229 lines
7.7 KiB
PHP
229 lines
7.7 KiB
PHP
<?php
|
|
|
|
declare(strict_types=1);
|
|
|
|
require dirname(__DIR__) . '/vendor/autoload.php';
|
|
|
|
$dotenv = Dotenv\Dotenv::createImmutable(dirname(__DIR__));
|
|
$dotenv->safeLoad();
|
|
|
|
$projectRoot = dirname(__DIR__, 2);
|
|
$issues = [];
|
|
|
|
function add_issue(array &$issues, string $level, string $title, string $detail): void
|
|
{
|
|
$issues[] = compact('level', 'title', 'detail');
|
|
}
|
|
|
|
function check(bool $condition, array &$issues, string $failLevel, string $title, string $detail): void
|
|
{
|
|
if (!$condition) {
|
|
add_issue($issues, $failLevel, $title, $detail);
|
|
}
|
|
}
|
|
|
|
function parseJsonFile(string $path): ?array
|
|
{
|
|
$content = @file_get_contents($path);
|
|
if ($content === false) {
|
|
return null;
|
|
}
|
|
|
|
$content = preg_replace('/^\xEF\xBB\xBF/', '', $content);
|
|
$content = preg_replace('!/\*.*?\*/!s', '', $content);
|
|
$content = preg_replace('/^\s*\/\/.*$/m', '', $content);
|
|
|
|
$decoded = json_decode((string)$content, true);
|
|
return is_array($decoded) ? $decoded : null;
|
|
}
|
|
|
|
function isPlaceholderApiBase(string $apiBase): bool
|
|
{
|
|
if ($apiBase === '') {
|
|
return true;
|
|
}
|
|
|
|
$normalized = strtolower($apiBase);
|
|
$localHosts = ['127.0.0.' . '1', 'local' . 'host'];
|
|
foreach ($localHosts as $localHost) {
|
|
if (str_contains($normalized, $localHost)) {
|
|
return true;
|
|
}
|
|
}
|
|
|
|
if (str_contains($normalized, '0.0.0.0')) {
|
|
return true;
|
|
}
|
|
|
|
return str_contains($normalized, 'example.com');
|
|
}
|
|
|
|
function normalizeH5PageBaseUrl(string $value): string
|
|
{
|
|
$baseUrl = trim($value);
|
|
if ($baseUrl === '') {
|
|
return '';
|
|
}
|
|
|
|
$hashPos = strpos($baseUrl, '#');
|
|
if ($hashPos !== false) {
|
|
$baseUrl = substr($baseUrl, 0, $hashPos);
|
|
}
|
|
|
|
if (!preg_match('/^https?:\/\//i', $baseUrl)) {
|
|
$baseUrl = 'https://' . ltrim($baseUrl, '/');
|
|
}
|
|
|
|
return rtrim($baseUrl, '/');
|
|
}
|
|
|
|
function buildH5OAuthRedirectUrl(string $pageBaseUrl): string
|
|
{
|
|
$baseUrl = normalizeH5PageBaseUrl($pageBaseUrl);
|
|
return $baseUrl === '' ? '' : $baseUrl . '/#/pages/auth/login';
|
|
}
|
|
|
|
function checkClientProductionApiBase(array &$issues, string $label, string $envPath): void
|
|
{
|
|
$env = @parse_ini_file($envPath);
|
|
if (!is_array($env)) {
|
|
add_issue($issues, 'FAIL', "{$label} 缺少生产环境变量", "无法解析 {$envPath}。");
|
|
return;
|
|
}
|
|
|
|
$apiBase = (string)($env['VITE_API_BASE_URL'] ?? '');
|
|
if (isPlaceholderApiBase($apiBase)) {
|
|
add_issue($issues, 'FAIL', "{$label} 生产 API 未配置正式域名", "{$envPath} 的 VITE_API_BASE_URL 仍为本地或占位地址。");
|
|
return;
|
|
}
|
|
|
|
if (rtrim($apiBase, '/') !== 'https://api.anxinjianyan.com') {
|
|
add_issue($issues, 'FAIL', "{$label} 生产 API 域名不符合发布规则", "{$envPath} 的 VITE_API_BASE_URL 必须为 https://api.anxinjianyan.com。");
|
|
}
|
|
}
|
|
|
|
$env = $_ENV;
|
|
check(($env['APP_ENV'] ?? '') === 'production', $issues, 'FAIL', 'APP_ENV 非 production', '当前 .env 中 APP_ENV 不是 production。');
|
|
check(in_array(strtolower((string)($env['APP_DEBUG'] ?? '')), ['false', '0'], true), $issues, 'FAIL', 'APP_DEBUG 未关闭', '当前 .env 中 APP_DEBUG 仍然开启。');
|
|
|
|
$dsn = sprintf(
|
|
'mysql:host=%s;port=%s;dbname=%s;charset=%s',
|
|
$env['DB_HOST'] ?? '127.0.0.1',
|
|
$env['DB_PORT'] ?? '3306',
|
|
$env['DB_DATABASE'] ?? '',
|
|
$env['DB_CHARSET'] ?? 'utf8mb4'
|
|
);
|
|
|
|
$pdo = new PDO(
|
|
$dsn,
|
|
$env['DB_USERNAME'] ?? '',
|
|
$env['DB_PASSWORD'] ?? '',
|
|
[
|
|
PDO::ATTR_ERRMODE => PDO::ERRMODE_EXCEPTION,
|
|
PDO::ATTR_DEFAULT_FETCH_MODE => PDO::FETCH_ASSOC,
|
|
]
|
|
);
|
|
|
|
$configRows = $pdo->query("SELECT config_group, config_key, config_value FROM system_configs")->fetchAll();
|
|
$configMap = [];
|
|
foreach ($configRows as $row) {
