1.对接平台接口新增api-key参数

server/config/api.php

@@ -11,6 +11,8 @@ return [
     'session_username_prefix' => env('API_SESSION_USERNAME_PREFIX', 'api:user:session:'),
     // 登录会话过期时间（秒），默认 7 天
     'session_expire' => (int) env('API_SESSION_EXPIRE', 604800),
+    // 平台对接请求头 api-key（/api/v1/* 必填，与客户端请求头 api-key 一致）
+    'platform_api_key' => env('API_KEY', ''),
     // auth-token 签名密钥（与客户端约定，用于 /api/authToken 的 signature 校验，必填）
     'auth_token_secret' => env('API_AUTH_TOKEN_SECRET', ''),
     // auth-token 时间戳允许误差（秒），防重放，默认 300 秒

server/config/route.php

@@ -14,6 +14,7 @@
 
 use Webman\Route;
 use app\api\middleware\ApiAccessLogMiddleware;
+use app\api\middleware\ApiKeyMiddleware;
 use app\api\middleware\AuthTokenMiddleware;
 use app\api\middleware\TokenMiddleware;
 
@@ -22,9 +23,10 @@ Route::group('/api/v1', function () {
     Route::any('/authToken', [app\api\controller\v1\AuthTokenController::class, 'index']);
 })->middleware([
     ApiAccessLogMiddleware::class,
+    ApiKeyMiddleware::class,
 ]);
 
-// 平台 v1 接口：需在请求头携带 auth-token
+// 平台 v1 接口：需在请求头携带 api-key、auth-token
 Route::group('/api/v1', function () {
     Route::any('/getGameList', [app\api\controller\v1\GameController::class, 'getGameList']);
     Route::any('/getGameHall', [app\api\controller\v1\GameController::class, 'getGameHall']);
@@ -36,6 +38,7 @@ Route::group('/api/v1', function () {
     Route::any('/setPlayerWallet', [app\api\controller\v1\GameController::class, 'setPlayerWallet']);
 })->middleware([
     ApiAccessLogMiddleware::class,
+    ApiKeyMiddleware::class,
     AuthTokenMiddleware::class,
 ]);