FastMovieAI 二开基线 v1.0 (完整源码)

fastmovie-admin/plugin/user/app/api/controller/BillController.php

@@ -0,0 +1,36 @@
+<?php
+
+namespace plugin\user\app\api\controller;
+
+use app\Basic;
+use plugin\finance\utils\enum\PointsBillScene;
+use plugin\user\app\model\PluginUserPointsBill;
+use plugin\user\utils\enum\MoneyAction;
+use support\Request;
+
+class BillController extends Basic
+{
+    public function getPointsBill(Request $request)
+    {
+        $type = $request->get('type', 'all');
+
+        $uid = $request->uid;
+        $limit = $request->get('limit', 10);
+        $where = [];
+        $where[] = ['uid', '=', $uid];
+        if ($type != 'all') {
+            if ($type == 'consume') {
+                $where[] = ['action', '=', MoneyAction::DECREASE['value']];
+            }
+            if ($type == 'gain') {
+                $where[] = ['action', '=', MoneyAction::INCREASE['value']];
+            }
+            if ($type == 'recharge') {
+                $where[] = ['scene', '=', PointsBillScene::RECHARGE['value']];
+            }
+        }
+        $PluginFinanceBill = PluginUserPointsBill::where($where)->order('create_time', 'desc')->paginate($limit);
+
+        return $this->resData($PluginFinanceBill);
+    }
+}

fastmovie-admin/plugin/user/app/api/controller/BindThirdPartyController.php

@@ -0,0 +1,109 @@
+<?php
+
+namespace plugin\user\app\api\controller;
+
+use app\Basic;
+use app\expose\enum\ResponseCode;
+use app\expose\enum\ResponseEvent;
+use app\expose\exception\Exception;
+use plugin\control\expose\helper\Wechat;
+use plugin\user\app\model\PluginUserWechat;
+use support\Redis;
+use support\Request;
+
+class BindThirdPartyController extends Basic
+{
+    public function wechat(Request $request)
+    {
+        if ($request->twofa_state) {
+            $time = time() - (10 * 60);
+            if ($request->twofa['time'] < $time) {
+                return $this->fail('请验证你的身份', [
+                    'code' => ResponseCode::NEED_TWOFA,
+                    'action' => 'stop'
+                ]);
+            }
+        }
+        if ($request->isWehcatBrowser) {
+        } else {
+            try {
+                $res = Wechat::createQrCode(Wechat::QR_STR_SCENE, 600, [
+                    'plugin\user\expose\helper\WechatOfficialAccount',
+                    'bind',
+                    [
+                        'uid' => $request->uid,
+                        'channels_uid' => $request->channels_uid,
+                    ]
+                ]);
+                return $this->resData(['qrcode' => $res['url'], 'id' => $res['id'], 'expire' => strtotime("+" . $res['expire_seconds'] . " seconds")]);
+            } catch (Exception $e) {
+            } catch (\Throwable $th) {
+                return $this->exception($th);
+            }
+            try {
+                $res = Wechat::createQrCode(Wechat::QR_SCENE, 600, [
+                    'plugin\user\expose\helper\WechatOfficialAccount',
+                    'scan',
+                    [
+                        'uid' => $request->uid,
+                        'channels_uid' => $request->channels_uid,
+                    ]
+                ]);
+                return $this->resData(['qrcode' => $res['url'], 'id' => $res['id'], 'expire' => strtotime("+" . $res['expire_seconds'] . " seconds")]);
+            } catch (Exception $e) {
+            } catch (\Throwable $th) {
+                return $this->exception($th);
+            }
+            /* $auth_url='';
+            return $this->code(ResponseCode::OPEN_NEW_WINDOW, '请在微信中打开', [
+                'url' => $auth_url
+            ]); */
+            return $this->fail('无可用的微信服务，请联系客服');
+        }
+    }
+    public function checkWechat(Request $request)
+    {
+        $PluginUserWechat = PluginUserWechat::where('uid', $request->uid)->find();
+        if ($PluginUserWechat) {
+            return $this->code(ResponseCode::SUCCESS_EVENT_PUSH, '绑定成功', [
+                'event' => ResponseEvent::UPDATE_USERINFO
+            ]);
+        }
+        $id = $request->post('id');
+        if(!$id){
+            return $this->fail('参数错误');
+        }
+        $Scene = Redis::get($id);
+        if (!$Scene) {
+            return $this->fail('二维码已过期');
+        }
+        $res = Redis::get($id.'.bind');
+        if($res){
+            $res = json_decode($res,true);
+            if($res['status'] == 'fail'){
+                return $this->fail($res['message']);
+            }
+        }
+        return $this->code(ResponseCode::WAIT,'等待微信扫码');
+    }
+    public function unbindWechat(Request $request)
+    {
+        if ($request->twofa_state) {
+            $time = time() - (10 * 60);
+            if ($request->twofa['time'] < $time) {
+                return $this->fail('请验证你的身份', [
+                    'code' => ResponseCode::NEED_TWOFA,
+                    'action' => 'stop'
+                ]);
+            }
+        }
+        $PluginUserWechat = PluginUserWechat::where('uid', $request->uid)->find();
+        if ($PluginUserWechat) {
+            $PluginUserWechat->uid=null;
+            $PluginUserWechat->save();
+        }
+        return $this->code(ResponseCode::SUCCESS_EVENT_PUSH, '解绑成功', [
+            'event' => ResponseEvent::UPDATE_USERINFO
+        ]);
+    }
+}

