<\/p>\n\n\n\n
\u4e8c\u3001\u6280\u672f\u6808<\/strong><\/h2>\n\n\n\n\u524d\u7aef\u6280\u672f\u6808<\/h3>\n\n\n\n{\n \"framework\": \"Next.js 14.2.x\",\n \"language\": \"TypeScript 5.x\",\n \"styling\": \"Tailwind CSS 3.x\",\n \"animation\": \"AOS (Animate On Scroll)\",\n \"font\": \"Inter + Cabinet Grotesk\"\n}<\/code><\/pre>\n\n\n\n\u4e3a\u4ec0\u4e48\u9009\u62e9 Next.js 14\uff1f<\/h4>\n\n\n\n\u7279\u6027<\/th> \u4f18\u52bf<\/th> \u672c\u9879\u76ee\u5e94\u7528<\/th><\/tr><\/thead> App Router<\/strong><\/td>\u652f\u6301\u670d\u52a1\u7aef\u7ec4\u4ef6\uff0c\u66f4\u597d\u7684\u6027\u80fd<\/td> \u6240\u6709\u9875\u9762\u9ed8\u8ba4\u670d\u52a1\u7aef\u6e32\u67d3<\/td><\/tr> Layout \u5d4c\u5957<\/strong><\/td>\u590d\u7528 UI \u7ed3\u6784<\/td> (auth)<\/code>\u3001(default)<\/code> \u8def\u7531\u7ec4<\/td><\/tr>Streaming<\/strong><\/td>\u6d41\u5f0f\u6e32\u67d3\uff0c\u9996\u5c4f\u66f4\u5feb<\/td> Dashboard \u6570\u636e\u52a0\u8f7d<\/td><\/tr> API Routes<\/strong><\/td>\u524d\u540e\u7aef\u4e00\u4f53\u5316<\/td> \/api\/checkout<\/code> \u652f\u4ed8\u63a5\u53e3<\/td><\/tr>Vercel \u90e8\u7f72<\/strong><\/td>\u96f6\u914d\u7f6e\uff0c\u81ea\u52a8\u4f18\u5316<\/td> \u4e00\u952e\u90e8\u7f72\uff0c\u5168\u7403 CDN<\/td><\/tr><\/tbody><\/table><\/figure>\n\n\n\n\u540e\u7aef\u6280\u672f\u6808<\/h3>\n\n\n\n{\n \"database\": \"Supabase (PostgreSQL)\",\n \"auth\": \"Supabase Auth\",\n \"orm\": \"Supabase JS Client\",\n \"payment\": \"ZPay \u652f\u4ed8\u5e73\u53f0\"\n}\n<\/code><\/pre>\n\n\n\n\u4e3a\u4ec0\u4e48\u9009\u62e9 Supabase\uff1f<\/h4>\n\n\n\n\u5bf9\u6bd4\u9879<\/th> Supabase<\/th> Firebase<\/th> \u81ea\u5efa\u540e\u7aef<\/th><\/tr><\/thead> \u5f00\u6e90<\/td> \u2705 \u5b8c\u5168\u5f00\u6e90<\/td> \u274c \u95ed\u6e90<\/td> \u2705<\/td><\/tr> \u6570\u636e\u5e93<\/td> PostgreSQL<\/td> NoSQL<\/td> \u81ea\u9009<\/td><\/tr> \u5b9e\u65f6\u8ba2\u9605<\/td> \u2705<\/td> \u2705<\/td> \u9700\u81ea\u5df1\u5b9e\u73b0<\/td><\/tr> \u884c\u7ea7\u6743\u9650<\/td> \u2705 RLS<\/td> \u274c<\/td> \u9700\u81ea\u5df1\u5b9e\u73b0<\/td><\/tr> \u56fd\u5185\u8bbf\u95ee<\/td> \u26a0\ufe0f \u9700\u4ee3\u7406<\/td> \u274c \u88ab\u5899<\/td> \u2705<\/td><\/tr> \u4ef7\u683c<\/td> \ud83d\udcb0 \u514d\u8d39\u989d\u5ea6\u9ad8<\/td> \ud83d\udcb0 \u8f83\u8d35<\/td> \ud83d\udcb0 \u670d\u52a1\u5668\u6210\u672c<\/td><\/tr><\/tbody><\/table><\/figure>\n\n\n\n\u4e09\u3001\u9879\u76ee\u67b6\u6784<\/h2>\n\n\n\n\u6574\u4f53\u6784\u67b6\u56fe<\/h3>\n\n\n\n![\"\"](\"data:image\/svg+xml;base64,PCEtLUFyZ29uTG9hZGluZy0tPgo8c3ZnIHdpZHRoPSIxIiBoZWlnaHQ9IjEiIHhtbG5zPSJodHRwOi8vd3d3LnczLm9yZy8yMDAwL3N2ZyIgc3Ryb2tlPSIjZmZmZmZmMDAiPjxnPjwvZz4KPC9zdmc+\")
