服务器迁移: 新服务器(47.109.203.92)部署 + deploy.sh蓝绿自动检测 + 压测文档 + 安全组配置 + Gitea/Vaultwarden迁移

2026-07-04 22:20:41 +08:00
37 changed files with 544 additions and 1878 deletions
--- a/.env
+++ b/.env
@@ -0,0 +1,19 @@
 # .env
 DATABASE_URL=postgres://milkydata:44n6FdB8CdDAk5rk@154.37.213.24:5432/milkydata
 WECHAT_APPID="wx5b00eb90621802f7"
 WECHAT_SECRET="494efc513faa310bfba588bda2849bfd"
 JWT_SECRET="your_super_secret_key"
 SSL_KEY_PATH=/etc/ssl/private/private.key
 SSL_CERT_PATH=/etc/ssl/certs/full_chain.pem
 RUST_LOG=info
 APP_VERSION="0.2.0"
 FREE_USER_DATA_LIMIT=20
 SSH_SERVER=root@1panel-server
 # 支付宝生产环境配置
 # 支付宝生产环境配置
 ALIPAY_APP_ID=2021006148681106
 ALIPAY_PRIVATE_KEY="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"
 ALIPAY_ALIPAY_PUBLIC_KEY="MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkhLqABUN1E2PCmOznQp+53T3x4j27I96hdatl6lWbCBPwyXnZVW4uYZ4kV+34+i2wCzEtMpUiNQaIsQXx2qD8x0d8szsj7pEZuY+xUUJTzm95fYO2nq4aaQ38T/kxdYrW12is8vwY83rlghdlkvVP2XZCuYoFq9UVieTu6LTDk6v91Mt2xr1Zw1Oj+yg8VpBFXkcS7ORJjiufWzCEoxzlb2KK2AGOLhdc8BJsBfrQ0JAqFB6b0uteUF21DDdPN/sblD8GoRAGuSpDhyQLG+0fDNdcIMyHpsq7bIDNjgYGS8RbKAtb6WyV6vriIemZ0fMvzN5Mpqv2jwCe/31ar//PwIDAQAB"
 ALIPAY_GATEWAY="https://openapi.alipay.com/gateway.do"
 APP_BASE_URL="https://dev.xmclassmate.top"
--- a/AGENTS.md
+++ b/AGENTS.md
@@ -556,36 +556,23 @@ let new_expires = base_time + days(pkg_days);
 | 环境 | 域名 | 端口 | 远程目录 |
 |------|------|------|---------|
 | 测试 | dev.xmclassmate.top | 8080 | /root/rust/rust_backend_dev |
-| 生产（蓝） | xmclassmate.top | 4433 | /root/rust/rust_backend_blue |
+| 生产 | xmclassmate.top | 4433 | /root/rust/rust_backend |
 | 生产（绿） | xmclassmate.top | 4434 | /root/rust/rust_backend_green |
 **服务器**：`47.109.203.92` (Aliyun, Debian 13)
 **SSH 用户**：`deploy`（有 sudo 权限）
 **SSH 别名**：`aliyun-server`（`~/.ssh/config` 中配置）
 **nginx**：原生 nginx（非 Docker/OpenResty），配置位于 `/etc/nginx/sites-available/`
 **PostgreSQL**：Docker 容器 `postgres:17.6-alpine`（host 网络模式）
 ### systemd 服务
-| 环境 | systemd unit | 工作目录 | SERVER_PORT |
+| 环境 | systemd unit | 工作目录 | APP_ENV |
-|------|-------------|---------|-------------|
+|------|-------------|---------|---------|
-| 测试 | `rust-backend-dev.service` | `/root/rust/rust_backend_dev` | 8080 |
+| 测试 | `rust-backend-dev.service` | `/root/rust/rust_backend_dev` | `development` |
-| 生产蓝 | `rust-backend-blue.service` | `/root/rust/rust_backend_blue` | 4433 |
+| 生产 | `rust-backend.service` | `/root/rust/rust_backend` | (使用 .env) |
 | 生产绿 | `rust-backend-green.service` | `/root/rust/rust_backend_green` | 4434 |
-> 生产采用蓝绿部署：nginx 通过 `proxy_pass` 将流量路由到活跃环境（默认 :4433 = 蓝色）。
+> ⚠️ systemd 配置使用 `EnvironmentFile=` 加载 `.env` 文件（生产、开发环境均如此）
 > `deploy.sh` 自动检测活跃环境并部署到空闲环境，部署成功后自动切换 nginx 代理。
 > ⚠️ systemd 配置使用 `Environment=` 直接加载环境变量（非 `EnvironmentFile`）。
 > 注意：`EnvironmentFile` 不支持多行值，多行 PEM 密钥需 base64 编码或单行格式
 ### 部署命令
 ```bash
 ./deploy.sh development   # 部署到测试服务器
-./deploy.sh production             # 生产蓝绿部署（自动检测目标）
+./deploy.sh production    # 部署到生产服务器
 ./deploy.sh production --target blue   # 指定部署到蓝色
 ./deploy.sh production --target green  # 指定部署到绿色
 ```
 **deploy.sh 选项：**
@@ -597,8 +584,6 @@ let new_expires = base_time + days(pkg_days);
 | `--skip-tests` | 跳过部署后测试 |
 | `--rollback` | 回滚到上一个备份版本 |
 | `--backup-list` | 列出可用备份 |
 | `--target blue\|green` | 蓝绿部署目标 |
 | `--remote-host IP` | 部署目标服务器（默认 `aliyun-server`） |
 | `--init-env` | 初始化远程 .env（生成随机 JWT_SECRET + 推送模板到服务器） |
 | `--help, -h` | 显示帮助信息 |
--- a/Cargo.lock
+++ b/Cargo.lock
@@ -544,6 +544,15 @@ dependencies = [
 "cfg-if",
 ]
 [[package]]
 name = "crossbeam-channel"
 version = "0.5.15"
 source = "registry+https://github.com/rust-lang/crates.io-index"
 checksum = "82b8f8f868b36967f9606790d1903570de9ceaf870a7bf9fbbd3016d636a2cb2"
 dependencies = [
 "crossbeam-utils",
 ]
 [[package]]
 name = "crossbeam-queue"
 version = "0.3.12"
@@ -2349,6 +2358,7 @@ dependencies = [
 "sqlx",
 "tokio",
 "tracing",
 "tracing-appender",
 "tracing-subscriber",
 "uuid",
 ]
@@ -3294,6 +3304,18 @@ dependencies = [
 "tracing-core",
 ]
 [[package]]
 name = "tracing-appender"
 version = "0.2.4"
 source = "registry+https://github.com/rust-lang/crates.io-index"
 checksum = "786d480bce6247ab75f005b14ae1624ad978d3029d9113f0a22fa1ac773faeaf"
 dependencies = [
 "crossbeam-channel",
 "thiserror",
 "time",
 "tracing-subscriber",
 ]
 [[package]]
 name = "tracing-attributes"
 version = "0.1.30"
--- a/Cargo.toml
+++ b/Cargo.toml
@@ -9,6 +9,7 @@ chrono = {version = "0.4.41", features=["serde"]}
 dotenvy = "0.15.7"
 tracing = "0.1"
 tracing-subscriber = { version = "0.3", features = ["env-filter", "json"] }
 tracing-appender = "0.2"
 sentry = "0.48"
 sentry-actix = "0.48"
 sentry-tracing = "0.48"
--- a/IMPROVEMENTS.md
+++ b/IMPROVEMENTS.md
@@ -280,20 +280,18 @@ DROP TABLE IF EXISTS invitation_codes;
  - 完成时间：2026-04-15
 ### 1.2 数据库操作优化
- [x] **重复查询问题** ✅
+- [ ] **重复查询问题**
  - 位置：`insert_weather_data` 中多次查询用户信息
  - 改进：合并查询或使用缓存
-  - 状态：`get_user_quota` 已合并为单次查询（见 `db.rs` 顶部注释）；2026-08-11 复核无遗留 N+1
+  - 影响：减少数据库负载
- [x] **缺少数据库索引** ✅
+- [ ] **缺少数据库索引**
-  - 状态：`migrations/006_add_performance_indexes.sql` 已添加
+  - 现状：未见索引定义
  - 改进：添加常用查询字段索引
    ```sql
    CREATE INDEX idx_weather_data_user_id ON weather_data(user_id);
-    CREATE INDEX idx_weather_data_date ON weather_data(date DESC);
+    CREATE INDEX idx_weather_data_date ON weather_data(date);
    CREATE INDEX idx_weather_data_user_favorite ON weather_data(user_id, is_favorite);
    CREATE INDEX idx_weather_data_user_date ON weather_data(user_id, date DESC);
    CREATE INDEX idx_users_openid ON users(openid);
    CREATE INDEX idx_payment_orders_status ON payment_orders(status);
    ```
 ### 1.3 错误处理改进
@@ -424,13 +422,13 @@ DROP TABLE IF EXISTS invitation_codes;
 ## 五、开发体验改进
 ### 5.1 测试覆盖
- [~] **基础测试不足**（2026-08-11 已补充单元测试）
+- [ ] **仅有一个基础编译测试**
-  - 现状：原仅有 `tests/integration_test.rs` 的编译测试和套餐一致性测试
+  - 现状：`tests/integration_test.rs` 只有 `assert_eq!(2 + 2, 4)`
-  - 已补充（`cargo test` 共 36 用例）：
+  - 改进：添加完整的测试套件
-    - `src/auth.rs`：JWT 生成/验证回环、篡改拒绝、错误密钥拒绝、refresh token 随机性、临时 token 有效期
+  - 类型：
-    - `src/handlers/payment.rs`：套餐定义、URL 解码（**修复了 UTF-8 乱码与吞字符两个真实 bug**）、支付宝表单解析（UTF-8/GBK）、RSA2 签名/验签回环（PEM + Base64 DER 密钥）、移动端 UA 检测、订单号唯一性
+    - 单元测试：工具函数、数据结构
-    - `src/rate_limiter.rs`：限流阈值、按客户端隔离、IP 提取（已有）
+    - 集成测试：API 端点
-  - 待做：API 集成测试（需要测试数据库）
+    - 数据库测试：CRUD 操作
 - [ ] **缺少 API 测试**
  - 需求：验证 API 行为
@@ -1371,9 +1369,6 @@ async onRedeemCode() {
 ## 十四、公告系统
 > **状态**：✅ 已实现（2026-05，`handlers/notifications.rs` + 迁移 `011_add_notifications.sql`，前端 `pkg-extra/notifications` 页面）
 > 下方为原始设计文档，保留供参考。
 ### 功能概述
 公告系统用于向用户发送系统公告，支持管理员发布、编辑、删除公告，用户查看公告列表和详情。
--- a/deploy.sh
+++ b/deploy.sh
@@ -2,6 +2,8 @@
 # ===========================================
 # Rust Backend Deployment Script
 # ===========================================
 # Rust Backend Deployment Script
 # ===========================================
 # Usage: ./deploy.sh [development|production] [options]
 #
 # Options:
@@ -29,7 +31,7 @@ source "${SCRIPT_DIR}/lib/test.sh"
 # ---------- 默认值 ----------
 PROJECT_NAME="rust-backend"
 REMOTE_USER="root"
-REMOTE_HOST="aliyun-server"
+REMOTE_HOST="1panel-server"
 APP_ENV="production"
 DRY_RUN=false; SKIP_CONFIRM=false; SKIP_TESTS=false
@@ -63,8 +65,8 @@ while [[ $# -gt 0 ]]; do
            echo "  --dry-run          预览模式"
            echo "  --yes, -y          跳过确认"
            echo "  --skip-tests       跳过部署后测试"
-            echo "  --target blue|green 蓝绿部署目标"
+            echo "  --target blue|green 蓝绿部署目标（默认单实例）"
-            echo "  --remote-host IP    部署目标服务器（默认 aliyun-server）"
+            echo "  --remote-host IP    部署目标服务器（默认 1panel-server）"
            echo "  --rollback         回滚到指定备份"
            echo "  --backup-list      列出可用备份"
            echo "  --logs [N]         查看后端日志（默认50行）"
@@ -83,15 +85,12 @@ while [[ $# -gt 0 ]]; do
    esac; shift
 done
 # 提前建立 SSH 连接（蓝绿检测需要 remote()）
 ssh_connect
 # ---------- 蓝绿目标自动检测 + 配置 ----------
 # 优先级: 手动 --target > 自动检测
 detect_blue_green() {
    local proxy_conf; proxy_conf=$(get_proxy_conf)
    local active
-    active=$(remote "sudo cat ${proxy_conf} 2>/dev/null" 2>/dev/null | grep -oP '127\.0\.0\.1:\d+' | head -1 || echo "")
+    active=$(remote "docker exec ${NGINX_CONTAINER} cat ${proxy_conf} 2>/dev/null" 2>/dev/null | grep -oP '127\.0\.0\.1:\d+' | head -1 || echo "")
    case "${APP_ENV}:${active}" in
        *:4433) echo "blue" ;;
@@ -134,7 +133,7 @@ case "${APP_ENV}" in
            BACKEND_PORT="8080"
        fi
        TEST_DOMAIN="https://dev.xmclassmate.top"
-        DB_CONTAINER="postgres"
+        DB_CONTAINER="1Panel-postgresql-FtMo"
        DB_NAME="milkydata_dev"
        DB_USER="milkydata" ;;
    production)
@@ -148,13 +147,14 @@ case "${APP_ENV}" in
            BACKEND_PORT="4433"
        fi
        TEST_DOMAIN="https://xmclassmate.top"
-        DB_CONTAINER="postgres"
+        DB_CONTAINER="1Panel-postgresql-FtMo"
        DB_NAME="milkydata"
        DB_USER="milkydata" ;;
 esac
 # ---------- 快捷命令 ----------
 GIT_VERSION=$(get_git_info)
 ssh_connect
 if [ "$LIST_BACKUPS" = true ]; then list_backups; exit 0; fi
 if [ "$INIT_ENV" = true ];      then init_env; exit 0; fi
@@ -183,8 +183,8 @@ upload_script "清理脚本" scripts/cleanup_refresh_tokens.sh scripts/cleanup_r
 upload_script "备份脚本" scripts/backup-db.sh scripts/backup-db.sh
 deploy_service_file
 run_migrations          # Moved BEFORE restart
 restart_service
 run_migrations
 if run_tests; then
    log_to_file "DEPLOY success"
--- a/deploy/rust-backend-blue.service
+++ b/deploy/rust-backend-blue.service
@@ -5,8 +5,8 @@ Wants=network.target
 [Service]
 Type=simple
-User=rust-backend
+User=root
-Group=rust-backend
+Group=root
 WorkingDirectory=/root/rust/rust_backend_blue
 ExecStart=/root/rust/rust_backend_blue/rust-backend
 Restart=always
@@ -21,9 +21,12 @@ Environment=JWT_SECRET=tribesman-pavestone-hatchling-wrangle-silly-embargo
 Environment=SSL_KEY_PATH=/etc/ssl/rust_backend/privkey.pem
 Environment=SSL_CERT_PATH=/etc/ssl/rust_backend/fullchain.pem
 Environment=RUST_LOG=info
-Environment=APP_VERSION=0.3.0
+Environment=APP_VERSION=0.2.7
 Environment=FREE_USER_DATA_LIMIT=20
-EnvironmentFile=/root/rust/rust_backend_blue/.env
+Environment=ALIPAY_APP_ID=2021006148681106
 Environment=ALIPAY_ALIPAY_PUBLIC_KEY=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkhLqABUN1E2PCmOznQp+53T3x4j27I96hdatl6lWbCBPwyXnZVW4uYZ4kV+34+i2wCzEtMpUiNQaIsQXx2qD8x0d8szsj7pEZuY+xUUJTzm95fYO2nq4aaQ38T/kxdYrW12is8vwY83rlghdlkvVP2XZCuYoFq9UVieTu6LTDk6v91Mt2xr1Zw1Oj+yg8VpBFXkcS7ORJjiufWzCEoxzlb2KK2AGOLhdc8BJsBfrQ0JAqFB6b0uteUF21DDdPN/sblD8GoRAGuSpDhyQLG+0fDNdcIMyHpsq7bIDNjgYGS8RbKAtb6WyV6vriIemZ0fMvzN5Mpqv2jwCe/31ar//PwIDAQAB
 Environment=ALIPAY_PRIVATE_KEY=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
 Environment=ALIPAY_GATEWAY=https://openapi.alipay.com/gateway.do
 Environment=APP_BASE_URL=https://xmclassmate.top
 Environment=SERVER_PORT=4433
 Environment=SENTRY_DSN=http://f02c7cce1dc746e2ad41b11397dab0db@127.0.0.1:9000/1
--- a/deploy/rust-backend-development.service
+++ b/deploy/rust-backend-development.service
@@ -5,8 +5,8 @@ Wants=network.target
 [Service]
 Type=simple
-User=rust-backend
+User=root
-Group=rust-backend
+Group=root
 WorkingDirectory=/root/rust/rust_backend_dev
 ExecStart=/root/rust/rust_backend_dev/rust-backend
 Restart=always
@@ -24,8 +24,13 @@ Environment=RUST_LOG=info,rust_backend=debug
 Environment=APP_VERSION=0.2.0
 Environment=FREE_USER_DATA_LIMIT=50
 Environment=SENTRY_DSN=http://f02c7cce1dc746e2ad41b11397dab0db@127.0.0.1:9000/1
-Environment=APP_BASE_URL=https://dev.xmclassmate.top
+Environment=APP_BASE_URL=https://xmclassmate.top
-EnvironmentFile=/root/rust/rust_backend_dev/.env
+Environment=ALIPAY_APP_ID=2021006148681106
 Environment=ALIPAY_GATEWAY=https://openapi.alipay.com/gateway.do
 Environment=ALIPAY_ALIPAY_PUBLIC_KEY=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkhLqABUN1E2PCmOznQp+53T3x4j27I96hdatl6lWbCBPwyXnZVW4uYZ4kV+34+i2wCzEtMpUiNQaIsQXx2qD8x0d8szsj7pEZuY+xUUJTzm95fYO2nq4aaQ38T/kxdYrW12is8vwY83rlghdlkvVP2XZCuYoFq9UVieTu6LTDk6v91Mt2xr1Zw1Oj+yg8VpBFXkcS7ORJjiufWzCEoxzlb2KK2AGOLhdc8BJsBfrQ0JAqFB6b0uteUF21DDdPN/sblD8GoRAGuSpDhyQLG+0fDNdcIMyHpsq7bIDNjgYGS8RbKAtb6WyV6vriIemZ0fMvzN5Mpqv2jwCe/31ar//PwIDAQAB
 Environment=MOCK_LOGIN_ENABLED=true
 Environment=MOCK_LOGIN_KEY=d3v-t35t-k3y-2026
 Environment=ALIPAY_PRIVATE_KEY=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
 NoNewPrivileges=yes
 PrivateTmp=yes
--- a/deploy/rust-backend-green.service
+++ b/deploy/rust-backend-green.service
@@ -5,8 +5,8 @@ Wants=network.target
 [Service]
 Type=simple
-User=rust-backend
+User=root
-Group=rust-backend
+Group=root
 WorkingDirectory=/root/rust/rust_backend_green
 ExecStart=/root/rust/rust_backend_green/rust-backend
 Restart=always
@@ -21,9 +21,12 @@ Environment=JWT_SECRET=tribesman-pavestone-hatchling-wrangle-silly-embargo
 Environment=SSL_KEY_PATH=/etc/ssl/rust_backend/privkey.pem
 Environment=SSL_CERT_PATH=/etc/ssl/rust_backend/fullchain.pem
 Environment=RUST_LOG=info
-Environment=APP_VERSION=0.3.0
+Environment=APP_VERSION=0.2.7
 Environment=FREE_USER_DATA_LIMIT=20
-EnvironmentFile=/root/rust/rust_backend_green/.env
+Environment=ALIPAY_APP_ID=2021006148681106
 Environment=ALIPAY_ALIPAY_PUBLIC_KEY=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkhLqABUN1E2PCmOznQp+53T3x4j27I96hdatl6lWbCBPwyXnZVW4uYZ4kV+34+i2wCzEtMpUiNQaIsQXx2qD8x0d8szsj7pEZuY+xUUJTzm95fYO2nq4aaQ38T/kxdYrW12is8vwY83rlghdlkvVP2XZCuYoFq9UVieTu6LTDk6v91Mt2xr1Zw1Oj+yg8VpBFXkcS7ORJjiufWzCEoxzlb2KK2AGOLhdc8BJsBfrQ0JAqFB6b0uteUF21DDdPN/sblD8GoRAGuSpDhyQLG+0fDNdcIMyHpsq7bIDNjgYGS8RbKAtb6WyV6vriIemZ0fMvzN5Mpqv2jwCe/31ar//PwIDAQAB
 Environment=ALIPAY_PRIVATE_KEY=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
 Environment=ALIPAY_GATEWAY=https://openapi.alipay.com/gateway.do
 Environment=APP_BASE_URL=https://xmclassmate.top
 Environment=SERVER_PORT=4434
 Environment=SENTRY_DSN=http://f02c7cce1dc746e2ad41b11397dab0db@127.0.0.1:9000/1
--- a/deploy/rust-backend-prod.service
+++ b/deploy/rust-backend-prod.service
@@ -5,8 +5,8 @@ Wants=network.target
 [Service]
 Type=simple
-User=rust-backend
+User=root
-Group=rust-backend
+Group=root
 WorkingDirectory=/root/rust/rust_backend
 ExecStart=/root/rust/rust_backend/rust-backend
 Restart=always
@@ -25,7 +25,10 @@ Environment=RUST_LOG=info
 Environment=APP_VERSION=0.3.0
 Environment=FREE_USER_DATA_LIMIT=20
 Environment=APP_BASE_URL=https://xmclassmate.top
-EnvironmentFile=/root/rust/rust_backend/.env
+Environment=ALIPAY_APP_ID=your_alipay_app_id
 Environment=ALIPAY_GATEWAY=https://openapi.alipay.com/gateway.do
 Environment=ALIPAY_ALIPAY_PUBLIC_KEY=your_alipay_public_key
 Environment=ALIPAY_PRIVATE_KEY=your_private_key_base64
 NoNewPrivileges=yes
 PrivateTmp=yes
--- a/docs/BLUE-GREEN-DEPLOY.md
+++ b/docs/BLUE-GREEN-DEPLOY.md
@@ -1,9 +1,4 @@
-# 蓝绿部署（新服务器）
+# 蓝绿部署计划
 > **服务器**：47.109.203.92 (Aliyun, Debian 13)
 > **nginx**：原生 nginx（非 Docker/OpenResty）
 > **PostgreSQL**：Docker 容器 `postgres:17.6-alpine`
 > **部署用户**：`deploy`（有 sudo 权限）
 ## 域名与环境映射
@@ -33,7 +28,7 @@ xmclassmate.top      生产        :4433 / :4434  milkydata
 ```
 dev.xmclassmate.top
       │
-  nginx → :8080（单实例）
+  OpenResty → :8080（单实例）
       │
  milkydata_dev
 ```
@@ -53,7 +48,7 @@ dev.xmclassmate.top
 ```
 xmclassmate.top
       │
-  nginx proxy（直接路由）
+  OpenResty proxy
    /          \
 蓝色 :4433    绿色 :4434
 (active)      (idle)
@@ -75,18 +70,16 @@ xmclassmate.top
