初始化天卡开放平台后端项目

包含完整功能模块：
- 设备激活（直销激活码模式 + 代销免激活码模式）
- 微信支付 + 天卡订单
- 天卡池管理 + 异步橘视厅SDK激活
- 第三方合作伙伴接口（代销模式）
  - 签名鉴权（appKey/appSecret + nonce防重放）
  - 天卡消耗（事务 + 幂等 + 并发控制）
  - 媒资接口（三级授权过滤）
  - 审计日志
- 定价策略（3层：门店 > 渠道 > 平台）
- 分账（微信分账 + 分润规则）
- Docker部署（含Redis容器）

src/main/java/io/as/config/CorsConfig.java

@@ -0,0 +1,36 @@
+package io.as.config;
+
+import org.springframework.boot.web.servlet.FilterRegistrationBean;
+import org.springframework.context.annotation.Bean;
+import org.springframework.context.annotation.Configuration;
+import org.springframework.core.Ordered;
+import org.springframework.web.servlet.config.annotation.CorsRegistry;
+import org.springframework.web.servlet.config.annotation.WebMvcConfigurer;
+
+/**
+ * 跨域配置：使用自定义 SimpleCorsFilter 在 Shiro 之前处理 OPTIONS 并回显 Origin（带凭证时不能用 *）。
+ */
+@Configuration
+public class CorsConfig implements WebMvcConfigurer {
+
+    @Override
+    public void addCorsMappings(CorsRegistry registry) {
+        registry.addMapping("/**")
+            .allowedOriginPatterns("*")
+            .allowedHeaders("*")
+            .allowCredentials(false)  // 仅用 Authorization，不涉及 Cookie
+            .allowedMethods("GET", "POST", "PUT", "DELETE", "OPTIONS", "PATCH")
+            .maxAge(3600);
+    }
+
+    /**
+     * 自定义 CORS 过滤器，最高优先级：OPTIONS 直接 200 + CORS 头，其它请求回显 Origin 以支持凭证。
+     */
+    @Bean
+    public FilterRegistrationBean<SimpleCorsFilter> corsFilterRegistration() {
+        FilterRegistrationBean<SimpleCorsFilter> registration = new FilterRegistrationBean<>(new SimpleCorsFilter());
+        registration.setOrder(Ordered.HIGHEST_PRECEDENCE);
+        registration.addUrlPatterns("/*");
+        return registration;
+    }
+}

src/main/java/io/as/config/FilterConfig.java

@@ -0,0 +1,41 @@
+package io.as.config;
+
+import io.as.common.xss.XssFilter;
+import org.springframework.boot.web.servlet.FilterRegistrationBean;
+import org.springframework.context.annotation.Bean;
+import org.springframework.context.annotation.Configuration;
+import org.springframework.web.filter.DelegatingFilterProxy;
+
+import javax.servlet.DispatcherType;
+
+/**
+ * Filter配置
+ *
+ * @author Mark sunlightcs@gmail.com
+ */
+@Configuration
+public class FilterConfig {
+
+    @Bean
+    public FilterRegistrationBean shiroFilterRegistration() {
+        FilterRegistrationBean registration = new FilterRegistrationBean();
+        registration.setFilter(new DelegatingFilterProxy("shiroFilter"));
+        //该值缺省为false，表示生命周期由SpringApplicationContext管理，设置为true则表示由ServletContainer管理
+        registration.addInitParameter("targetFilterLifecycle", "true");
+        registration.setEnabled(true);
+        registration.setOrder(Integer.MAX_VALUE - 1);
+        registration.addUrlPatterns("/*");
+        return registration;
+    }
+
+    @Bean
+    public FilterRegistrationBean xssFilterRegistration() {
+        FilterRegistrationBean registration = new FilterRegistrationBean();
+        registration.setDispatcherTypes(DispatcherType.REQUEST);
+        registration.setFilter(new XssFilter());
+        registration.addUrlPatterns("/*");
+        registration.setName("xssFilter");
+        registration.setOrder(Integer.MAX_VALUE);
+        return registration;
+    }
+}