<\/div><\/figure>\n\n\n\n\u76ee\u5f55\u7ed3\u6784\u8be6\u89e3<\/h3>\n\n\n\nhappyaicoding-template-starter\/\n\u2502\n\u251c\u2500\u2500 .env.local # \u672c\u5730\u73af\u5883\u53d8\u91cf\uff08\u4e0d\u63d0\u4ea4\u5230 Git\uff09\n\u251c\u2500\u2500 next.config.mjs # Next.js \u914d\u7f6e\n\u251c\u2500\u2500 package.json # \u4f9d\u8d56\u7ba1\u7406\n\u251c\u2500\u2500 tailwind.config.js # Tailwind \u914d\u7f6e\n\u251c\u2500\u2500 tsconfig.json # TypeScript \u914d\u7f6e\n\u2502\n\u251c\u2500\u2500 app\/ # Next.js App Router\n\u2502 \u251c\u2500\u2500 layout.tsx # \u6839\u5e03\u5c40\uff08\u5168\u5c40\u5b57\u4f53\u3001SEO\uff09\n\u2502 \u2502\n\u2502 \u251c\u2500\u2500 (default)\/ # \u9ed8\u8ba4\u8def\u7531\u7ec4\uff08\u516c\u5f00\u9875\u9762\uff09\n\u2502 \u2502 \u251c\u2500\u2500 layout.tsx # \u9ed8\u8ba4\u5e03\u5c40\uff08Header + Footer\uff09\n\u2502 \u2502 \u251c\u2500\u2500 page.tsx # \u9996\u9875\n\u2502 \u2502 \u2514\u2500\u2500 ... # \u5176\u4ed6\u516c\u5f00\u9875\u9762\n\u2502 \u2502\n\u2502 \u251c\u2500\u2500 (auth)\/ # \u8ba4\u8bc1\u8def\u7531\u7ec4\uff08\u767b\u5f55\/\u6ce8\u518c\uff09\n\u2502 \u2502 \u251c\u2500\u2500 layout.tsx # \u8ba4\u8bc1\u9875\u9762\u5e03\u5c40\n\u2502 \u2502 \u251c\u2500\u2500 signin\/\n\u2502 \u2502 \u2502 \u2514\u2500\u2500 page.tsx # \u767b\u5f55\u9875\n\u2502 \u2502 \u251c\u2500\u2500 signup\/\n\u2502 \u2502 \u2502 \u2514\u2500\u2500 page.tsx # \u6ce8\u518c\u9875\n\u2502 \u2502 \u2514\u2500\u2500 reset-password\/\n\u2502 \u2502 \u2514\u2500\u2500 page.tsx # \u91cd\u7f6e\u5bc6\u7801\n\u2502 \u2502\n\u2502 \u251c\u2500\u2500 dashboard\/ # \u7528\u6237\u4eea\u8868\u76d8\uff08\u9700\u767b\u5f55\uff09\n\u2502 \u2502 \u251c\u2500\u2500 layout.tsx # \u4eea\u8868\u76d8\u5e03\u5c40\n\u2502 \u2502 \u2514\u2500\u2500 page.tsx # \u4eea\u8868\u76d8\u9996\u9875\n\u2502 \u2502\n\u2502 \u251c\u2500\u2500 payment\/ # \u652f\u4ed8\u76f8\u5173\u9875\u9762\n\u2502 \u2502 \u251c\u2500\u2500 layout.tsx\n\u2502 \u2502 \u2514\u2500\u2500 success\/\n\u2502 \u2502 \u2514\u2500\u2500 page.tsx # \u652f\u4ed8\u6210\u529f\u9875\n\u2502 \u2502\n\u2502 \u251c\u2500\u2500 api\/ # API \u8def\u7531\n\u2502 \u2502 \u251c\u2500\u2500 products\/\n\u2502 \u2502 \u2502 \u2514\u2500\u2500 route.ts # \u4ea7\u54c1\u5217\u8868\u63a5\u53e3\n\u2502 \u2502 \u2514\u2500\u2500 checkout\/\n\u2502 \u2502 \u2514\u2500\u2500 providers\/\n\u2502 \u2502 \u2514\u2500\u2500 zpay\/\n\u2502 \u2502 \u251c\u2500\u2500 url\/\n\u2502 \u2502 \u2502 \u2514\u2500\u2500 route.ts # \u83b7\u53d6\u652f\u4ed8\u94fe\u63a5\n\u2502 \u2502 \u2514\u2500\u2500 webhook\/\n\u2502 \u2502 \u2514\u2500\u2500 route.ts # \u652f\u4ed8\u56de\u8c03\u5904\u7406\n\u2502 \u2502\n\u2502 \u2514\u2500\u2500 auth\/\n\u2502 \u2514\u2500\u2500 callback\/\n\u2502 \u2514\u2500\u2500 route.ts # OAuth \u56de\u8c03\u5904\u7406\n\u2502\n\u251c\u2500\u2500 components\/ # React \u7ec4\u4ef6\n\u2502 \u251c\u2500\u2500 ui\/ # UI \u57fa\u7840\u7ec4\u4ef6\n\u2502 \u2502 \u251c\u2500\u2500 header.tsx # \u5934\u90e8\u5bfc\u822a\n\u2502 \u2502 \u2514\u2500\u2500 footer.tsx # \u9875\u811a\n\u2502 \u251c\u2500\u2500 hero.tsx # \u9996\u9875 Hero \u533a\u57df\n\u2502 \u251c\u2500\u2500 pricing.tsx # \u5b9a\u4ef7\u7ec4\u4ef6\n\u2502 \u251c\u2500\u2500 faqs.tsx # FAQ \u7ec4\u4ef6\n\u2502 \u2514\u2500\u2500 ...\n\u2502\n\u251c\u2500\u2500 utils\/\n\u2502 \u2514\u2500\u2500 supabase\/ # Supabase \u5de5\u5177\u51fd\u6570\n\u2502 \u251c\u2500\u2500 server.ts # \u670d\u52a1\u7aef\u5ba2\u6237\u7aef\uff08\u5e26 Cookie\uff09\n\u2502 \u251c\u2500\u2500 client.ts # \u5ba2\u6237\u7aef\u5ba2\u6237\u7aef\n\u2502 \u2514\u2500\u2500 middleware.ts # \u4e2d\u95f4\u4ef6\u8ba4\u8bc1\u903b\u8f91\n\u2502\n\u251c\u2500\u2500 public\/ # \u9759\u6001\u8d44\u6e90\n\u2502 \u251c\u2500\u2500 fonts\/ # \u81ea\u5b9a\u4e49\u5b57\u4f53\n\u2502 \u2514\u2500\u2500 images\/ # \u56fe\u7247\u8d44\u6e90\n\u2502\n\u2514\u2500\u2500 styles\/\n \u2514\u2500\u2500 css\/\n \u2514\u2500\u2500 style.css # \u5168\u5c40\u6837\u5f0f\n\n<\/code><\/pre>\n\n\n\n\u56db\u3001\u6838\u5fc3\u529f\u80fd\u5b9e\u73b0<\/h2>\n\n\n\n\u8ba4\u8bc1\u6d41\u8f6c\u56fe<\/h3>\n\n\n\n<\/div><\/figure>\n\n\n\n4.1 \u7528\u6237\u767b\u5f55\/\u6ce8\u518c\u8ba4\u8bc1<\/h3>\n\n\n\n1. \u529f\u80fd\u63cf\u8ff0<\/h4>\n\n\n\n
\u5b9e\u73b0\u7528\u6237\u90ae\u7bb1\u5bc6\u7801\u767b\u5f55\u3001\u6ce8\u518c\u529f\u80fd\uff0c\u901a\u8fc7 Supabase Auth \u7ba1\u7406\u7528\u6237\u8eab\u4efd\uff0c\u767b\u5f55\u72b6\u6001\u6301\u4e45\u5316\u5b58\u50a8\uff0c\u652f\u6301\u8de8\u9875\u9762\u72b6\u6001\u540c\u6b65\u3002<\/p>\n\n\n\n
2. \u5b9e\u73b0\u601d\u8def<\/h4>\n\n\n\n\u7528\u6237\u8f93\u5165\u51ed\u8bc1 \u2192 Supabase Auth \u9a8c\u8bc1 \u2192 \u8fd4\u56de JWT Token\n \u2192 \u5199\u5165 HttpOnly Cookie \u2192 \u5ba2\u6237\u7aef\u76d1\u542c auth \u72b6\u6001\u53d8\u5316\n \u2192 \u66f4\u65b0 UI \u663e\u793a\u767b\u5f55\u72b6\u6001 \u2192 \u53d7\u4fdd\u62a4\u8def\u7531\u81ea\u52a8\u653e\u884c\n<\/code><\/pre>\n\n\n\n\u5173\u952e\u70b9\uff1a<\/strong><\/p>\n\n\n\n\n- \u4f7f\u7528\u00a0