 两个 service 的 `DATABASE_URL` 都指向 `milkydata`，仅端口不同。
-**nginx proxy 配置：**
+**OpenResty proxy 配置：**
 ```
 # /www/sites/xmclassmate.top/proxy/root.conf
 location ^~ / {
-    proxy_pass https://127.0.0.1:4433;  # deploy.sh 切换此端口
+    proxy_pass http://127.0.0.1:4433;  # deploy.sh 切换此端口
 }
 ```
-> 生产环境使用 HTTPS proxy（`proxy_pass https://...`），因为后端自身处理 TLS。
+切换时 `sed` 替换端口，`nginx -s reload`。
 切换时 `sed` 替换端口，`sudo nginx -s reload`。
 ### 部署流程
@@ -117,11 +110,9 @@ location ^~ / {
 ### 切换脚本
 ```bash
-./scripts/switch-env.sh --switch green
+./scripts/switch-env.sh --env prod --switch green
 # 或切回蓝色
-./scripts/switch-env.sh --switch blue
+./scripts/switch-env.sh --env prod --switch blue
 # 查看当前状态
 ./scripts/switch-env.sh --status
 ```
 ### 回滚
@@ -212,11 +203,11 @@ cargo build --release && rsync ... systemctl restart  ← ❌
 | # | 步骤 | 说明 | 状态 |
 |---|------|------|------|
 | 1 | 数据迁移 | 已完成 | ✅ |
-| 2 | 准备生产 service 文件 | 已完成 | ✅ |
+| 2 | 准备生产 service 文件（填入实际密钥） | 待完成 | ⬜ |
-| 3 | 部署新代码到 `:4433` 和 `:4434` | 已完成 | ✅ |
+| 3 | 部署新代码到 `:4433` | 待完成 | ⬜ |
 | 4 | `env.ts` 设 `CURRENT_ENV = 'production'` | 已完成 | ✅ |
-| 5 | 微信开发者工具上传小程序 | 已完成 | ✅ |
+| 5 | 微信开发者工具上传小程序 | 待完成 | ⬜ |
-| 6 | 确认 nginx `proxy_pass` 指向 :4433 | 已完成 | ✅ |
+| 6 | 1Panel 确认 `proxy_pass` 指向 `:4433` | 已完成 | ✅ |
 ## 实施状态
@@ -224,11 +215,11 @@ cargo build --release && rsync ... systemctl restart  ← ❌
 | 组件 | 状态 |
 |------|------|
-| Blue service (:4433) | ✅ 运行中，当前活跃 |
+| Blue service (:4433) | ✅ 运行中，ConfigID `71ba8887` |
-| Green service (:4434) | ✅ 运行中，待命中 |
+| Green service (:4434) | ✅ 运行中，活动中 |
-| `deploy.sh production --target blue/green` | ✅ 已支持 |
+| `deploy.sh --target blue\|green` | ✅ 已支持 |
-| `switch-env.sh --switch blue/green` | ✅ 自动切换 nginx proxy |
+| `switch-env.sh --switch blue\|green` | ✅ 自动切换 |
-| nginx proxy | ✅ 指向活动中环境 |
+| OpenResty proxy | ✅ 指向活动中环境 |
 ### 下次部署流程
--- a/docs/OPS-ALERT.md
+++ b/docs/OPS-ALERT.md
@@ -1,84 +0,0 @@
 # 服务器邮件告警与每日报告 — 部署指南
 <!-- 更新时间：2026-08-21 -->
 ## 概述
 两封自动邮件，均通过 `msmtp` → 163 SMTP 发送（复用现有 `~/.msmtprc` 配置）：
 | 脚本 | 频率（cron） | 作用 |
 | --- | --- | --- |
 | `daily-report.sh` | 每日 08:00 | 服务器健康报告（HTML）：系统/容器/SSL/服务/安全/备份 + **支付与会员统计** |
 | `alert.sh` | 每 5 分钟 | **实时异常告警**：正常时静默，异常才发邮件（带防刷屏状态机） |
 ## 部署步骤
 ```bash
 # 1. 上传三个文件到服务器（root 用户）
 scp scripts/mail-lib.sh scripts/daily-report.sh scripts/alert.sh root@<服务器>:/root/rust/scripts/
 ssh root@<服务器> 'chmod +x /root/rust/scripts/*.sh && mkdir -p /root/rust/scripts/logs'
 # 2. 配置 cron（root）
 ssh root@<服务器> 'crontab -e'
 # 加入以下两行：
 0 8 * * * /root/rust/scripts/daily-report.sh >> /root/rust/scripts/logs/daily-report.log 2>&1
 */5 * * * * /root/rust/scripts/alert.sh >> /root/rust/scripts/logs/alert.log 2>&1
 ```
 ## 验证
 ```bash
 # 干跑告警（预览当前异常与将发送的邮件，不真正发送）
 /root/rust/scripts/alert.sh --dry-run
 # 手动发一封健康报告测试 msmtp 链路
 /root/rust/scripts/daily-report.sh
 # 查看邮件日志
 tail -50 /root/rust/scripts/logs/mail.log
 ```
 ## alert.sh 检测项与阈值
 | 检测项 | 警告 | 严重 |
 | --- | --- | --- |
 | 磁盘使用（/） | > 80% | > 90% |
 | 内存使用 | > 80% | > 90% |
 | 备份时效 | > 24h | > 48h（或无备份） |
 | 服务状态（green/blue/nginx） | — | 非 active |
 | Docker 容器 | — | 存在非 Up 容器 / docker 不可用 |
 | SSL 证书剩余 | < 30 天 | < 7 天 |
 | 支付卡单（pending > 30 分钟） | ≥ 1 笔（附订单号） | — |
 | 数据库（SELECT 1） | — | 不可用 |
 ### 防刷屏机制
 状态文件 `.alert-state`（默认 `/root/rust/scripts/.alert-state`）记录每个检测项最近告警级别：
 - 级别**上升** → 立即发邮件
 - 级别**不变** → 冷却 `ALERT_COOLDOWN_HOURS`（默认 6 小时）后才再次提醒
 - **恢复**正常 → 静默清除状态，不发邮件
 ## 可配置项（环境变量）
 | 变量 | 默认值 | 说明 |
 | --- | --- | --- |
 | `MAIL_TO` | `m943790568@163.com` | 收件人，逗号分隔多地址 |
 | `MAIL_FROM` | `ASD 监控 <m943790568@163.com>` | 发件人显示名 |
 | `MAIL_ACCOUNT` | `default` | msmtp 账户名 |
 | `MAIL_LOG_DIR` | `/root/rust/scripts/logs` | 日志目录（mail.log / alert.log） |
 | `MAIL_RETRY` | `3` | 发送失败重试次数 |
 | `DB_CONTAINER` | `1Panel-postgresql-FtMo` | PostgreSQL 容器名（1Panel 安装） |
 | `BACKUP_DIR` | `/root/rust/backups/milkydata` | 备份目录 |
 | `STUCK_ORDER_MINUTES` | `30` | pending 订单视为卡单的时长 |
 | `ALERT_STATE_FILE` | `/root/rust/scripts/.alert-state` | 状态文件路径 |
 | `ALERT_COOLDOWN_HOURS` | `6` | 同级别再次提醒的冷却时间 |
 ## 注意事项
 - 脚本在**服务器本机**运行（cron 以 root 执行），数据库通过 `docker exec <容器> psql` 访问，
  容器名与 `check-members.sh` / `send-notification.sh` 保持一致；如容器名不同，设置 `DB_CONTAINER` 覆盖。
 - 邮件为 HTML + UTF-8，无需额外编码配置；msmtp 发送失败自动重试 3 次并记录日志。
 - 单次采集失败（如 journalctl 无权限）不会阻断整封邮件，对应项显示 N/A。
 - `alert.sh` 的卡单检测可直接发现「支付卡在确认页面」类问题（pending 超 30 分钟即告警，
  邮件中附订单号与创建时间，便于对照支付宝账单处理）。
--- a/docs/SERVER-MIGRATION-PLAN.md
+++ b/docs/SERVER-MIGRATION-PLAN.md
@@ -2,12 +2,12 @@
 ## 新旧对比
-| 项目 | 旧服务器 (1panel-server) | 新服务器 (xxx.xxx.xxx.xxx) |
+| 项目 | 旧服务器 (1panel-server) | 新服务器 (47.109.203.92) |
-|------|------------------------|---------------------------|
+|------|------------------------|-------------------------|
-| 系统 | - | 待填写 |
+| 系统 | - | Debian 13.5 |
-| CPU | - | 待填写 |
+| CPU | - | 2 核 |
-| 内存 | - | 待填写 |
+| 内存 | - | 1.6 GiB |
-| 磁盘 | - | 待填写 |
+| 磁盘 | - | 40G (可用 36G) |
 | 区域 | - | 成都 |
 | 角色 | 当前生产+开发 | 目标生产+开发 |
@@ -36,147 +36,64 @@ pg_dump -Fc milkydata > /tmp/milkydata.dump
 pg_restore -d milkydata /tmp/milkydata.dump
 ```
-### 1.4 安装并配置 nginx
+### 1.4 启动 OpenResty
 ```bash
-apt install -y nginx
+docker run -d --name openresty \
  --network host \
  -v /www/sites:/www/sites \
  1panel/openresty:1.21.4.3-3-3-focal
 ```
 复制 nginx 配置文件和 SSL 证书。
 ### 1.5 复制 SSL 证书 + nginx 配置
 ```bash
-rsync -av root@old-server:/etc/nginx/sites-available/ /etc/nginx/sites-available/
+rsync -av root@1panel-server:/www/sites/ /www/sites/
 rsync -av root@old-server:/etc/nginx/sites-enabled/ /etc/nginx/sites-enabled/
 rsync -av root@old-server:/etc/ssl/ /etc/ssl/
 ```
 ## 阶段 2 — 后端部署
 ### 2.1 创建 systemd 服务（blue/green/dev）
 ```bash
 # 创建目录
 mkdir -p /root/rust/rust_backend_blue
 mkdir -p /root/rust/rust_backend_green
 mkdir -p /root/rust/rust_backend_dev
 # 注册 systemd service（从 deploy/ 目录上传）
 ```
 ### 2.2 部署 Rust 后端
 ```bash
 # 先部署到 dev 验证
 cd ASD-backend/rust-backend
-deploy.sh development --remote-host xxx.xxx.xxx.xxx
+deploy.sh development --remote-host 47.109.203.92
-deploy.sh production --remote-host xxx.xxx.xxx.xxx
+
 # 再部署 blue/green
 deploy.sh production --remote-host 47.109.203.92
 ```
 ### 2.3 更新 deploy.sh
-将默认 REMOTE_HOST 改为新服务器 IP。
+将默认 REMOTE_HOST 改为新服务器 IP
-## 阶段 3 — ⚠️ 关键配置（迁移后必做）
+## 阶段 3 — 切换
 ### 3.1 设置 APP_BASE_URL
 每个环境的 `.env` 文件必须设置 `APP_BASE_URL`，否则默认值为 `https://dev.xmclassmate.top`，导致支付宝通知回调发错服务器。
 ### 3.1 内部验证
 ```bash
-# 生产环境
+curl http://127.0.0.1:8080/health  # dev
-echo "APP_BASE_URL=https://xmclassmate.top" >> /root/rust/rust_backend_blue/.env
+curl -k https://127.0.0.1:4433/health  # blue
-echo "APP_BASE_URL=https://xmclassmate.top" >> /root/rust/rust_backend_green/.env
+curl -k https://127.0.0.1:4434/health  # green
 # 开发环境
 echo "APP_BASE_URL=https://dev.xmclassmate.top" >> /root/rust/rust_backend_dev/.env
 ```
-### 3.2 验证 notify_url
+### 3.2 更新 DNS
 将域名指向新服务器 IP
-迁移后通过 API 检查支付表单的 notify_url 是否正确：
+### 3.3 验证公网访问
 ```bash
 # 获取访客 JWT
 JWT=$(curl -s -X POST 'https://YOUR_DOMAIN/api/guest-login' | python3 -c "import sys,json; print(json.load(sys.stdin)['token'])")
 # 检查支付表单的 notify_url
 curl -s "https://YOUR_DOMAIN/payment/page?package=monthly&jwt=${JWT}" | grep -oP 'notify_url[^"]+"[^"]+' | head -1
 ```
 预期输出：`notify_url" value="https://YOUR_DOMAIN/payment/notify"`
 ### 3.3 验证支付宝密钥匹配
 ```bash
 # 确认密钥配置正确（生产用正式密钥，开发用沙箱密钥）
 ssh root@NEW_SERVER 'grep "ALIPAY_APP_ID\|ALIPAY_GATEWAY" /root/rust/rust_backend_*/env'
 ```
 | 环境 | APP_ID 前缀 | GATEWAY |
 |------|------------|---------|
 | 生产 | 202100... | `openapi.alipay.com` |
 | 开发 | 902100...（沙箱） | `openapi-sandbox.dl.alipaydev.com` |
 ### 3.4 验证关键端点
 ```bash
 # 支付页面可访问（非 503）
 curl -s -o /dev/null -w "%{http_code}" https://YOUR_DOMAIN/payment
 # 访客登录正常
 curl -s -X POST https://YOUR_DOMAIN/api/guest-login | python3 -c "import sys,json; print(json.load(sys.stdin).get('success','FAIL'))"
 # 健康检查
 curl -s https://YOUR_DOMAIN/health | python3 -c "import sys,json; print(json.load(sys.stdin).get('status','FAIL'))"
 ```
 ### 3.5 迁移后支付全链路测试
 ```bash
 bash tests/payment_e2e_test.sh
 ```
 ### 3.6 运行部署后测试
 ```bash
 export TEST_DOMAIN="https://YOUR_DOMAIN"
 ./deploy.sh production --skip-tests=false
 # 或手动运行
 export BASE_URL="https://YOUR_DOMAIN"
 bash lib/test.sh
 ```
 ## 阶段 4 — DNS 切换
 ### 4.1 更新 DNS 记录
 将域名指向新服务器 IP。
 ### 4.2 验证公网访问
 ```bash
 curl https://dev.xmclassmate.top/health
 curl https://xmclassmate.top/health
 curl https://xmclassmate.top/payment
 ```
-## 阶段 5 — 清理
+## 阶段 4 — 清理（可选）
 - 迁移 GlitchTip (Sentry)
 - 旧服务器保留 1 周作为回退
 - 确认无问题后关闭旧服务器
 ## 迁移检查清单
 | # | 检查项 | 命令/方法 | 状态 |
 |---|--------|----------|------|
 | 1 | PostgreSQL 运行 | `docker ps \| grep postgres` | ⬜ |
 | 2 | 数据库导入 | `pg_restore -d milkydata /tmp/xxx.dump` | ⬜ |
 | 3 | nginx 配置正确 | `nginx -t` | ⬜ |
 | 4 | SSL 证书有效 | `openssl s_client -connect DOMAIN:443` | ⬜ |
 | 5 | 后端服务运行 | `systemctl status rust-backend-*` | ⬜ |
 | 6 | APP_BASE_URL 已设置 | `grep APP_BASE_URL /root/rust/rust_backend_*/.env` | ⬜ |
 | 7 | 支付宝密钥环境正确 | `grep ALIPAY_APP_ID /root/rust/rust_backend_*/.env` | ⬜ |
 | 8 | notify_url 正确 | 见 3.2 验证 | ⬜ |
 | 9 | 支付页面可访问 | `curl DOMAIN/payment` | ⬜ |
 | 10 | 访客登录正常 | `curl -X POST DOMAIN/api/guest-login` | ⬜ |
 | 11 | 全链路测试通过 | `bash tests/payment_e2e_test.sh` | ⬜ |
 | 12 | 部署后测试通过 | `deploy.sh production` | ⬜ |
 ## 历史问题复盘
 | 日期 | 问题 | 根因 | 预防 |
 |------|------|------|------|
 | 2026-07-23 | 支付回调丢失 | `APP_BASE_URL` 未设置，默认指向 `dev.xmclassmate.top`，开发服务器无法通过 RSA2 验证 | 迁移清单第 6、8 项确保 base_url 配置正确 |
 | 2026-07-18 | 保存功能 500 | nginx AppArmor 缺少 `/var/lib/nginx/** rw` | 部署后测试 `test_nginx_proxy_temp` |
 | 2026-07-13 | ICP 备案号未显示 | nginx 配置路径不匹配（`/www/sites/` vs `/etc/nginx/sites-enabled/`） | 迁移清单第 3 项检查 nginx 配置 |
--- a/lib/common.sh
+++ b/lib/common.sh
@@ -90,7 +90,7 @@ check_service_file() {
    local missing=0 ph=0
    local required_vars=("DATABASE_URL" "JWT_SECRET" "WECHAT_APPID" "WECHAT_SECRET")
-    [ "${APP_ENV}" = "production" ] && required_vars+=("SSL_KEY_PATH" "SSL_CERT_PATH")
+    [ "${APP_ENV}" = "production" ] && required_vars+=("SSL_KEY_PATH" "SSL_CERT_PATH" "ALIPAY_APP_ID")
    for var in "${required_vars[@]}"; do
        local val; val=$(echo "$content" | grep -E "^Environment=${var}=" | head -1 | sed "s/^Environment=${var}=//")
@@ -107,12 +107,13 @@ check_service_file() {
 }
 # ---------- 蓝绿部署：检查目标是否为当前活动环境 ----------
 NGINX_CONTAINER="1Panel-openresty-ABu5"
 get_proxy_conf() {
    if [ "${APP_ENV}" = "development" ]; then
-        echo "/etc/nginx/sites-enabled/dev.xmclassmate.top"
+        echo "/www/sites/dev.xmclassmate.top/proxy/root.conf"
    else
-        echo "/etc/nginx/sites-enabled/xmclassmate.top"
+        echo "/www/sites/xmclassmate.top/proxy/root.conf"
    fi
 }
@@ -121,7 +122,7 @@ check_not_active() {
    local proxy_conf; proxy_conf=$(get_proxy_conf)
    local active_env
-    active_env=$(remote "sudo cat ${proxy_conf} 2>/dev/null" 2>/dev/null | grep -oP '127\.0\.0\.1:\d+' | head -1 || echo "")
+    active_env=$(remote "docker exec ${NGINX_CONTAINER} cat ${proxy_conf} 2>/dev/null" 2>/dev/null | grep -oP '127\.0\.0\.1:\d+' | head -1 || echo "")
    local current_target
    case "$active_env" in
@@ -155,8 +156,7 @@ deploy_service_file() {
        local has_mock; has_mock=$(remote "grep -c 'MOCK_LOGIN_ENABLED' /etc/systemd/system/${SERVICE_NAME} 2>/dev/null || echo 0")
        if [ "$has_mock" = "0" ]; then
            local mock_key; mock_key=$(openssl rand -base64 12 2>/dev/null | tr -d '\n' || echo "dev-mock-$(date +%s)")
-            local escaped_key; escaped_key=$(echo "$mock_key" | sed 's/[\/&]/\\&/g')
+            remote "sed -i '/^\[Service\]/a Environment=MOCK_LOGIN_ENABLED=true\nEnvironment=MOCK_LOGIN_KEY=${mock_key}' /etc/systemd/system/${SERVICE_NAME}"
            remote "sed -i '/^\[Service\]/a Environment=MOCK_LOGIN_ENABLED=true\nEnvironment=MOCK_LOGIN_KEY=${escaped_key}' /etc/systemd/system/${SERVICE_NAME}"
            log_info "自动配置 MOCK_LOGIN_ENABLED=true, MOCK_LOGIN_KEY=${mock_key}"
        fi
    fi
@@ -188,8 +188,8 @@ Wants=network.target
 [Service]
 Type=simple
-User=rust-backend
+User=root
-Group=rust-backend
+Group=root
 WorkingDirectory=${REMOTE_DIR}
 ExecStart=${REMOTE_DIR}/rust-backend
 Restart=always
@@ -206,8 +206,6 @@ Environment=SSL_CERT_PATH=
 Environment=RUST_LOG=info
 Environment=APP_VERSION=0.3.0
 Environment=FREE_USER_DATA_LIMIT=20
 # 支付宝密钥存储在 .env 文件（不在 Git 中）
 EnvironmentFile=${REMOTE_DIR}/.env
 SERVEOF
    chmod 600 "$(get_service_file_local)"
@@ -273,17 +271,17 @@ backup_database() {
    local ts; ts=$(date +%Y%m%d_%H%M%S)
    local bf="${REMOTE_DIR}/backups/${DB_NAME}_${ts}.dump"
    remote "mkdir -p ${REMOTE_DIR}/backups"
-    if remote "sudo docker exec ${DB_CONTAINER} pg_dump -Fc -U ${DB_USER} ${DB_NAME} > /tmp/backup_${ts}.dump && mv /tmp/backup_${ts}.dump '${bf}'" 2>&1; then
+    if remote "docker exec ${DB_CONTAINER} pg_dump -Fc -U ${DB_USER} ${DB_NAME} > /tmp/backup_${ts}.dump && mv /tmp/backup_${ts}.dump '${bf}'" 2>&1; then
        log_info "数据库备份成功: ${DB_NAME}_${ts}.dump"
-        cleanup_old_db_backups 7
+        cleanup_old_db_backups
    else
        log_warn "数据库备份失败，继续部署"
    fi
 }
 cleanup_old_db_backups() {
-    local keep="${1:-7}"
+    local keep="${1:-1}"
-    local to_del; to_del=$(remote "ls -t ${REMOTE_DIR}/backups/${DB_NAME}_*.dump* 2>/dev/null | tail -n +$((keep+1))" || echo "")
+    local to_del; to_del=$(remote "ls -t ${REMOTE_DIR}/backups/${DB_NAME}_*.dump 2>/dev/null | tail -n +$((keep+1))" || echo "")
    [ -z "$to_del" ] && return 0
    log_step "清理旧数据库备份（保留 ${keep} 个）..."
    echo "$to_del" | while read -r f; do [ -n "$f" ] && remote "rm -f '${f}'" 2>/dev/null && echo "  删除: $(basename "$f")" || true; done
@@ -334,16 +332,16 @@ run_migrations() {
    [ -n "$sql_files" ] && backup_database
    # 创建迁移追踪表
-    remote "sudo docker exec -i ${DB_CONTAINER} psql -U ${DB_USER} -d ${DB_NAME}" <<<'CREATE TABLE IF NOT EXISTS _migrations (name TEXT PRIMARY KEY, applied_at TIMESTAMPTZ DEFAULT NOW());' 2>/dev/null || true
+    remote "docker exec -i ${DB_CONTAINER} psql -U ${DB_USER} -d ${DB_NAME}" <<<'CREATE TABLE IF NOT EXISTS _migrations (name TEXT PRIMARY KEY, applied_at TIMESTAMPTZ DEFAULT NOW());' 2>/dev/null || true
    for f in $sql_files; do
        local name; name=$(basename "$f")
        log_info "检查迁移: ${name}"
-        local done; done=$(remote "sudo docker exec ${DB_CONTAINER} psql -U ${DB_USER} -d ${DB_NAME} -tAc \"SELECT COUNT(*) FROM _migrations WHERE name='${name}'\"" 2>/dev/null || echo "0")
+        local done; done=$(remote "docker exec ${DB_CONTAINER} psql -U ${DB_USER} -d ${DB_NAME} -tAc \"SELECT COUNT(*) FROM _migrations WHERE name='${name}'\"" 2>/dev/null || echo "0")
        [ "$done" != "0" ] && { log_info "  跳过（已执行）: ${name}"; continue; }
        log_info "  执行: ${name}"
-        remote "cat '${f}' | sudo docker exec -i ${DB_CONTAINER} psql -U ${DB_USER} -d ${DB_NAME}" && \
+        remote "cat '${f}' | docker exec -i ${DB_CONTAINER} psql -U ${DB_USER} -d ${DB_NAME}" && \
-        remote "sudo docker exec ${DB_CONTAINER} psql -U ${DB_USER} -d ${DB_NAME} -c \"INSERT INTO _migrations (name) VALUES ('${name}')\"" && \
+        remote "docker exec ${DB_CONTAINER} psql -U ${DB_USER} -d ${DB_NAME} -c \"INSERT INTO _migrations (name) VALUES ('${name}')\"" && \
        log_info "  完成: ${name}" || log_warn "  迁移 ${name} 可能已执行或失败"
    done
    log_info "数据库迁移完成"
@@ -404,15 +402,19 @@ rollback_on_failure() {
 view_logs() {
    local lines="${LOG_LINES:-50}"
    log_step "查看后端日志（最后 ${lines} 行）..."
