === []) {
+            $query->whereRaw('1 = 0');
+            return;
+        }
+        $query->whereIn($alias . '.owner_admin_id', $visibleIds);
+    }
+
+    private static function canAuthorize(int $adminId, array $adminInfo): bool
+    {
+        if ((int) ($adminInfo['root'] ?? 0) === 1) {
+            return true;
+        }
+
+        return Db::name('admin_role')->alias('ar')
+            ->join('system_role r', 'r.id = ar.role_id AND r.delete_time IS NULL')
+            ->where('ar.admin_id', $adminId)
+            ->where('r.name', '管理员')
+            ->count() > 0;
+    }
+
+    private static function primaryDeptId(int $adminId): int
+    {
+        return (int) (Db::name('admin_dept')->where('admin_id', $adminId)->order('dept_id', 'asc')->value('dept_id') ?? 0);
+    }
+
+    private static function parseTime(mixed $value): int
+    {
+        if ($value === null || $value === '') {
+            return 0;
+        }
+        if (is_numeric($value)) {
+            return max(0, (int) $value);
+        }
+        $time = strtotime((string) $value);
+
+        return $time === false ? 0 : $time;
+    }
+
+    private static function mask(string $value): string
+    {
+        $length = strlen($value);
+        if ($length <= 8) {
+            return $value === '' ? '' : str_repeat('*', $length);
+        }
+
+        return substr($value, 0, 4) . str_repeat('*', max(4, $length - 8)) . substr($value, -4);
+    }
+}