fastmovie-admin/plugin/user/app/api/controller/CaptchaController.php

@@ -0,0 +1,34 @@
+<?php
+
+namespace plugin\user\app\api\controller;
+
+use app\Basic;
+use app\expose\enum\State;
+use app\expose\helper\Captcha;
+use app\expose\utils\Password;
+use plugin\user\app\model\PluginUser;
+use support\Request;
+
+class CaptchaController extends Basic
+{
+    protected $notNeedLoginAll = true;
+    public function captcha(Request $request)
+    {
+        $builder = Captcha::create();
+        $img_content = $builder->get();
+        $request->session()->set('captcha', [
+            'captcha' => strtolower($builder->getPhrase()),
+            'expire' => time() + 60 * 5
+        ]);
+        // 输出验证码二进制数据
+        return response($img_content, 200, ['Content-Type' => 'image/jpeg']);
+    }
+    public function captcha_base64(Request $request)
+    {
+        return Captcha::captcha();
+    }
+    public function captcha_json(Request $request)
+    {
+        return $this->resData(Captcha::captchaCode());
+    }
+}

fastmovie-admin/plugin/user/app/api/controller/LoginController.php

@@ -0,0 +1,265 @@
+<?php
+
+namespace plugin\user\app\api\controller;
+
+use app\Basic;
+use app\expose\enum\ResponseCode;
+use app\expose\enum\State;
+use app\expose\exception\Exception;
+use app\expose\helper\Captcha;
+use app\expose\helper\Config;
+use plugin\control\expose\helper\Vcode;
+use app\expose\utils\Password;
+use plugin\control\expose\helper\Wechat;
+use plugin\user\app\model\PluginUser;
+use plugin\user\app\model\PluginUserInvitationCode;
+use plugin\user\expose\helper\User;
+use plugin\user\utils\enum\VcodeScene;
+use support\Log;
+use support\Redis;
+use support\Request;
+use think\facade\Db;
+
+class LoginController extends Basic
+{
+    protected $notNeedLoginAll = true;
+    public function login(Request $request)
+    {
+        $D = $request->post();
+        $where = [];
+        # 判断$D['username']是用户名，11位手机号，邮箱
+        if (empty($D['username'])) {
+            return $this->fail('请输入用户名|手机号|邮箱');
+        }
+        $username = $D['username'];
+        if (preg_match('/^\d{11}$/', $username)) {
+            // 11位手机号
+            $where[] = ['mobile', '=', $username];
+        } elseif (filter_var($username, FILTER_VALIDATE_EMAIL)) {
+            // 邮箱
+            $where[] = ['email', '=', $username];
+        } else {
+            // 用户名
+            $where[] = ['username', '=', $username];
+        }
+        $where[] = ['channels_uid', '=', $request->channels_uid];
+        $user = PluginUser::where($where)->find();
+        if (!$user) {
+            return $this->fail('用户不存在');
+        }
+        // 验证登录密码
+        if (!Password::verify((string) $D['password'], (string) $user->password)) {
+            return $this->fail('密码错误');
+        }
+        if ($user->state == State::NO['value']) {
+            return $this->fail('用户状态异常');
+        }
+        $captcha_state = Config::get('captcha', 'state');
+        // 检验图像验证码
+        if ($captcha_state) {
+            if (empty($D['captcha'])) {
+                return $this->fail('请输入验证码');
+            }
+            $token = $D['token'] ?? null;
+            if (!Captcha::check($D['captcha'], $token)) {
+                return $this->fail('验证码错误');
+            }
+        }
+
+        // 更新登录信息
+        $ip = $request->getRealIp();
+        $user->login_ip = $ip;
+        $user->login_time = date('Y-m-d H:i:s');
+        if ($user->save() === false) {
+            return $this->fail('登录失败');
+        }
+        $info = PluginUser::getTokenInfo($user);
+        return $this->resData($info);
+    }
+    public function vcode(Request $request)
+    {
+        Db::startTrans();
+        try {
+            $username = $request->post('username');
+            $vcode = $request->post('vcode');
+            $token = $request->post('token');
+            $code = $request->header('X-Icode') ?? null;
+            Vcode::check($username, $vcode, VcodeScene::SIGNUP['value'], $token);
+            $PluginUserInvitationCode = null;
+            if ($code) {
+                $PluginUserInvitationCode = PluginUserInvitationCode::where(['code' => $code])->find();
+                if (!$PluginUserInvitationCode) {
+                    $PluginUserInvitationCode = null;
+                }
+                if ($PluginUserInvitationCode->status != 'unused') {
+                    $PluginUserInvitationCode = null;
+                }
+                if($PluginUserInvitationCode->uid == $request->uid){
+                    $PluginUserInvitationCode = null;
+                }
+                if($PluginUserInvitationCode->state != State::YES['value']){
+                    $PluginUserInvitationCode = null;
+                }
+            }
+            $user = PluginUser::where('mobile', $username)->find();
+            if (!$user) {
+                $data = [
+                    'channels_uid' => $request->channels_uid,
+                    'mobile' => $username,
+                    'state' => State::YES['value'],
+                ];
+                if ($PluginUserInvitationCode != null) {
+                    $data['puid'] = $PluginUserInvitationCode->uid;
+                    $data['activation_time'] = date('Y-m-d H:i:s');
+                }
+                $user = new PluginUser();
+                $user->save($data);
+            }
+            if ($user->state == State::NO['value']) {
+                throw new Exception('用户状态异常');
+            }
+            // 更新登录信息
+            $ip = $request->getRealIp();
+            $user->login_ip = $ip;
+            $user->login_time = date('Y-m-d H:i:s');
