feat: 增强玩家管理功能,集成接入站点权限控制
在多个玩家相关控制器中引入 AdminSiteScope,确保管理员在执行操作前具备相应的接入站点权限。更新 Player 相关请求以支持 site_code 参数,增强权限验证逻辑,确保系统安全性与灵活性。同时,新增 AdminUser 模型方法以获取可访问的站点 ID 列表,优化权限管理。
This commit is contained in:
@@ -4,58 +4,156 @@ namespace App\Services\Wallet;
|
||||
|
||||
use App\Models\Player;
|
||||
use Illuminate\Support\Facades\Http;
|
||||
use App\Services\Integration\PartnerSiteConfigResolver;
|
||||
|
||||
/**
|
||||
* 查询主站钱包余额(供玩家端余额接口填充 main_balance)。
|
||||
*/
|
||||
final class HttpMainSiteWalletBalanceClient
|
||||
{
|
||||
public function __construct(
|
||||
private readonly PartnerSiteConfigResolver $partnerSiteConfigResolver,
|
||||
) {}
|
||||
|
||||
public function fetch(Player $player, string $currencyCode): ?int
|
||||
{
|
||||
$base = rtrim((string) config('lottery.main_site.wallet_api_url'), '/');
|
||||
if ($base === '') {
|
||||
return null;
|
||||
$probe = $this->probe($player, $currencyCode);
|
||||
|
||||
return $probe->success ? $probe->mainBalanceMinor : null;
|
||||
}
|
||||
|
||||
public function probe(Player $player, string $currencyCode): MainSiteWalletBalanceProbeResult
|
||||
{
|
||||
$config = $this->partnerSiteConfigResolver->resolveForPlayer($player);
|
||||
$currencyCode = trim($currencyCode) !== '' ? trim($currencyCode) : 'NPR';
|
||||
|
||||
if (! $config->enabled) {
|
||||
return new MainSiteWalletBalanceProbeResult(
|
||||
success: false,
|
||||
mainBalanceMinor: null,
|
||||
currencyCode: $currencyCode,
|
||||
requestUrl: '',
|
||||
httpStatus: null,
|
||||
message: '接入站点已停用或未配置',
|
||||
responseBody: null,
|
||||
);
|
||||
}
|
||||
|
||||
$path = (string) config('lottery.main_site.wallet_balance_path', '/wallet/balance');
|
||||
if (! $config->hasWalletApi()) {
|
||||
return new MainSiteWalletBalanceProbeResult(
|
||||
success: false,
|
||||
mainBalanceMinor: null,
|
||||
currencyCode: $currencyCode,
|
||||
requestUrl: '',
|
||||
httpStatus: null,
|
||||
message: '未配置主站钱包 API URL',
|
||||
responseBody: null,
|
||||
);
|
||||
}
|
||||
|
||||
$base = rtrim((string) $config->walletApiUrl, '/');
|
||||
$path = $config->walletBalancePath;
|
||||
$url = $base.'/'.ltrim($path, '/');
|
||||
$timeout = (int) config('lottery.main_site.wallet_timeout', 10);
|
||||
$apiKey = config('lottery.main_site.wallet_api_key');
|
||||
$timeout = $config->walletTimeoutSeconds;
|
||||
$apiKey = $config->walletApiKey;
|
||||
|
||||
$headers = ['Accept' => 'application/json'];
|
||||
if (is_string($apiKey) && $apiKey !== '') {
|
||||
$headers['Authorization'] = 'Bearer '.$apiKey;
|
||||
}
|
||||
|
||||
$query = [
|
||||
'site_code' => $player->site_code,
|
||||
'site_player_id' => $player->site_player_id,
|
||||
'currency_code' => $currencyCode,
|
||||
];
|
||||
|
||||
try {
|
||||
$response = Http::withHeaders($headers)
|
||||
->timeout($timeout)
|
||||
->acceptJson()
|
||||
->get($url, [
|
||||
'site_code' => $player->site_code,
|
||||
'site_player_id' => $player->site_player_id,
|
||||
