Sub2API v1.0 - AI API 网关（二开初始版本，基于上游 Wei-Shaw/sub2api）

backend/internal/repository/tencent_captcha_service.go

@@ -0,0 +1,77 @@
+package repository
+
+import (
+	"context"
+	"fmt"
+
+	"github.com/Wei-Shaw/sub2api/internal/service"
+	captcha "github.com/tencentcloud/tencentcloud-sdk-go/tencentcloud/captcha/v20190722"
+	"github.com/tencentcloud/tencentcloud-sdk-go/tencentcloud/common"
+	"github.com/tencentcloud/tencentcloud-sdk-go/tencentcloud/common/profile"
+)
+
+type tencentCaptchaAPI interface {
+	DescribeCaptchaResultWithContext(context.Context, *captcha.DescribeCaptchaResultRequest) (*captcha.DescribeCaptchaResultResponse, error)
+}
+
+type tencentCaptchaClientFactory func(secretID, secretKey, endpoint string) (tencentCaptchaAPI, error)
+
+type tencentCaptchaVerifier struct {
+	newClient tencentCaptchaClientFactory
+}
+
+func NewTencentCaptchaVerifier() service.TencentCaptchaVerifier {
+	return &tencentCaptchaVerifier{newClient: newTencentCaptchaSDKClient}
+}
+
+// newTencentCaptchaSDKClient 接入点由调用方按站点下发（中国站 / 国际站）。
+// service 层的 tencentCaptchaEndpoint 已保证 endpoint 非空；即便为空，
+// 腾讯 SDK 也会回落到服务默认域 captcha.tencentcloudapi.com（即中国站），不会失败。
+func newTencentCaptchaSDKClient(secretID, secretKey, endpoint string) (tencentCaptchaAPI, error) {
+	clientProfile := profile.NewClientProfile()
+	clientProfile.HttpProfile.Endpoint = endpoint
+	clientProfile.HttpProfile.ReqMethod = "POST"
+	clientProfile.HttpProfile.ReqTimeout = 5
+	return captcha.NewClient(common.NewCredential(secretID, secretKey), "", clientProfile)
+}
+
+func (v *tencentCaptchaVerifier) VerifyTicket(ctx context.Context, credentials service.TencentCaptchaCredentials, proof service.TencentCaptchaProof, remoteIP string) (*service.TencentCaptchaVerifyResponse, error) {
+	client, err := v.newClient(credentials.CloudSecretID, credentials.CloudSecretKey, credentials.Endpoint)
+	if err != nil {
+		return nil, fmt.Errorf("create tencent captcha client: %w", err)
+	}
+	request := captcha.NewDescribeCaptchaResultRequest()
+	request.CaptchaType = common.Uint64Ptr(9)
+	request.Ticket = common.StringPtr(proof.Ticket)
+	request.UserIp = common.StringPtr(remoteIP)
+	request.Randstr = common.StringPtr(proof.Randstr)
+	request.CaptchaAppId = common.Uint64Ptr(credentials.AppID)
+	request.AppSecretKey = common.StringPtr(credentials.AppSecretKey)
+
+	response, err := client.DescribeCaptchaResultWithContext(ctx, request)
+	if err != nil {
+		return nil, fmt.Errorf("describe captcha result: %w", err)
+	}
+	if response == nil || response.Response == nil {
+		return nil, fmt.Errorf("describe captcha result: empty response")
+	}
+	return &service.TencentCaptchaVerifyResponse{
+		CaptchaCode: valueOrZero(response.Response.CaptchaCode),
+		CaptchaMsg:  valueOrEmpty(response.Response.CaptchaMsg),
+		RequestID:   valueOrEmpty(response.Response.RequestId),
+	}, nil
+}
+
+func valueOrZero(value *int64) int64 {
+	if value == nil {
+		return 0
+	}
+	return *value
+}
+
+func valueOrEmpty(value *string) string {
+	if value == nil {
+		return ""
+	}
+	return *value
+}