+            if ($PluginUserInvitationCode != null) {
+                $PluginUserInvitationCode->status = 'used';
+                $PluginUserInvitationCode->use_uid = $user->id;
+                $PluginUserInvitationCode->use_time = date('Y-m-d H:i:s');
+                $PluginUserInvitationCode->save();
+            }
+            if ($user->save() === false) {
+                throw new Exception('登录失败');
+            }
+            $info = PluginUser::getTokenInfo($user);
+            Db::commit();
+            return $this->resData($info);
+        } catch (\Throwable $th) {
+            Db::rollback();
+            return $this->exception($th);
+        }
+    }
+    public function qrcode(Request $request)
+    {
+        return $this->wechat($request);
+    }
+    public function wechat(Request $request)
+    {
+        if ($request->isWehcatBrowser && $request->isMobile) {
+        } else {
+            if (!empty($request->uid)) {
+                try {
+                    $code = $request->header('X-Icode') ?? null;
+                    $res = Wechat::createQrCode(Wechat::QR_STR_SCENE, 600, [
+                        'plugin\user\expose\helper\WechatOfficialAccount',
+                        'bind',
+                        [
+                            'channels_uid' => $request->channels_uid,
+                            'code' => $code,
+                            'uid' => $request->uid,
+                        ]
+                    ]);
+                    return $this->resData(['qrcode' => $res['url'], 'id' => $res['id'], 'expire' => strtotime("+" . $res['expire_seconds'] . " seconds")]);
+                } catch (Exception $e) {
+                    p($e->getMessage());
+                    Log::info($e->getMessage(), $e->getTrace());
+                } catch (\Throwable $th) {
+                    return $this->exception($th);
+                }
+            }
+            try {
+                $code = $request->header('X-Icode') ?? null;
+                $res = Wechat::createQrCode(Wechat::QR_STR_SCENE, 600, [
+                    'plugin\user\expose\helper\WechatOfficialAccount',
+                    'login',
+                    [
+                        'channels_uid' => $request->channels_uid,
+                        'code' => $code,
+                    ]
+                ]);
+                return $this->resData(['qrcode' => $res['url'], 'id' => $res['id'], 'expire' => strtotime("+" . $res['expire_seconds'] . " seconds")]);
+            } catch (Exception $e) {
+                p($e->getMessage());
+                Log::info($e->getMessage(), $e->getTrace());
+            } catch (\Throwable $th) {
+                return $this->exception($th);
+            }
+            try {
+                $res = Wechat::createQrCode(Wechat::QR_SCENE, 600, [
+                    'plugin\user\expose\helper\WechatOfficialAccount',
+                    'scan',
+                    [
+                        'channels_uid' => $request->channels_uid,
+                        'code' => $code,
+                    ]
+                ]);
+                return $this->resData(['qrcode' => $res['url'], 'id' => $res['id'], 'expire' => strtotime("+" . $res['expire_seconds'] . " seconds")]);
+            } catch (Exception $e) {
+                Log::info($e->getMessage(), $e->getTrace());
+            } catch (\Throwable $th) {
+                return $this->exception($th);
+            }
+            /* $auth_url='';
+            return $this->code(ResponseCode::OPEN_NEW_WINDOW, '请在微信中打开', [
+                'url' => $auth_url
+            ]); */
+            return $this->fail('无可用的微信服务，请联系客服');
+        }
+    }
+    public function checkQrcode(Request $request)
+    {
+        $id = $request->post('id');
+        if (!$id) {
+            return $this->fail('参数错误');
+        }
+        $Scene = Redis::get($id);
+        if (!$Scene) {
+            return $this->fail('二维码已过期');
+        }
+        $res = Redis::get($id . '.login');
+        if ($res) {
+            $res = json_decode($res, true);
+            if ($res['status'] == 'success') {
+                $user = PluginUser::where('id', $res['uid'])->find();
+                if ($user) {
+                    // 更新登录信息
+                    $ip = $request->getRealIp();
+                    $user->login_ip = $ip;
+                    $user->login_time = date('Y-m-d H:i:s');
+                    if ($user->save() === false) {
+                        return $this->fail('登录失败');
+                    }
+                    $info = PluginUser::getTokenInfo($user);
+                    return $this->resData($info);
+                } else {
+                    return $this->fail('登录失败');
+                }
+            } else {
+                return $this->fail($res['message']);
+            }
+        }
+        return $this->code(ResponseCode::WAIT, '等待微信扫码');
+    }
+
+    public function checkBind(Request $request)
+    {
+        $id = $request->post('id');
+        if (!$id) {
+            return $this->fail('参数错误');
+        }
+        $Scene = Redis::get($id);
+        if (!$Scene) {
+            return $this->fail('二维码已过期');
+        }
+        $res = Redis::get($id . '.bind');
+        if ($res) {
+            $res = json_decode($res, true);
+            if ($res['status'] == 'success') {
+                return $this->resData(['status' => 'success']);
+            } else {
+                return $this->fail($res['message']);
+            }
+        }
+        return $this->code(ResponseCode::WAIT, '等待微信扫码');
+    }
+}