-    [ "$DRY_RUN" = true ] && { log_dry "journalctl -u ${SERVICE_NAME} -n ${lines}"; return 0; }
+    [ "$DRY_RUN" = true ] && { log_dry "tail -${lines} 日志文件"; return 0; }
-    remote "journalctl -u ${SERVICE_NAME} -n ${lines} --no-pager 2>/dev/null" || log_warn "无法读取 journalctl 日志"
+    local lf; lf=$(remote "ls -t ${REMOTE_DIR}/logs/rust-backend.*.log 2>/dev/null | head -1" || echo "")
    [ -z "$lf" ] && { log_warn "未找到日志文件"; return 1; }
    echo -e "${BLUE}=== ${lf} ===${NC}"; remote "tail -${lines} '${lf}'"
 }
 tail_logs() {
    local lines="${LOG_LINES:-100}"
    log_step "实时跟踪日志..."
    [ "$DRY_RUN" = true ] && return 0
-    ssh -t "${REMOTE_USER}@${REMOTE_HOST}" "journalctl -u ${SERVICE_NAME} -n ${lines} -f"
+    local lf; lf=$(remote "ls -t ${REMOTE_DIR}/logs/rust-backend.*.log 2>/dev/null | head -1" || echo "")
    [ -z "$lf" ] && { log_warn "未找到日志文件"; return 1; }
    ssh -t "${REMOTE_USER}@${REMOTE_HOST}" "tail -f -n ${lines} '${lf}'"
 }
 status() {
@@ -420,8 +422,8 @@ status() {
    [ "$DRY_RUN" = true ] && { log_dry "systemctl status ${SERVICE_NAME}"; return 0; }
    echo -e "${BLUE}=== ${SERVICE_NAME} ===${NC}"
    remote "systemctl status ${SERVICE_NAME} --no-pager"
-    echo -e "${BLUE}=== 最近日志 ===${NC}"
+    local lf; lf=$(remote "ls -t ${REMOTE_DIR}/logs/rust-backend.*.log 2>/dev/null | head -1" || echo "")
-    remote "journalctl -u ${SERVICE_NAME} -n 20 --no-pager 2>/dev/null" || log_warn "无法读取 journalctl 日志"
+    [ -n "$lf" ] && { echo -e "${BLUE}=== 最近日志 ===${NC}"; remote "tail -20 '${lf}'"; }
 }
 # ---------- 确认 ----------
@@ -457,12 +459,12 @@ check_ssl_expiry() {
    log_step "检查 SSL 证书到期时间..."
    [ "$DRY_RUN" = true ] && { log_dry "openssl x509 -checkend 2592000"; return 0; }
-    # 读取 SSL 证书
+    # 从 OpenResty 容器内读取证书
-    local cert_info; cert_info=$(remote "sudo openssl x509 -in /www/sites/${TEST_DOMAIN#https://}/ssl/fullchain.pem -noout -enddate -checkend 2592000 2>/dev/null" || echo "")
+    local cert_info; cert_info=$(remote "docker exec 1Panel-openresty-ABu5 openssl x509 -in /www/sites/${TEST_DOMAIN#https://}/ssl/fullchain.pem -noout -enddate -checkend 2592000 2>/dev/null" || echo "")
    if echo "$cert_info" | grep -q "Certificate will expire"; then
-        local expiry; expiry=$(remote "sudo openssl x509 -in /www/sites/${TEST_DOMAIN#https://}/ssl/fullchain.pem -noout -enddate 2>/dev/null | cut -d= -f2" || echo "未知")
+        local expiry; expiry=$(remote "docker exec 1Panel-openresty-ABu5 openssl x509 -in /www/sites/${TEST_DOMAIN#https://}/ssl/fullchain.pem -noout -enddate 2>/dev/null | cut -d= -f2" || echo "未知")
-        local days_left; days_left=$(remote "sudo openssl x509 -in /www/sites/${TEST_DOMAIN#https://}/ssl/fullchain.pem -noout -checkend 86400 2>/dev/null | grep -c 'will expire'" || echo "0")
+        local days_left; days_left=$(remote "docker exec 1Panel-openresty-ABu5 openssl x509 -in /www/sites/${TEST_DOMAIN#https://}/ssl/fullchain.pem -noout -checkend 86400 2>/dev/null | grep -c 'will expire'" || echo "0")
        log_warn "SSL 证书将于 ${expiry} 到期（不足 30 天）！"
        [ "$days_left" -gt "0" ] && log_warn "  警告：证书将在 1 天内到期，请立即续期！"
    else
--- a/lib/test.sh
+++ b/lib/test.sh
@@ -9,7 +9,7 @@ BASE_URL="http://127.0.0.1"
 TEST_USER_ID=""
 setup_test_user() {
-    TEST_USER_ID=$(remote "sudo docker exec ${DB_CONTAINER} psql -U ${DB_USER} -d ${DB_NAME} -tAc \"
+    TEST_USER_ID=$(remote "docker exec ${DB_CONTAINER} psql -U ${DB_USER} -d ${DB_NAME} -tAc \"
        INSERT INTO users (openid, name, type) VALUES ('test_\$(date +%s)', 'test_user', 2)
        RETURNING id;
    \"" 2>/dev/null | tr -d ' ' || echo "")
@@ -19,7 +19,7 @@ setup_test_user() {
 cleanup_test_user() {
    if [ -n "$TEST_USER_ID" ]; then
-        remote "sudo docker exec ${DB_CONTAINER} psql -U ${DB_USER} -d ${DB_NAME} -c \"
+        remote "docker exec ${DB_CONTAINER} psql -U ${DB_USER} -d ${DB_NAME} -c \"
            DELETE FROM payment_orders WHERE user_id = ${TEST_USER_ID};
            DELETE FROM users WHERE id = ${TEST_USER_ID};
        \"" 2>/dev/null || true
@@ -74,13 +74,13 @@ test_basic_connectivity() {
 }
 test_database_connection() {
-    local r; r=$(remote "sudo docker exec ${DB_CONTAINER} pg_isready -U ${DB_USER} 2>/dev/null" || echo "failed")
+    local r; r=$(remote "docker exec ${DB_CONTAINER} pg_isready -U ${DB_USER} 2>/dev/null" || echo "failed")
    [[ "$r" =~ "accepting connections" ]] && log_info "  PostgreSQL 连接正常" || { log_warn "  PostgreSQL 连接失败"; return 1; }
-    r=$(remote "sudo docker exec ${DB_CONTAINER} psql -U ${DB_USER} -d ${DB_NAME} -tAc 'SELECT 1'" 2>/dev/null || echo "failed")
+    r=$(remote "docker exec ${DB_CONTAINER} psql -U ${DB_USER} -d ${DB_NAME} -tAc 'SELECT 1'" 2>/dev/null || echo "failed")
    [ "$r" = "1" ] && log_info "  数据库查询正常" || { log_warn "  数据库查询失败"; return 1; }
-    r=$(remote "sudo docker exec ${DB_CONTAINER} psql -U ${DB_USER} -d ${DB_NAME} -tAc 'SELECT tablename FROM pg_tables WHERE schemaname='\''public'\'' LIMIT 1'" 2>/dev/null || echo "failed")
+    r=$(remote "docker exec ${DB_CONTAINER} psql -U ${DB_USER} -d ${DB_NAME} -tAc 'SELECT tablename FROM pg_tables WHERE schemaname='\''public'\'' LIMIT 1'" 2>/dev/null || echo "failed")
    [ -n "$r" ] && log_info "  表存在: ${r}" || { log_warn "  表查询失败"; return 1; }
    log_info "数据库连接测试通过"; return 0
 }
@@ -173,10 +173,10 @@ test_payment_endpoints() {
 }
 test_migration_status() {
-    local r; r=$(remote "sudo docker exec ${DB_CONTAINER} psql -U ${DB_USER} -d ${DB_NAME} -tAc 'SELECT COUNT(*) FROM _migrations'" 2>/dev/null || echo "0")
+    local r; r=$(remote "docker exec ${DB_CONTAINER} psql -U ${DB_USER} -d ${DB_NAME} -tAc 'SELECT COUNT(*) FROM _migrations'" 2>/dev/null || echo "0")
    [ "$r" -gt "0" ] 2>/dev/null && log_info "  _migrations 表存在，已执行 ${r} 个迁移 ✅" || { log_warn "  _migrations 表不存在或无记录"; return 0; }
-    local last; last=$(remote "sudo docker exec ${DB_CONTAINER} psql -U ${DB_USER} -d ${DB_NAME} -tAc 'SELECT name FROM _migrations ORDER BY applied_at DESC LIMIT 1'" 2>/dev/null || echo "")
+    local last; last=$(remote "docker exec ${DB_CONTAINER} psql -U ${DB_USER} -d ${DB_NAME} -tAc 'SELECT name FROM _migrations ORDER BY applied_at DESC LIMIT 1'" 2>/dev/null || echo "")
    [ -n "$last" ] && log_info "  最新迁移: ${last} ✅"
    return 0
 }
@@ -186,6 +186,16 @@ test_migration_status() {
 test_payment_flow() {
    log_info "开始支付链路测试..."
    # 清理 trap：测试失败时清理
    local test_cleanup_done=false
    cleanup_payment_test() {
        if [ "$test_cleanup_done" = false ]; then
            cleanup_test_user
            test_cleanup_done=true
        fi
    }
    trap cleanup_payment_test EXIT
    # 阶段 1：检查订单到期时间计算与套餐天数是否一致
    # 通过 SQL 直接创建测试订单（避免 JWT 依赖），验证 order.expires_at 间隔
    local uuid_prefix
@@ -202,11 +212,11 @@ test_payment_flow() {
        # 创建测试订单
        local sql="INSERT INTO payment_orders (user_id, order_no, package_type, amount, status, expires_at)
                   VALUES (${TEST_USER_ID}, '${test_no}', '${pkg_type}', 100, 'pending', NOW() + INTERVAL '${expected_days} days');"
-        remote "sudo docker exec ${DB_CONTAINER} psql -U ${DB_USER} -d ${DB_NAME} -c \"${sql}\"" 2>/dev/null || true
+        remote "docker exec ${DB_CONTAINER} psql -U ${DB_USER} -d ${DB_NAME} -c \"${sql}\"" 2>/dev/null || true
        # 验证到期时间间隔
        local interval_days
-        interval_days=$(remote "sudo docker exec ${DB_CONTAINER} psql -U ${DB_USER} -d ${DB_NAME} -tAc \"
+        interval_days=$(remote "docker exec ${DB_CONTAINER} psql -U ${DB_USER} -d ${DB_NAME} -tAc \"
            SELECT EXTRACT(DAY FROM (expires_at - created_at)) FROM payment_orders WHERE order_no = '${test_no}';
        \"" 2>/dev/null || echo "0")
        interval_days=${interval_days%.*}
@@ -220,7 +230,7 @@ test_payment_flow() {
        # 清理测试订单
        local del="DELETE FROM payment_orders WHERE order_no = '${test_no}';"
-        remote "sudo docker exec ${DB_CONTAINER} psql -U ${DB_USER} -d ${DB_NAME} -c \"${del}\"" 2>/dev/null || true
+        remote "docker exec ${DB_CONTAINER} psql -U ${DB_USER} -d ${DB_NAME} -c \"${del}\"" 2>/dev/null || true
    done
    # 阶段 2：测试提交订单后的会员时长（仅开发环境有 mock 支付）
@@ -257,7 +267,7 @@ test_payment_flow() {
                    # 5. 验证会员时长
                    local member_expires
-                    member_expires=$(remote "sudo docker exec ${DB_CONTAINER} psql -U ${DB_USER} -d ${DB_NAME} -tAc \"
+                    member_expires=$(remote "docker exec ${DB_CONTAINER} psql -U ${DB_USER} -d ${DB_NAME} -tAc \"
                        SELECT EXTRACT(DAY FROM (membership_expires_at - NOW()))::int
                        FROM users WHERE id = ${TEST_USER_ID};
                    \"" 2>/dev/null || echo "0")
@@ -271,9 +281,9 @@ test_payment_flow() {
                    # 6. 清理：取消会员
                    local clean="UPDATE users SET is_member = false, membership_expires_at = NULL WHERE id = ${TEST_USER_ID};"
-                    remote "sudo docker exec ${DB_CONTAINER} psql -U ${DB_USER} -d ${DB_NAME} -c \"${clean}\"" 2>/dev/null || true
+                    remote "docker exec ${DB_CONTAINER} psql -U ${DB_USER} -d ${DB_NAME} -c \"${clean}\"" 2>/dev/null || true
                    local cancel="UPDATE payment_orders SET status = 'cancelled' WHERE order_no = '${order_no}' AND status = 'paid';"
-                    remote "sudo docker exec ${DB_CONTAINER} psql -U ${DB_USER} -d ${DB_NAME} -c \"${cancel}\"" 2>/dev/null || true
+                    remote "docker exec ${DB_CONTAINER} psql -U ${DB_USER} -d ${DB_NAME} -c \"${cancel}\"" 2>/dev/null || true
                else
                    log_warn "  未获取到订单号，跳过 mock 确认测试"
                fi
@@ -309,20 +319,20 @@ test_payment_dedup() {
    local all_ok=true
    # 1. 在服务器上生成 SQL 文件（避免 stdin 管道问题）
-    remote "cat > ${sql_file} << SQLEOF
+    remote "cat > ${sql_file} << 'SQLEOF'
 INSERT INTO payment_orders (user_id, order_no, package_type, amount, status, expires_at) VALUES (${user_id}, '${test_no1}', 'monthly', 590, 'pending', NOW() + INTERVAL '30 days');
 INSERT INTO payment_orders (user_id, order_no, package_type, amount, status, expires_at) VALUES (${user_id}, '${test_no2}', 'monthly', 590, 'pending', NOW() + INTERVAL '30 days');
 SQLEOF
-sudo docker exec ${DB_CONTAINER} psql -U ${DB_USER} -d ${DB_NAME} -v ON_ERROR_STOP=1 -f ${sql_file}
+docker exec ${DB_CONTAINER} psql -U ${DB_USER} -d ${DB_NAME} -v ON_ERROR_STOP=1 -f ${sql_file}
 rm -f ${sql_file}" 2>&1 || { log_warn "  SQL 执行异常"; all_ok=false; }
    # 2. 查询数量
    local pending_count
-    pending_count=$(remote "sudo docker exec ${DB_CONTAINER} psql -U ${DB_USER} -d ${DB_NAME} -tAc \"SELECT COUNT(*) FROM payment_orders WHERE user_id = ${user_id} AND package_type = 'monthly' AND status = 'pending';\"" 2>/dev/null || echo "0")
+    pending_count=$(remote "docker exec ${DB_CONTAINER} psql -U ${DB_USER} -d ${DB_NAME} -tAc \"SELECT COUNT(*) FROM payment_orders WHERE user_id = ${user_id} AND package_type = 'monthly' AND status = 'pending';\"" 2>/dev/null || echo "0")
    pending_count=$(echo "$pending_count" | tr -d ' ')
    # 3. 清理
-    remote "sudo docker exec ${DB_CONTAINER} psql -U ${DB_USER} -d ${DB_NAME} -tAc \"DELETE FROM payment_orders WHERE order_no LIKE '${uuid_prefix}%';\"" 2>/dev/null || true
+    remote "docker exec ${DB_CONTAINER} psql -U ${DB_USER} -d ${DB_NAME} -tAc \"DELETE FROM payment_orders WHERE order_no LIKE '${uuid_prefix}%';\"" 2>/dev/null || true
    if [ -n "$pending_count" ] && [ "$pending_count" -ge 2 ] 2>/dev/null; then
        log_info "  同用户同套餐有 ${pending_count} 个 pending 订单（去重逻辑正常）✅"
@@ -347,7 +357,7 @@ test_payment_maintenance() {
    # 启用维护模式
    remote "sed -i '/^Environment=PAYMENT_MAINTENANCE_MODE/d' /etc/systemd/system/${SERVICE_NAME}
            sed -i '/^\[Service\]/a Environment=PAYMENT_MAINTENANCE_MODE=true' /etc/systemd/system/${SERVICE_NAME}
-            systemctl daemon-reload && systemctl restart ${SERVICE_NAME} && sleep 3" 2>/dev/null || true
+            systemctl daemon-reload && sleep 1" 2>/dev/null || true
    # 测试 quota 返回 unlimited
    local quota_resp
@@ -381,20 +391,20 @@ test_payment_refund() {
    # 创建已支付订单（模拟一个月会员）
    local sql_create="INSERT INTO payment_orders (user_id, order_no, package_type, amount, status, paid_at, expires_at)
                      VALUES (${TEST_USER_ID}, '${test_no}', 'monthly', 590, 'paid', NOW(), NOW() + INTERVAL '30 days');"
-    remote "sudo docker exec ${DB_CONTAINER} psql -U ${DB_USER} -d ${DB_NAME} -c \"${sql_create}\"" 2>/dev/null || true
+    remote "docker exec ${DB_CONTAINER} psql -U ${DB_USER} -d ${DB_NAME} -c \"${sql_create}\"" 2>/dev/null || true
    # 设置用户为会员
    local sql_member="UPDATE users SET is_member = true, membership_expires_at = NOW() + INTERVAL '30 days' WHERE id = ${TEST_USER_ID};"
-    remote "sudo docker exec ${DB_CONTAINER} psql -U ${DB_USER} -d ${DB_NAME} -c \"${sql_member}\"" 2>/dev/null || true
+    remote "docker exec ${DB_CONTAINER} psql -U ${DB_USER} -d ${DB_NAME} -c \"${sql_member}\"" 2>/dev/null || true
    # 执行退款（直接调用 db 函数等价操作）
    local sql_refund="UPDATE payment_orders SET status = 'refunded' WHERE order_no = '${test_no}';"
-    remote "sudo docker exec ${DB_CONTAINER} psql -U ${DB_USER} -d ${DB_NAME} -c \"${sql_refund}\"" 2>/dev/null || true
+    remote "docker exec ${DB_CONTAINER} psql -U ${DB_USER} -d ${DB_NAME} -c \"${sql_refund}\"" 2>/dev/null || true
    # 清理：取消会员 + 删除测试订单
    local clean_member="UPDATE users SET is_member = false, membership_expires_at = NULL WHERE id = ${TEST_USER_ID};"
-    remote "sudo docker exec ${DB_CONTAINER} psql -U ${DB_USER} -d ${DB_NAME} -c \"${clean_member}\"" 2>/dev/null || true
+    remote "docker exec ${DB_CONTAINER} psql -U ${DB_USER} -d ${DB_NAME} -c \"${clean_member}\"" 2>/dev/null || true
-    remote "sudo docker exec ${DB_CONTAINER} psql -U ${DB_USER} -d ${DB_NAME} -c \"DELETE FROM payment_orders WHERE order_no = '${test_no}';\"" 2>/dev/null || true
+    remote "docker exec ${DB_CONTAINER} psql -U ${DB_USER} -d ${DB_NAME} -c \"DELETE FROM payment_orders WHERE order_no = '${test_no}';\"" 2>/dev/null || true
    log_info "  退款 + 会员取消测试完成 ✅"
    log_info "退款测试通过"
@@ -412,15 +422,15 @@ test_payment_verify_detection() {
    # 构造一个 expiry = paid_at + 1 天的异常订单（模拟 ELSE INTERVAL '0 days'）
    local sql_create="INSERT INTO payment_orders (user_id, order_no, package_type, amount, status, paid_at, expires_at)
                      VALUES (${TEST_USER_ID}, '${test_no}', 'half_year', 3190, 'paid', NOW(), NOW() + INTERVAL '1 day');"
-    remote "sudo docker exec ${DB_CONTAINER} psql -U ${DB_USER} -d ${DB_NAME} -c \"${sql_create}\"" 2>/dev/null || true
+    remote "docker exec ${DB_CONTAINER} psql -U ${DB_USER} -d ${DB_NAME} -c \"${sql_create}\"" 2>/dev/null || true
    # 设置会员为 paid_at + 1 天（模拟 0 天会员时长）
    local sql_member="UPDATE users SET is_member = true, membership_expires_at = NOW() + INTERVAL '1 day' WHERE id = ${TEST_USER_ID};"
-    remote "sudo docker exec ${DB_CONTAINER} psql -U ${DB_USER} -d ${DB_NAME} -c \"${sql_member}\"" 2>/dev/null || true
+    remote "docker exec ${DB_CONTAINER} psql -U ${DB_USER} -d ${DB_NAME} -c \"${sql_member}\"" 2>/dev/null || true
    # 验证 actual_days < 25 能被检测到
    local actual_days
-    actual_days=$(remote "sudo docker exec ${DB_CONTAINER} psql -U ${DB_USER} -d ${DB_NAME} -tAc \"
+    actual_days=$(remote "docker exec ${DB_CONTAINER} psql -U ${DB_USER} -d ${DB_NAME} -tAc \"
        SELECT EXTRACT(DAY FROM (u.membership_expires_at - po.paid_at))
        FROM payment_orders po JOIN users u ON u.id = po.user_id
        WHERE po.order_no = '${test_no}';
@@ -429,8 +439,8 @@ test_payment_verify_detection() {
    # 清理
    local clean="UPDATE users SET is_member = false, membership_expires_at = NULL WHERE id = ${TEST_USER_ID};"
-    remote "sudo docker exec ${DB_CONTAINER} psql -U ${DB_USER} -d ${DB_NAME} -c \"${clean}\"" 2>/dev/null || true
+    remote "docker exec ${DB_CONTAINER} psql -U ${DB_USER} -d ${DB_NAME} -c \"${clean}\"" 2>/dev/null || true
-    remote "sudo docker exec ${DB_CONTAINER} psql -U ${DB_USER} -d ${DB_NAME} -c \"DELETE FROM payment_orders WHERE order_no = '${test_no}';\"" 2>/dev/null || true
+    remote "docker exec ${DB_CONTAINER} psql -U ${DB_USER} -d ${DB_NAME} -c \"DELETE FROM payment_orders WHERE order_no = '${test_no}';\"" 2>/dev/null || true
    if [ "$actual_days" -lt 25 ] 2>/dev/null; then
        log_info "  异常时长 ${actual_days} 天可被 verify_membership_after_payment 检测到（阈值 25 天）✅"
@@ -442,142 +452,6 @@ test_payment_verify_detection() {
    return 0
 }
 # ---------- nginx 代理测试 ----------
 test_nginx_proxy_temp() {
    log_info "测试 nginx proxy temp（POST body 权限）..."
    # 发送带 POST body 的请求到公开 POST 端点，验证 nginx 能正常代理
    # 如果 proxy temp 无权限，nginx 返回 502/403 或超时
    local resp
    resp=$(remote "curl -sk --max-time 10 -X POST '${BASE_URL}/api/login' \
        -H 'Content-Type: application/json' \
        -d '{\"test\":\"x\"}'" 2>/dev/null || true)
    if [ -n "$resp" ]; then
        log_info "  nginx POST body 代理正常 ✅"
        return 0
    fi
    log_error "nginx POST body 代理失败（proxy temp 可能无权限）"
    return 1
 }
 # ---------- 支付 notify_url 校验 ----------
 test_notify_url_domain() {
    log_info "校验支付表单 notify_url 域名..."