src/main/java/io/as/config/KaptchaConfig.java

@@ -0,0 +1,25 @@
+package io.as.config;
+
+import com.google.code.kaptcha.impl.DefaultKaptcha;
+import com.google.code.kaptcha.util.Config;
+import org.springframework.context.annotation.Bean;
+import org.springframework.context.annotation.Configuration;
+
+import java.util.Properties;
+
+@Configuration
+public class KaptchaConfig {
+
+	@Bean
+	public DefaultKaptcha producer() {
+		Properties properties = new Properties();
+		properties.put("kaptcha.border", "no");
+		properties.put("kaptcha.textproducer.font.color", "black");
+		properties.put("kaptcha.textproducer.char.space", "5");
+		properties.put("kaptcha.textproducer.font.names", "Arial,Courier,cmr10,宋体,楷体,微软雅黑");
+		Config config = new Config(properties);
+		DefaultKaptcha defaultKaptcha = new DefaultKaptcha();
+		defaultKaptcha.setConfig(config);
+		return defaultKaptcha;
+	}
+}

src/main/java/io/as/config/MybatisPlusConfig.java

@@ -0,0 +1,23 @@
+package io.as.config;
+
+import com.baomidou.mybatisplus.extension.plugins.PaginationInterceptor;
+import org.springframework.context.annotation.Bean;
+import org.springframework.context.annotation.Configuration;
+
+/**
+ * mybatis-plus配置
+ *
+ * @author Mark sunlightcs@gmail.com
+ */
+@Configuration
+public class MybatisPlusConfig {
+
+    /**
+     * 分页插件
+     */
+    @Bean
+    public PaginationInterceptor paginationInterceptor() {
+        return new PaginationInterceptor();
+    }
+
+}

src/main/java/io/as/config/RedisConfig.java

@@ -0,0 +1,55 @@
+package io.as.config;
+
+import org.springframework.beans.factory.annotation.Autowired;
+import org.springframework.context.annotation.Bean;
+import org.springframework.context.annotation.Configuration;
+import org.springframework.data.redis.connection.RedisConnectionFactory;
+import org.springframework.data.redis.core.*;
+import org.springframework.data.redis.serializer.StringRedisSerializer;
+
+/**
+ * Redis配置
+ *
+ * @author Mark sunlightcs@gmail.com
+ */
+@Configuration
+public class RedisConfig {
+    @Autowired
+    private RedisConnectionFactory factory;
+
+    @Bean
+    public RedisTemplate<String, Object> redisTemplate() {
+        RedisTemplate<String, Object> redisTemplate = new RedisTemplate<>();
+        redisTemplate.setKeySerializer(new StringRedisSerializer());
+        redisTemplate.setHashKeySerializer(new StringRedisSerializer());
+        redisTemplate.setHashValueSerializer(new StringRedisSerializer());
+        redisTemplate.setValueSerializer(new StringRedisSerializer());
+        redisTemplate.setConnectionFactory(factory);
+        return redisTemplate;
+    }
+
+    @Bean
+    public HashOperations<String, String, Object> hashOperations(RedisTemplate<String, Object> redisTemplate) {
+        return redisTemplate.opsForHash();
+    }
+
+    @Bean
+    public ValueOperations<String, String> valueOperations(RedisTemplate<String, String> redisTemplate) {
+        return redisTemplate.opsForValue();
+    }
+
+    @Bean
+    public ListOperations<String, Object> listOperations(RedisTemplate<String, Object> redisTemplate) {
+        return redisTemplate.opsForList();
+    }
+
+    @Bean
+    public SetOperations<String, Object> setOperations(RedisTemplate<String, Object> redisTemplate) {
+        return redisTemplate.opsForSet();
+    }
+
+    @Bean
+    public ZSetOperations<String, Object> zSetOperations(RedisTemplate<String, Object> redisTemplate) {
+        return redisTemplate.opsForZSet();
+    }
+}