fastmovie-admin/plugin/user/app/api/controller/SignupController.php

@@ -0,0 +1,46 @@
+<?php
+
+namespace plugin\user\app\api\controller;
+
+use app\Basic;
+use app\expose\enum\State;
+use plugin\control\expose\helper\Vcode;
+use plugin\user\app\model\PluginUser;
+use plugin\user\expose\helper\User;
+use plugin\user\utils\enum\VcodeScene;
+use support\Request;
+
+class SignupController extends Basic
+{
+    protected $notNeedLoginAll = true;
+    protected $notVerificationSourceAll = true;
+    public function index(Request $request)
+    {
+        $D = $request->post();
+        Vcode::check($D['username'],$D['vcode'],VcodeScene::SIGNUP['value'],$D['token']);
+        try {
+            $UserModel = User::create([
+                'mobile' => $D['username'],
+            ]);
+            $user =PluginUser::where('id',$UserModel->id)->find();
+            if(!$user){
+                return $this->fail('用户不存在');
+            }
+            if($user->state == State::NO['value']){
+                return $this->fail('用户状态异常');
+            }
+    
+            // 更新登录信息
+            $ip = $request->getRealIp();
+            $user->login_ip = $ip;
+            $user->login_time = date('Y-m-d H:i:s');
+            if ($user->save() === false) {
+                return $this->fail('登录失败');
+            }
+            $info = PluginUser::getTokenInfo($user);
+            return $this->resData($info);
+        } catch (\Throwable $th) {
+            return $this->exception($th);
+        }
+    }
+}

fastmovie-admin/plugin/user/app/api/controller/UploadsController.php

@@ -0,0 +1,15 @@
+<?php
+
+namespace plugin\user\app\api\controller;
+
+use app\Basic;
+use app\expose\trait\Uploads;
+
+class UploadsController extends Basic
+{
+    use Uploads;
+    public function __construct()
+    {
+        $this->uid = request()->uid;
+    }
+}

