71 lines
2.3 KiB
TypeScript
71 lines
2.3 KiB
TypeScript
|
// SMS Service - Aliyun SMS integration
|
|||
|
|
// Falls back to dev mode (console log) when SMS_ACCESS_KEY is not configured
|
|||
|
|
|
|||
|
|
const DEV_CODE = '888888'; // Dev fallback code
|
|||
|
|
|
|||
|
|
// In-memory verification code store (use Redis in production)
|
|||
|
|
const codeStore = new Map<string, { code: string; expiresAt: number }>();
|
|||
|
|
|
|||
|
|
export async function sendVerificationCode(phone: string): Promise<{ success: boolean; message: string }> {
|
|||
|
|
// Validate phone number format
|
|||
|
|
if (!/^1\d{10}$/.test(phone)) {
|
|||
|
|
return { success: false, message: '手机号格式不正确' };
|
|||
|
|
}
|
|||
|
|
|
|||
|
|
// Check rate limit (1 code per 60 seconds per phone)
|
|||
|
|
const existing = codeStore.get(phone);
|
|||
|
|
if (existing && (existing.expiresAt - Date.now()) > 4 * 60 * 1000) {
|
|||
|
|
// Code was stored less than 60 seconds ago (5min total - 4min remaining = 1min elapsed)
|
|||
|
|
return { success: false, message: '验证码发送过于频繁，请稍后再试' };
|
|||
|
|
}
|
|||
|
|
|
|||
|
|
const smsAccessKey = process.env.SMS_ACCESS_KEY;
|
|||
|
|
|
|||
|
|
if (smsAccessKey) {
|
|||
|
|
// Production: Send via Aliyun SMS
|
|||
|
|
// TODO: Integrate with Aliyun SMS SDK when SMS_ACCESS_KEY is configured
|
|||
|
|
const code = generateCode();
|
|||
|
|
storeCode(phone, code);
|
|||
|
|
console.log(`[SMS] Sent code to ${phone.slice(0, 3)}****${phone.slice(-4)}`);
|
|||
|
|
return { success: true, message: '验证码已发送' };
|
|||
|
|
} else {
|
|||
|
|
// Dev mode: Use fixed code
|
|||
|
|
storeCode(phone, DEV_CODE);
|
|||
|
|
console.log(`[SMS-DEV] Dev code for ${phone}: ${DEV_CODE}`);
|
|||
|
|
return { success: true, message: `验证码已发送（开发模式：${DEV_CODE}）` };
|
|||
|
|
}
|
|||
|
|
}
|
|||
|
|
|
|||
|
|
export function verifyCode(phone: string, code: string): boolean {
|
|||
|
|
const stored = codeStore.get(phone);
|
|||
|
|
if (!stored) return false;
|
|||
|
|
if (Date.now() > stored.expiresAt) {
|
|||
|
|
codeStore.delete(phone);
|
|||
|
|
return false;
|
|||
|
|
}
|
|||
|
|
if (stored.code !== code) return false;
|
|||
|
|
codeStore.delete(phone); // One-time use
|
|||
|
|
return true;
|
|||
|
|
}
|
|||
|
|
|
|||
|
|
function generateCode(): string {
|
|||
|
|
return Math.floor(100000 + Math.random() * 900000).toString();
|
|||
|
|
}
|
|||
|
|
|
|||
|
|
function storeCode(phone: string, code: string): void {
|
|||
|
|
codeStore.set(phone, {
|
|||
|
|
code,
|
|||
|
|
expiresAt: Date.now() + 5 * 60 * 1000, // 5 minutes
|
|||
|
|
});
|
|||
|
|
}
|
|||
|
|
|
|||
|
|
// Cleanup expired codes periodically
|
|||
|
|
setInterval(() => {
|
|||
|
|
const now = Date.now();
|
|||
|
|
for (const [key, value] of codeStore.entries()) {
|
|||
|
|
if (now > value.expiresAt) {
|
|||
|
|
codeStore.delete(key);
|
|||
|
|
}
|
|||
|
|
}
|
|||
|
|
}, 60000);
|