createClient()<\/code>\u00a0\u521b\u5efa\u5ba2\u6237\u7aef Supabase \u5b9e\u4f8b<\/li>\n\n\n\n- \u901a\u8fc7\u00a0
onAuthStateChange<\/code>\u00a0\u76d1\u542c\u767b\u5f55\u72b6\u6001\u53d8\u5316<\/li>\n\n\n\n- \u767b\u5f55\u6210\u529f\u540e\u8c03\u7528\u00a0
router.refresh()<\/code>\u00a0\u5237\u65b0\u670d\u52a1\u7aef session<\/li>\n<\/ul>\n\n\n\n3. \u5173\u952e\u4ee3\u7801<\/h4>\n\n\n\n\/\/ app\/(auth)\/signin\/page.tsx\n'use client'\n\nimport { useState } from 'react'\nimport { useRouter } from 'next\/navigation'\nimport { createClient } from '@\/utils\/supabase\/client'\n\nexport default function SignIn() {\n const [email, setEmail] = useState('')\n const [password, setPassword] = useState('')\n const [error, setError] = useState<string | null>(null)\n const [loading, setLoading] = useState(false)\n const router = useRouter()\n const supabase = createClient()\n\n const handleSignIn = async (e: React.FormEvent) => {\n e.preventDefault()\n setError(null)\n setLoading(true)\n\n try {\n const { data, error } = await supabase.auth.signInWithPassword({\n email,\n password\n })\n\n if (error) throw error\n\n \/\/ \u767b\u5f55\u6210\u529f\uff0c\u5237\u65b0\u9875\u9762\u83b7\u53d6\u65b0\u7684 session\n router.refresh()\n router.push('\/')\n } catch (error: any) {\n setError(error.message || '\u767b\u5f55\u5931\u8d25\uff0c\u8bf7\u68c0\u67e5\u60a8\u7684\u90ae\u7bb1\u548c\u5bc6\u7801')\n } finally {\n setLoading(false)\n }\n }\n\n return (\n <form onSubmit={handleSignIn}>\n {error && <div className=\"error\">{error}<\/div>}\n <input type=\"email\" value={email} onChange={(e) => setEmail(e.target.value)} placeholder=\"\u90ae\u7bb1\" \/>\n <input type=\"password\" value={password} onChange={(e) => setPassword(e.target.value)} placeholder=\"\u5bc6\u7801\" \/>\n <button type=\"submit\" disabled={loading}>\n {loading ? '\u767b\u5f55\u4e2d...' : '\u767b\u5f55\u8d26\u53f7'}\n <\/button>\n <\/form>\n )\n}\n<\/code><\/pre>\n\n\n\n4. \u6548\u679c\u5c55\u793a<\/h4>\n\n\n\n\n- \u7528\u6237\u8f93\u5165\u90ae\u7bb1\u5bc6\u7801\u70b9\u51fb\u767b\u5f55<\/li>\n\n\n\n
- \u767b\u5f55\u4e2d\u6309\u94ae\u663e\u793a\u52a0\u8f7d\u72b6\u6001<\/li>\n\n\n\n
- \u767b\u5f55\u6210\u529f\u540e\u8df3\u8f6c\u9996\u9875\uff0cHeader \u663e\u793a”\u4e2a\u4eba\u4e2d\u5fc3”<\/li>\n\n\n\n
- \u767b\u5f55\u5931\u8d25\u65f6\u7ea2\u8272\u9519\u8bef\u63d0\u793a\u6846\u663e\u793a\u9519\u8bef\u4fe1\u606f<\/li>\n<\/ul>\n\n\n\n
\n\n\n\n4.2 \u8def\u7531\u6743\u9650\u4fdd\u62a4\uff08Middleware\uff09<\/h3>\n\n\n\n1. \u529f\u80fd\u63cf\u8ff0<\/h4>\n\n\n\n