fastmovie-admin/plugin/user/app/api/controller/UserBillController.php

@@ -0,0 +1,46 @@
+<?php
+
+namespace plugin\user\app\api\controller;
+
+use app\Basic;
+use plugin\finance\utils\enum\BillScene;
+use plugin\user\app\model\PluginUserBill;
+use plugin\user\utils\enum\MoneyAction;
+use support\Request;
+
+class UserBillController extends Basic
+{
+    public function index(Request $request)
+    {
+        $uid = $request->uid;
+        $limit=$request->get('limit',10);
+        $where=[
+            ['uid','=',$uid]
+        ];
+        $action=$request->get('action','all');
+        if($action&&$action!='all'){
+            $where[]=['action','=',$action];
+        }
+        $scene=$request->get('scene','all');
+        if($scene&&$scene!='all'){
+            $where[]=['scene','=',$scene];
+        }
+        $start_time=$request->get('start_time');
+        $end_time=$request->get('end_time');
+        if($start_time&&$end_time){
+            $where[]=['create_time','between',[$start_time,$end_time]];
+        }elseif($start_time){
+            $where[]=['create_time','>=',$start_time];
+        }elseif($end_time){
+            $where[]=['create_time','<=',$end_time];
+        }
+        $PluginUserBill = PluginUserBill::where($where)->order('create_time', 'desc')->paginate($limit)->each(function($item){
+            $item->action_text=MoneyAction::get($item->action);
+            $item->scene_text=BillScene::get($item->scene);
+        });
+        if($PluginUserBill->isEmpty()){
+            return $this->fail();
+        }
+        return $this->resData($PluginUserBill->scene('external'));
+    }
+}

