bindbox-game/internal/api/user/address_share_submit_public.go
Zuncle fac825245b fix: 修复赠送流程地址归属错误,强制登录后才能填写收货地址
接收者未登录时提交地址会错误保存到赠送者名下,现改为:
- API层:登录态从可选改为必选,未登录返回401
- Service层:始终用提交者ID作为地址归属人
2026-03-15 13:23:09 +08:00

85 lines
2.9 KiB
Go
Executable File

package app
import (
"net/http"
"strings"
"bindbox-game/configs"
"bindbox-game/internal/code"
"bindbox-game/internal/pkg/core"
"bindbox-game/internal/pkg/jwtoken"
"go.uber.org/zap"
)
type addressShareSubmitRequest struct {
ShareToken string `json:"share_token"`
Name string `json:"name"`
Mobile string `json:"mobile"`
Province string `json:"province"`
City string `json:"city"`
District string `json:"district"`
Address string `json:"address"`
}
type addressShareSubmitResponse struct {
AddressID int64 `json:"address_id"`
}
// SubmitAddressShare 提交共享地址(公域)
// @Summary 提交共享地址
// @Description 被邀请者使用分享令牌提交收件信息;服务端校验令牌有效并创建待发货记录(极简方案)
// @Tags APP端.用户
// @Accept json
// @Produce json
// @Param RequestBody body addressShareSubmitRequest true "请求参数:令牌与地址信息"
// @Success 200 {object} addressShareSubmitResponse
// @Failure 400 {object} code.Failure "令牌无效/已处理/资产不可用"
// @Router /api/app/address-share/submit [post]
func (h *handler) SubmitAddressShare() core.HandlerFunc {
return func(ctx core.Context) {
req := new(addressShareSubmitRequest)
rsp := new(addressShareSubmitResponse)
if err := ctx.ShouldBindJSON(req); err != nil || req.ShareToken == "" || req.Name == "" || req.Mobile == "" || req.Province == "" || req.City == "" || req.District == "" || req.Address == "" {
ctx.AbortWithError(core.Error(http.StatusBadRequest, code.ParamBindError, "参数错误"))
return
}
// 登录态验证 - 必须登录才能提交(确保地址归属正确)
var submitUserID *int64
authHeader := ctx.GetHeader("Authorization")
if authHeader == "" {
ctx.AbortWithError(core.Error(http.StatusUnauthorized, 10027, "请先登录后再提交收货地址"))
return
}
claims, claimsErr := jwtoken.New(configs.Get().JWT.PatientSecret).Parse(authHeader)
if claimsErr != nil {
ctx.AbortWithError(core.Error(http.StatusUnauthorized, 10027, "登录已过期,请重新登录"))
return
}
uid := int64(claims.SessionUserInfo.Id)
submitUserID = &uid
ip := ctx.Request().RemoteAddr
// 统一使用 ctx.RequestContext() 包含 context 内容
addrID, err := h.user.SubmitAddressShare(ctx.RequestContext(), req.ShareToken, req.Name, req.Mobile, req.Province, req.City, req.District, req.Address, submitUserID, &ip)
if err != nil {
// Log the error for debugging
h.logger.Error("SubmitAddressShare API Error", zap.Error(err), zap.String("token_masked", req.ShareToken[:10]+"..."))
// 处理业务错误,映射到具体代码
msg := err.Error()
errorCode := 10024
if strings.Contains(msg, "invalid_or_expired_token") {
errorCode = 10025
} else if strings.Contains(msg, "already_processed") {
errorCode = 10026
}
ctx.AbortWithError(core.Error(http.StatusBadRequest, errorCode, msg))
return
}
rsp.AddressID = addrID
ctx.Payload(rsp)
}
}