\u901a\u8fc7 Next.js Middleware \u5728\u8bf7\u6c42\u5230\u8fbe\u9875\u9762\u524d\u62e6\u622a\uff0c\u68c0\u67e5\u7528\u6237\u767b\u5f55\u72b6\u6001\uff0c\u672a\u767b\u5f55\u7528\u6237\u81ea\u52a8\u91cd\u5b9a\u5411\u5230\u767b\u5f55\u9875\uff0c\u5df2\u767b\u5f55\u7528\u6237\u8bbf\u95ee\u767b\u5f55\u9875\u81ea\u52a8\u8df3\u8f6c\u9996\u9875\u3002<\/p>\n\n\n\n
2. \u5b9e\u73b0\u601d\u8def<\/h4>\n\n\n\n\u8bf7\u6c42\u8fdb\u5165 \u2192 Middleware \u62e6\u622a \u2192 \u521b\u5efa Supabase \u5ba2\u6237\u7aef \n \u2192 \u83b7\u53d6\u5f53\u524d\u7528\u6237 Session \u2192 \u5224\u65ad\u8def\u7531\u7c7b\u578b\n \u251c\u2500 \u4fdd\u62a4\u8def\u7531 (\/dashboard) \u4e14\u672a\u767b\u5f55 \u2192 \u91cd\u5b9a\u5411 \/signin\n \u251c\u2500 \u8ba4\u8bc1\u9875\u9762 (\/signin) \u4e14\u5df2\u767b\u5f55 \u2192 \u91cd\u5b9a\u5411 \/\n \u2514\u2500 \u5176\u4ed6\u60c5\u51b5 \u2192 \u653e\u884c\n<\/code><\/pre>\n\n\n\n3. \u5173\u952e\u4ee3\u7801<\/h4>\n\n\n\n\/\/ middleware.ts\nimport { createServerClient } from '@supabase\/ssr'\nimport { NextResponse, type NextRequest } from 'next\/server'\n\nexport async function middleware(request: NextRequest) {\n let response = NextResponse.next({ request: { headers: request.headers } })\n\n const supabase = createServerClient(\n process.env.NEXT_PUBLIC_SUPABASE_URL!,\n process.env.NEXT_PUBLIC_SUPABASE_ANON_KEY!,\n {\n cookies: {\n get(name: string) { return request.cookies.get(name)?.value },\n set(name: string, value: string, options: any) {\n request.cookies.set({ name, value, ...options })\n response = NextResponse.next({ request: { headers: request.headers } })\n response.cookies.set({ name, value, ...options })\n },\n },\n }\n )\n\n \/\/ \u5237\u65b0 session\n await supabase.auth.getSession()\n const { data: { user } } = await supabase.auth.getUser()\n\n const protectedPaths = ['\/dashboard', '\/payment']\n const authPaths = ['\/signin', '\/signup', '\/reset-password']\n\n \/\/ \u5df2\u767b\u5f55\u8bbf\u95ee\u8ba4\u8bc1\u9875\u9762 \u2192 \u8df3\u8f6c\u9996\u9875\n if (authPaths.some(p => request.nextUrl.pathname.startsWith(p)) && user) {\n return NextResponse.redirect(new URL('\/', request.url))\n }\n\n \/\/ \u672a\u767b\u5f55\u8bbf\u95ee\u4fdd\u62a4\u8def\u7531 \u2192 \u8df3\u8f6c\u767b\u5f55\u9875\n if (protectedPaths.some(p => request.nextUrl.pathname.startsWith(p)) && !user) {\n return NextResponse.redirect(new URL('\/signin', request.url))\n }\n\n return response\n}\n\nexport const config = {\n matcher: ['\/((?!_next\/static|_next\/image|favicon.ico|.*\\\\.(?:svg|png|jpg|jpeg|gif|webp)$).*)'],\n}\n<\/code><\/pre>\n\n\n\n4. \u6548\u679c\u5c55\u793a<\/h4>\n\n\n\n\n- \u672a\u767b\u5f55\u8bbf\u95ee\u00a0