    # 用 TEST_DOMAIN 构造 Host 头，模拟外部请求（而非 localhost 直连）
    local test_domain="${TEST_DOMAIN#https://}"
    # 获取访客 JWT（通过本地后端）
    local jwt
    jwt=$(remote "curl -sk -X POST '${BASE_URL}/api/guest-login'" 2>/dev/null | python3 -c "import sys,json; print(json.load(sys.stdin).get('token',''))" 2>/dev/null)
    if [ -z "$jwt" ]; then
        log_error "获取 JWT 失败，无法校验 notify_url"
        return 1
    fi
    # 用正确的 Host 头请求支付表单（模拟外部用户访问）
    # 后端此时通过 Host 头构建 notify_url，应等于 TEST_DOMAIN
    local notify_url
    notify_url=$(remote "curl -sk '${BASE_URL}/payment/page?package=monthly&jwt=${jwt}' -H 'Host: ${test_domain}'" 2>/dev/null | grep -oP 'notify_url" value="\K[^"]+' | head -1)
    if [ -z "$notify_url" ]; then
        log_error "无法提取 notify_url（可能为 Mock 支付模式）"
        return 0  # Mock 模式下不校验
    fi
    # 检查 notify_url 是否以 TEST_DOMAIN 开头
    local expected_prefix="https://${test_domain}/payment/notify"
    if [ "$notify_url" != "$expected_prefix" ]; then
        log_error "notify_url 不匹配: 表单=${notify_url}"
        log_error "  期望: ${expected_prefix}"
        log_error "请检查 APP_BASE_URL 环境变量配置"
        return 1
    fi
    log_info "  notify_url 正确: ${notify_url} ✅"
    return 0
 }
 # ---------- 支付宝签名一致性校验 ----------
 # 防止密钥不同步导致的 invalid-signature（历史事故：服务器私钥与控制台应用公钥不匹配）
 test_payment_signature() {
    log_info "校验支付宝支付签名与本地密钥一致性..."
    if [ ! -f "${SCRIPT_DIR}/.env" ] || ! grep -q "ALIPAY_PRIVATE_KEY" "${SCRIPT_DIR}/.env"; then
        log_warn "  本地 .env 无 ALIPAY_PRIVATE_KEY，跳过签名校验"
        return 0
    fi
    local jwt
    jwt=$(remote "curl -sk -X POST '${BASE_URL}/api/guest-login'" 2>/dev/null | python3 -c "import sys,json; print(json.load(sys.stdin).get('token',''))" 2>/dev/null)
    if [ -z "$jwt" ]; then
        log_error "获取 JWT 失败，无法校验支付签名"
        return 1
    fi
    local form
    form=$(remote "curl -sk --max-time 10 '${BASE_URL}/payment/page?package=monthly&jwt=${jwt}'" 2>/dev/null || true)
    if ! echo "$form" | grep -q 'name="sign"'; then
        log_warn "  支付表单未生成（可能为 Mock 支付模式），跳过签名校验"
        return 0
    fi
    local result
    result=$(echo "$form" | python3 -c "
 import base64, re, html, sys
 from cryptography.hazmat.primitives import serialization, hashes
 from cryptography.hazmat.primitives.asymmetric import padding
 priv_b64 = None
 for line in open('${SCRIPT_DIR}/.env'):
    if line.startswith('ALIPAY_PRIVATE_KEY='):
        priv_b64 = line.strip().split('=', 1)[1]
        break
 if not priv_b64:
    print('FAIL: 本地 .env 无 ALIPAY_PRIVATE_KEY')
    sys.exit(1)
 try:
    priv = serialization.load_der_private_key(base64.b64decode(priv_b64), password=None)
 except Exception:
    try:
        priv = serialization.load_pem_private_key(priv_b64.encode(), password=None)
    except Exception as e:
        print(f'FAIL: 私钥解析失败: {e}')
        sys.exit(1)
 content = sys.stdin.read()
 fields = {}
 for m in re.finditer(r'name=\"([^\"]+)\" value=\"([^\"]*)\"', content):
    fields[m.group(1)] = html.unescape(m.group(2))
 if 'sign' not in fields:
    print('FAIL: 表单无 sign 字段')
    sys.exit(1)
 sign = fields.pop('sign')
 sign_source = '&'.join(f'{k}={v}' for k, v in sorted(fields.items()))
 try:
    our_sign = base64.b64encode(priv.sign(sign_source.encode('utf-8'), padding.PKCS1v15(), hashes.SHA256())).decode()
 except Exception as e:
    print(f'FAIL: 签名失败: {e}')
    sys.exit(1)
 if our_sign == sign:
    print('PASS')
 else:
    print('FAIL: 服务器签名与本地私钥不一致（密钥不同步！检查服务器 .env 与控制台应用公钥）')
    sys.exit(1)
 " 2>/dev/null)
    if [ "$result" = "PASS" ]; then
        log_info "  服务器签名与本地私钥一致 ✅"
        return 0
    else
        log_error "  ${result:-签名校验脚本执行失败}"
        return 1
    fi
 }
 # ---------- 主测试入口 ----------
 run_tests() {
    log_step "执行部署后测试..."
@@ -592,7 +466,6 @@ run_tests() {
        "test_invalid_token_401:无效 Token 401"
        "test_response_content:响应内容验证"
        "test_mock_login:Mock 登录 + 通知接口"
        "test_nginx_proxy_temp:nginx proxy temp"
        "test_payment_endpoints:支付端点"
        "test_payment_flow:支付链路"
        "test_migration_status:迁移状态"
@@ -600,8 +473,6 @@ run_tests() {
        "test_payment_maintenance:维护模式"
        "test_payment_refund:退款+会员撤销"
        "test_payment_verify_detection:验证函数检测逻辑"
        "test_notify_url_domain:支付回调域名校验"
        "test_payment_signature:支付签名一致性"
    )
    local i=1 total=${#tests[@]}
--- a/scripts/alert.sh
+++ b/scripts/alert.sh
@@ -1,257 +0,0 @@
 #!/bin/bash
 # ===========================================
 # alert.sh — 服务器异常实时告警（正常时静默，异常才发邮件）
 #
 # 检测项：
 #   磁盘使用 >80% 警告 / >90% 严重
 #   内存使用 >80% 警告 / >90% 严重
 #   备份时效  >24h 警告 / >48h 严重（含备份缺失）
 #   服务状态  green/blue/nginx 非 active → 严重
 #   Docker 容器非 Up → 严重
 #   SSL 剩余  <30 天警告 / <7 天严重
 #   支付卡单  pending 且创建超过 30 分钟 → 警告（列出订单号）
 #   数据库   不可用 → 严重（支付/会员功能受影响）
 #
 # 防刷屏状态机（.alert-state）：
 #   级别上升 → 立即告警；级别不变 → 超过 ALERT_COOLDOWN_HOURS 再次提醒；
 #   恢复正常 → 清除状态，不打扰。
 #
 # 部署：
 #   cp scripts/mail-lib.sh scripts/alert.sh → 服务器 /root/rust/scripts/
 # cron（root）:
 #   */5 * * * * /root/rust/scripts/alert.sh >> /root/rust/scripts/logs/alert.log 2>&1
 #
 # 用法：/root/rust/scripts/alert.sh [--dry-run]
 # ===========================================
 set -u
 SCRIPT_DIR=$(cd "$(dirname "$0")" && pwd)
 # shellcheck source=mail-lib.sh
 source "${SCRIPT_DIR}/mail-lib.sh"
 # ---------- 可配置项（环境变量可覆盖） ----------
 : "${ALERT_STATE_FILE:=/root/rust/scripts/.alert-state}"
 : "${ALERT_COOLDOWN_HOURS:=6}"        # 同一级别再次提醒的冷却时间
 : "${DB_CONTAINER:=1Panel-postgresql-FtMo}"
 : "${DB_NAME:=milkydata}"
 : "${DB_USER:=milkydata}"
 : "${STUCK_ORDER_MINUTES:=30}"        # pending 超过该时长视为卡单
 : "${BACKUP_DIR:=/root/rust/backups/milkydata}"   # 备份目录
 DRY_RUN=false
 [ "${1:-}" = "--dry-run" ] && DRY_RUN=true
 # 日志
 alert_log() { echo "[$(date '+%Y-%m-%d %H:%M:%S')] $*" >> "${MAIL_LOG_DIR}/alert.log" 2>/dev/null || true; }
 [ "$DRY_RUN" = true ] && alert_log() { echo "[DRY-RUN] $*"; }
 # ---------- 检测项 ----------
 # 每项输出: 级别(0/1/2)|键名|标签|当前值|详情
 # 级别: 0=正常 1=警告 2=严重
 check_disk() {
    local pct; pct=$(df -P / | awk 'NR==2{print $5}' | tr -d '%')
    pct=${pct:-0}
    local used total; used=$(df -h / | awk 'NR==2{print $3}'); total=$(df -h / | awk 'NR==2{print $2}')
    local lvl=0
    [ "$pct" -ge 90 ] && lvl=2
    [ "$pct" -ge 80 ] && [ "$lvl" -eq 0 ] && lvl=1
    echo "${lvl}|disk|磁盘使用|${used} / ${total} (${pct}%)|根分区已用 ${pct}%"
 }
 check_mem() {
    local pct; pct=$(free | awk '/Mem/{printf "%.0f", $3/$2 * 100}')
    pct=${pct:-0}
    local used total; used=$(free -h | awk '/Mem/{print $3}'); total=$(free -h | awk '/Mem/{print $2}')
    local lvl=0
    [ "$pct" -ge 90 ] && lvl=2
    [ "$pct" -ge 80 ] && [ "$lvl" -eq 0 ] && lvl=1
    echo "${lvl}|mem|内存使用|${used} / ${total} (${pct}%)|内存已用 ${pct}%"
 }
 check_backup() {
    local dir="$BACKUP_DIR"
    local last; last=$(ls -1t "$dir" 2>/dev/null | head -1)
    if [ -z "$last" ]; then
        echo "2|backup|备份|无备份文件|目录 ${dir} 无任何备份"
        return
    fi
    local age; age=$(( ($(date +%s) - $(stat -c %Y "$dir/$last" 2>/dev/null || echo 0)) / 3600 ))
    local lvl=0
    [ "$age" -ge 48 ] && lvl=2
    [ "$age" -ge 24 ] && [ "$lvl" -eq 0 ] && lvl=1
    echo "${lvl}|backup|备份时效|${age} 小时前（${last}）|最新备份距今 ${age} 小时"
 }
 check_services() {
    local bad=""
    for svc in rust-backend-green rust-backend-blue nginx; do
        local st; st=$(systemctl is-active "$svc" 2>/dev/null || echo "unknown")
        [ "$st" = "active" ] || bad="${bad}${svc}=${st} "
    done
    if [ -n "$bad" ]; then
        echo "2|services|服务状态|异常服务: ${bad}|systemd 服务未运行"
    else
        echo "0|services|服务状态|全部 active|green/blue/nginx 运行正常"
    fi
 }
 check_docker() {
    local out; out=$(docker ps --format '{{.Names}} {{.Status}}' 2>/dev/null)
    if [ -z "$out" ]; then
        if docker info >/dev/null 2>&1; then
            echo "0|docker|Docker 容器|无运行容器|当前无容器在运行"
        else
            echo "2|docker|Docker|不可用|docker 命令执行失败"
        fi
        return
    fi
    local bad; bad=$(echo "$out" | grep -v " Up " || true)
    if [ -n "$bad" ]; then
        echo "2|docker|Docker 容器|$(echo "$out" | grep -c " Up ") 个正常|异常容器: $(echo "$bad" | awk '{print $1}' | tr '\n' ' ')"
    else
        echo "0|docker|Docker 容器|$(echo "$out" | grep -c " Up ") 个运行中|全部正常"
    fi
 }
 check_ssl() {
    local expiry; expiry=$(echo "" | openssl s_client -connect xmclassmate.top:443 -servername xmclassmate.top 2>&1 | openssl x509 -noout -enddate 2>/dev/null | cut -d= -f2)
    if [ -z "$expiry" ]; then
        echo "1|ssl|SSL 证书|检测失败|无法获取证书到期时间"
        return
    fi
    local days; days=$(( ($(date -d "$expiry" +%s 2>/dev/null || echo 0) - $(date +%s)) / 86400 ))
    local lvl=0
    [ "$days" -lt 7 ] && lvl=2
    [ "$days" -lt 30 ] && [ "$lvl" -eq 0 ] && lvl=1
    echo "${lvl}|ssl|SSL 证书|剩余 ${days} 天（${expiry}）|证书将于 ${expiry} 到期"
 }
 # 支付卡单检测（pending 超过 STUCK_ORDER_MINUTES）
 check_stuck_orders() {
    local count orders
    count=$(docker exec "$DB_CONTAINER" psql -U "$DB_USER" -d "$DB_NAME" -At -c \
        "SELECT count(*) FROM payment_orders WHERE status='pending' AND created_at < NOW() - INTERVAL '${STUCK_ORDER_MINUTES} minutes'" 2>/dev/null)
    if [ -z "$count" ]; then
        return  # 数据库不可用由 check_db 负责
    fi
    if [ "$count" -gt 0 ]; then
        orders=$(docker exec "$DB_CONTAINER" psql -U "$DB_USER" -d "$DB_NAME" -At -c \
            "SELECT order_no || ' (用户' || user_id || ', ' || to_char(created_at, 'MM-DD HH24:MI') || ')' FROM payment_orders WHERE status='pending' AND created_at < NOW() - INTERVAL '${STUCK_ORDER_MINUTES} minutes' ORDER BY created_at" 2>/dev/null | tr '\n' '; ')
        echo "1|stuck_orders|支付卡单|${count} 笔 pending 超 ${STUCK_ORDER_MINUTES} 分钟|${orders}"
    else
        echo "0|stuck_orders|支付卡单|无|无卡单"
    fi
 }
 check_db() {
    local ok; ok=$(docker exec "$DB_CONTAINER" psql -U "$DB_USER" -d "$DB_NAME" -At -c "SELECT 1" 2>/dev/null)
    if [ -z "$ok" ]; then
        echo "2|db|数据库|不可用|docker exec psql 失败（容器 ${DB_CONTAINER}）"
    else
        echo "0|db|数据库|正常|SELECT 1 成功"
    fi
 }
 # ---------- 状态文件管理 ----------
 # 格式: key lvl last_alert_epoch
 load_state() { [ -f "$ALERT_STATE_FILE" ] && cat "$ALERT_STATE_FILE" || true; }
 save_state() {
    local tmp="${ALERT_STATE_FILE}.tmp"
    { for k in "${!NEW_STATE[@]}"; do echo "$k ${NEW_STATE[$k]}"; done; } > "$tmp"
    mv "$tmp" "$ALERT_STATE_FILE" 2>/dev/null || true
 }
 # 读取状态：$1=key, $2=字段序号（1=级别 2=时间）；状态行格式为 "key lvl time"
 get_state() {
    local line; line=$(load_state | awk -v k="$1" '$1==k')
    [ -n "$line" ] || { echo "-1"; return; }
    echo "$line" | awk -v f="$2" '{print $(f+1)}'
 }
 # ---------- 主流程 ----------
 NOW=$(date +%s)
 COOLDOWN_SEC=$((ALERT_COOLDOWN_HOURS * 3600))
 # 收集检测结果（格式: level|key|label|value|detail）
 RESULTS=""
 for check in check_disk check_mem check_backup check_services check_docker check_ssl check_db check_stuck_orders; do
    r=$($check 2>/dev/null)
    [ -n "$r" ] && RESULTS="${RESULTS}${r}\n"
 done
 declare -A NEW_STATE
 ALERTS=""        # 需要发邮件的条目
 WARN_COUNT=0
 CRIT_COUNT=0
 while IFS='|' read -r lvl key label value detail; do
    [ -z "$key" ] && continue
    [ "$lvl" -eq 0 ] && continue   # 正常项不处理（下面统一清除状态）
    old_lvl=$(get_state "$key" 1)
    old_time=$(get_state "$key" 2)
    [ "$old_time" = "-1" ] && old_time=0
    should_alert=false
    if [ "$lvl" -gt "$old_lvl" ]; then
        should_alert=true                      # 级别上升 → 立即告警
    elif [ "$lvl" -eq "$old_lvl" ] && [ $((NOW - old_time)) -ge "$COOLDOWN_SEC" ]; then
        should_alert=true                      # 同级别冷却期后再次提醒
    fi
    NEW_STATE[$key]="${lvl} ${NOW}"
    if [ "$should_alert" = true ]; then
        [ "$lvl" -eq 2 ] && CRIT_COUNT=$((CRIT_COUNT + 1))
        [ "$lvl" -eq 1 ] && WARN_COUNT=$((WARN_COUNT + 1))
        ALERTS="${ALERTS}<tr><td style='padding:8px 10px;border-bottom:1px solid #e2e8f0'>$( [ "$lvl" -eq 2 ] && echo "<span style='color:#dc2626'>严重</span>" || echo "<span style='color:#d97706'>警告</span>" )</td><td style='padding:8px 10px;border-bottom:1px solid #e2e8f0'>${label}</td><td style='padding:8px 10px;border-bottom:1px solid #e2e8f0'>${value}</td><td style='padding:8px 10px;border-bottom:1px solid #e2e8f0;color:#475569'>${detail}</td></tr>\n"
        alert_log "告警 [${key}] 级别=${lvl}: ${label} ${value} — ${detail}"
    fi
 done < <(printf "%b" "$RESULTS")
 # 恢复检测：状态文件中存在但本次为 0/未出现的项 → 清除
 while read -r key old_lvl _; do
    [ -z "$key" ] && continue
    cur_lvl=$(printf "%b" "$RESULTS" | awk -F'|' -v k="$key" '$2==k{print $1; exit}')
    if [ -z "$cur_lvl" ] || [ "$cur_lvl" -eq 0 ]; then
        unset 'NEW_STATE[$key]' 2>/dev/null || true
        alert_log "恢复: ${key} 已恢复正常，状态已清除"
    fi
 done < <(load_state)
 save_state
 # ---------- 发送告警邮件 ----------
 if [ -n "$ALERTS" ]; then
    if [ "$CRIT_COUNT" -gt 0 ]; then
        SUBJECT="[ASD 告警] ${CRIT_COUNT} 项严重 / ${WARN_COUNT} 项警告 — $(date '+%m-%d %H:%M')"
    else
        SUBJECT="[ASD 告警] ${WARN_COUNT} 项警告 — $(date '+%m-%d %H:%M')"
    fi
    BODY=$(cat <<EOF
 <html><body style="font-family:-apple-system,'PingFang SC','Microsoft YaHei',sans-serif;max-width:640px;margin:0 auto;padding:16px">
 <h2 style="color:#0f172a;margin:0 0 4px">⚠️ ASD 服务器异常告警</h2>
 <div style="color:#94a3b8;font-size:13px;margin-bottom:16px">$(date '+%Y-%m-%d %H:%M:%S') · $(hostname)</div>
 <table style="border-collapse:collapse;width:100%;font-size:13px">
 <tr><th style="padding:8px 10px;background:#f1f5f9;text-align:left;color:#64748b">级别</th><th style="padding:8px 10px;background:#f1f5f9;text-align:left;color:#64748b">项目</th><th style="padding:8px 10px;background:#f1f5f9;text-align:left;color:#64748b">当前值</th><th style="padding:8px 10px;background:#f1f5f9;text-align:left;color:#64748b">说明</th></tr>
 $(printf "%b" "$ALERTS")
 </table>
 <div style="color:#94a3b8;font-size:12px;margin-top:16px">下次同类提醒将在 ${ALERT_COOLDOWN_HOURS} 小时后，恢复正常后不再打扰。</div>
 </body></html>
 EOF
 )
    if [ "$DRY_RUN" = true ]; then
        echo "---- 将发送告警邮件 ----"; echo "主题: ${SUBJECT}"; echo "$BODY" | head -30
    else
        if mail_send "$SUBJECT" "$BODY"; then
            alert_log "告警邮件已发送: ${SUBJECT}"
        else
            alert_log "告警邮件发送失败: ${SUBJECT}"
        fi
    fi
 else
    alert_log "本次检查无异常（$(date '+%H:%M:%S')）"
    [ "$DRY_RUN" = true ] && echo "当前无异常，无需告警。"
 fi
--- a/scripts/backup-db.sh
+++ b/scripts/backup-db.sh
@@ -0,0 +1,55 @@
 #!/bin/bash
 # ===========================================
 # 数据库备份脚本
 # 用途: 备份 PostgreSQL 数据库到本地文件
 # 建议: 每天通过 cron 执行一次
 # Crontab 示例:
 #   0 4 * * * /root/rust/rust_backend/scripts/backup-db.sh >> /root/rust/rust_backend/logs/backup.log 2>&1
 # ===========================================
 set -euo pipefail
 DB_CONTAINER="1Panel-postgresql-FtMo"
 DB_NAME="${1:-milkydata}"
 DB_USER="milkydata"
 BACKUP_DIR="/root/rust/rust_backend/backups"
 RETENTION_DAYS=7
 LOG_PREFIX="[$(date '+%Y-%m-%d %H:%M:%S')]"
 echo "$LOG_PREFIX 开始备份数据库: ${DB_NAME}"
 # 确保备份目录存在
 mkdir -p "$BACKUP_DIR"
 # 检查容器是否运行
 if ! docker ps --format '{{.Names}}' | grep -q "^${DB_CONTAINER}$"; then
    echo "$LOG_PREFIX 错误: Docker 容器 ${DB_CONTAINER} 未运行"
    exit 1
 fi
 # 执行备份（自定义格式，可压缩）
 BACKUP_FILE="${BACKUP_DIR}/${DB_NAME}_$(date +%Y%m%d_%H%M%S).dump"
 echo "$LOG_PREFIX 导出到: ${BACKUP_FILE}"
 docker exec "$DB_CONTAINER" pg_dump -U "$DB_USER" -Fc "$DB_NAME" > "$BACKUP_FILE"
 # 检查备份是否成功
 if [ -f "$BACKUP_FILE" ] && [ -s "$BACKUP_FILE" ]; then
    FILE_SIZE=$(du -h "$BACKUP_FILE" | cut -f1)
    echo "$LOG_PREFIX 备份成功: ${BACKUP_FILE} (${FILE_SIZE})"
 else
    echo "$LOG_PREFIX 错误: 备份文件为空或不存在"
    exit 1
 fi
 # 删除旧备份（保留 RETENTION_DAYS 天）
 echo "$LOG_PREFIX 清理 ${RETENTION_DAYS} 天前的旧备份..."