src/main/java/io/as/config/ShiroConfig.java

@@ -0,0 +1,74 @@
+package io.as.config;
+
+import io.as.modules.sys.jwt.JWTFilter;
+import io.as.modules.sys.jwt.JWTRealm;
+import org.apache.shiro.mgt.SecurityManager;
+import org.apache.shiro.spring.LifecycleBeanPostProcessor;
+import org.apache.shiro.spring.security.interceptor.AuthorizationAttributeSourceAdvisor;
+import org.apache.shiro.spring.web.ShiroFilterFactoryBean;
+import org.apache.shiro.web.mgt.DefaultWebSecurityManager;
+import org.springframework.context.annotation.Bean;
+import org.springframework.context.annotation.Configuration;
+
+import javax.servlet.Filter;
+import java.util.LinkedHashMap;
+import java.util.Map;
+
+@Configuration
+public class ShiroConfig {
+
+	@Bean("securityManager")
+	public SecurityManager securityManager() {
+		DefaultWebSecurityManager securityManager = new DefaultWebSecurityManager();
+		securityManager.setRealm(jwtRealm());
+		securityManager.setRememberMeManager(null);
+		return securityManager;
+	}
+
+	@Bean
+	public JWTRealm jwtRealm() {
+		return new JWTRealm();
+	}
+
+	@Bean("shiroFilter")
+	public ShiroFilterFactoryBean shiroFilter(SecurityManager securityManager) {
+		ShiroFilterFactoryBean shiroFilter = new ShiroFilterFactoryBean();
+		shiroFilter.setSecurityManager(securityManager);
+
+		Map<String, Filter> filters = new LinkedHashMap<>();
+		filters.put("jwt", new JWTFilter());
+		shiroFilter.setFilters(filters);
+
+		Map<String, String> filterMap = new LinkedHashMap<>();
+		// 免认证路径
+		filterMap.put("/webjars/**", "anon");
+		filterMap.put("/druid/**", "anon");
+		filterMap.put("/sys/login", "anon");
+		filterMap.put("/sys/refresh", "anon");
+		filterMap.put("/captcha.jpg", "anon");
+		filterMap.put("/openapi/**", "anon");
+		filterMap.put("/api/jst/**", "anon");
+		filterMap.put("/api/payment/**", "anon");
+		filterMap.put("/swagger/**", "anon");
+		filterMap.put("/v2/api-docs", "anon");
+		filterMap.put("/swagger-ui.html", "anon");
+		filterMap.put("/swagger-resources/**", "anon");
+		// 其他路径需要 JWT 认证
+		filterMap.put("/**", "jwt");
+		shiroFilter.setFilterChainDefinitionMap(filterMap);
+
+		return shiroFilter;
+	}
+
+	@Bean("lifecycleBeanPostProcessor")
+	public LifecycleBeanPostProcessor lifecycleBeanPostProcessor() {
+		return new LifecycleBeanPostProcessor();
+	}
+
+	@Bean
+	public AuthorizationAttributeSourceAdvisor authorizationAttributeSourceAdvisor(SecurityManager securityManager) {
+		AuthorizationAttributeSourceAdvisor advisor = new AuthorizationAttributeSourceAdvisor();
+		advisor.setSecurityManager(securityManager);
+		return advisor;
+	}
+}

