移动端和 PC 端登录页都加了“图形验证码

backend/internal/modules/auth/service.go

@@ -9,6 +9,7 @@ import (
 	"regexp"
 	"time"
 
+	"hfb_sys/backend/internal/captcha"
 	smsprovider "hfb_sys/backend/internal/integrations/sms"
 	"hfb_sys/backend/internal/model"
 
@@ -19,6 +20,7 @@ import (
 var (
 	ErrDependencyUnavailable = errors.New("dependency unavailable")
 	ErrInvalidPhone          = errors.New("invalid phone")
+	ErrCaptchaInvalid        = errors.New("captcha invalid")
 	ErrCodeRateLimited       = errors.New("sms code rate limited")
 	ErrCodeInvalid           = errors.New("sms code invalid")
 	ErrSMSSendFailed         = errors.New("sms send failed")
@@ -29,6 +31,7 @@ const (
 	smsLoginCooldown     = 60 * time.Second
 	smsLoginHourlyLimit  = 5
 	smsLoginHourlyWindow = time.Hour
+	smsCaptchaTTL        = 3 * time.Minute
 )
 
 type Service struct {
@@ -48,7 +51,18 @@ func NewService(users *UserRepository, redis *redis.Client, jwt *JWTManager, sms
 	return &Service{users: users, redis: redis, jwt: jwt, sms: sms, log: log}
 }
 
-func (s *Service) SendSMSCode(ctx context.Context, phone string) error {
+func (s *Service) Captcha(ctx context.Context) (*captcha.Item, error) {
+	if s.redis == nil {
+		return nil, ErrDependencyUnavailable
+	}
+	item, err := captcha.Generate(ctx, s.redis, "auth:sms", smsCaptchaTTL)
+	if errors.Is(err, captcha.ErrDependencyUnavailable) {
+		return nil, ErrDependencyUnavailable
+	}
+	return item, err
+}
+
+func (s *Service) SendSMSCode(ctx context.Context, phone string, captchaID string, captchaCode string) error {
 	if s.redis == nil {
 		return ErrDependencyUnavailable
 	}
@@ -74,6 +88,16 @@ func (s *Service) SendSMSCode(ctx context.Context, phone string) error {
 		return ErrCodeRateLimited
 	}
 
+	if err := captcha.Verify(ctx, s.redis, "auth:sms", captchaID, captchaCode); err != nil {
+		if errors.Is(err, captcha.ErrDependencyUnavailable) {
+			return ErrDependencyUnavailable
+		}
+		if errors.Is(err, captcha.ErrInvalid) {
+			return ErrCaptchaInvalid
+		}
+		return err
+	}
+
 	code, err := randomDigits(6)
 	if err != nil {
 		return err