fastmovie-admin/plugin/user/app/api/controller/UserController.php

@@ -0,0 +1,445 @@
+<?php
+
+namespace plugin\user\app\api\controller;
+
+use app\Basic;
+use app\expose\enum\ResponseCode;
+use app\expose\enum\ResponseEvent;
+use app\expose\enum\State;
+use plugin\control\expose\helper\Vcode;
+use app\expose\utils\TwofaAuthenticator;
+use app\model\Uploads;
+use app\model\UploadsClassify;
+use plugin\finance\app\model\PluginFinanceWallet;
+use plugin\user\app\model\PluginUser;
+use plugin\user\app\model\PluginUserInvitationCode;
+use plugin\user\app\model\PluginUserTwofaSecret;
+use plugin\user\app\model\PluginUserWechat;
+use plugin\user\expose\helper\User;
+use plugin\user\utils\enum\TotpApp;
+use plugin\user\utils\enum\VcodeScene;
+use Shopwwi\WebmanFilesystem\Facade\Storage;
+use support\Request;
+use think\facade\Db;
+
+class UserController extends Basic
+{
+    protected $notNeedTwofa = ['getTwofaList', 'refreshTwofaSecret'];
+    protected $notNeedLogin = ['checkInvitationCode'];
+    public function info(Request $request)
+    {
+        $user = PluginUser::where(['id' => $request->uid])->find();
+        if (!$user) {
+            return $this->fail('用户不存在');
+        }
+        $info = PluginUser::getTokenInfo($user, $request->twofa);
+        $count = PluginUserInvitationCode::where(['uid' => $request->uid])->where('state', State::YES['value'])->where('status', 'unused')->count();
+        $info->invitation_code_count = $count;
+        return $this->resData($info);
+    }
+    public function update(Request $request)
+    {
+        $D = $request->post();
+        try {
+            if ($request->twofa_state) {
+                $time = time() - (10 * 60);
+                if ($request->twofa['time'] < $time) {
+                    return $this->fail('请验证你的身份', [
+                        'code' => ResponseCode::NEED_TWOFA,
+                        'action' => 'stop'
+                    ]);
+                }
+                switch (true) {
+                    case isset($D['username']):
+                        $PluginUser = PluginUser::where(['id' => $request->uid])->find();
+                        $username_time = $PluginUser->username_time ? 30 - ceil((time() - strtotime($PluginUser->username_time)) / 86400) : 0;
+                        if ($username_time > 0) {
+                            return $this->fail('30天内仅支持修改一次');
+                        }
+                        break;
+                    case isset($D['mobile']):
+                        Vcode::check($D['mobile'], $D['vcode'], VcodeScene::BIND_MOBILE['value'], $D['token']);
+                        break;
+                    case isset($D['email']):
+                        Vcode::check($D['email'], $D['vcode'], VcodeScene::BIND_EMAIL['value'], $D['token']);
+                        break;
+                    case isset($D['password']):
+                        if (empty($D['vpassword'])) {
+                            return $this->fail('两次输入的密码不一致');
+                        }
+                        if ($D['password'] != $D['vpassword']) {
+                            return $this->fail('两次输入的密码不一致');
+                        }
+                        Vcode::check($D['username'], $D['vcode'], VcodeScene::SET_PASSWORD['value'], $D['token'] ?? null);
+                        break;
+                }
+            }
+            $D['channels_uid'] = $request->channels_uid;
+            User::update($request->uid, $D);
+        } catch (\Throwable $th) {
+            return $this->exception($th);
+        }
+        return $this->code(ResponseCode::SUCCESS_EVENT_PUSH, '更新成功', [
+            'event' => ResponseEvent::UPDATE_USERINFO
+        ]);
+    }
+    public function checkUsername(Request $request)
+    {
+        $username = $request->post('username');
+        $user = PluginUser::where(['username' => $username])->find();
+        if ($user && $user->id != $request->uid) {
+            return $this->fail('用户名已存在');
+        }
+        return $this->success();
+    }
+    public function checkMobile(Request $request)
+    {
+        $mobile = $request->post('mobile');
+        $user = PluginUser::where(['mobile' => $mobile])->find();
+        if ($user) {
+            if ($user->id == $request->uid) {
+                return $this->fail('和原手机号一致');
+            }
+            return $this->fail('手机号已存在');
+        }
+        return $this->success();
+    }
+    public function checkEmail(Request $request)
+    {
+        $email = $request->post('email');
+        $user = PluginUser::where(['email' => $email])->find();
+        if ($user) {
+            if ($user->id == $request->uid) {
+                return $this->fail('和原邮箱一致');
+            }
+            return $this->fail('邮箱已存在');
+        }
+        return $this->success();
+    }
+    public function checkTwofa(Request $request)
+    {
+        if (!$request->twofa_state) {
+            return $this->success();
+        }
+        $time = time() - (10 * 60);
+        if ($request->twofa['time'] < $time) {
+            return $this->fail('请验证你的身份', [
+                'code' => ResponseCode::NEED_TWOFA,
+                'action' => 'stop'
+            ]);
+        }
+        return $this->success();
+    }
+    public function uploadHeadimg(Request $request)
+    {
+        $default_channels = config('plugin.shopwwi.filesystem.app.default');
+        $UploadsClassify = UploadsClassify::where(['dir_name' => 'uploads/default', 'is_system' => 1, 'channels' => $default_channels])->find();
+        if (!$UploadsClassify) {
+            return $this->fail('分类不存在');
+        }
+        $date_path = date('Ymd');
+        //单文件上传
+        $file = $request->file('file');
+        try {