src/main/java/io/as/config/SimpleCorsFilter.java

@@ -0,0 +1,49 @@
+package io.as.config;
+
+import javax.servlet.*;
+import javax.servlet.http.HttpServletRequest;
+import javax.servlet.http.HttpServletResponse;
+import java.io.IOException;
+
+/**
+ * 跨域过滤器：在 Shiro 之前执行，对 OPTIONS 预检直接返回 200 并设置 CORS 头。
+ * 带凭证（cookie/token）时须回显请求的 Origin，不能使用 *，否则浏览器会拒绝。
+ */
+public class SimpleCorsFilter implements Filter {
+
+    private static final String ORIGIN = "Origin";
+    private static final String AC_ALLOW_ORIGIN = "Access-Control-Allow-Origin";
+    private static final String AC_ALLOW_CREDENTIALS = "Access-Control-Allow-Credentials";
+    private static final String AC_ALLOW_METHODS = "Access-Control-Allow-Methods";
+    private static final String AC_ALLOW_HEADERS = "Access-Control-Allow-Headers";
+    private static final String AC_MAX_AGE = "Access-Control-Max-Age";
+    private static final String AC_EXPOSE_HEADERS = "Access-Control-Expose-Headers";
+
+    private static final String ALLOW_METHODS = "GET, POST, PUT, DELETE, OPTIONS, PATCH";
+    private static final String ALLOW_HEADERS = "*";
+    private static final String MAX_AGE = "3600";
+
+    @Override
+    public void doFilter(ServletRequest request, ServletResponse response, FilterChain chain)
+            throws IOException, ServletException {
+        HttpServletRequest req = (HttpServletRequest) request;
+        HttpServletResponse resp = (HttpServletResponse) response;
+
+        String origin = req.getHeader(ORIGIN);
+        if (origin != null && !origin.isEmpty()) {
+            resp.setHeader(AC_ALLOW_ORIGIN, origin);
+            resp.setHeader(AC_ALLOW_CREDENTIALS, "false");  // 仅用 Authorization，不涉及 Cookie
+        }
+        resp.setHeader(AC_ALLOW_METHODS, ALLOW_METHODS);
+        resp.setHeader(AC_ALLOW_HEADERS, ALLOW_HEADERS);
+        resp.setHeader(AC_MAX_AGE, MAX_AGE);
+        resp.setHeader(AC_EXPOSE_HEADERS, ALLOW_HEADERS);
+
+        if ("OPTIONS".equalsIgnoreCase(req.getMethod())) {
+            resp.setStatus(HttpServletResponse.SC_OK);
+            return;
+        }
+
+        chain.doFilter(request, response);
+    }
+}

src/main/java/io/as/config/SwaggerConfig.java

@@ -0,0 +1,53 @@
+package io.as.config;
+
+import io.swagger.annotations.ApiOperation;
+import org.springframework.context.annotation.Bean;
+import org.springframework.context.annotation.Configuration;
+import org.springframework.web.servlet.config.annotation.WebMvcConfigurer;
+import springfox.documentation.builders.ApiInfoBuilder;
+import springfox.documentation.builders.PathSelectors;
+import springfox.documentation.builders.RequestHandlerSelectors;
+import springfox.documentation.service.ApiInfo;
+import springfox.documentation.service.ApiKey;
+import springfox.documentation.spi.DocumentationType;
+import springfox.documentation.spring.web.plugins.Docket;
+import springfox.documentation.swagger2.annotations.EnableSwagger2;
+
+import java.util.List;
+
+import static com.google.common.collect.Lists.newArrayList;
+
+@Configuration
+@EnableSwagger2
+public class SwaggerConfig implements WebMvcConfigurer {
+
+    @Bean
+    public Docket createRestApi() {
+        return new Docket(DocumentationType.SWAGGER_2)
+            .apiInfo(apiInfo())
+            .select()
+            //加了ApiOperation注解的类，才生成接口文档
+            .apis(RequestHandlerSelectors.withMethodAnnotation(ApiOperation.class))
+            //包下的类，才生成接口文档
+            //.apis(RequestHandlerSelectors.basePackage("io.as.controller"))
+            .paths(PathSelectors.any())
+            .build()
+            .securitySchemes(security());
+    }
+
+    private ApiInfo apiInfo() {
+        return new ApiInfoBuilder()
+            .title("爱视文化科技")
+            .description("爱视后台文档")
+            .termsOfServiceUrl("https://www.renren.io")
+            .version("3.0.0")
+            .build();
+    }
+
+    private List<ApiKey> security() {
+        return newArrayList(
+            new ApiKey("Authorization", "Authorization", "header")
+        );
+    }
+
+}