water/server/app/miniapi/auth/TestPhoneIdentityProvider.php

<?php

declare(strict_types=1);

namespace app\miniapi\auth;

use app\miniapi\exception\ApiException;

/** Explicit local fixture identities, never verified phone numbers or WeChat accounts. */
final class TestPhoneIdentityProvider implements IdentityProvider
{
    public const APP_ID = 'local-test-phone';
    public const PHONES = [
        'enterprise_admin' => '13012345678',
        'driver' => '13012345679',
        'agent' => '13012345680',
    ];

    public function __construct(private readonly string $phone)
    {
    }

    public static function enabled(): bool
    {
        return config('mini_api.environment') === 'local'
            && config('mini_api.test_phone_login', false) === true;
    }

    public function exchange(string $code): array
    {
        if (!self::enabled()) {
            throw new ApiException(50301, '测试手机号登录未开启', 503);
        }
        if (!in_array($this->phone, self::PHONES, true) || !hash_equals('66666', $code)) {
            throw new ApiException(40102, '测试手机号或验证码错误', 401);
        }

        return ['appid' => self::APP_ID, 'openid' => $this->phone];
    }
}