x-server-mobile/backend/app/Service/FeishuService.php

<?php

namespace App\Service;

use App\Model\Company;
use App\Model\User;
use support\Cache;

class FeishuService
{
    private ?string $accessToken = null;
    private ?int $companyId = null;

    /**
     * 设置当前操作的公司
     */
    public function setCompany(int $companyId): self
    {
        $this->companyId = $companyId;
        $this->accessToken = null;
        return $this;
    }

    /**
     * 根据 tenant_key 获取公司配置
     */
    public function getCompanyByTenantKey(string $tenantKey): ?Company
    {
        return Company::active()->byFeishuTenantKey($tenantKey)->first();
    }

    /**
     * 获取飞书 access_token
     */
    public function getAccessToken(): string
    {
        if ($this->accessToken) {
            return $this->accessToken;
        }

        if (!$this->companyId) {
            throw new \Exception('未设置公司ID');
        }

        $company = Company::findOrFail($this->companyId);

        // 从缓存获取
        $cacheKey = "feishu:access_token:{$company->id}";
        $token = Cache::get($cacheKey);

        if ($token) {
            $this->accessToken = $token;
            return $token;
        }

        // 请求新的 token
        $response = $this->httpPost('https://open.feishu.cn/open-apis/auth/v3/tenant_access_token/internal', [
            'app_id' => $company->feishu_app_id,
            'app_secret' => $company->feishu_app_secret,
        ]);

        if ($response['code'] !== 0) {
            throw new \Exception('获取飞书 token 失败: ' . ($response['msg'] ?? '未知错误'));
        }

        $token = $response['tenant_access_token'];
        $expire = $response['expire'] ?? 7200;

        // 缓存 token（提前5分钟过期）
        Cache::set($cacheKey, $token, $expire - 300);

        $this->accessToken = $token;
        return $token;
    }

    /**
     * 根据 auth_code 获取用户信息
     */
    public function getUserInfo(string $authCode): array
    {
        if (!$this->companyId) {
            throw new \Exception('未设置公司ID');
        }

        $token = $this->getAccessToken();

        // 获取用户 access_token
        $response = $this->httpPost('https://open.feishu.cn/open-apis/authen/v1/oidc/access_token', [
            'grant_type' => 'authorization_code',
            'client_id' => Company::findOrFail($this->companyId)->feishu_app_id,
            'client_secret' => Company::findOrFail($this->companyId)->feishu_app_secret,
            'code' => $authCode,
        ], [
            'Authorization: Bearer ' . $token,
        ]);

        if ($response['code'] !== 0) {
            throw new \Exception('获取用户信息失败: ' . ($response['msg'] ?? '未知错误'));
        }

        return $response['data'] ?? [];
    }

    /**
     * 创建或更新用户
     */
    public function createOrUpdateUser(array $feishuData, int $companyId): User
    {
        $unionId = $feishuData['union_id'] ?? null;
        $userId = $feishuData['user_id'] ?? null;
        $name = $feishuData['name'] ?? '未知';
        $avatar = $feishuData['avatar_url'] ?? null;
        $email = $feishuData['email'] ?? null;

        if (!$unionId) {
            throw new \Exception('缺少 union_id');
        }

        // 查找或创建用户
        $user = User::byFeishuUnionId($unionId)->first();

        if (!$user) {
            $user = User::create([
                'company_id' => $companyId,
                'feishu_user_id' => $userId,
                'feishu_union_id' => $unionId,
                'name' => $name,
                'email' => $email,
                'avatar' => $avatar,
                'status' => 1,
            ]);
        } else {
            // 更新用户信息
            $user->update([
                'feishu_user_id' => $userId,
                'name' => $name,
                'avatar' => $avatar,
                'email' => $email,
            ]);
        }

        return $user;
    }

    /**
     * 发送审批消息通知
     */
    public function sendApprovalMessage(int $userId, string $title, string $url): bool
    {
        try {
            $user = User::findOrFail($userId);
            $company = Company::findOrFail($user->company_id);

            $this->setCompany($company->id);
            $token = $this->getAccessToken();

            // 构建消息内容
            $message = [
                'msg_type' => 'interactive',
                'card' => [
                    'header' => [
                        'title' => [
                            'content' => '审批通知',
                            'tag' => 'plain_text',
                        ],
                        'template' => 'blue',
                    ],
                    'elements' => [
                        [
                            'tag' => 'div',
                            'text' => [
                                'content' => $title,
                                'tag' => 'plain_text',
                            ],
                        ],
                        [
                            'tag' => 'action',
                            'actions' => [
                                [
                                    'tag' => 'button',
                                    'text' => [
                                        'content' => '查看详情',
                                        'tag' => 'plain_text',
                                    ],
                                    'type' => 'default',
                                    'url' => $url,
                                ],
                            ],
                        ],
                    ],
                ],
            ];

            // 发送消息
            $response = $this->httpPost(
                "https://open.feishu.cn/open-apis/message/v4/send_messages",
                [
                    'receive_id_type' => 'user_id',
                    'receive_id' => $user->feishu_user_id,
                    'msg_type' => 'interactive',
                    'content' => json_encode(['card' => $message['card']]),
                ],
                [
                    'Authorization: Bearer ' . $token,
                ]
            );

            return ($response['code'] ?? -1) === 0;
        } catch (\Exception $e) {
            // 记录错误但不中断流程
            error_log('发送飞书消息失败: ' . $e->getMessage());
            return false;
        }
    }

    /**
     * HTTP POST 请求
     */
    private function httpPost(string $url, array $data, array $headers = []): array
    {
        $ch = curl_init();

        curl_setopt($ch, CURLOPT_URL, $url);
        curl_setopt($ch, CURLOPT_POST, true);
        curl_setopt($ch, CURLOPT_POSTFIELDS, json_encode($data));
        curl_setopt($ch, CURLOPT_RETURNTRANSFER, true);
        curl_setopt($ch, CURLOPT_TIMEOUT, 30);
        curl_setopt($ch, CURLOPT_SSL_VERIFYPEER, false);

        $defaultHeaders = [
            'Content-Type: application/json',
        ];

        curl_setopt($ch, CURLOPT_HTTPHEADER, array_merge($defaultHeaders, $headers));

        $response = curl_exec($ch);
        $httpCode = curl_getinfo($ch, CURLINFO_HTTP_CODE);
        curl_close($ch);

        if ($httpCode !== 200) {
            throw new \Exception("HTTP 请求失败: {$httpCode}");
        }

        $result = json_decode($response, true);

        if (json_last_error() !== JSON_ERROR_NONE) {
            throw new \Exception('JSON 解析失败');
        }

        return $result;
    }
}