+            $result = Storage::adapter($UploadsClassify->channels)->path($UploadsClassify->dir_name . '/' . $date_path)->upload($file);
+        } catch (\Throwable $th) {
+            return $this->exception($th);
+        }
+        try {
+            $Uploads = new Uploads();
+            $Uploads->uid = $request->uid;
+            $Uploads->classify_id = $UploadsClassify->id;
+            $Uploads->filename = $result->origin_name;
+            $Uploads->path = $result->file_name;
+            $Uploads->ext = $result->extension;
+            $Uploads->mime = $result->mime_type;
+            $Uploads->size = $result->size;
+            $Uploads->channels = $UploadsClassify->channels;
+            $Uploads->save();
+        } catch (\Throwable $th) {
+            return $this->exception($th);
+        }
+        $user = PluginUser::where(['id' => $request->uid])->find();
+        $user->headimg = $result->file_url;
+        $user->save();
+        return $this->code(ResponseCode::SUCCESS_EVENT_PUSH, '保存成功', [
+            'event' => ResponseEvent::UPDATE_USERINFO
+        ]);
+    }
+    public function outLogin(Request $request)
+    {
+        return $this->success();
+    }
+    /**
+     * 获取两步验证密钥
+     */
+    public function getTwofaSecret(Request $request)
+    {
+        try {
+            $ga = new TwofaAuthenticator();
+            $secret = $ga->createSecret();
+            $PluginUser = PluginUser::where(['id' => $request->uid])->find();
+
+            // 生成 otpauth URL
+            $appName = "XH";
+            $accountName = $PluginUser->nickname;
+            $qrCodeUrl = $ga->getQRCode($appName . ':' . $accountName, $secret, $appName);
+        } catch (\Throwable $th) {
+            return $this->exception($th);
+        }
+
+        return $this->resData([
+            'secret' => $secret,
+            'qrcode' => $qrCodeUrl
+        ]);
+    }
+
+    /**
+     * 验证两步验证密钥
+     */
+    public function verifyTwofaSecret(Request $request)
+    {
+        $code = $request->post('code');
+        $secret = $request->post('secret');
+        $totp_app = $request->post('totp_app');
+        $ga = new TwofaAuthenticator();
+
+        $isValid = $ga->verifyCode($secret, $code, 2); // 1 = 30 秒容差
+
+        if ($isValid) {
+            Db::startTrans();
+            try {
+                $PluginUser = PluginUser::where(['id' => $request->uid])->find();
+                $PluginUser->twofa_state = State::YES['value'];
+                $PluginUser->save();
+                $PluginUserTwofaSecret = new PluginUserTwofaSecret();
+                $PluginUserTwofaSecret->uid = $request->uid;
+                $PluginUserTwofaSecret->secret = $secret;
+                $PluginUserTwofaSecret->totp_app = $totp_app;
+                $PluginUserTwofaSecret->is_default = PluginUserTwofaSecret::where(['uid' => $request->uid])->count() == 0 ? 1 : 0;
+                $PluginUserTwofaSecret->save();
+                Db::commit();
+            } catch (\Throwable $th) {
+                Db::rollback();
+                return $this->exception($th);
+            }
+            return $this->success('验证成功');
+        } else {
+            return $this->fail('验证码错误');
+        }
+    }
+    /**
+     * 刷新账户两步验证时效
+     */
+    public function refreshTwofaSecret(Request $request)
+    {
+        $code = $request->post('code');
+        $totp_app = $request->post('totp_app');
+        $ga = new TwofaAuthenticator();
+        $PluginUserTwofaSecret = PluginUserTwofaSecret::where(['uid' => $request->uid, 'id' => $totp_app])->find();
+        if (!$PluginUserTwofaSecret) {
+            return $this->fail('两步验证密钥不存在');
+        }
+        $secret = $PluginUserTwofaSecret->secret;
+        $isValid = $ga->verifyCode($secret, $code, 2); // 1 = 30 秒容差
+
+        if ($isValid) {
+            $user = PluginUser::where(['id' => $request->uid])->find();
+            if (!$user) {
+                return $this->fail('用户不存在');
+            }
+            $info = PluginUser::getTokenInfo($user, true);
+            return $this->resData($info);
+        } else {
+            return $this->fail('验证码错误');
+        }
+    }
+    public function getTwofaList(Request $request)
+    {
+        $PluginUserTwofaSecret = PluginUserTwofaSecret::where(['uid' => $request->uid])->order('is_default desc,id desc')->select()->scene('external')->each(function ($item) {
+            $item->totp_app_text = TotpApp::get($item->totp_app);
+        });
+        return $this->resData($PluginUserTwofaSecret);
+    }
+    public function setDefaultTwofa(Request $request)
+    {
+        $id = $request->post('id');
+        $PluginUserTwofaSecret = PluginUserTwofaSecret::where(['uid' => $request->uid, 'id' => $id])->find();
+        if (!$PluginUserTwofaSecret) {
+            return $this->fail('两步验证密钥不存在');
+        }
+        Db::startTrans();
+        try {
+            PluginUserTwofaSecret::where(['uid' => $request->uid])->update(['is_default' => 0]);
+            $PluginUserTwofaSecret->is_default = 1;
+            $PluginUserTwofaSecret->save();
+            Db::commit();
+        } catch (\Throwable $th) {
+            Db::rollback();
+            return $this->exception($th);
+        }
+        return $this->success('设置成功');
+    }
+    public function deleteTwofa(Request $request)
+    {
+        $id = $request->post('id');
+        $PluginUserTwofaSecret = PluginUserTwofaSecret::where(['uid' => $request->uid, 'id' => $id])->find();
+        if (!$PluginUserTwofaSecret) {
+            return $this->fail('两步验证密钥不存在');
+        }
+        Db::startTrans();
+        try {
+            // 判断是否还有其它两步验证密钥
+            $PluginUserTwofaSecretOther = PluginUserTwofaSecret::where(['uid' => $request->uid])->where('id', '<>', $id)->order('id desc')->find();
