更新

server/app/adminapi/logic/firstvisit/WecomPromotionLogic.php

@@ -7,6 +7,7 @@ namespace app\adminapi\logic\firstvisit;
 use app\common\service\DataScope\DataScopeService;
 use app\common\service\qywx\QywxCustomerAcquisitionApiService;
 use app\common\service\qywx\QywxCustomerAcquisitionLinkService;
+use app\common\service\qywx\QywxPromotionWidgetService;
 use RuntimeException;
 use think\facade\Db;
 
@@ -22,7 +23,7 @@ class WecomPromotionLogic
             ->whereNull('p.delete_time');
         self::applyOwnerScope($poolsQuery, 'p', $visibleIds);
         $pools = $poolsQuery
-            ->field('p.id,p.name,p.public_key,p.status,p.fallback_url,p.click_count,p.owner_admin_id,p.dept_id,p.create_time,p.update_time,u.name as owner_name,d.name as dept_name')
+            ->field('p.id,p.name,p.public_key,p.status,p.fallback_url,p.widget_config_json,p.click_count,p.owner_admin_id,p.dept_id,p.create_time,p.update_time,u.name as owner_name,d.name as dept_name')
             ->order('p.id', 'desc')
             ->select()->toArray();
 
@@ -39,15 +40,21 @@ class WecomPromotionLogic
                 ->select()->toArray();
         }
 
-        $domain = rtrim($domain, '/');
+        $domain = self::publicDomain($domain);
         foreach ($pools as &$pool) {
+            $pool['widget_config'] = QywxPromotionWidgetService::decode($pool['widget_config_json'] ?? null);
+            unset($pool['widget_config_json']);
             $key = (string) $pool['public_key'];
             $scriptUrl = $domain . '/api/qywx-promotion/js/' . $key;
             $goUrl = $domain . '/api/qywx-promotion/go/' . $key;
             $pool['script_url'] = $scriptUrl;
             $pool['go_url'] = $goUrl;
-            $pool['install_code'] = '<script src="' . $scriptUrl . '" defer></script>';
-            $pool['trigger_code'] = '<a href="#" data-wecom-promotion="' . $key . '">添加企业微信</a>';
+            $pool['install_code'] = '<script src="'
+                . htmlspecialchars($scriptUrl, ENT_QUOTES | ENT_SUBSTITUTE, 'UTF-8')
+                . '" defer></script>';
+            $pool['trigger_code'] = '<a href="'
+                . htmlspecialchars($goUrl, ENT_QUOTES | ENT_SUBSTITUTE, 'UTF-8')
+                . '" data-wecom-promotion="' . $key . '">添加企业微信</a>';
         }
         unset($pool);
 
@@ -125,6 +132,21 @@ class WecomPromotionLogic
         return ['id' => $id];
     }
 
+    public static function saveWidget(array $params, int $adminId, array $adminInfo): array
+    {
+        $id = max(0, (int) ($params['pool_id'] ?? $params['id'] ?? 0));
+        self::assertScopedRow('qywx_promotion_pool', $id, $adminId, $adminInfo);
+
+        $input = $params['widget_config'] ?? $params;
+        $config = QywxPromotionWidgetService::fromInput($input);
+        Db::name('qywx_promotion_pool')->where('id', $id)->update([
+            'widget_config_json' => QywxPromotionWidgetService::encode($config),
+            'update_time' => time(),
+        ]);
+
+        return ['id' => $id, 'widget_config' => $config];
+    }
+
     public static function deletePool(int $id, int $adminId, array $adminInfo): void
     {
         self::assertScopedRow('qywx_promotion_pool', $id, $adminId, $adminInfo);
@@ -669,6 +691,30 @@ class WecomPromotionLogic
         return substr($value, 0, 4) . str_repeat('*', max(4, $length - 8)) . substr($value, -4);
     }
 
+    private static function publicDomain(string $requestDomain): string
+    {
+        $configuredDomain = trim((string) config('app.app_host', ''));
+        foreach ([$configuredDomain, trim($requestDomain)] as $candidate) {
+            if ($candidate === '') {
+                continue;
+            }
+            $parts = parse_url($candidate);
+            if (!is_array($parts)) {
+                continue;
+            }
+            $scheme = strtolower((string) ($parts['scheme'] ?? ''));
+            $host = (string) ($parts['host'] ?? '');
+            if (!in_array($scheme, ['http', 'https'], true) || $host === '') {
+                continue;
+            }
+            $port = isset($parts['port']) ? ':' . (int) $parts['port'] : '';
+
+            return $scheme . '://' . $host . $port;
+        }
+
+        throw new RuntimeException('未配置有效的应用访问域名');
+    }
+
     /**
      * 内部应用直接复用项目现有 work_wechat 配置，不经过第三方服务商授权。
      *