\/dashboard<\/code>\u00a0\u2192 \u81ea\u52a8\u8df3\u8f6c\u5230\u00a0\/signin<\/code><\/li>\n\n\n\n- \u767b\u5f55\u540e\u8bbf\u95ee\u00a0
\/signin<\/code>\u00a0\u2192 \u81ea\u52a8\u8df3\u8f6c\u5230\u00a0\/<\/code><\/li>\n\n\n\n- \u4fdd\u62a4\u8def\u7531\u65e0\u9700\u5728\u6bcf\u4e2a\u9875\u9762\u91cd\u590d\u9a8c\u8bc1\u903b\u8f91<\/li>\n<\/ul>\n\n\n\n
\n\n\n\n4.3 \u652f\u4ed8\u94fe\u63a5\u83b7\u53d6\u63a5\u53e3<\/h3>\n\n\n\n1. \u529f\u80fd\u63cf\u8ff0<\/h4>\n\n\n\n
\u7528\u6237\u70b9\u51fb\u8d2d\u4e70\u540e\uff0c\u8c03\u7528\u6b64\u63a5\u53e3\u751f\u6210\u652f\u4ed8\u8ba2\u5355\uff0c\u8fd4\u56de ZPay \u652f\u4ed8\u94fe\u63a5\u3002\u652f\u6301\u8ba2\u9605\u4ea7\u54c1\u65f6\u95f4\u7d2f\u52a0\u8ba1\u7b97\u3002<\/p>\n\n\n\n
2. \u5b9e\u73b0\u601d\u8def<\/h4>\n\n\n\n\u63a5\u6536\u8bf7\u6c42 \u2192 \u9a8c\u8bc1\u7528\u6237\u767b\u5f55 \u2192 \u67e5\u8be2\u4ea7\u54c1\u4fe1\u606f \u2192 \u751f\u6210\u8ba2\u5355\u53f7\n \u2192 \u8ba1\u7b97\u8ba2\u9605\u65f6\u95f4\uff08\u5982\u6709\u6d3b\u8dc3\u8ba2\u9605\u5219\u7d2f\u52a0\uff09\u2192 \u6784\u5efa\u652f\u4ed8\u53c2\u6570\n \u2192 \u751f\u6210 MD5 \u7b7e\u540d \u2192 \u4fdd\u5b58\u4ea4\u6613\u8bb0\u5f55 \u2192 \u8fd4\u56de\u652f\u4ed8 URL\n<\/code><\/pre>\n\n\n\n3. \u5173\u952e\u4ee3\u7801<\/h4>\n\n\n\n\/\/ app\/api\/checkout\/providers\/zpay\/url\/route.ts\nexport async function POST(request: NextRequest) {\n const { productId, paymentMethod } = await request.json()\n\n \/\/ 1. \u9a8c\u8bc1\u7528\u6237\u767b\u5f55\n const supabase = createServerSupabaseClient()\n const { data: { user } } = await supabase.auth.getUser()\n if (!user) {\n return NextResponse.json({ msg: '\u8bf7\u5148\u767b\u5f55' }, { status: 401 })\n }\n\n \/\/ 2. \u83b7\u53d6\u4ea7\u54c1\u4fe1\u606f\n const product = products[productId]\n if (!product) {\n return NextResponse.json({ msg: '\u4ea7\u54c1\u4e0d\u5b58\u5728' }, { status: 404 })\n }\n\n \/\/ 3. \u751f\u6210\u8ba2\u5355\u53f7\n const outTradeNo = generateOutTradeNo()\n\n \/\/ 4. \u8ba1\u7b97\u8ba2\u9605\u65f6\u95f4\uff08\u8ba2\u9605\u4ea7\u54c1\u81ea\u52a8\u7d2f\u52a0\uff09\n let subscriptionEndDate: Date | null = null\n if (product.isSubscription) {\n const { data: existing } = await supabase\n .from('zpay_transactions')\n .select('subscription_end_date')\n .eq('user_id', user.id)\n .eq('trade_status', 'TRADE_SUCCESS')\n .gt('subscription_end_date', new Date().toISOString())\n .order('subscription_end_date', { ascending: false })\n .limit(1)\n\n if (existing && existing.length > 0) {\n \/\/ \u5df2\u6709\u8ba2\u9605\uff0c\u4ece\u7ed3\u675f\u65e5\u671f\u7d2f\u52a0\n const currentEndDate = new Date(existing[0].subscription_end_date)\n subscriptionEndDate = new Date(currentEndDate)\n subscriptionEndDate.setMonth(subscriptionEndDate.getMonth() + 1)\n } else {\n \/\/ \u65b0\u8ba2\u9605\uff0c\u4ece\u73b0\u5728\u5f00\u59cb\n subscriptionEndDate = new Date()\n subscriptionEndDate.setMonth(subscriptionEndDate.getMonth() + 1)\n }\n }\n\n \/\/ 5. \u751f\u6210\u7b7e\u540d\n const signParams = { money, name: product.name, out_trade_no: outTradeNo, ... }\n const sign = generateSign(signParams, process.env.ZPAY_KEY!)\n\n \/\/ 6. \u4fdd\u5b58\u4ea4\u6613\u8bb0\u5f55\n await supabase.from('zpay_transactions').insert({\n out_trade_no: outTradeNo,\n user_id: user.id,\n product_id: productId,\n trade_status: 'WAIT_BUYER_PAY',\n subscription_end_date: subscriptionEndDate?.toISOString(),\n })\n\n \/\/ 7. \u8fd4\u56de\u652f\u4ed8\u94fe\u63a5\n const paymentUrl = `https:\/\/zpayz.cn\/submit.php?${params.toString()}`\n return NextResponse.json({ code: 'success', paymentUrl })\n}\n<\/code><\/pre>\n\n\n\n4. \u6548\u679c\u5c55\u793a<\/h4>\n\n\n\n\n- \u7528\u6237\u5728\u5b9a\u4ef7\u9875\u70b9\u51fb”\u7acb\u5373\u8d2d\u4e70”<\/li>\n\n\n\n
- \u9009\u62e9\u652f\u4ed8\u65b9\u5f0f\uff08\u652f\u4ed8\u5b9d\/\u5fae\u4fe1\uff09<\/li>\n\n\n\n
- \u524d\u7aef\u8c03\u7528\u63a5\u53e3\u83b7\u53d6\u652f\u4ed8 URL<\/li>\n\n\n\n
- \u81ea\u52a8\u8df3\u8f6c\/\u6253\u5f00\u4e8c\u7ef4\u7801\u5b8c\u6210\u652f\u4ed8<\/li>\n<\/ul>\n\n\n\n
\n\n\n\n4.4 \u652f\u4ed8\u56de\u8c03 Webhook<\/h3>\n\n\n\n1. \u529f\u80fd\u63cf\u8ff0<\/h4>\n\n\n\n
\u63a5\u6536 ZPay \u652f\u4ed8\u5e73\u53f0\u7684\u5f02\u6b65\u901a\u77e5\uff0c\u9a8c\u8bc1\u7b7e\u540d\u3001\u66f4\u65b0\u8ba2\u5355\u72b6\u6001\u3001\u5904\u7406\u8ba2\u9605\u65f6\u95f4\uff0c\u786e\u4fdd\u652f\u4ed8\u7ed3\u679c\u5b89\u5168\u53ef\u9760\u3002<\/p>\n\n\n\n
2. \u5b9e\u73b0\u601d\u8def<\/h4>\n\n\n\n\u6536\u5230\u56de\u8c03 \u2192 \u63d0\u53d6\u53c2\u6570 \u2192 \u9a8c\u8bc1\u7b7e\u540d \u2192 \u9a8c\u8bc1\u5546\u6237 ID\n \u2192 \u68c0\u67e5\u652f\u4ed8\u72b6\u6001 \u2192 \u67e5\u8be2\u8ba2\u5355\u8bb0\u5f55 \u2192 \u9a8c\u8bc1\u91d1\u989d\u4e00\u81f4\u6027\n \u2192 \u9632\u6b62\u91cd\u590d\u5904\u7406 \u2192 \u66f4\u65b0\u8ba2\u5355\u72b6\u6001 \u2192 \u5904\u7406\u8ba2\u9605\u903b\u8f91\n \u2192 \u8fd4\u56de success \u786e\u8ba4\u63a5\u6536\n<\/code><\/pre>\n\n\n\n3. \u5173\u952e\u4ee3\u7801<\/h4>\n\n\n\n\/\/ app\/api\/checkout\/providers\/zpay\/webhook\/route.ts\n\n\/\/ \u9a8c\u8bc1\u7b7e\u540d\u51fd\u6570\nfunction verifySign(params: Record<string, string>, key: string): boolean {\n const { sign, ...restParams } = params\n const filteredParams = Object.entries(restParams)\n .filter(([_, v]) => v && v !