初始化：职引项目 v1.0

2026-06-08 16:28:00 +08:00
commit 511f60d0db
111 changed files with 27295 additions and 0 deletions
@@ -0,0 +1,165 @@
+import { Injectable, HttpException, HttpStatus } from '@nestjs/common'
+import { InjectModel } from '@nestjs/mongoose'
+import { Model } from 'mongoose'
+import { JwtService } from '@nestjs/jwt'
+import { User, UserDocument } from './user.schema'
+import { EmailService } from '../email/email.service'
+
+// In-memory stores
+const codeStore = new Map<string, { code: string; expiresAt: number }>()
+const emailCodeStore = new Map<string, { code: string; expiresAt: number }>()
+
+@Injectable()
+export class UserService {
+  constructor(
+    @InjectModel(User.name) private userModel: Model<UserDocument>,
+    private jwtService: JwtService,
+    private emailService: EmailService,
+  ) {}
+
+  async sendCode(phone: string) {
+    const code = process.env.NODE_ENV === 'production'
+      ? String(Math.floor(100000 + Math.random() * 900000))
+      : '123456'
+
+    codeStore.set(phone, { code, expiresAt: Date.now() + 5 * 60 * 1000 })
+
+    if (process.env.NODE_ENV !== 'production') {
+      console.log(`[DEV] Verification code for ${phone}: ${code}`)
+    }
+    return { message: '验证码已发送' }
+  }
+
+  async loginByPhone(phone: string, code: string) {
+    const record = codeStore.get(phone)
+    if (!record || record.code !== code) {
+      throw new HttpException('验证码错误', HttpStatus.UNAUTHORIZED)
+    }
+    if (Date.now() > record.expiresAt) {
+      codeStore.delete(phone)
+      throw new HttpException('验证码已过期', HttpStatus.UNAUTHORIZED)
+    }
+    codeStore.delete(phone)
+
+    let user = await this.userModel.findOne({ phone }).exec()
+    if (!user) {
+      user = await this.userModel.create({ phone, nickname: `用户${phone.slice(-4)}` })
+    }
+
+    return this.generateAuthResponse(user)
+  }
+
+  async loginByWx(code: string) {
+    // WeChat silent login - exchange code for openid
+    const appid = process.env.WX_APPID
+    const secret = process.env.WX_SECRET
+    if (!appid || !secret) {
+      throw new HttpException('微信登录未配置', HttpStatus.SERVICE_UNAVAILABLE)
+    }
+
+    const wxRes = await fetch(
+      `https://api.weixin.qq.com/sns/jscode2session?appid=${appid}&secret=${secret}&js_code=${code}&grant_type=authorization_code`,
+    )
+    const wxData: any = await wxRes.json()
+
+    if (wxData.errcode) {
+      throw new HttpException(`微信登录失败: ${wxData.errmsg}`, HttpStatus.UNAUTHORIZED)
+    }
+
+    const openid = wxData.openid
+    let user = await this.userModel.findOne({ wxOpenid: openid }).exec()
+    if (!user) {
+      user = await this.userModel.create({ wxOpenid: openid, nickname: '微信用户' })
+    }
+
+    return this.generateAuthResponse(user)
+  }
+
+  // 📧 邮箱验证码
+  async sendEmailCode(email: string) {
+    if (!email || !email.includes('@')) {
+      throw new HttpException('请输入正确的邮箱地址', HttpStatus.BAD_REQUEST)
+    }
+    const code = String(Math.floor(100000 + Math.random() * 900000))
+    emailCodeStore.set(email, { code, expiresAt: Date.now() + 10 * 60 * 1000 })
+    const sent = await this.emailService.sendVerificationCode(email, code)
+    if (sent) {
+      return { message: '验证码已发送到邮箱' }
+    }
+    // 邮件发送失败时返回 devCode 方便调试
+    console.log(`[EMAIL] Dev code for ${email}: ${code}`)
+    return { message: '验证码已发送（邮件服务暂不可用，开发模式）', devCode: code }
+  }
+
+  async loginByEmail(email: string, code: string) {
+    const record = emailCodeStore.get(email)
+    if (!record || record.code !== code) {
+      throw new HttpException('验证码错误', HttpStatus.UNAUTHORIZED)
+    }
+    if (Date.now() > record.expiresAt) {
+      emailCodeStore.delete(email)
+      throw new HttpException('验证码已过期', HttpStatus.UNAUTHORIZED)
+    }
+    emailCodeStore.delete(email)
+
+    // 按邮箱查找或创建用户
+    let user = await this.userModel.findOne({ email }).exec()
+    if (!user) {
+      const nick = email.split('@')[0]
+      user = await this.userModel.create({ email, nickname: nick, remaining: 3 })
+    }
+    return this.generateAuthResponse(user)
+  }
+
+  async getInfo(userId: string) {
+    const user = await this.userModel.findById(userId).exec()
+    if (!user) throw new HttpException('用户不存在', HttpStatus.NOT_FOUND)
+    return this.safeUser(user)
+  }
+
+  async update(userId: string, data: { nickname?: string; avatar?: string }) {
+    const user = await this.userModel.findByIdAndUpdate(userId, data, { new: true }).exec()
+    if (!user) throw new HttpException('用户不存在', HttpStatus.NOT_FOUND)
+    return this.safeUser(user)
+  }
+
+  getModel() { return this.userModel }
+
+  async getUsage(userId: string) {
+    const user = await this.userModel.findById(userId).exec()
+    if (!user) throw new HttpException('用户不存在', HttpStatus.NOT_FOUND)
+    return { remaining: user.remaining, plan: user.plan, interviewCount: user.interviewCount }
+  }
+
+  async deductRemaining(userId: string) {
+    const user = await this.userModel.findById(userId).exec()
+    if (!user) throw new HttpException('用户不存在', HttpStatus.NOT_FOUND)
+    if (user.remaining <= 0) throw new HttpException('使用次数已用完', HttpStatus.FORBIDDEN)
+    user.remaining -= 1
+    user.interviewCount += 1
+    await user.save()
+  }
+
+  private generateAuthResponse(user: UserDocument) {
+    const payload = { userId: user._id.toString(), phone: user.phone || '' }
+    return {
+      token: this.jwtService.sign(payload),
+      user: this.safeUser(user),
+    }
+  }
+
+  private safeUser(user: UserDocument) {
+    return {
+      id: user._id.toString(),
+      phone: user.phone || '',
+      email: user.email || '',
+      nickname: user.nickname || '',
+      avatar: user.avatar || '',
+      plan: user.plan,
+      role: user.role || 'user',
+      isSystemAdmin: user.isSystemAdmin || false,
+      remaining: user.remaining,
+      interviewCount: user.interviewCount,
+    }
+  }
+}