 find "$BACKUP_DIR" -name "${DB_NAME}_*.dump" -mtime "+${RETENTION_DAYS}" -delete
 # 记录保留的备份
 echo "$LOG_PREFIX 当前备份列表:"
 ls -lh "$BACKUP_DIR"/*.dump 2>/dev/null || echo "  (无备份文件)"
 echo "$LOG_PREFIX 备份完成"
--- a/scripts/daily-report.sh
+++ b/scripts/daily-report.sh
@@ -1,207 +0,0 @@
 #!/bin/bash
 # ===========================================
 # 每日健康报告 — HTML 摘要邮件（含支付/会员统计）
 #
 # 部署：
 #   cp scripts/mail-lib.sh scripts/daily-report.sh → 服务器 /root/rust/scripts/
 #   chmod +x /root/rust/scripts/daily-report.sh
 # cron（root）:
 #   0 8 * * * /root/rust/scripts/daily-report.sh >> /root/rust/scripts/logs/daily-report.log 2>&1
 #
 # 说明：单项采集失败自动降级为 N/A，不会阻断整封邮件；
 #       发送失败自动重试并记录 /root/rust/scripts/logs/mail.log。
 # ===========================================
 # 不用 set -e：采集失败不应导致邮件发不出去
 set -u
 SCRIPT_DIR=$(cd "$(dirname "$0")" && pwd)
 # shellcheck source=mail-lib.sh
 source "${SCRIPT_DIR}/mail-lib.sh"
 # ---------- 可配置项 ----------
 : "${DB_CONTAINER:=1Panel-postgresql-FtMo}"   # PostgreSQL 容器名
 : "${DB_NAME:=milkydata}"                     # 数据库名
 : "${DB_USER:=milkydata}"                     # 数据库用户
 : "${BACKUP_DIR:=/root/rust/backups/milkydata}"  # 备份目录
 DATE=$(date "+%Y-%m-%d")
 HOST=$(hostname)
 SUBJECT="[ASD 服务器报告] ${DATE} — ${HOST}"
 # ---------- 状态徽章 ----------
 # badge <ok|warn|crit> <文本>
 badge() {
    case "$1" in
        ok)   echo "<span style='background:#16a34a;color:#fff;padding:1px 8px;border-radius:10px;font-size:12px'>$2</span>" ;;
        warn) echo "<span style='background:#d97706;color:#fff;padding:1px 8px;border-radius:10px;font-size:12px'>$2</span>" ;;
        crit) echo "<span style='background:#dc2626;color:#fff;padding:1px 8px;border-radius:10px;font-size:12px'>$2</span>" ;;
        *)    echo "<span style='background:#64748b;color:#fff;padding:1px 8px;border-radius:10px;font-size:12px'>$2</span>" ;;
    esac
 }
 # 根据磁盘/内存百分比判定级别（参数: 数值，返回 ok/warn/crit/unknown）
 pct_level() {
    local v="$1" w="${2:-80}" c="${3:-90}"
    case "$v" in
        ''|*[!0-9]*) echo "unknown"; return ;;
    esac
    if [ "$v" -ge "$c" ]; then echo "crit"
    elif [ "$v" -ge "$w" ]; then echo "warn"
    else echo "ok"; fi
 }
 # ---------- 系统状态 ----------
 UPTIME=$(uptime -p | sed 's/up //')
 LOAD=$(uptime | awk -F'load average:' '{print $2}' | xargs)
 LOAD1=${LOAD%%,*}   # 1 分钟负载（可能是小数，取整数部分比较）
 LOAD1_INT=${LOAD1%%.*}
 DISK_USED=$(df -h / | awk 'NR==2{print $3}')
 DISK_TOTAL=$(df -h / | awk 'NR==2{print $2}')
 DISK_PCT_STR=$(df -h / | awk 'NR==2{print $5}')
 DISK_PCT=${DISK_PCT_STR%\%}
 MEM_USED=$(free -h | awk '/Mem/{print $3}')
 MEM_TOTAL=$(free -h | awk '/Mem/{print $2}')
 MEM_PCT=$(free | awk '/Mem/{printf "%.0f", $3/$2 * 100}')
 CPU_TEMP=$(cat /sys/class/thermal/thermal_zone0/temp 2>/dev/null | awk '{printf "%.1f°C", $1/1000}' || echo "N/A")
 # ---------- Docker ----------
 DOCKER_STATUS=$(docker ps --format '{{.Names}}  {{.Status}}' 2>/dev/null || echo "")
 DOCKER_DOWN=$(echo "$DOCKER_STATUS" | grep -vc "Up " || true)
 if [ -z "$DOCKER_STATUS" ]; then
    DOCKER_BODY="<span style='color:#dc2626'>Docker 不可用或无运行容器</span>"
 elif [ "$DOCKER_DOWN" -gt 0 ]; then
    DOCKER_BODY="$(echo "$DOCKER_STATUS" | awk '{print $1": "$2}' | sed 's/^/  /' | sed 's/&/\&amp;/g;s/</\&lt;/g;s/>/\&gt;/g' | tr '\n' '<br>')"
 else
    DOCKER_BODY="$(echo "$DOCKER_STATUS" | awk '{print $1"  "$2}' | sed 's/&/\&amp;/g;s/</\&lt;/g;s/>/\&gt;/g' | tr '\n' '<br>')"
 fi
 # ---------- SSL 证书 ----------
 SSL_EXPIRY=$(echo "" | openssl s_client -connect xmclassmate.top:443 -servername xmclassmate.top 2>&1 | openssl x509 -noout -enddate 2>/dev/null | cut -d= -f2 || echo "检测失败")
 if [ "$SSL_EXPIRY" != "检测失败" ]; then
    SSL_DAYS=$(( ($(date -d "$SSL_EXPIRY" +%s 2>/dev/null) - $(date +%s)) / 86400 ))
 else
    SSL_DAYS=9999
 fi
 # ---------- 服务状态 ----------
 GREEN_STATUS=$(systemctl is-active rust-backend-green.service 2>/dev/null || echo "unknown")
 BLUE_STATUS=$(systemctl is-active rust-backend-blue.service 2>/dev/null || echo "unknown")
 NGINX_STATUS=$(systemctl is-active nginx 2>/dev/null || echo "unknown")
 # ---------- 备份 ----------
 LAST_BACKUP=$(ls -1t "$BACKUP_DIR/" 2>/dev/null | head -1)
 BACKUP_AGE_HOURS=""
 BACKUP_AGE_TEXT="未知"
 if [ -n "$LAST_BACKUP" ]; then
    BACKUP_TIME=$(stat -c %Y "$BACKUP_DIR/$LAST_BACKUP" 2>/dev/null)
    NOW=$(date +%s)
    BACKUP_AGE_HOURS=$(( (NOW - BACKUP_TIME) / 3600 ))
    BACKUP_AGE_TEXT="${BACKUP_AGE_HOURS} 小时前"
 fi
 # ---------- 安全 ----------
 SSH_BANS=$(sudo fail2ban-client status sshd 2>/dev/null | grep "Currently banned" | awk '{print $NF}' || echo "0")
 NGINX_BANS=$(sudo fail2ban-client status nginx-botsearch 2>/dev/null | grep "Currently banned" | awk '{print $NF}' || echo "0")
 YESTERDAY_ERRORS=$(journalctl -u rust-backend-green.service --since "1 day ago" --priority err --no-pager 2>/dev/null | wc -l)
 YESTERDAY_WARNS=$(journalctl -u rust-backend-green.service --since "1 day ago" --priority warning --no-pager 2>/dev/null | wc -l)
 # ---------- 应用概况（昨日） ----------
 ACTIVE_USERS=$(journalctl -u rust-backend-green.service --since "1 day ago" --no-pager 2>/dev/null | grep -c "user_id=\|登录成功\|上传成功" || echo "0")
 API_COUNT=$(journalctl -u rust-backend-green.service --since "1 day ago" --no-pager 2>/dev/null | grep -c "INFO\|WARN\|ERROR" || echo "0")
 # ---------- 支付与会员（数据库统计，不可用则 N/A） ----------
 # 服务器上通过 docker exec 访问 PostgreSQL（与 check-members.sh 同模式）
 DB_QUERY() {
    docker exec "$DB_CONTAINER" psql -U "$DB_USER" -d "$DB_NAME" -At -c "$1" 2>/dev/null || echo ""
 }
 DB_OK=false
 if [ -n "$(DB_QUERY 'SELECT 1')" ]; then DB_OK=true; fi
 PAY_ORDERS_TODAY="N/A"; PAY_PAID_TODAY="N/A"; PAY_STUCK="N/A"
 MEM_ACTIVE="N/A"; MEM_EXPIRE_7D="N/A"
 if [ "$DB_OK" = true ]; then
    PAY_ORDERS_TODAY=$(DB_QUERY "SELECT count(*) FROM payment_orders WHERE created_at::date = CURRENT_DATE")
    PAY_PAID_TODAY=$(DB_QUERY "SELECT count(*) FROM payment_orders WHERE status='paid' AND paid_at::date = CURRENT_DATE")
    PAY_STUCK=$(DB_QUERY "SELECT count(*) FROM payment_orders WHERE status='pending' AND created_at < NOW() - INTERVAL '30 minutes'")
    MEM_ACTIVE=$(DB_QUERY "SELECT count(*) FROM users WHERE is_member AND (membership_expires_at IS NULL OR membership_expires_at > NOW())")
    MEM_EXPIRE_7D=$(DB_QUERY "SELECT count(*) FROM users WHERE is_member AND membership_expires_at IS NOT NULL AND membership_expires_at BETWEEN NOW() AND NOW() + INTERVAL '7 days'")
 fi
 [ -z "$PAY_ORDERS_TODAY" ] && PAY_ORDERS_TODAY="N/A"
 [ -z "$PAY_PAID_TODAY" ] && PAY_PAID_TODAY="N/A"
 [ -z "$PAY_STUCK" ] && PAY_STUCK="N/A"
 [ -z "$MEM_ACTIVE" ] && MEM_ACTIVE="N/A"
 [ -z "$MEM_EXPIRE_7D" ] && MEM_EXPIRE_7D="N/A"
 # ---------- 组装 HTML ----------
 # 行生成器: row <指标> <当前值> <级别> <附加说明?>
 row() {
    echo "<tr><td style='padding:6px 10px;border-bottom:1px solid #e2e8f0;color:#475569'>$1</td><td style='padding:6px 10px;border-bottom:1px solid #e2e8f0'>$2</td><td style='padding:6px 10px;border-bottom:1px solid #e2e8f0;text-align:center'>$(badge "$3" "$4")</td></tr>"
 }
 section_title() {
    echo "<tr><td colspan='3' style='padding:10px;background:#f8fafc;font-weight:bold;color:#0f172a;border-bottom:1px solid #e2e8f0'>$1</td></tr>"
 }
 STYLE="font-family:-apple-system,'PingFang SC','Microsoft YaHei',sans-serif;background:#fff;max-width:640px;margin:0 auto;padding:16px"
 TH="padding:8px 10px;background:#f1f5f9;color:#64748b;text-align:left;font-size:12px;border-bottom:2px solid #e2e8f0"
 BODY=$(cat <<EOF
 <html><body style="${STYLE}">
 <h2 style="color:#0f172a;margin:0 0 4px">ASD 服务器健康报告</h2>
 <div style="color:#94a3b8;font-size:13px;margin-bottom:16px">${DATE} · ${HOST} · 发送于 $(date "+%H:%M")</div>
 <table style="border-collapse:collapse;width:100%;font-size:13px">
  <tr><th style="${TH}">指标</th><th style="${TH}">当前值</th><th style="${TH}" width="90">状态</th></tr>
  $(section_title "🖥 系统状态")
  $(row "运行时长" "$UPTIME" ok "OK")
  $(row "系统负载" "$LOAD" "$([ "$LOAD1_INT" -ge 4 ] && echo crit || { [ "$LOAD1_INT" -ge 2 ] && echo warn || echo ok; })" "$([ "$LOAD1_INT" -ge 4 ] && echo "超载" || { [ "$LOAD1_INT" -ge 2 ] && echo "偏高" || echo "正常"; })")
  $(row "磁盘使用" "${DISK_USED} / ${DISK_TOTAL} (${DISK_PCT_STR})" "$(pct_level "$DISK_PCT")" "$(pct_level "$DISK_PCT" | tr 'a-z' 'A-Z')")
  $(row "内存使用" "${MEM_USED} / ${MEM_TOTAL} (${MEM_PCT}%)" "$(pct_level "$MEM_PCT" 80 90)" "$(pct_level "$MEM_PCT" 80 90 | tr 'a-z' 'A-Z')")
  $(row "CPU 温度" "${CPU_TEMP}" ok "OK")
  $(section_title "📦 容器与服务")
  $(row "Docker 容器" "运行中 $(echo "$DOCKER_STATUS" | grep -c "Up " || echo 0) 个 / 异常 $(echo "$DOCKER_STATUS" | grep -vc "Up " || echo 0) 个" "$([ "$DOCKER_DOWN" -gt 0 ] && echo crit || echo ok)" "$([ "$DOCKER_DOWN" -gt 0 ] && echo "有异常" || echo "正常")")
  $(row "后端 green" "$GREEN_STATUS" "$([ "$GREEN_STATUS" = "active" ] && echo ok || echo crit)" "$([ "$GREEN_STATUS" = "active" ] && echo "运行中" || echo "异常")")
  $(row "后端 blue" "$BLUE_STATUS" "$([ "$BLUE_STATUS" = "active" ] && echo ok || echo crit)" "$([ "$BLUE_STATUS" = "active" ] && echo "运行中" || echo "异常")")
  $(row "nginx" "$NGINX_STATUS" "$([ "$NGINX_STATUS" = "active" ] && echo ok || echo crit)" "$([ "$NGINX_STATUS" = "active" ] && echo "运行中" || echo "异常")")
  <tr><td colspan="3" style="padding:6px 10px;color:#64748b;font-size:12px;background:#fbfdff">${DOCKER_BODY}</td></tr>
  $(section_title "🔐 SSL 与安全")
  $(row "SSL 证书" "${SSL_EXPIRY}（剩余 ${SSL_DAYS} 天）" "$([ "$SSL_DAYS" -lt 7 ] && echo crit || { [ "$SSL_DAYS" -lt 30 ] && echo warn || echo ok; })" "$([ "$SSL_DAYS" -lt 7 ] && echo "即将过期" || { [ "$SSL_DAYS" -lt 30 ] && echo "注意续期" || echo "正常"; })")
  $(row "Fail2ban SSH" "${SSH_BANS} 个 IP 被封禁" ok "OK")
  $(row "Fail2ban nginx" "${NGINX_BANS} 个 IP 被封禁" ok "OK")
  $(row "昨日日志错误" "$YESTERDAY_ERRORS 条" "$([ "$YESTERDAY_ERRORS" -gt 50 ] && echo warn || echo ok)" "$([ "$YESTERDAY_ERRORS" -gt 50 ] && echo "偏多" || echo "正常")")
  $(row "昨日日志警告" "$YESTERDAY_WARNS 条" "$([ "$YESTERDAY_WARNS" -gt 200 ] && echo warn || echo ok)" "$([ "$YESTERDAY_WARNS" -gt 200 ] && echo "偏多" || echo "正常")")
  $(section_title "💾 备份")
  $(row "最新备份" "${LAST_BACKUP:-无}" "$([ -n "$BACKUP_AGE_HOURS" ] && { [ "$BACKUP_AGE_HOURS" -ge 48 ] && echo crit || { [ "$BACKUP_AGE_HOURS" -ge 24 ] && echo warn || echo ok; }; } || echo crit)" "$([ -n "$BACKUP_AGE_HOURS" ] && { [ "$BACKUP_AGE_HOURS" -ge 48 ] && echo "严重过期" || { [ "$BACKUP_AGE_HOURS" -ge 24 ] && echo "⚠ 超24小时" || echo "${BACKUP_AGE_TEXT}"; }; } || echo "未知")")
  $(row "备份时效" "${BACKUP_AGE_TEXT}" ok "OK")
  $(section_title "📊 应用概况（昨日）")
  $(row "日志事件数" "$API_COUNT 条" ok "OK")
  $(row "活跃用户操作" "$ACTIVE_USERS 次" ok "OK")
  $(section_title "💰 支付与会员")
  $(row "今日新订单" "$PAY_ORDERS_TODAY 笔" ok "OK")
  $(row "今日支付成功" "$PAY_PAID_TODAY 笔" ok "OK")
  $(row "卡单（pending>30分钟）" "$PAY_STUCK 笔" "$([ "$PAY_STUCK" -gt 0 ] 2>/dev/null && echo crit || echo ok)" "$([ "$PAY_STUCK" -gt 0 ] 2>/dev/null && echo "需人工处理" || echo "无")")
  $(row "活跃会员" "$MEM_ACTIVE 人" ok "OK")
  $(row "7天内到期会员" "$MEM_EXPIRE_7D 人" "$([ "$MEM_EXPIRE_7D" -gt 0 ] 2>/dev/null && echo warn || echo ok)" "$([ "$MEM_EXPIRE_7D" -gt 0 ] 2>/dev/null && echo "可发续费提醒" || echo "无")")
  $( [ "$DB_OK" = false ] && echo "<tr><td colspan='3' style='padding:6px 10px;color:#dc2626;font-size:12px;background:#fef2f2'>⚠ 数据库不可用，支付/会员统计缺失</td></tr>" )
 </table>
 <div style="color:#94a3b8;font-size:12px;margin-top:16px">ASD 自动监控 | $(date "+%Y-%m-%d %H:%M") | 异常项请关注 alert.sh 实时告警</div>
 </body></html>
 EOF
 )
 # ---------- 发送 ----------
 if mail_send "$SUBJECT" "$BODY"; then
    echo "✅ 健康报告已发送到 ${MAIL_TO}（$(date '+%H:%M:%S')）"
 else
    echo "❌ 健康报告发送失败，详见 ${MAIL_LOG_DIR}/mail.log"
    exit 1
 fi
--- a/scripts/mail-lib.sh
+++ b/scripts/mail-lib.sh
@@ -1,70 +0,0 @@
 #!/bin/bash
 # ===========================================
 # mail-lib.sh — 邮件发送共享库
 # 供 daily-report.sh / alert.sh 复用：
 #   mail_send <主题> <HTML正文>  （带重试 + 日志 + 轮转）
 # ===========================================
 # ---------- 可配置项（环境变量可覆盖） ----------
 : "${MAIL_TO:=m943790568@163.com}"                  # 收件人，多个用逗号分隔
 : "${MAIL_FROM:=ASD 监控 <m943790568@163.com>}"     # 发件人显示名
 : "${MAIL_ACCOUNT:=default}"                        # msmtp 账户（~/.msmtprc 中的 account）
 : "${MAIL_LOG_DIR:=/root/rust/scripts/logs}"        # 日志目录
 : "${MAIL_RETRY:=3}"                                # 发送重试次数
 : "${MAIL_LOG_MAX_KB:=1024}"                        # mail.log 轮转阈值（KB）
 mkdir -p "$MAIL_LOG_DIR" 2>/dev/null || true
 # 写日志
 mail_log() {
    local level="$1"; shift
    echo "[$(date '+%Y-%m-%d %H:%M:%S')] [${level}] $*" >> "${MAIL_LOG_DIR}/mail.log" 2>/dev/null || true
 }
 # 日志轮转：超过阈值保留末尾 200 行
 mail_rotate_log() {
    local f="${MAIL_LOG_DIR}/mail.log"
    [ -f "$f" ] || return 0
    local size_kb=$(( $(stat -c %s "$f" 2>/dev/null || echo 0) / 1024 ))
    if [ "$size_kb" -gt "$MAIL_LOG_MAX_KB" ]; then
        tail -n 200 "$f" > "$f.tmp" 2>/dev/null && mv "$f.tmp" "$f" 2>/dev/null || true
        mail_log INFO "mail.log 已轮转"
    fi
 }
 # 发送 HTML 邮件（UTF-8），失败自动重试
 # 用法: mail_send "主题" "HTML 正文"
 mail_send() {
    local subject="$1" body="$2"
    mail_rotate_log
    local recipients headers
    recipients=$(echo "$MAIL_TO" | tr ',' ' ')
    headers=$(cat <<EOF
 From: ${MAIL_FROM}
 To: ${MAIL_TO}
 Subject: ${subject}
 MIME-Version: 1.0
 Content-Type: text/html; charset=UTF-8
 Content-Transfer-Encoding: 8bit
 EOF
 )
    local attempt=1 ok=0
    while [ "$attempt" -le "$MAIL_RETRY" ]; do
        if { echo "$headers"; echo; echo "$body"; } | msmtp -a "$MAIL_ACCOUNT" $recipients 2>>"${MAIL_LOG_DIR}/mail.log"; then
            ok=1
            mail_log INFO "邮件发送成功: ${subject} → ${MAIL_TO}（第 ${attempt} 次尝试）"
            break
        fi
        mail_log WARN "邮件发送失败（第 ${attempt}/${MAIL_RETRY} 次）: ${subject}"
        attempt=$((attempt + 1))
        [ "$attempt" -le "$MAIL_RETRY" ] && sleep $((attempt * 5))
    done
    if [ "$ok" -ne 1 ]; then
        mail_log ERROR "邮件最终发送失败: ${subject}"
        return 1
    fi
    return 0
 }
--- a/scripts/switch-env.sh
+++ b/scripts/switch-env.sh
@@ -12,9 +12,11 @@ PROJECT_ROOT="$(dirname "$SCRIPT_DIR")"
 ENV_FILE="$PROJECT_ROOT/.env"
 # ---------- 配置 ----------
-ROOT_CONF="/etc/nginx/sites-enabled/xmclassmate.top"
+# 1Panel 管理的 OpenResty 容器的实际配置文件路径
-NGINX_SSL_CONF="/www/sites/xmclassmate.top/ssl/fullchain.pem"
+# 容器内路径（host: /opt/1panel/apps/openresty/openresty/www/sites/...）
-SSH_HOST="deploy@47.109.203.92"
+ROOT_CONF="/www/sites/xmclassmate.top/proxy/root.conf"
 NGINX_CONTAINER="1Panel-openresty-ABu5"
 SSH_HOST="root@1panel-server"
 # ---------- 颜色输出 ----------
 RED='\033[0;31m'; GREEN='\033[0;32m'; YELLOW='\033[1;33m'; BLUE='\033[0;34m'; NC='\033[0m'
@@ -39,7 +41,7 @@ usage() {
 # ---------- 获取当前活动环境 ----------
 get_active() {
-    local proxy_conf; proxy_conf=$(ssh "$SSH_HOST" "sudo cat ${ROOT_CONF}" 2>/dev/null || echo "")
+    local proxy_conf; proxy_conf=$(ssh "$SSH_HOST" "docker exec ${NGINX_CONTAINER} cat ${ROOT_CONF}" 2>/dev/null || echo "")
    if echo "$proxy_conf" | grep -q "127.0.0.1:4433"; then
        echo "blue"
    elif echo "$proxy_conf" | grep -q "127.0.0.1:4434"; then
@@ -102,15 +104,15 @@ switch_to() {
    # 修改 proxy_pass（两个端口都是 HTTPS）
    local target_proto="https"
-    info "修改 nginx proxy_pass → ${target_proto}://127.0.0.1:${target_port}..."
+    info "修改 OpenResty proxy_pass → ${target_proto}://127.0.0.1:${target_port}..."
-    ssh "$SSH_HOST" "sudo sed -i 's|proxy_pass https\?://127.0.0.1:[0-9]*|proxy_pass ${target_proto}://127.0.0.1:${target_port}|' ${ROOT_CONF}" 2>&1 || {
+    ssh "$SSH_HOST" "docker exec ${NGINX_CONTAINER} sh -c \"sed -i 's|proxy_pass https\?://127.0.0.1:[0-9]*|proxy_pass ${target_proto}://127.0.0.1:${target_port}|' ${ROOT_CONF}\"" 2>&1 || {
        error "修改 proxy_pass 失败"
        exit 1
    }
    # 重新加载 nginx
    info "重新加载 nginx..."
