feat(server/reward): TG getChatMember 真校验 + ClaimTelegram + POST /tg/webhook

server/internal/reward/telegram.go

@@ -3,8 +3,14 @@ package reward
 import (
 	"context"
 	"crypto/rand"
+	"database/sql"
 	"encoding/hex"
+	"encoding/json"
+	"log/slog"
+	"net/http"
+	"net/url"
 	"strconv"
+	"strings"
 	"time"
 
 	"github.com/redis/go-redis/v9"
@@ -14,11 +20,30 @@ type tgConfig struct {
 	botUser, channel, botToken, webhookSecret string
 }
 
-// SetTelegram 注入 TG 配置(经 Service.tg)。
+// ChatMemberChecker 判定某 telegramID 是否是频道/群成员。默认实现打 Telegram Bot API,
+// 测试注入 fake 以避免真实网络调用。
+type ChatMemberChecker interface {
+	IsMember(ctx context.Context, channel, telegramID string) (bool, error)
+}
+
+// SetMemberChecker 注入自定义成员校验器(测试用);生产走 SetTelegram 设置的默认 apiChecker。
+func (s *Service) SetMemberChecker(c ChatMemberChecker) { s.checker = c }
+
+// SetTelegram 注入 TG 配置(经 Service.tg)。若尚未注入 checker(测试未 SetMemberChecker),
+// 默认设为打 Telegram Bot API 的 apiChecker。
 func (s *Service) SetTelegram(botUser, channel, botToken, webhookSecret string) {
 	s.tg = tgConfig{botUser: botUser, channel: channel, botToken: botToken, webhookSecret: webhookSecret}
+	if s.checker == nil {
+		s.checker = apiChecker{botToken: botToken, hc: &http.Client{Timeout: 8 * time.Second}}
+	}
 }
 
+// WebhookSecret 返回 TG webhook 校验用的 secret token。
+func (s *Service) WebhookSecret() string { return s.tg.webhookSecret }
+
+// Channel 返回配置的 TG 频道(@ 形式)。
+func (s *Service) Channel() string { return s.tg.channel }
+
 // SetRedis 注入 redis 客户端(经 Service.rdb);为 nil 时 token 走内存兜底(测试/未配 redis)。
 func (s *Service) SetRedis(rdb *redis.Client) { s.rdb = rdb }
 
@@ -65,3 +90,90 @@ func (s *Service) ConsumeTelegramToken(ctx context.Context, token string) (int64
 	}
 	return id, ok, nil
 }
+
+// ClaimTelegram: 真是频道成员则一次性发 TgDays 天(source='task'),唯一守卫防重复领取
+// (同 userID 或同 telegramID 只能成功一次)。
+func (s *Service) ClaimTelegram(ctx context.Context, userID int64, telegramID string) (bool, error) {
+	member, err := s.checker.IsMember(ctx, s.tg.channel, telegramID)
+	if err != nil || !member {
+		return false, err
+	}
+	tx, err := s.db.BeginTx(ctx, &sql.TxOptions{})
+	if err != nil {
+		return false, err
+	}
+	defer func() { _ = tx.Rollback() }()
+	now := s.now()
+	if err := s.st.InsertClaimTx(ctx, tx, userID, "telegram_join", telegramID, s.cfg.TgDays, now); err != nil {
+		if err == ErrClaimExists {
+			return false, nil // 已领过(本账户 or 该 tgid)
+		}
+		return false, err
+	}
+	if _, _, err := s.g.GrantRewardTx(ctx, tx, userID, s.cfg.TgDays, "task", "task_telegram_join", "tg:"+telegramID); err != nil {
+		return false, err
+	}
+	if err := tx.Commit(); err != nil {
+		return false, err
+	}
+	return true, nil
+}
+
+// apiChecker 是 ChatMemberChecker 的默认生产实现:打 Telegram getChatMember。
+type apiChecker struct {
+	botToken string
+	hc       *http.Client
+}
+
+func (c apiChecker) IsMember(ctx context.Context, channel, telegramID string) (bool, error) {
+	u := "https://api.telegram.org/bot" + c.botToken + "/getChatMember"
+	req, err := http.NewRequestWithContext(ctx, http.MethodGet, u, nil)
+	if err != nil {
+		return false, err
+	}
+	q := req.URL.Query()
+	q.Set("chat_id", channel)
+	q.Set("user_id", telegramID)
+	req.URL.RawQuery = q.Encode()
+	resp, err := c.hc.Do(req)
+	if err != nil {
+		return false, err
+	}
+	defer resp.Body.Close()
+	var out struct {
+		OK     bool `json:"ok"`
+		Result struct {
+			Status string `json:"status"`
+		} `json:"result"`
+	}
+	if err := json.NewDecoder(resp.Body).Decode(&out); err != nil {
+		return false, err
+	}
+	st := out.Result.Status
+	return out.OK && (st == "member" || st == "administrator" || st == "creator"), nil
+}
+
+// SendTelegram 打 Bot API sendMessage 给 chatID 发文案;失败只 log,不影响主流程。
+func (s *Service) SendTelegram(ctx context.Context, chatID int64, text string) {
+	u := "https://api.telegram.org/bot" + s.tg.botToken + "/sendMessage"
+	body := url.Values{}
+	body.Set("chat_id", strconv.FormatInt(chatID, 10))
+	body.Set("text", text)
+	req, err := http.NewRequestWithContext(ctx, http.MethodPost, u, strings.NewReader(body.Encode()))
+	if err != nil {
+		slog.Warn("reward: send telegram build request failed", "err", err)
+		return
+	}
+	req.Header.Set("Content-Type", "application/x-www-form-urlencoded")
+	hc := &http.Client{Timeout: 8 * time.Second}
+	resp, err := hc.Do(req)
+	if err != nil {
+		slog.Warn("reward: send telegram failed", "err", err)
+		return
+	}
+	defer resp.Body.Close()
+	if resp.StatusCode >= 300 {
+		slog.Warn("reward: send telegram non-2xx", "status", resp.StatusCode)
+	}
+}
+