+            if ($PluginUserTwofaSecretOther) {
+                if ($PluginUserTwofaSecret->is_default == 1) {
+                    $PluginUserTwofaSecretOther->is_default = 1;
+                    $PluginUserTwofaSecretOther->save();
+                }
+            } else {
+                $PluginUser = PluginUser::where(['id' => $request->uid])->find();
+                $PluginUser->twofa_state = State::NO['value'];
+                $PluginUser->save();
+            }
+            $PluginUserTwofaSecret->delete();
+            Db::commit();
+        } catch (\Throwable $th) {
+            Db::rollback();
+            return $this->exception($th);
+        }
+        return $this->success('删除成功');
+    }
+    /**
+     * 获取用户未使用的邀请码
+     * @author:1950781041@qq.com 
+     * @Date:2026-01-07
+     */
+    public function getUnusedInvitationCode(Request $request)
+    {
+        $PluginUserInvitationCode = PluginUserInvitationCode::where(['uid' => $request->uid])
+            ->with(['useUser'])
+            ->where('channels_uid', $request->channels_uid)
+            ->where('state', State::YES['value'])
+            ->select();
+        return $this->resData($PluginUserInvitationCode);
+    }
+    /**
+     * 用户绑定邀请码
+     * @author:1950781041@qq.com 
+     * @Date:2026-01-15
+     */
+    public function bindInvitationCode(Request $request)
+    {
+        $code = $request->post('code');
+        $PluginUserInvitationCode = PluginUserInvitationCode::where(['code' => $code])->find();
+        if (!$PluginUserInvitationCode) {
+            return $this->fail('邀请码不存在');
+        }
+        if ($PluginUserInvitationCode->uid == $request->uid) {
+            return $this->fail('不能邀请自己');
+        }
+        if (!empty($PluginUserInvitationCode->use_uid)) {
+            return $this->fail('邀请码已使用');
+        }
+        if ($PluginUserInvitationCode->status != 'unused') {
+            return $this->fail('邀请码已使用');
+        }
+        if ($PluginUserInvitationCode->state != State::YES['value']) {
+            return $this->fail('邀请码已失效');
+        }
+        $PluginUserInvitationCode->status = 'used';
+        $PluginUserInvitationCode->use_uid = $request->uid;
+        $PluginUserInvitationCode->use_time = date('Y-m-d H:i:s');
+        $PluginUserInvitationCode->save();
+        $PluginUser = PluginUser::where(['id' => $request->uid])->find();
+        $PluginUser->activation_time = date('Y-m-d H:i:s');
+        $PluginUser->puid = $PluginUserInvitationCode->uid;
+        $PluginUser->save();
+        return $this->success('绑定成功');
+    }
+    /**
+     * 用户绑定电话
+     * @author:1950781041@qq.com 
+     * @Date:2026-01-15
+     */
+    public function bindMobile(Request $request)
+    {
+        $mobile = $request->post('username');
+        $username = $request->post('username');
+        $vcode = $request->post('vcode');
+        $token = $request->post('token');
+        if (empty($username) || empty($vcode) || empty($token)) {
+            return $this->fail('参数错误');
+        }
+        Vcode::check($username, $vcode, VcodeScene::BIND_MOBILE['value'], $token);
+        $PluginUser = PluginUser::where(['mobile' => $mobile, 'channels_uid' => $request->channels_uid])->find();
+        if ($PluginUser) {
+            PluginUser::where(['id' => $request->uid])->update(['username' => '']);
+            $wechat = PluginUserWechat::where(['uid' => $request->uid])->find();
+            $wechat->uid = $PluginUser->id;
+            $wechat->save();
+            return $this->resData(PluginUser::getTokenInfo($PluginUser, true));
+        }
+        $PluginUser = PluginUser::where(['id' => $request->uid])->find();
+        if ($PluginUser->mobile) {
+            return $this->fail('电话已绑定');
+        }
+        $PluginUser->mobile = $mobile;
+        $PluginUser->save();
+        return $this->resData(PluginUser::getTokenInfo($PluginUser, true));
+    }
+
+    /**
+     * 修改密码
+     * @author:1950781041@qq.com 
+     * @Date:2026-01-17
+     */
+    public function setPassword(Request $request)
+    {
+        $password = $request->post('password');
+        $token = $request->post('token');
+        $vcode = $request->post('vcode');
+        $username = $request->post('username');
+        if (empty($password) || empty($token) || empty($vcode) || empty($username)) {
+            return $this->fail('参数错误');
+        }
+        Vcode::check($username, $vcode, VcodeScene::BIND_MOBILE['value'], $token);
+        $PluginUser = PluginUser::where(['id' => $request->uid])->find();
+        $PluginUser->password = $password;
+        $PluginUser->save();
+        return $this->success('修改成功');
+    }
+
+    public function wallet(Request $request)
+    {
+        $wallet = PluginFinanceWallet::where(['uid' => $request->uid])->find();
+        if (!$wallet) {
+            return $this->fail('钱包不存在');
+        }
+        return $this->resData($wallet);
+    }
+
+    /**
+     * 验证邀请码是否被使用
+     * @author:1950781041@qq.com 
+     * @Date:2026-01-26
+     */
+    public function checkInvitationCode(Request $request)
+    {
+        $code = $request->post('code');
+        $PluginUserInvitationCode = PluginUserInvitationCode::where(['code' => $code])->find();
+        if (!$PluginUserInvitationCode) {
+            return $this->fail('邀请码不存在');
+        }
+        if ($PluginUserInvitationCode->uid == $request->uid) {
+            return $this->fail('不能邀请自己');
+        }
+        if (!empty($PluginUserInvitationCode->use_uid)) {
+            return $this->fail('邀请码已使用');
+        }
+        if ($PluginUserInvitationCode->status != 'unused') {
+            return $this->fail('邀请码已使用');
+        }
+        return $this->success();
+    }
+}