'currency_code' => $currencyCode,
|
||||
]);
|
||||
} catch (\Throwable) {
|
||||
return null;
|
||||
->get($url, $query);
|
||||
} catch (\Throwable $e) {
|
||||
return new MainSiteWalletBalanceProbeResult(
|
||||
success: false,
|
||||
mainBalanceMinor: null,
|
||||
currencyCode: $currencyCode,
|
||||
requestUrl: $url.'?'.http_build_query($query),
|
||||
httpStatus: null,
|
||||
message: '请求失败: '.$e->getMessage(),
|
||||
responseBody: null,
|
||||
);
|
||||
}
|
||||
|
||||
$httpStatus = $response->status();
|
||||
$payload = $response->json();
|
||||
$preview = is_array($payload) ? self::truncateResponsePreview($payload) : null;
|
||||
|
||||
if (! $response->successful()) {
|
||||
return null;
|
||||
$message = is_array($payload) && is_string($payload['message'] ?? null)
|
||||
? (string) $payload['message']
|
||||
: 'HTTP '.$httpStatus;
|
||||
|
||||
return new MainSiteWalletBalanceProbeResult(
|
||||
success: false,
|
||||
mainBalanceMinor: null,
|
||||
currencyCode: $currencyCode,
|
||||
requestUrl: $url.'?'.http_build_query($query),
|
||||
httpStatus: $httpStatus,
|
||||
message: $message,
|
||||
responseBody: $preview,
|
||||
);
|
||||
}
|
||||
|
||||
$payload = $response->json();
|
||||
if (! is_array($payload)) {
|
||||
return null;
|
||||
return new MainSiteWalletBalanceProbeResult(
|
||||
success: false,
|
||||
mainBalanceMinor: null,
|
||||
currencyCode: $currencyCode,
|
||||
requestUrl: $url.'?'.http_build_query($query),
|
||||
httpStatus: $httpStatus,
|
||||
message: '响应不是 JSON 对象',
|
||||
responseBody: null,
|
||||
);
|
||||
}
|
||||
|
||||
$raw = data_get($payload, 'data.main_balance')
|
||||
?? data_get($payload, 'main_balance');
|
||||
|
||||
if (! is_numeric($raw)) {
|
||||
return null;
|
||||
return new MainSiteWalletBalanceProbeResult(
|
||||
success: false,
|
||||
mainBalanceMinor: null,
|
||||
currencyCode: $currencyCode,
|
||||
requestUrl: $url.'?'.http_build_query($query),
|
||||
httpStatus: $httpStatus,
|
||||
message: '响应缺少 main_balance 数值',
|
||||
responseBody: $preview,
|
||||
);
|
||||
}
|
||||
|
||||
return max(0, (int) $raw);
|
||||
return new MainSiteWalletBalanceProbeResult(
|
||||
success: true,
|
||||
mainBalanceMinor: max(0, (int) $raw),
|
||||
currencyCode: (string) (data_get($payload, 'data.currency_code') ?? $currencyCode),
|
||||
requestUrl: $url.'?'.http_build_query($query),
|
||||
httpStatus: $httpStatus,
|
||||
message: null,
|
||||
responseBody: $preview,
|
||||
);
|
||||
}
|
||||
|
||||
/**
|
||||
* @param array<string, mixed> $payload
|
||||
* @return array<string, mixed>
|
||||
*/
|
||||
private static function truncateResponsePreview(array $payload): array
|
||||
{
|
||||
$json = json_encode($payload, JSON_UNESCAPED_UNICODE);
|
||||
if (is_string($json) && strlen($json) > 512) {
|
||||
return ['_truncated' => true, 'preview' => substr($json, 0, 512)];
|
||||
}
|
||||
|
||||
return $payload;
|
||||
}
|
||||
}
|
||||
|
||||
Reference in New Issue
Block a user