feat(api): 添加小程序一键登录功能

- 新增 mpLogin 接口支持小程序一键登录
- 集成微信授权码换取 session_key 流程
- 实现手机号解密和验证功能
- 添加基于手机号的用户注册和登录逻辑
- 支持分享关系绑定和新用户标识返回
- 集成 WXBizDataCrypt 解密库处理加密数据

app/controller/api/user/UserMp.php

@@ -14,6 +14,7 @@ use app\common\dao\user\UnionUsersDao;
 use app\common\repositories\article\AgreementRepository;
 use app\common\repositories\merchant\order\OrderMerchantRepository;
 use app\common\repositories\user\UnionUsersRepository;
+use applet\WXBizDataCrypt;
 use crmeb\basic\BaseController;
 use app\common\repositories\user\UserRepository;
 use crmeb\services\MiniProgramService;
@@ -67,6 +68,85 @@ class UserMp extends BaseController
         return app('json')->success($get);
     }
 
+    /**
+     * 小程序一键登录（合并 getUserUnionid + applet_phone）
+     * 接收 code、encryptedData、iv，内部调用微信接口获取 session_key，解密手机号后注册/登录
+     * @param UserRepository $repository
+     * @return \think\response\Json
+     */
+    public function mpLogin(UserRepository $repository)
+    {
+        try {
+            $data = $this->request->params(['code', 'encryptedData', 'iv', 'share_id', 'source']);
+            if (!$data['code'] || $data['code'] == '' || $data['code'] == 'undefined') {
+                return app('json')->fail('code参数缺失');
+            }
+            if (!$data['encryptedData'] || $data['encryptedData'] == '') {
+                return app('json')->fail('encryptedData参数缺失');
+            }
+            if (!$data['iv'] || $data['iv'] == '') {
+                return app('json')->fail('iv参数缺失');
+            }
+
+            $appid = 'wx9082e5ac2fdb513f';
+            $secret = 'e334c41e1c4aa962f65d1882092fbda6';
+
+            // 1. 调用微信 jscode2session 接口获取 session_key
+            $url = "https://api.weixin.qq.com/sns/jscode2session?appid=" . $appid . "&secret=" . $secret . "&js_code=" . $data['code'] . "&grant_type=authorization_code";
+            $wxResult = curlGet($url);
+            if (!$wxResult || !isset($wxResult['session_key'])) {
+                Log::error('mpLogin jscode2session失败: ' . json_encode($wxResult));
+                return app('json')->fail('微信登录凭证校验失败');
+            }
+            $sessionKey = $wxResult['session_key'];
+
+            // 2. 解密手机号
+            $sessionKey = str_replace(' ', '+', $sessionKey);
+            $encryptedData = str_replace(' ', '+', $data['encryptedData']);
+            $iv = str_replace(' ', '+', $data['iv']);
+
+            $pc = new WXBizDataCrypt($appid, $sessionKey);
+            $errCode = $pc->decryptData($encryptedData, $iv, $decryptData);
+            if ($errCode != 0) {
+                return app('json')->fail('手机号解密失败');
+            }
+            $decryptData = json_decode($decryptData, true);
+            $phone = $decryptData['purePhoneNumber'] ?? '';
+            if ($phone == '') {
+                return app('json')->fail('未获取到手机号');
+            }
+            if (!preg_match("/^1[3456789]{1}\d{9}$/", $phone) && !preg_match("/^[569]\d{7}$/", $phone)) {
+                return app('json')->fail('手机号格式错误');
+            }
+
+            // 3. 注册或登录
+            $userRes = Db::name('user')->where('account', $phone)->find();
+            $isnew = false;
+            if (!$userRes) {
+                $spreadUid = 0;
+                if (!empty($data['share_id'])) {
+                    $spreadUid = Db::name('product_share')->where('id', $data['share_id'])->value('uid');
+                    if (!intval($spreadUid)) {
+                        $spreadUid = 0;
+                    }
+                }
+                $repository->registr($phone, 123456, 'APP', '', '', '', $spreadUid);
+                $isnew = true;
+            }
+
+            $user = $repository->accountByUser($phone);
+            $user = $repository->mainUser($user);
+            $tokenInfo = $repository->createToken($user);
+            $repository->loginAfter($user);
+
+            return app('json')->success(array_merge($repository->returnToken($user, $tokenInfo), ['is_new' => $isnew ? 1 : 0]));
+
+        } catch (\Exception $e) {
+            Db::name('log')->insert(['data' => 'mpLogin出错：' . $e->getFile() . '：' . $e->getLine() . '【' . $e->getMessage() . '】']);
+            return app('json')->fail('登录失败');
+        }
+    }
+
     public function getPhoneToBind(){
 
         $data = $this->request->params([

route/api.php

@@ -1199,6 +1199,8 @@ Route::group('api/', function () {
     Route::post('userMp/getUserUnionid','api.user.UserMp/getUserUnionid');
     //小程序获取用户手机号码并绑定
     Route::post('userMp/getPhoneToBind','api.user.UserMp/getPhoneToBind');
+    //小程序一键登录（合并 getUserUnionid + applet_phone）
+    Route::post('userMp/mpLogin','api.user.UserMp/mpLogin');
 
     //小程序支付
     Route::post('mpPay/jsapiPay','api.store.order.MpOrder/jsapiPay');