-    ssh "$SSH_HOST" "sudo nginx -s reload" 2>&1 || {
+    ssh "$SSH_HOST" "docker exec ${NGINX_CONTAINER} nginx -s reload" 2>&1 || {
        error "nginx 重载失败"
        exit 1
    }
--- a/scripts/verify-alipay-keys.sh
+++ b/scripts/verify-alipay-keys.sh
@@ -1,65 +0,0 @@
 #!/bin/bash
 # ===========================================
 # 支付宝密钥一致性核对脚本
 # 对比本地 .env 与服务器 green/blue .env 的应用私钥，
 # 并从本地私钥导出应用公钥，供与支付宝控制台比对。
 # 防止 invalid-signature（密钥不同步）问题复发。
 # 用法: bash scripts/verify-alipay-keys.sh [--remote-host HOST]
 # ===========================================
 set -euo pipefail
 SCRIPT_DIR="$(cd "$(dirname "$0")" && pwd)"
 PROJECT_ROOT="$(dirname "$SCRIPT_DIR")"
 ENV_FILE="$PROJECT_ROOT/.env"
 REMOTE_HOST="${2:-aliyun-server}"
 RED='\033[0;31m'; GREEN='\033[0;32m'; YELLOW='\033[1;33m'; NC='\033[0m'
 info()  { echo -e "${GREEN}[INFO]${NC} $1"; }
 warn()  { echo -e "${YELLOW}[WARN]${NC} $1"; }
 error() { echo -e "${RED}[ERROR]${NC} $1" >&2; }
 if [ ! -f "$ENV_FILE" ] || ! grep -q '^ALIPAY_PRIVATE_KEY=' "$ENV_FILE"; then
    error "本地 ${ENV_FILE} 未找到 ALIPAY_PRIVATE_KEY"
    exit 1
 fi
 LOCAL_KEY=$(grep '^ALIPAY_PRIVATE_KEY=' "$ENV_FILE" | head -1 | cut -d'=' -f2- | tr -d '\r\n ')
 LOCAL_MD5=$(printf '%s' "$LOCAL_KEY" | md5sum | cut -d' ' -f1)
 info "本地 .env 私钥 MD5: ${LOCAL_MD5}"
 ALL_MATCH=true
 for ENV in green blue; do
    REMOTE_MD5=$(ssh "$REMOTE_HOST" "grep '^ALIPAY_PRIVATE_KEY=' /root/rust/rust_backend_${ENV}/.env | cut -c20- | tr -d '\n' | md5sum | cut -d' ' -f1" 2>/dev/null || echo "N/A")
    if [ "$REMOTE_MD5" = "$LOCAL_MD5" ]; then
        info "服务器 ${ENV} 私钥一致 ✅"
    else
        warn "服务器 ${ENV} 私钥不一致（本地=${LOCAL_MD5} 远端=${REMOTE_MD5}）"
        ALL_MATCH=false
    fi
 done
 if [ "$ALL_MATCH" = true ]; then
    info "本地与服务器密钥一致"
 else
    warn "存在不一致！请检查服务器 .env 或重新部署"
 fi
 echo ""
 echo "========== 应用公钥（与控制台比对） =========="
 python3 -c "
 import base64
 from cryptography.hazmat.primitives import serialization
 key_b64 = '$LOCAL_KEY'
 try:
    priv = serialization.load_der_private_key(base64.b64decode(key_b64), password=None)
 except Exception:
    priv = serialization.load_pem_private_key(key_b64.encode(), password=None)
 pub_der = priv.public_key().public_bytes(
    encoding=serialization.Encoding.DER,
    format=serialization.PublicFormat.SubjectPublicKeyInfo
 )
 print(base64.b64encode(pub_der).decode())
 "
 echo ""
 info "请到支付宝开放平台 → 密钥工具 → 查看应用公钥，与上方公钥比对"
--- a/src/auth.rs
+++ b/src/auth.rs
@@ -1,6 +1,6 @@
 use chrono::{Utc, Duration};
 use jsonwebtoken::{Algorithm, DecodingKey, EncodingKey, Header, Validation, decode, encode};
-use uuid::Uuid;
+use base64::{Engine as _, engine::general_purpose::STANDARD as BASE64};
 use crate::error::AppError;
 use crate::models::{Claims, TempTokenClaims};
@@ -11,6 +11,7 @@ use actix_web::{
 // 常量
 const ACCESS_TOKEN_EXPIRE_HOURS: i64 = 24;
 const REFRESH_TOKEN_EXPIRE_DAYS: i64 = 7;
 pub async fn jwt_middleware<B: MessageBody>(
    req: ServiceRequest,
@@ -64,10 +65,42 @@ pub fn generate_token(
    .map_err(|e| format!("生成JWT失败: {}", e))
 }
-// 生成 refresh_token（随机 UUID，不含任何敏感信息）
+// 生成 refresh_token（简单 base64 编码的随机字符串）
-// 身份验证通过数据库查询该 token 是否存在实现
+pub fn generate_refresh_token(user_id: i32, secret: &str) -> Result<String, String> {
-pub fn generate_refresh_token(_user_id: i32, _secret: &str) -> Result<String, String> {
+    let now = Utc::now();
-    Ok(Uuid::new_v4().to_string())
+    let exp = (now + Duration::days(REFRESH_TOKEN_EXPIRE_DAYS)).timestamp();
    let payload = format!("{}:{}:{}", user_id, exp, secret);
    let token = BASE64.encode(payload.as_bytes());
    Ok(token)
 }
 // 解析 refresh_token，返回 (user_id, expires_at)
 #[allow(dead_code)]
 pub fn verify_refresh_token(token: &str, _secret: &str) -> Result<(i32, i64), String> {
    let decoded = BASE64.decode(token)
        .map_err(|e| format!("Refresh token 格式错误: {}", e))?;
    let payload = String::from_utf8(decoded)
        .map_err(|_| "Refresh token 解析失败".to_string())?;
    let parts: Vec<&str> = payload.split(':').collect();
    if parts.len() != 3 {
        return Err("Refresh token 结构错误".to_string());
    }
    let user_id: i32 = parts[0].parse()
        .map_err(|_| "Refresh token user_id 解析失败".to_string())?;
    let exp: i64 = parts[1].parse()
        .map_err(|_| "Refresh token exp 解析失败".to_string())?;
    let now = Utc::now().timestamp();
    if now > exp {
        return Err("Refresh token 已过期".to_string());
    }
    Ok((user_id, exp))
 }
 // 验证并解析JWT的函数
@@ -124,71 +157,3 @@ pub fn verify_temp_token(token: &str, secret: &str) -> Result<TempTokenClaims, S
    Ok(decoded.claims)
 }
 #[cfg(test)]
 mod tests {
    use super::*;
    const TEST_SECRET: &str = "unit-test-secret-0123456789";
    #[test]
    fn test_generate_and_verify_token_roundtrip() {
        let token = generate_token(42, "openid_test_123", 2, TEST_SECRET).unwrap();
        let claims = verify_token(&token, TEST_SECRET).unwrap();
        assert_eq!(claims.user_id, 42);
        assert_eq!(claims.openid, "openid_test_123");
        assert_eq!(claims.user_type, 2);
        assert!(claims.exp > claims.iat, "过期时间应晚于签发时间");
        assert!(claims.exp > Utc::now().timestamp(), "令牌应未过期");
    }
    #[test]
    fn test_verify_token_rejects_wrong_secret() {
        let token = generate_token(42, "openid", 2, TEST_SECRET).unwrap();
        assert!(verify_token(&token, "wrong-secret").is_err());
    }
    #[test]
    fn test_verify_token_rejects_tampered_payload() {
        let token = generate_token(42, "openid", 2, TEST_SECRET).unwrap();
        // 篡改 token 的载荷部分（第 2 段），应验证失败
        let mut parts: Vec<&str> = token.split('.').collect();
        assert_eq!(parts.len(), 3);
        parts[1] = "eyJ1c2VyX2lkIjo5OTl9";
        let tampered = parts.join(".");
        assert!(verify_token(&tampered, TEST_SECRET).is_err());
    }
    #[test]
    fn test_verify_token_rejects_garbage() {
        assert!(verify_token("not-a-jwt", TEST_SECRET).is_err());
        assert!(verify_token("", TEST_SECRET).is_err());
    }
    #[test]
    fn test_generate_refresh_token_is_random_uuid() {
        let a = generate_refresh_token(1, TEST_SECRET).unwrap();
        let b = generate_refresh_token(1, TEST_SECRET).unwrap();
        assert_ne!(a, b, "两次生成的 refresh token 不应相同");
        // UUID v4 格式：8-4-4-4-12 十六进制
        let parts: Vec<&str> = a.split('-').collect();
        assert_eq!(parts.len(), 5);
        assert!(parts.iter().all(|p| !p.is_empty()));
    }
    #[test]
    fn test_temp_token_roundtrip_and_expiry_window() {
        let token = generate_temp_token("openid_share", 777, TEST_SECRET, 10).unwrap();
        let claims = verify_temp_token(&token, TEST_SECRET).unwrap();
        assert_eq!(claims.openid, "openid_share");
        assert_eq!(claims.resource_id, 777);
        // 10 分钟有效期：exp - iat 约等于 600 秒（允许 ±2 秒误差）
        let lifetime = claims.exp - claims.iat;
        assert!((598..=602).contains(&lifetime), "临时 token 有效期应为 10 分钟，实际 {lifetime}s");
        assert!(verify_temp_token(&token, "wrong-secret").is_err());
    }
 }
--- a/src/db.rs
+++ b/src/db.rs
@@ -9,37 +9,15 @@ use crate::error::AppError;
 // 用于插入weather_data的数据
 pub async fn insert_weather_data(pool: &PgPool, weather_data: &WeatherData, user_id: i32) -> Result<i32, AppError> {
-    // 单次查询获取用户会员状态和数据条数（原 N+1：get_user_by_id + count_user_weather_data → 合并为 1 次）
+    // 配额检查：非付费用户数据条数限制
-    #[derive(FromRow)]
+    let user = get_user_by_id(pool, user_id).await?;
-struct UserQuota {
+    let is_active_member = user.is_member && user.membership_expires_at.is_none_or(|expires| expires > Utc::now());
    is_member: bool,
    #[sqlx(rename = "membership_expires_at")]
    membership_expires_at: Option<chrono::DateTime<Utc>>,
    data_count: i64,
 }
    let quota = sqlx::query_as::<_, UserQuota>(
        r#"
        SELECT
            u.is_member,
            u.membership_expires_at,
            (SELECT COUNT(*) FROM weather_data w WHERE w.user_id = $1)::BIGINT AS data_count
        FROM users u
        WHERE u.id = $1
        "#,
    )
    .bind(user_id)
    .fetch_optional(pool)
    .await
    .map_err(|e| AppError::Database(format!("查询用户配额失败: {}", e)))?
    .ok_or_else(|| AppError::NotFound("用户不存在".to_string()))?;
    let is_active_member = quota.is_member && quota.membership_expires_at.is_none_or(|expires| expires > Utc::now());
    // 维护模式：非会员使用更高的临时限额，防止资源滥用
    let is_maintenance = std::env::var("PAYMENT_MAINTENANCE_MODE").ok() == Some("true".to_string());
    if !is_active_member {
        let current_count = count_user_weather_data(pool, user_id).await?;
        let limit: i64 = if is_maintenance {
            env::var("MAINTENANCE_MODE_DATA_LIMIT")
                .unwrap_or_else(|_| "500".to_string())
@@ -52,7 +30,7 @@ struct UserQuota {
                .unwrap_or(20)
        };
-        if quota.data_count >= limit {
+        if current_count >= limit {
            return Err(AppError::Forbidden("数据条数已达上限，请升级为付费用户".to_string()));
        }
    }
@@ -370,6 +348,47 @@ pub async fn get_user_orders(
    Ok(rows)
 }
 /// 扫描超过 10 分钟的待支付订单，尝试自动确认（用于回调重试）
 /// 返回成功确认的订单数量
 pub async fn check_and_retry_pending_orders(pool: &PgPool) -> Result<u64, AppError> {
    // 查找超过 10 分钟仍为 pending 的订单
    let stuck_orders: Vec<(String,)> = sqlx::query_as(
        r#"
        SELECT order_no FROM payment_orders
        WHERE status = 'pending'
          AND created_at < NOW() - INTERVAL '10 minutes'
          AND created_at > NOW() - INTERVAL '24 hours'
        ORDER BY created_at ASC
        "#,
    )
    .fetch_all(pool)
    .await
    .map_err(|e| AppError::Database(format!("查询待处理订单失败: {}", e)))?;
    if stuck_orders.is_empty() {
        return Ok(0);
    }
    tracing::info!(
        "发现 {} 个待处理订单，尝试自动确认...",
        stuck_orders.len()
    );
    let mut confirmed: u64 = 0;
    for (order_no,) in &stuck_orders {
        match confirm_payment_order_by_orderno(pool, order_no).await {
            Ok(_) => {
                confirmed += 1;
                tracing::info!("定时任务自动确认订单: {}", order_no);
            }
            Err(e) => {
                tracing::warn!("定时任务无法确认订单 {}: {}", order_no, e);
            }
        }
    }
    Ok(confirmed)
 }
 /// 检查会员到期前 7 天的用户，发送即将到期通知
 pub async fn check_member_expiry_soon(pool: &PgPool) -> Result<u64, AppError> {
    let affected = sqlx::query(
@@ -659,7 +678,7 @@ pub async fn confirm_payment_order_by_orderno(
            is_member = true,
            membership_expires_at =
                CASE
-                    WHEN uo.package_type = 'permanent' THEN '2099-12-31'::TIMESTAMPTZ
+                    WHEN uo.package_type = 'permanent' THEN NULL
                    ELSE GREATEST(COALESCE(users.membership_expires_at, NOW()), NOW()) +
                        CASE
                            WHEN uo.package_type = 'monthly' THEN INTERVAL '30 days'
@@ -686,13 +705,9 @@ pub async fn confirm_payment_order_by_orderno(
    // 审计日志
    if let Some(uid) = user_id {
-        if let Err(e) = insert_payment_audit_log(pool, order_no, uid, "paid", None, None).await {
+        let _ = insert_payment_audit_log(pool, order_no, uid, "paid", None, None).await;
            tracing::warn!("插入支付审计日志失败: {}", e);
        }
        // 发送支付成功通知
-        if let Err(e) = insert_payment_notification(pool, uid, order_no).await {
+        let _ = insert_payment_notification(pool, uid, order_no).await;
            tracing::warn!("插入支付通知失败: {}", e);
        }
        // 验证会员到期时间是否正常
        if let Err(e) = verify_membership_after_payment(pool, order_no).await {
@@ -771,9 +786,7 @@ pub async fn refund_payment_order(
    // 审计日志
    let detail = if other_active.0 == 0 { "退款，会员已撤销" } else { "退款，有其他有效订单，保留会员" };
-    if let Err(e) = insert_payment_audit_log(pool, order_no, user_id, "refunded", None, Some(detail)).await {
+    let _ = insert_payment_audit_log(pool, order_no, user_id, "refunded", None, Some(detail)).await;
        tracing::warn!("插入支付审计日志失败: {}", e);
    }
    Ok(())
 }
@@ -866,14 +879,14 @@ pub async fn set_weather_favorite(
 #[derive(Debug, FromRow)]
 pub struct RefreshToken {
-    #[allow(dead_code)] // sqlx deserialization only; not read directly
+    #[allow(dead_code)]
    pub id: i32,
    pub user_id: i32,
-    #[allow(dead_code)] // sqlx deserialization only
+    #[allow(dead_code)]
    pub token: String,
-    #[allow(dead_code)] // sqlx deserialization only
+    #[allow(dead_code)]
    pub expires_at: chrono::DateTime<chrono::Utc>,
-    #[allow(dead_code)] // sqlx deserialization only
+    #[allow(dead_code)]
    pub created_at: chrono::DateTime<chrono::Utc>,
 }
@@ -1034,7 +1047,7 @@ pub async fn admin_force_confirm_order(
                is_member = true,
                membership_expires_at =
                    CASE
-                    WHEN uo.package_type = 'permanent' THEN '2099-12-31'::TIMESTAMPTZ
+                        WHEN uo.package_type = 'permanent' THEN NULL
                        ELSE GREATEST(COALESCE(users.membership_expires_at, NOW()), NOW()) +
                            CASE
                                WHEN uo.package_type = 'monthly' THEN INTERVAL '30 days'
@@ -1056,7 +1069,7 @@ pub async fn admin_force_confirm_order(
        .map_err(|e| AppError::Database(format!("管理员确认订单失败: {}", e)))?;
        // 写审计日志
-        if let Err(e) = insert_payment_audit_log(
+        let _ = insert_payment_audit_log(
            pool,
            order_no,
            user_id,
@@ -1064,10 +1077,7 @@ pub async fn admin_force_confirm_order(
            Some(admin_user_id),
            Some("管理员强制确认支付"),
        )
-        .await
+        .await;
        {
            tracing::warn!("插入支付审计日志失败: {}", e);
        }
        // 验证会员到期时间是否正常
        if let Err(e) = verify_membership_after_payment(pool, order_no).await {
@@ -1077,7 +1087,7 @@ pub async fn admin_force_confirm_order(
        result
    } else {
        // 订单已处理，只写日志
-        if let Err(e) = insert_payment_audit_log(
+        let _ = insert_payment_audit_log(
            pool,
            order_no,
            user_id,
@@ -1085,10 +1095,7 @@ pub async fn admin_force_confirm_order(
            Some(admin_user_id),
            Some(&format!("订单状态为 {}，跳过确认", status)),
        )
-        .await
+        .await;
        {
            tracing::warn!("插入支付审计日志失败: {}", e);
        }
        // 返回当前到期时间
        sqlx::query_scalar::<_, Option<chrono::DateTime<chrono::Utc>>>(
@@ -1153,11 +1160,8 @@ pub async fn cancel_payment_order(
        .await
        .map_err(|e| AppError::Database(format!("取消订单失败: {}", e)))?;
-    if let Err(e) = insert_payment_audit_log(pool, order_no, user_id, "cancelled", Some(user_id),
+    let _ = insert_payment_audit_log(pool, order_no, user_id, "cancelled", Some(user_id),
-        Some("用户主动取消待支付订单")).await
+        Some("用户主动取消待支付订单")).await;
    {
        tracing::warn!("插入支付审计日志失败: {}", e);
    }
    Ok(())
 }
@@ -1230,11 +1234,8 @@ pub async fn admin_refund_order(
    }
    let detail = if status == "paid" { "管理员手动退款（已支付订单）" } else { "管理员取消订单（待支付订单）" };
-    if let Err(e) = insert_payment_audit_log(pool, order_no, user_id, "refunded",
+    let _ = insert_payment_audit_log(pool, order_no, user_id, "refunded",
-        Some(admin_user_id), Some(detail)).await
+        Some(admin_user_id), Some(detail)).await;
    {
        tracing::warn!("插入支付审计日志失败: {}", e);
    }
    Ok(())
 }
--- a/src/error.rs
+++ b/src/error.rs
@@ -11,6 +11,15 @@ pub struct ErrorResponse<T = ()> {
 }
 impl<T> ErrorResponse<T> {
    #[allow(dead_code)]
    pub fn success(data: T) -> Self {
        Self {
            success: true,
            data: Some(data),
            error: None,
        }
    }
    pub fn error(msg: impl Into<String>) -> Self {
        Self {
            success: false,
@@ -20,6 +29,24 @@ impl<T> ErrorResponse<T> {
    }
 }
 impl<T: Serialize> ErrorResponse<T> {
    #[allow(dead_code, clippy::wrong_self_convention)]
    pub fn to_json_response(self) -> HttpResponse {
        HttpResponse::Ok().json(self)
    }
 }
 impl ErrorResponse<()> {
    #[allow(dead_code)]
    pub fn to_error_response(&self, status: StatusCode) -> HttpResponse {
        let body = serde_json::json!({
            "success": false,
            "error": self.error.clone().unwrap_or_else(|| "Unknown error".to_string())
        });
        HttpResponse::build(status).json(body)
    }
 }
 #[derive(Debug)]
 pub enum AppError {
    Unauthorized(String),
--- a/src/handlers/admin.rs
+++ b/src/handlers/admin.rs
@@ -59,13 +59,11 @@ pub async fn admin_update_user_payment(
    // 更新用户付费状态
    db::update_user_payment_status(pool.get_ref(), target_user_id, body.is_member, membership_expires_at).await?;
    // 审计日志
-    if let Err(e) = db::insert_payment_audit_log(
+    let _ = db::insert_payment_audit_log(
        pool.get_ref(), "ADMIN_MANUAL", target_user_id, "admin_revoke",
        Some(claims.user_id),
        Some(&format!("管理员手动更新付费状态: is_member={}, expires_at={:?}", body.is_member, body.membership_expires_at)),
-    ).await {
+    ).await;
        tracing::warn!("插入支付审计日志失败: {}", e);
    }
    Ok(HttpResponse::Ok().json(serde_json::json!({
        "success": true,
        "message": "用户付费状态已更新"
--- a/src/handlers/auth.rs
+++ b/src/handlers/auth.rs
@@ -4,7 +4,6 @@ use serde::{Deserialize, Serialize};
 use reqwest::Client;
 use sqlx::postgres::PgPool;
 use tracing::{debug, error, info, warn};
 use uuid::Uuid;
 use crate::auth::{generate_token, generate_refresh_token};
 use crate::db;
@@ -84,11 +83,7 @@ pub async fn login(
    let openid = match wechat_data.openid {
        Some(id) => {
-            let masked_openid = if id.len() >= 8 {
+            let masked_openid = format!("{}***{}", &id[0..4], &id[id.len() - 4..]);
                format!("{}***{}", &id[0..4], &id[id.len() - 4..])