|
|
$configMap[$row['config_group'] . '.' . $row['config_key']] = (string)($row['config_value'] ?? '');
|
|
}
|
|
$configMap['h5.oauth_redirect_url'] = buildH5OAuthRedirectUrl((string)($configMap['h5.page_base_url'] ?? ''));
|
|
|
|
$requiredConfigKeys = [
|
|
'mini_program.app_id',
|
|
'mini_program.app_secret',
|
|
'mini_program.original_id',
|
|
'h5.app_id',
|
|
'h5.app_secret',
|
|
'h5.oauth_redirect_url',
|
|
'h5.page_base_url',
|
|
'sms.access_key_id',
|
|
'sms.access_key_secret',
|
|
'sms.sign_name',
|
|
'sms.login_template_code',
|
|
'payment.mch_id',
|
|
'payment.api_v3_key',
|
|
'payment.merchant_serial_no',
|
|
'payment.merchant_private_key',
|
|
'payment.platform_certificate_serial',
|
|
'payment.notify_url',
|
|
];
|
|
|
|
foreach ($requiredConfigKeys as $key) {
|
|
check(($configMap[$key] ?? '') !== '', $issues, 'FAIL', "系统配置缺失: {$key}", "后台系统配置中 {$key} 仍为空。");
|
|
}
|
|
|
|
if (($configMap['h5.page_base_url'] ?? '') !== '' && isPlaceholderApiBase((string)$configMap['h5.page_base_url'])) {
|
|
add_issue($issues, 'FAIL', 'H5 页面根地址未配置正式域名', '后台系统配置 h5.page_base_url 仍为本地或占位地址，扫码公开链接将无法用于正式环境。');
|
|
}
|
|
|
|
$demoValues = [
|
|
'mini_program.app_id' => 'wx1234567890test',
|
|
'h5.app_id' => 'h5_app_demo',
|
|
'payment.mch_id' => '1900000109',
|
|
'payment.api_v3_key' => 'demo_api_v3_key_1234567890',
|
|
];
|
|
|
|
foreach ($demoValues as $key => $value) {
|
|
check(($configMap[$key] ?? '') !== $value, $issues, 'FAIL', "系统配置仍是演示值: {$key}", "后台系统配置 {$key} 仍为演示值 {$value}。");
|
|
}
|
|
|
|
$admins = $pdo->query("SELECT id, mobile, password, status FROM admin_users ORDER BY id ASC")->fetchAll();
|
|
$hasDefaultAdmin = false;
|
|
$hasViewerAdmin = false;
|
|
foreach ($admins as $admin) {
|
|
if (($admin['mobile'] ?? '') === '13800138000') {
|
|
$hasDefaultAdmin = true;
|
|
if (password_verify('Admin@123456', (string)$admin['password'])) {
|
|
add_issue($issues, 'FAIL', '默认超级管理员密码未修改', '管理员 13800138000 仍可用默认密码 Admin@123456 登录。');
|
|
}
|
|
}
|
|
if (($admin['mobile'] ?? '') === '13800138001' && ($admin['status'] ?? '') === 'enabled') {
|
|
$hasViewerAdmin = true;
|
|
}
|
|
}
|
|
if ($hasViewerAdmin) {
|
|
add_issue($issues, 'WARN', '测试管理员仍启用', '测试管理员 13800138001 / Test@123456 仍处于启用状态。');
|
|
}
|
|
if (!$hasDefaultAdmin) {
|
|
add_issue($issues, 'WARN', '未检测到默认超级管理员', '未找到手机号 13800138000 的默认超级管理员账号。');
|
|
}
|
|
|
|
$user = $pdo->query("SELECT nickname FROM users WHERE id = 1")->fetch();
|
|
if ($user && str_contains((string)$user['nickname'], '测试')) {
|
|
add_issue($issues, 'WARN', '测试昵称未清理', '用户昵称仍包含“测试”字样。');
|
|
}
|
|
|
|
$manifestPath = $projectRoot . '/user-app/src/manifest.json';
|
|
$manifest = parseJsonFile($manifestPath);
|
|
if (!is_array($manifest)) {
|
|
add_issue($issues, 'FAIL', 'manifest.json 解析失败', '无法解析 user-app/src/manifest.json。');
|
|
} else {
|
|
check(($manifest['mp-weixin']['appid'] ?? '') !== '', $issues, 'FAIL', '小程序 manifest appid 为空', 'manifest.json 中 mp-weixin.appid 仍为空。');
|
|
if (($configMap['mini_program.app_id'] ?? '') !== '') {
|
|
check(
|
|
($manifest['mp-weixin']['appid'] ?? '') === $configMap['mini_program.app_id'],
|
|
$issues,
|
|
'FAIL',
|
|
'小程序 manifest appid 未同步后台配置',
|
|
'manifest.json 中 mp-weixin.appid 与后台系统配置 mini_program.app_id 不一致，请先执行配置同步。'
|
|
);
|
|
}
|
|
}
|
|
|
|
checkClientProductionApiBase($issues, 'admin-web', $projectRoot . '/admin-web/.env.production');
|
|
checkClientProductionApiBase($issues, 'user-app', $projectRoot . '/user-app/.env.production');
|
|
checkClientProductionApiBase($issues, 'work-app', $projectRoot . '/work-app/.env.production');
|
|
|
|
if (!$issues) {
|
|
echo "RELEASE_AUDIT_OK\n";
|
|
exit(0);
|
|
}
|
|
|
|
echo "RELEASE_AUDIT_ISSUES\n";
|
|
foreach ($issues as $item) {
|
|
echo "[{$item['level']}] {$item['title']} - {$item['detail']}\n";
|
|
}
|