            } else {
                id.to_string()
            };
            debug!("获取到用户openid: {}", masked_openid);
            id
        }
@@ -258,99 +253,6 @@ pub struct MockLoginResponse {
    pub user_id: i32,
 }
 // ===== 访客登录（免微信，直接网站支付用） =====
 #[derive(Debug, Serialize)]
 pub struct GuestLoginResponse {
    pub success: bool,
    pub token: String,
    pub refresh_token: String,
    pub user_id: i32,
    pub is_active_member: bool,
    pub membership_expires_at: Option<String>,
 }
 /// POST /api/guest-login
 /// 网站独立支付用：无需微信 code，直接创建访客用户并返回 JWT
 #[post("/api/guest-login")]
 pub async fn web_guest_login(
    pool: web::Data<PgPool>,
    app_state: web::Data<AppState>,
 ) -> impl Responder {
    let guest_openid = format!("web_guest_{}", Uuid::new_v4());
    let guest_name = format!("访客_{}", &guest_openid[10..18]);
    // 创建访客用户
    let user_id = match sqlx::query_as::<_, (i32,)>(
        r#"INSERT INTO users (openid, name, type) VALUES ($1, $2, 2)
           ON CONFLICT (openid) DO UPDATE SET id = users.id RETURNING id"#,
    )
    .bind(&guest_openid)
    .bind(&guest_name)
    .fetch_one(pool.get_ref())
    .await
    {
        Ok((id,)) => id,
        Err(e) => {
            error!("创建访客用户失败: {}", e);
            return HttpResponse::InternalServerError()
                .json(ErrorResponse::<()>::error("创建用户失败"));
        }
    };
    // 生成 JWT
    let token = match generate_token(user_id, &guest_openid, 2, &app_state.jwt_secret) {
        Ok(t) => t,
        Err(e) => {
            error!("JWT 生成失败: {}", e);
            return HttpResponse::InternalServerError()
                .json(ErrorResponse::<()>::error("生成令牌失败"));
        }
    };
    // 生成 refresh_token
    let refresh_token_str = match generate_refresh_token(user_id, &app_state.jwt_secret) {
        Ok(t) => t,
        Err(e) => {
            error!("refresh_token 生成失败: {}", e);
            return HttpResponse::InternalServerError()
                .json(ErrorResponse::<()>::error("生成刷新令牌失败"));
        }
    };
    let refresh_expires_at = Utc::now() + Duration::days(7);
    if let Err(e) =
        db::create_refresh_token(pool.get_ref(), user_id, &refresh_token_str, refresh_expires_at).await
    {
        warn!("保存 refresh_token 失败（继续）: {}", e);
    }
    // 查询付费状态
    let (is_active_member, membership_expires_at): (bool, Option<String>) =
        match sqlx::query_as::<_, (bool, Option<chrono::DateTime<chrono::Utc>>)>(
            "SELECT is_member, membership_expires_at FROM users WHERE id = $1",
        )
        .bind(user_id)
        .fetch_optional(pool.get_ref())
        .await
        {
            Ok(Some((is_member, expires))) => {
                let active = is_member && expires.is_none_or(|e| e > Utc::now());
                (active, expires.map(|e| e.to_rfc3339()))
            }
            _ => (false, None),
        };
    info!("[GUEST LOGIN] user_id={} 访客登录成功", user_id);
    HttpResponse::Ok().json(GuestLoginResponse {
        success: true,
        token,
        refresh_token: refresh_token_str,
        user_id,
        is_active_member,
        membership_expires_at,
    })
 }
 /// GET /api/mock-login
 /// 沙箱测试用：无需微信 code，直接返回 JWT
 /// 通过环境变量 MOCK_LOGIN_ENABLED + MOCK_LOGIN_KEY 控制启用
@@ -597,7 +499,7 @@ pub async fn web_generate_login_code(
        ts % 0xFFFF,
        &random_part[..4]
    );
-    let display_code = format!("ASD-{}", short_code[..7].to_uppercase());
+    let display_code = format!("ASD-{}", &short_code[..7].to_uppercase());
    let code_for_db = display_code.clone();
    // 4. 存入临时表（关联 user_id）
--- a/src/handlers/health.rs
+++ b/src/handlers/health.rs
@@ -1,90 +1,24 @@
 use actix_web::{web, get, HttpResponse, Responder};
 use chrono::{NaiveDateTime, Utc};
 use openssl::x509::X509;
 use serde::Serialize;
 use sqlx::postgres::PgPool;
-use std::path::Path;
+use serde::Serialize;
 /// SSL 证书文件路径（生产环境优先）
 const SSL_CERT_PATHS: &[&str] = &[
    "/www/sites/xmclassmate.top/ssl/fullchain.pem",
    "/etc/nginx/sites/xmclassmate.top/ssl/fullchain.pem",
 ];
 #[derive(Serialize)]
 pub struct HealthResponse {
    pub status: String,
    pub database: String,
    #[serde(skip_serializing_if = "Option::is_none")]
    pub ssl_cert: Option<SslCertInfo>,
    #[serde(skip_serializing_if = "Option::is_none")]
    pub error: Option<String>,
    #[serde(skip_serializing_if = "Option::is_none")]
    pub hint: Option<String>,
 }
 #[derive(Serialize)]
 pub struct SslCertInfo {
    pub subject: String,
    pub issuer: String,
    pub not_before: String,
    pub not_after: String,
    pub days_remaining: i64,
    pub valid: bool,
 }
 /// 读取 SSL 证书文件并提取有效期信息
 fn check_ssl_cert() -> Option<SslCertInfo> {
    let cert_path = SSL_CERT_PATHS.iter().find(|p| Path::new(p).exists())?;
    let pem_bytes = std::fs::read(cert_path).ok()?;
    let cert = X509::from_pem(&pem_bytes).ok()?;
    let subject = cert
        .subject_name()
        .entries()
        .next()
        .and_then(|e| e.data().as_utf8().ok())
        .map(|s| s.to_string())
        .unwrap_or_default();
    let issuer = cert
        .issuer_name()
        .entries()
        .next()
        .and_then(|e| e.data().as_utf8().ok())
        .map(|s| s.to_string())
        .unwrap_or_default();
    // OpenSSL Display 格式: "Jun 17 02:39:23 2026 GMT"
    let nb_str = format!("{}", cert.not_before());
    let na_str = format!("{}", cert.not_after());
    let not_before = NaiveDateTime::parse_from_str(&nb_str, "%b %e %H:%M:%S %Y GMT").ok()?;
    let not_after = NaiveDateTime::parse_from_str(&na_str, "%b %e %H:%M:%S %Y GMT").ok()?;
    let now = Utc::now().naive_utc();
    let days_remaining = (not_after - now).num_days();
    let valid = now >= not_before && now <= not_after;
    Some(SslCertInfo {
        subject,
        issuer,
        not_before: not_before.format("%Y-%m-%d %H:%M UTC").to_string(),
        not_after: not_after.format("%Y-%m-%d %H:%M UTC").to_string(),
        days_remaining,
        valid,
    })
 }
 #[get("/health")]
 pub async fn health_check(pool: web::Data<PgPool>) -> impl Responder {
    let ssl_cert = check_ssl_cert();
    match sqlx::query("SELECT 1").fetch_one(pool.get_ref()).await {
        Ok(_) => {
            HttpResponse::Ok().json(HealthResponse {
                status: "ok".to_string(),
                database: "connected".to_string(),
                ssl_cert,
                error: None,
                hint: None,
            })
@@ -120,7 +54,6 @@ pub async fn health_check(pool: web::Data<PgPool>) -> impl Responder {
            HttpResponse::ServiceUnavailable().json(HealthResponse {
                status: "error".to_string(),
                database: "disconnected".to_string(),
                ssl_cert,
                error: Some(error_msg),
                hint: Some(hint_msg),
            })
--- a/src/handlers/meta.rs
+++ b/src/handlers/meta.rs
@@ -6,7 +6,7 @@ const HTML_TEMPLATE: &str = r#"<!DOCTYPE html>
 <head>
    <meta charset="UTF-8">
    <meta name="viewport" content="width=device-width, initial-scale=1.0">
-    <title>小明计算助手</title>
+    <title>环境计算助手 — 环境监测工具</title>
    <style>
        * { margin: 0; padding: 0; box-sizing: border-box; }
        body {
@@ -135,7 +135,7 @@ const HTML_TEMPLATE: &str = r#"<!DOCTYPE html>
    <!-- Hero -->
    <div class="hero">
-        <h1>🌤 小明计算助手</h1>
+        <h1>🌤 环境计算助手</h1>
        <p>环境监测领域的专业计算工具，快速判定大气稳定度等级，判断无组织排放监测适宜性</p>
    </div>
@@ -194,7 +194,7 @@ const HTML_TEMPLATE: &str = r#"<!DOCTYPE html>
            <h2>访问方式</h2>
            <div style="text-align:center; margin:20px 0;">
                <p style="margin-bottom:16px; color:#666; font-size:15px;">
-                    请在微信中搜索「小明计算助手」小程序，或扫描下方二维码打开。
+                    请在微信中搜索「环境计算助手」小程序，或扫描下方二维码打开。
                </p>
                                <img src="/static/QR.jpg" 
                     alt="微信小程序二维码"
@@ -208,8 +208,7 @@ const HTML_TEMPLATE: &str = r#"<!DOCTYPE html>
    </div>
    <div class="footer">
-        <p>小明计算助手 · v{version}</p>
+        <p>环境计算助手 · v{version}</p>
        <p style="margin-top:4px;"><a href="http://beian.miit.gov.cn/" target="_blank" style="color:#999;text-decoration:none;">浙ICP备2026052792号</a></p>
        <p style="margin-top:4px;">如有问题请联系客服</p>
    </div>
--- a/src/handlers/mod.rs
+++ b/src/handlers/mod.rs
@@ -23,7 +23,6 @@ pub use admin::admin_force_confirm_order;
 pub use admin::admin_refund_order;
 pub use auth::login;
 pub use auth::mock_login;
 pub use auth::web_guest_login;
 pub use auth::refresh_token;
 pub use auth::web_generate_login_code;
 pub use auth::web_login_confirm;
--- a/src/handlers/payment.rs
+++ b/src/handlers/payment.rs
@@ -143,7 +143,6 @@ function confirmMockPay() {{
    }});
 }}
 </script>
 <div style="text-align:center;margin-top:32px;padding:16px;color:#999;font-size:12px;"><a href="http://beian.miit.gov.cn/" target="_blank" style="color:#999;text-decoration:none;">浙ICP备2026052792号</a></div>
 </body>
 </html>"#, order_no, display_name, jwt, order_no)
 }
@@ -153,14 +152,8 @@ fn rsa2_verify(content: &str, sign: &str, public_key_pem: &str) -> Result<bool,
    use rsa::pkcs8::DecodePublicKey;
    use rsa::RsaPublicKey;
    use sha2::Digest;
-    let public_key = RsaPublicKey::from_public_key_pem(public_key_pem).or_else(|_| {
+    let public_key =
-        base64::Engine::decode(&base64::engine::general_purpose::STANDARD, public_key_pem)
+        RsaPublicKey::from_public_key_pem(public_key_pem)
            .map_err(|e| format!("支付宝公钥 base64 解码失败: {}", e))
            .and_then(|der| {
                RsaPublicKey::from_public_key_der(&der)
                    .map_err(|e| format!("支付宝公钥 DER 解析失败: {}", e))
            })
    })
            .map_err(|e| format!("支付宝公钥解析失败: {}", e))?;
    let sig_bytes = base64::Engine::decode(&base64::engine::general_purpose::STANDARD, sign)
        .map_err(|e| format!("签名 Base64 解码失败: {}", e))?;
@@ -171,17 +164,6 @@ fn rsa2_verify(content: &str, sign: &str, public_key_pem: &str) -> Result<bool,
    Ok(true)
 }
 /// 检测是否为移动端浏览器
 fn is_mobile_ua(user_agent: &str) -> bool {
    let ua = user_agent.to_lowercase();
    ua.contains("mobile")
        || ua.contains("android")
        || ua.contains("iphone")
        || ua.contains("ipad")
        || ua.contains("phone")
        || ua.contains("harmonyos")
 }
 // ===== Helper: 生成支付宝支付表单 HTML =====
 fn build_alipay_form_html(
@@ -191,17 +173,12 @@ fn build_alipay_form_html(
    subject: &str,
    notify_url: &str,
    return_url: &str,
    _is_mobile: bool,  // 保留参数：待支付宝开通 wap.pay 后启用
 ) -> Result<String, String> {
    // 注意：当前支付宝产品仅开通了 alipay.trade.page.pay（电脑网站支付）
    // 该接口在手机浏览器中也能正常唤起支付宝 APP 或显示移动端页面
    let (method, product_code) = ("alipay.trade.page.pay", "FAST_INSTANT_TRADE_PAY");
    let biz_content = serde_json::json!({
        "out_trade_no": out_trade_no,
        "total_amount": total_amount,
        "subject": subject,
-        "product_code": product_code,
+        "product_code": "FAST_INSTANT_TRADE_PAY",
    });
    let biz_content_str =
@@ -210,7 +187,7 @@ fn build_alipay_form_html(
    let timestamp = chrono::Local::now().format("%Y-%m-%d %H:%M:%S").to_string();
    let mut params: BTreeMap<&str, &str> = BTreeMap::new();
    params.insert("app_id", &config.app_id);
-    params.insert("method", method);
+    params.insert("method", "alipay.trade.page.pay");
    params.insert("format", "JSON");
    params.insert("charset", "utf-8");
    params.insert("sign_type", "RSA2");
@@ -257,7 +234,6 @@ fn build_alipay_form_html(
        {}
    </form>
    <script>document.getElementById('alipay').submit();</script>
    <div style="text-align:center;margin-top:16px;color:#999;font-size:12px;"><a href="http://beian.miit.gov.cn/" target="_blank" style="color:#999;text-decoration:none;">浙ICP备2026052792号</a></div>
 </body>
 </html>"##,
        config.gateway, form_fields
@@ -278,20 +254,6 @@ fn check_payment_maintenance() -> Result<(), AppError> {
    Ok(())
 }
 /// 构建基础 URL：优先使用 APP_BASE_URL 环境变量，否则从请求 Host 头获取
 /// 确保支付宝通知回调（notify_url）正确指向当前处理请求的服务器
 fn get_base_url(req: &HttpRequest) -> String {
    if let Ok(url) = std::env::var("APP_BASE_URL") {
        return url;
    }
    let host = req
        .headers()
        .get("Host")
        .and_then(|v| v.to_str().ok())
        .unwrap_or("xmclassmate.top");
    format!("https://{}", host)
 }
 fn extract_token(req: &HttpRequest) -> Option<String> {
    req.headers()
        .get("Authorization")?
@@ -301,10 +263,8 @@ fn extract_token(req: &HttpRequest) -> Option<String> {
        .map(|s| s.to_string())
 }
-fn get_jwt_secret() -> Result<String, AppError> {
+fn get_jwt_secret() -> String {
-    std::env::var("JWT_SECRET").map_err(|_| {
+    std::env::var("JWT_SECRET").expect("JWT_SECRET must be set")
        AppError::Internal("JWT_SECRET 环境变量未设置".to_string())
    })
 }
 // ===== Handler: GET /payment — 套餐选择页（网页端微信扫码登录） =====
@@ -317,7 +277,7 @@ pub async fn payment_index() -> Result<HttpResponse, AppError> {
 <head>
 <meta charset="utf-8">
 <meta name="viewport" content="width=device-width, initial-scale=1.0">
-<title>开通会员 - 小明计算助手</title>
+<title>开通会员 - 环境计算助手</title>
 <style>
  * { margin: 0; padding: 0; box-sizing: border-box; }
  body { font-family: -apple-system, BlinkMacSystemFont, 'Segoe UI', Roboto, 'PingFang SC', sans-serif; background: #f0f2f5; min-height: 100vh; }
@@ -348,14 +308,6 @@ pub async fn payment_index() -> Result<HttpResponse, AppError> {
  .btn-refresh { background: #fff; color: #666; border: 1px solid #d9d9d9; }
  .login-note { font-size: 12px; color: #bbb; margin-top: 12px; }
  /* ===== 访客登录 ===== */
  .guest-divider { display: flex; align-items: center; margin: 20px 0; color: #ccc; font-size: 13px; gap: 12px; }
  .guest-divider::before, .guest-divider::after { content: ""; flex: 1; border-top: 1px solid #eee; }
  .btn-guest { display: block; width: 100%; background: #fff; color: #333; border: 1px solid #d9d9d9; border-radius: 12px; padding: 14px; font-size: 15px; cursor: pointer; margin-bottom: 8px; }
  .btn-guest:hover { border-color: #07c160; color: #07c160; }
  .btn-guest:disabled { background: #f5f5f5; color: #ccc; cursor: not-allowed; border-color: #eee; }
  .guest-hint { font-size: 12px; color: #bbb; text-align: center; margin-bottom: 4px; }
  /* ===== 会员区域 ===== */
  .paid-section { display: none; }
  .paid-status { background: linear-gradient(135deg, #07c160, #06ad56); color: #fff; padding: 36px 20px; text-align: center; }
@@ -418,26 +370,17 @@ pub async fn payment_index() -> Result<HttpResponse, AppError> {
 <!-- 登录区（等待授权） -->
 <div class="login-section" id="loginSection">
  <div class="login-card">
-    <div class="login-icon">🔓</div>
+    <div class="login-icon">🔒</div>
-    <div class="login-title" id="loginTitle">登录</div>
+    <div class="login-title">等待授权</div>
-    <div class="login-desc" id="loginDesc">选择登录方式：</div>
+    <div class="login-desc" id="loginDesc">请在微信小程序中<br>点击「去授权」完成登录</div>
    <div class="error-msg" id="errorMsg"></div>
    <!-- 访客登录（网站独立支付） -->
    <button class="btn-guest" id="guestBtn" onclick="guestLogin()">📱 访客登录 - 直接选择套餐</button>
    <div class="guest-hint">无需微信，自动创建体验账号</div>
    <div class="guest-divider">或</div>
    <div class="code-display" id="codeDisplay" style="display:none">
      <div class="code-label">登录码</div>
      <div class="code-value" id="codeValue">--</div>
    </div>
    <button class="btn-login" id="mpBtn" onclick="showMpLogin()">从微信小程序登录</button>
    <div class="login-note">需要已安装「小明计算助手」小程序</div>
    <div class="scan-status waiting" id="scanStatus" style="display:none">
      等待小程序授权确认...
    </div>
@@ -524,9 +467,6 @@ pub async fn payment_index() -> Result<HttpResponse, AppError> {
  <div class="footer-links">
    <button class="btn-logout" onclick="logout()">退出登录</button>
  </div>
  <div style="text-align:center;margin-top:12px;padding:8px 16px;color:#aaa;font-size:11px;">
    <a href="http://beian.miit.gov.cn/" target="_blank" style="color:#aaa;text-decoration:none;">浙ICP备2026052792号</a>
  </div>
 </div>
 <script>
@@ -553,52 +493,14 @@ pub async fn payment_index() -> Result<HttpResponse, AppError> {
      currentShortCode = urlCode;
      document.getElementById('codeValue').textContent = currentShortCode;
      document.getElementById('codeDisplay').style.display = 'block';
      document.getElementById('mpBtn').style.display = 'none';
      document.getElementById('loginDesc').textContent = '请在微信小程序中输入此登录码：';
      document.getElementById('scanStatus').style.display = 'block';
      document.getElementById('loginDesc').style.display = 'none';
      // 启动轮询
      if (pollTimer) clearInterval(pollTimer);
      pollTimer = setInterval(pollLoginStatus, 2000);
    }
 })();
  // ---- 访客登录（免微信） ----
  async function guestLogin() {
    var btn = document.getElementById('guestBtn');
    btn.disabled = true;
    btn.textContent = '登录中...';
    try {
      var resp = await fetch('/api/guest-login', { method: 'POST' });
      var data = await resp.json();
      if (data.success) {
        jwt = data.token;
        isPaidActive = data.is_active_member || false;
        paidExpiresAt = data.membership_expires_at || null;
        showLoggedIn();
      } else {
        showError('登录失败，请重试');
        btn.disabled = false;
        btn.textContent = '📱 访客登录 - 直接选择套餐';
      }
    } catch(e) {
      showError('网络错误，请重试');
      btn.disabled = false;
      btn.textContent = '📱 访客登录 - 直接选择套餐';
    }
  }
  // ---- 显示微信小程序登录 ----
  function showMpLogin() {
    document.getElementById('guestBtn').style.display = 'none';
    document.querySelector('.guest-divider').style.display = 'none';
    document.querySelector('.guest-hint').style.display = 'none';
    document.getElementById('mpBtn').style.display = 'none';
    document.getElementById('loginDesc').textContent = '请在微信小程序中\n点击「去授权」完成登录';
    document.getElementById('codeDisplay').style.display = 'block';
    document.getElementById('scanStatus').style.display = 'block';
    document.getElementById('loginTitle').textContent = '等待授权';
  }
  async function checkPaidStatus(token) {
    try {
      const resp = await fetch(API_BASE + '/api/user/profile', {
@@ -750,8 +652,7 @@ pub async fn payment_page(
        .or_else(|| query.jwt.clone())
        .ok_or_else(|| AppError::Unauthorized("未登录".to_string()))?;
-    let secret = get_jwt_secret()?;
+    let claims = crate::auth::verify_token(&token, &get_jwt_secret())
    let claims = crate::auth::verify_token(&token, &secret)
        .map_err(|_| AppError::Unauthorized("Token 无效".to_string()))?;
    let pkg = get_package_info(&query.package_)
@@ -806,12 +707,12 @@ pub async fn payment_page(
        }
    };
-    let base_url = get_base_url(&req);
+    let base_url = std::env::var("APP_BASE_URL")
        .unwrap_or_else(|_| "https://dev.xmclassmate.top".to_string());
    let notify_url = format!("{}/payment/notify", base_url);
    let return_url = format!("{}/payment/success?order_no={}&jwt={}", base_url, order_no, token);
    let Some(config) = AlipayConfig::from_env() else {
        check_mock_payment_allowed(&req)?;
        let jwt_for_mock = token.clone();
        let mock_html = build_mock_pay_html(&order_no, pkg.display_name, &jwt_for_mock);
        return Ok(HttpResponse::Ok()
@@ -821,14 +722,6 @@ pub async fn payment_page(
    let total_amount_str = format!("{:.2}", pkg.amount as f64 / 100.0);
    // 根据 User-Agent 选择手机网站支付或电脑网站支付
    let mobile = req
        .headers()
        .get("User-Agent")
        .and_then(|v| v.to_str().ok())
        .map(is_mobile_ua)
        .unwrap_or(false);
    match build_alipay_form_html(
        &config,
        &order_no,
@@ -836,7 +729,6 @@ pub async fn payment_page(
        pkg.display_name,
        &notify_url,
        &return_url,
        mobile,
    ) {
        Ok(form_html) => Ok(HttpResponse::Ok()
            .content_type("text/html; charset=utf-8")
@@ -865,14 +757,14 @@ pub async fn alipay_pay_page(
 ) -> Result<HttpResponse, AppError> {
    check_payment_maintenance()?;
    let token = extract_token(&req).ok_or_else(|| AppError::Unauthorized("未登录".to_string()))?;
-    let secret = get_jwt_secret()?;
+    crate::auth::verify_token(&token, &get_jwt_secret())
    crate::auth::verify_token(&token, &secret)
        .map_err(|_| AppError::Unauthorized("Token 无效".to_string()))?;
    let pkg = get_package_info(&query.package_type)
        .ok_or_else(|| AppError::BadRequest("无效的套餐类型".to_string()))?;
-    let base_url = get_base_url(&req);
+    let base_url = std::env::var("APP_BASE_URL")
        .unwrap_or_else(|_| "https://dev.xmclassmate.top".to_string());
    let notify_url = format!("{}/payment/notify", base_url);
    let return_url = format!("{}/payment/success?order_no={}", base_url, query.order_no);
@@ -886,13 +778,6 @@ pub async fn alipay_pay_page(
    let total_amount_str = format!("{:.2}", pkg.amount as f64 / 100.0);
    let mobile = req
        .headers()
        .get("User-Agent")
        .and_then(|v| v.to_str().ok())
        .map(is_mobile_ua)
        .unwrap_or(false);
    match build_alipay_form_html(
        &config,
        &query.order_no,
@@ -900,7 +785,6 @@ pub async fn alipay_pay_page(
        pkg.display_name,
        &notify_url,
        &return_url,
        mobile,
    ) {
        Ok(form_html) => Ok(HttpResponse::Ok()
            .content_type("text/html; charset=utf-8")
@@ -958,42 +842,27 @@ fn parse_alipay_form(body: &[u8]) -> BTreeMap<String, String> {
 }
 /// 手动 URL 解码（percent-decoding）
 /// 注意：`+` 始终解码为空格（form-urlencoded 标准），而非仅在 `%` 转义之后
 fn urlencoding(s: &str) -> String {
-    let input: Vec<u8> = s.bytes().collect();
+    let mut result = String::with_capacity(s.len());
-    let mut bytes: Vec<u8> = Vec::with_capacity(input.len());
+    let mut chars = s.bytes().peekable();
-    let mut i = 0;
+    let mut had_escape = false;
-    while i < input.len() {
+    while let Some(b) = chars.next() {
        let b = input[i];
        if b == b'%' {
-            let hi = input.get(i + 1).and_then(|&c| hex_val(c));
+            had_escape = true;
-            let lo = input.get(i + 2).and_then(|&c| hex_val(c));
+            let hi = chars.next().and_then(hex_val);
            let lo = chars.next().and_then(hex_val);
            if let (Some(h), Some(l)) = (hi, lo) {
-                bytes.push(h << 4 | l);
+                result.push((h << 4 | l) as char);
                i += 3;
                continue;
            }
            // 不完整的转义：原样保留 '%'，后续字符照常处理
        }
        if b == b'+' {
            bytes.push(b' ');
            } else {
-            bytes.push(b);
+                result.push('%');
            }
-        i += 1;
+        } else if b == b'+' && had_escape {
            result.push(' ');
        } else {
            result.push(b as char);
        }
    // 按字节收集后统一解码：优先 UTF-8，失败回退 GBK（兼容支付宝回调编码）
    match String::from_utf8(bytes.clone()) {
        Ok(s) => s,
        Err(_) => match encoding_rs::Encoding::for_label(b"gbk") {
            Some(enc) => {
                let (s, _, _) = enc.decode(&bytes);
                s.into_owned()
            }
            None => String::from_utf8_lossy(&bytes).into_owned(),
        },
    }
    result
 }
 fn hex_val(c: u8) -> Option<u8> {
@@ -1043,7 +912,7 @@ pub async fn alipay_notify(
        .join("&");
    if let Err(e) = rsa2_verify(&sign_source, &sign, &config.alipay_public_key) {
-        tracing::error!("支付宝回调签名验证失败: {}", e);
+        tracing::warn!("支付宝签名验证失败: {}", e);
        return HttpResponse::Ok().body("fail");
    }
@@ -1145,9 +1014,6 @@ fn build_success_html(order_no: &str, jwt_token: &str) -> String {
    }}
  }}, 30000);
 </script>
 <div style="text-align:center;margin-top:24px;padding:12px;color:#999;font-size:11px;">
  <a href="http://beian.miit.gov.cn/" target="_blank" style="color:#999;text-decoration:none;">浙ICP备2026052792号</a>
 </div>
 </body>
 </html>"##,
        green, white, order_no, orange, jwt_token
@@ -1165,9 +1031,6 @@ fn format_error_html(msg: &str, order_no: &str) -> String {
 <p style="color:#666">{}</p>
 <p style="color:#999;font-size:13px">订单号: {}</p>
 <p><a href="/payment" style="color:#1677ff">返回重试</a></p>
 <div style="text-align:center;margin-top:24px;padding:12px;color:#999;font-size:11px;">
  <a href="http://beian.miit.gov.cn/" target="_blank" style="color:#999;text-decoration:none;">浙ICP备2026052792号</a>
 </div>
 </body>
 </html>"##,
        msg, order_no
@@ -1229,7 +1092,7 @@ pub async fn alipay_refund_notify(
        .join("&");
    if let Err(e) = rsa2_verify(&sign_source, &sign, &config.alipay_public_key) {
-        tracing::error!("支付宝退款回调签名验证失败: {}", e);
+        tracing::warn!("支付宝退款签名验证失败: {}", e);
        return HttpResponse::Ok().body("fail");
    }
@@ -1596,15 +1459,8 @@ pub async fn payment_login_status(
    }
    // 已确认 → 使用已生成的 token
-    let token = token.unwrap_or_default();
+    let token = token.unwrap();
-    let Some(user_id) = user_id else {
+    let user_id = user_id.unwrap();
        return Ok(HttpResponse::Ok().json(serde_json::json!({
            "success": false, "confirmed": false,
            "token": None::<String>,
            "is_active_member": false,
            "membership_expires_at": None::<String>,
        })));
    };
    let (is_active_member, membership_expires_at): (bool, Option<String>) =
        match sqlx::query_as::<_, (bool, Option<chrono::DateTime<chrono::Utc>>)>(
@@ -1636,171 +1492,3 @@ pub async fn payment_login_status(
        membership_expires_at,
    }))
 }
 #[cfg(test)]
 mod tests {
    use super::*;
    // ===== 套餐定义 =====
    #[test]
    fn test_get_package_info_known_packages() {
        for (pkg, expected_amount, expected_days) in [
            ("monthly", 590, Some(30)),
            ("quarterly", 1680, Some(90)),
            ("half_year", 3190, Some(182)),
            ("yearly", 6020, Some(365)),
        ] {
            let info = get_package_info(pkg).unwrap_or_else(|| panic!("套餐 {pkg} 应存在"));
            assert_eq!(info.amount, expected_amount, "套餐 {pkg} 金额");
            assert_eq!(info.days, expected_days, "套餐 {pkg} 天数");
        }
    }
    #[test]
    fn test_get_package_info_unknown_package() {
        assert!(get_package_info("weekly").is_none());
        assert!(get_package_info("lifetime").is_none());
        assert!(get_package_info("").is_none());
    }
    // ===== URL 解码 =====
    #[test]
    fn test_urlencoding_decodes_percent_escapes() {
        assert_eq!(urlencoding("hello%20world"), "hello world");
        assert_eq!(urlencoding("%E4%B8%AD%E6%96%87"), "中文");
        assert_eq!(urlencoding("a%2Bb"), "a+b");
    }
    #[test]
    fn test_urlencoding_plus_means_space() {
        assert_eq!(urlencoding("a+b+c"), "a b c");
    }
    #[test]
    fn test_urlencoding_handles_invalid_escapes() {
        // 不完整的 % 序列按字面保留
        assert_eq!(urlencoding("100%"), "100%");
        assert_eq!(urlencoding("%2"), "%2");
        assert_eq!(urlencoding("%zz"), "%zz");
    }
    #[test]
    fn test_hex_val() {
        assert_eq!(hex_val(b'0'), Some(0));
        assert_eq!(hex_val(b'9'), Some(9));
        assert_eq!(hex_val(b'a'), Some(10));
        assert_eq!(hex_val(b'f'), Some(15));
        assert_eq!(hex_val(b'A'), Some(10));
        assert_eq!(hex_val(b'F'), Some(15));
        assert_eq!(hex_val(b'g'), None);
        assert_eq!(hex_val(b'-'), None);
    }
    #[test]
    fn test_parse_alipay_form_utf8() {
        let body = b"out_trade_no=ASD20260101&trade_status=TRADE_SUCCESS&total_amount=5.90";
        let map = parse_alipay_form(body);
        assert_eq!(map.get("out_trade_no").map(String::as_str), Some("ASD20260101"));
        assert_eq!(map.get("trade_status").map(String::as_str), Some("TRADE_SUCCESS"));
        assert_eq!(map.get("total_amount").map(String::as_str), Some("5.90"));
    }
    #[test]
    fn test_parse_alipay_form_gbk_fallback() {
        // 模拟支付宝回调使用 GBK 编码（含中文 subject）
        let raw = "out_trade_no=ASD123&subject=包月会员";
        let (gbk_bytes, _, _) = encoding_rs::GBK.encode(raw);
        let map = parse_alipay_form(&gbk_bytes);
        assert_eq!(map.get("out_trade_no").map(String::as_str), Some("ASD123"));
        assert_eq!(map.get("subject").map(String::as_str), Some("包月会员"));
    }
    #[test]
    fn test_parse_alipay_form_empty() {
        let map = parse_alipay_form(b"");
        assert!(map.is_empty());
    }
    // ===== RSA2 签名 / 验签 =====
    fn generate_test_key_pair() -> (String, String) {
        use rsa::pkcs8::{EncodePrivateKey, EncodePublicKey, LineEnding};
        use rsa::RsaPrivateKey;
        let mut rng = rand::thread_rng();
        let private_key = RsaPrivateKey::new(&mut rng, 2048).expect("生成测试密钥失败");
        let private_pem = private_key.to_pkcs8_pem(LineEnding::LF).unwrap().to_string();
        let public_pem = private_key
            .to_public_key()
            .to_public_key_pem(LineEnding::LF)
            .unwrap()
            .to_string();
        (private_pem, public_pem)
    }
    #[test]
    fn test_rsa2_sign_verify_roundtrip() {
        let (private_pem, public_pem) = generate_test_key_pair();
        let content = "out_trade_no=ASD123&trade_status=TRADE_SUCCESS";
        let sign = rsa2_sign(content, &private_pem).unwrap();
        assert!(!sign.is_empty());
        assert!(rsa2_verify(content, &sign, &public_pem).unwrap());
    }
    #[test]
    fn test_rsa2_verify_rejects_tampered_content() {
        let (private_pem, public_pem) = generate_test_key_pair();
        let sign = rsa2_sign("original content", &private_pem).unwrap();
        // 调用处语义：`if let Err(e) = rsa2_verify(...)` 即拒绝，篡改内容必须返回 Err
        assert!(rsa2_verify("tampered content", &sign, &public_pem).is_err());
    }
    #[test]
    fn test_rsa2_sign_supports_base64_der_key() {
        use rsa::pkcs8::EncodePrivateKey;
        use rsa::RsaPrivateKey;
        // 支付宝密钥工具导出的是 Base64(DER)，不是 PEM 文本
        let mut rng = rand::thread_rng();
        let private_key = RsaPrivateKey::new(&mut rng, 2048).expect("生成测试密钥失败");
        let der = private_key.to_pkcs8_der().unwrap();
        let b64_key = base64::Engine::encode(&base64::engine::general_purpose::STANDARD, der.as_bytes());
        let sign = rsa2_sign("hello", &b64_key).unwrap();
        assert!(!sign.is_empty());
    }
    #[test]
    fn test_rsa2_sign_rejects_invalid_key() {
        assert!(rsa2_sign("content", "not-a-key").is_err());
    }
    // ===== 移动端 UA 检测 =====
    #[test]
    fn test_is_mobile_ua() {
        assert!(is_mobile_ua("Mozilla/5.0 (iPhone; CPU iPhone OS 17_0 like Mac OS X)"));
        assert!(is_mobile_ua("Mozilla/5.0 (Linux; Android 14; Pixel 8)"));
        assert!(is_mobile_ua("HarmonyOS Browser"));
        assert!(is_mobile_ua("Mozilla/5.0 (iPad; CPU OS 17_0 like Mac OS X)"));
        assert!(!is_mobile_ua("Mozilla/5.0 (Windows NT 10.0; Win64; x64) Chrome/126.0"));
        assert!(!is_mobile_ua("Mozilla/5.0 (Macintosh; Intel Mac OS X 14_0) Safari/605.1.15"));
    }
    // ===== 订单号格式 =====
    #[test]
    fn test_order_no_format_is_unique() {
        // create_order 内部生成格式：ASD{timestamp}{random}，这里验证生成逻辑的幂等约束：
        // 同一时刻多次生成的订单号不应相同（随机后缀）
        let mut seen = std::collections::HashSet::new();
        for _ in 0..100 {
            let no = format!("ASD{}{:04}", chrono::Utc::now().timestamp_millis(), rand::random::<u16>());
            assert!(seen.insert(no.clone()), "订单号重复: {no}");
        }
    }
 }
--- a/src/handlers/static_files.rs
+++ b/src/handlers/static_files.rs
@@ -17,7 +17,6 @@ pub async fn serve_static_files(path: web::Path<String>) -> impl Responder {
                Some("gif") => "image/gif",
                Some("svg") => "image/svg+xml",
                Some("webp") => "image/webp",
                Some("txt") => "text/plain",
                Some("css") => "text/css",
                Some("js") => "application/javascript",
                Some("html") => "text/html",
--- a/src/handlers/user.rs
+++ b/src/handlers/user.rs
@@ -18,8 +18,6 @@ pub async fn get_current_user_profile(
    let user = db::get_user_by_id(pool.get_ref(), user_id).await?;
    let is_maintenance = std::env::var("PAYMENT_MAINTENANCE_MODE").ok() == Some("true".to_string());
    let is_active_member = if is_maintenance {
        // 维护模式下所有已认证用户视为活跃会员，确保支付故障期间服务可用
        // 注意：此路由有 JWT 中间件保护，未认证请求已在前置中间件被拦截
        true
    } else {
        user.is_member &&
--- a/src/main.rs
+++ b/src/main.rs
@@ -25,7 +25,7 @@ use handlers::{
    get_user_orders, health_check, list_notifications, login, mark_all_read, mark_notification_read, unread_count, mock_login, mock_confirm, sync_order, payment_index, payment_login_status, payment_page, payment_success,
    post_weather_data, report_frontend_error,
    refresh_token, remove_favorite, root, save_user_profile, serve_static_files,
-    web_generate_login_code, web_guest_login, web_login_confirm, web_login_auto_confirm,
+    web_generate_login_code, web_login_confirm, web_login_auto_confirm,
 };
 use models::AppState;
@@ -85,8 +85,6 @@ fn create_server_config(
        .service(alipay_notify)   // POST /payment/notify（支付宝异步回调）
        .service(alipay_refund_notify) // POST /payment/refund-notify（支付宝退款回调）
        .service(payment_login_status) // GET /payment/login-status（网页轮询）
        // robots.txt（无需认证）
        .route("/robots.txt", web::get().to(|| async { serve_static_files(web::Path::from("robots.txt".to_string())).await }))
        // 静态文件（无需认证）
        .service(web::resource("/static/{tail:.*}").route(web::get().to(serve_static_files)))
        // API 接口
@@ -98,7 +96,6 @@ fn create_server_config(
        .service(web_generate_login_code)
        .service(web_login_confirm)
        .service(web_login_auto_confirm)
        .service(web_guest_login) // POST /api/guest-login — 访客登录（免微信）
        .service(report_frontend_error) // POST /api/sentry/events
        .service(
            web::scope("")
@@ -157,7 +154,7 @@ async fn main() -> std::io::Result<()> {
    // Sentry 初始化（仅在 SENTRY_DSN 环境变量已设置时启用）
    let _sentry_guard = if let Ok(dsn) = std::env::var("SENTRY_DSN") {
        if !dsn.is_empty() {
-            info!("Sentry 已初始化");
+            eprintln!("[SENTRY] Sentry 已初始化 (DSN: {})", dsn);
            Some(sentry::init((
                dsn,
                sentry::ClientOptions {
@@ -170,14 +167,30 @@ async fn main() -> std::io::Result<()> {
                },
            )))
        } else {
-            info!("SENTRY_DSN 为空，跳过 Sentry 初始化");
+            eprintln!("[SENTRY] SENTRY_DSN 为空，跳过 Sentry 初始化");
            None
        }
    } else {
-        info!("未设置 SENTRY_DSN，跳过 Sentry 初始化");
+        eprintln!("[SENTRY] 未设置 SENTRY_DSN，跳过 Sentry 初始化");
        None
    };
    // 初始化文件日志（JSON 格式，带轮转）
    let log_dir = std::path::Path::new("./logs");
    std::fs::create_dir_all(log_dir).ok(); // 确保日志目录存在
    let file_appender = tracing_appender::rolling::Builder::new()
        .rotation(tracing_appender::rolling::Rotation::DAILY)
        .filename_prefix("rust-backend")
        .filename_suffix("log")
        .build(log_dir)
        .expect("无法创建日志文件");
    let (non_blocking, _guard) = tracing_appender::non_blocking(file_appender);
    // 保持文件 guard 存活（使用 Box 泄漏）
    std::mem::forget(_guard);
    use std::str::FromStr;
    let default_directive = tracing_subscriber::filter::Directive::from_str("info").unwrap();
@@ -200,14 +213,14 @@ async fn main() -> std::io::Result<()> {
                )
        )
        .with_target(true)
-        .with_thread_ids(false)
+        .with_thread_ids(false) // 生产环境可开启
        .with_file(true)
        .with_line_number(true)
-        .with_ansi(true)
+        .with_writer(non_blocking)
-        .compact()
+        .with_ansi(false) // 文件中不使用 ANSI 颜色
        .json() // JSON 格式便于 ELK 解析
        .init();
-    info!("日志系统初始化成功，输出到 systemd journal (journalctl)");
+    info!("日志系统初始化成功，JSON格式，输出到 ./logs/");
    info!("日志级别: {}", app_config.rust_log);
    let app_state = match AppState::load() {
        Ok(state) => state,
@@ -230,9 +243,7 @@ async fn main() -> std::io::Result<()> {
        .timeout(std::time::Duration::from_secs(10))
        .connect_timeout(std::time::Duration::from_secs(5))
        .build()
-        .unwrap_or_else(|e| {
+        .expect("创建 HTTP 客户端失败");
            panic!("创建 HTTP 客户端失败: {}", e);
        });
    // 启动时清理：过期订单 + 过期登录码
    match db::cleanup_expired_pending_orders(&pool, None).await {
@@ -244,28 +255,31 @@ async fn main() -> std::io::Result<()> {
        Err(e) => warn!("启动时清理 web 登录码失败: {}", e),
    }
    // 后台定时扫描待支付订单（每 5 分钟）
    let pool_clone = pool.clone();
    actix_web::rt::spawn(async move {
        let mut interval = actix_web::rt::time::interval(std::time::Duration::from_secs(300));
        interval.tick().await; // 跳过立即执行
        loop {
            interval.tick().await;
-            tracing::info!("[定时任务] 开始...");
+            tracing::info!("[定时任务] 开始扫描待支付订单...");
            match db::check_and_retry_pending_orders(&pool_clone).await {
                Ok(confirmed) => {
                    if confirmed > 0 {
                        tracing::info!("[定时任务] 自动确认了 {} 个待支付订单", confirmed);
                    }
                }
                Err(e) => tracing::warn!("[定时任务] 扫描待支付订单失败: {}", e),
            }
            // 会员到期前 7 天提醒
-            if let Err(e) = db::check_member_expiry_soon(&pool_clone).await {
+            let _ = db::check_member_expiry_soon(&pool_clone).await;
                tracing::error!("检查会员到期失败: {}", e);
            }
            // 清理超过 24 小时的过期待支付订单
-            if let Err(e) = db::cleanup_expired_pending_orders(&pool_clone, None).await {
+            let _ = db::cleanup_expired_pending_orders(&pool_clone, None).await;
                tracing::error!("清理过期订单失败: {}", e);
            }
            // 清理过期的 refresh_token
-            if let Err(e) = db::cleanup_expired_refresh_tokens(&pool_clone).await {
+            let _ = db::cleanup_expired_refresh_tokens(&pool_clone).await;
                tracing::error!("清理过期 refresh token 失败: {}", e);
            }
        }
    });
@@ -311,7 +325,6 @@ async fn main() -> std::io::Result<()> {
                create_server_config(pool_clone.clone(), http_client_clone.clone(), app_state_clone.clone())
            })
            .keep_alive(std::time::Duration::from_secs(30))
            .shutdown_timeout(10)
            .backlog(1024)
            .bind_openssl(&addr, ssl_builder)
            {
@@ -335,7 +348,6 @@ async fn main() -> std::io::Result<()> {
                create_server_config(pool_clone.clone(), http_client_clone.clone(), app_state_clone.clone())
            })
            .keep_alive(std::time::Duration::from_secs(30))
            .shutdown_timeout(10)
            .backlog(1024)
            .bind(&addr)
            {
--- a/src/models.rs
+++ b/src/models.rs
@@ -20,7 +20,7 @@ pub struct Claims {
    pub user_id: i32,
    // 自定义字段：openid（可选）
    pub openid: String,
-    // 自定义字段：user_type
+    // 自定义字段：user_ytpe
    pub user_type: i32,
 }
@@ -51,6 +51,24 @@ impl LoginResponse {
    }
 }
 // 兼容旧的 TokenResponse
 #[allow(dead_code)]
 #[derive(Debug, Serialize, Clone)]
 pub struct TokenResponse {
    pub success: bool,
    pub token: String,
 }
 #[allow(dead_code)]
 impl TokenResponse {
    pub fn new(token: String) -> Self {
        Self {
            success: true,
            token,
        }
    }
 }
 // Refresh Token 请求
 #[derive(Debug, Deserialize)]
 pub struct RefreshTokenRequest {
@@ -329,6 +347,17 @@ pub struct AppState {
    pub jwt_secret: String,
    pub wechat_appid: String,
    pub wechat_secret: String,
    #[allow(dead_code)]
    pub free_user_data_limit: i32,
    // ===== 支付宝配置 =====
    #[allow(dead_code)]
    pub alipay_app_id: Option<String>,
    #[allow(dead_code)]
    pub alipay_private_key: Option<String>,
    #[allow(dead_code)]
    pub alipay_alipay_public_key: Option<String>,
    #[allow(dead_code)]
    pub alipay_gateway: Option<String>,
 }
 impl AppState {
@@ -340,6 +369,14 @@ impl AppState {
                .map_err(|_| "环境变量WECHAT_APPID未设置".to_string())?,
            wechat_secret: std::env::var("WECHAT_SECRET")
                .map_err(|_| "环境变量WECHAT_SECRET未设置".to_string())?,
            free_user_data_limit: std::env::var("FREE_USER_DATA_LIMIT")
                .map(|v| v.parse().unwrap_or(20))
                .unwrap_or(20),
            // 支付宝配置（可选，未配置时使用模拟支付）
            alipay_app_id: std::env::var("ALIPAY_APP_ID").ok(),
            alipay_private_key: std::env::var("ALIPAY_PRIVATE_KEY").ok(),
            alipay_alipay_public_key: std::env::var("ALIPAY_ALIPAY_PUBLIC_KEY").ok(),
            alipay_gateway: std::env::var("ALIPAY_GATEWAY").ok(),
        })
    }
 }
--- a/src/rate_limiter.rs
+++ b/src/rate_limiter.rs
@@ -40,7 +40,7 @@ impl RateLimiter {
    }
 }
-#[cfg(test)]
+#[allow(dead_code)]
 pub fn extract_client_ip_from_header(headers: &actix_web::http::header::HeaderMap) -> String {
    headers
        .get("X-Forwarded-For")
--- a/static/robots.txt
+++ b/static/robots.txt
@@ -1,11 +0,0 @@
 User-agent: *
 Disallow: /payment
 Disallow: /api
 Disallow: /weather
 Disallow: /static
 # Allow root (status page)
 Allow: /$
 # Allow health check  
 Allow: /health$
--- a/tests/payment_e2e_test.sh
+++ b/tests/payment_e2e_test.sh
@@ -1,72 +0,0 @@
 #!/bin/bash
 # ===== 全链路支付测试 =====
 # 运行: bash tests/payment_e2e_test.sh
 set -e
 BASE_URL="https://xmclassmate.top"
 echo "=========================================="
 echo "  全链路支付测试"
 echo "  环境: ${BASE_URL}"
 echo "=========================================="
 # Step 1: 健康检查
 echo ""
 echo "[1/5] 健康检查..."
 HEALTH=$(curl -s -o /dev/null -w "%{http_code}" ${BASE_URL}/health)
 echo "  GET /health → HTTP ${HEALTH}"
 [ "$HEALTH" = "200" ] && echo "  ✅ 通过" || { echo "  ❌ 失败"; exit 1; }
 # Step 2: 支付页面可访问
 echo ""
 echo "[2/5] 支付页面..."
 PAY_CODE=$(curl -s -o /dev/null -w "%{http_code}" ${BASE_URL}/payment)
 echo "  GET /payment → HTTP ${PAY_CODE}"
 [ "$PAY_CODE" = "200" ] && echo "  ✅ 通过（维护模式已关闭）" || { echo "  ❌ 失败（返回503=维护中）"; exit 1; }
 # Step 3: 访客登录
 echo ""
 echo "[3/5] 访客登录..."
 LOGIN_RESULT=$(curl -s -X POST ${BASE_URL}/api/guest-login)
 JWT=$(echo "$LOGIN_RESULT" | python3 -c "import sys,json; d=json.load(sys.stdin); print(d['token'])" 2>/dev/null)
 USER_ID=$(echo "$LOGIN_RESULT" | python3 -c "import sys,json; d=json.load(sys.stdin); print(d['user_id'])" 2>/dev/null)
 echo "  POST /api/guest-login → user_id=${USER_ID}"
 [ -n "$JWT" ] && echo "  ✅ JWT 获取成功" || { echo "  ❌ JWT 获取失败"; exit 1; }
 # Step 4: 用户信息
 echo ""
 echo "[4/5] 用户信息..."
 PROFILE=$(curl -s -H "Authorization: Bearer ${JWT}" ${BASE_URL}/api/user/profile)
 echo "  GET /api/user/profile → $(echo $PROFILE | python3 -c "import sys,json; print('is_member='+str(json.load(sys.stdin)['data']['is_member']))" 2>/dev/null)"
 # Step 5: 生成支付表单
 echo ""
 echo "[5/5] 支付宝支付表单..."
 RESULT=$(curl -s "${BASE_URL}/payment/page?package=monthly&jwt=${JWT}")
 if echo "$RESULT" | grep -q "sign"; then
    METHOD=$(echo "$RESULT" | grep -oP '(?<=name="method" value=")[^"]+')
    APP_ID_CHECK=$(echo "$RESULT" | grep -oP '(?<=name="app_id" value=")[^"]+')
    GATEWAY=$(echo "$RESULT" | grep -oP '(?<=action=")[^"]+')
    echo "  method: ${METHOD}"
    echo "  app_id: ${APP_ID_CHECK}"
    echo "  gateway: ${GATEWAY}"
    echo "  ✅ 支付表单生成成功"
 elif echo "$RESULT" | grep -q "失败\|Error"; then
    echo "  ❌ 支付表单生成失败"
    echo "$RESULT" | grep -oP '(?<=<p[^>]*>)[^<]+' | head -3
    exit 1
 else
    echo "  ❌ 未知响应"
    echo "${RESULT:0:200}"
    exit 1
 fi
 echo ""
 echo "=========================================="
 echo "  全链路测试通过 ✅"
 echo "=========================================="
 echo ""
 echo "手动验证："
 echo "1. 打开 https://xmclassmate.top/payment"
 echo "2. 点击「访客登录」→ 选择套餐 → 支付"
 echo "3. 浏览器将跳转到支付宝 alipay.trade.page.pay 页面"