== '')\n .sort((a, b) => a[0].localeCompare(b[0]))\n const prestr = filteredParams.map(([k, v]) => `${k}=${v}`).join('&')\n const calculatedSign = crypto.createHash('md5').update(prestr + key).digest('hex')\n return calculatedSign === sign.toLowerCase()\n}\n\nexport async function GET(request: NextRequest) {\n const params = Object.fromEntries(request.nextUrl.searchParams)\n \n \/\/ 1. \u9a8c\u8bc1\u7b7e\u540d\n if (!verifySign(params, process.env.ZPAY_KEY!)) {\n console.error('\u7b7e\u540d\u9a8c\u8bc1\u5931\u8d25')\n return new NextResponse('fail', { status: 200 })\n }\n\n \/\/ 2. \u9a8c\u8bc1\u5546\u6237 ID\n if (params.pid !== process.env.ZPAY_PID) {\n return new NextResponse('fail', { status: 200 })\n }\n\n \/\/ 3. \u68c0\u67e5\u652f\u4ed8\u72b6\u6001\n if (params.trade_status !== 'TRADE_SUCCESS') {\n return new NextResponse('success', { status: 200 })\n }\n\n \/\/ 4. \u67e5\u8be2\u8ba2\u5355\n const supabase = createServerAdminClient()\n const { data: order } = await supabase\n .from('zpay_transactions')\n .select('*')\n .eq('out_trade_no', params.out_trade_no)\n .single()\n\n \/\/ 5. \u9a8c\u8bc1\u91d1\u989d\u4e00\u81f4\u6027\uff08\u9632\u6b62\"\u5047\u901a\u77e5\"\uff09\n const expectedMoney = parseFloat(order.money.toString())\n const receivedMoney = parseFloat(params.money)\n if (Math.abs(expectedMoney - receivedMoney) > 0.01) {\n return new NextResponse('fail', { status: 200 })\n }\n\n \/\/ 6. \u9632\u6b62\u91cd\u590d\u5904\u7406\n if (order.notify_success && order.trade_status === 'TRADE_SUCCESS') {\n return new NextResponse('success', { status: 200 })\n }\n\n \/\/ 7. \u66f4\u65b0\u8ba2\u5355\u72b6\u6001\n await supabase.from('zpay_transactions').update({\n zpay_trade_no: params.trade_no,\n trade_status: 'TRADE_SUCCESS',\n notify_success: true,\n paid_at: new Date().toISOString(),\n }).eq('out_trade_no', params.out_trade_no)\n\n \/\/ 8. \u5904\u7406\u8ba2\u9605\uff08\u66f4\u65b0\u7528\u6237\u6743\u9650\uff09\n if (order.is_subscription) {\n \/\/ \u53ef\u5728\u6b64\u66f4\u65b0 user_subscriptions \u8868\u6216 users.premium_expire_at\n }\n\n return new NextResponse('success', { status: 200 })\n}\n<\/code><\/pre>\n\n\n\n4. \u6548\u679c\u5c55\u793a<\/h4>\n\n\n\n\n- \u7528\u6237\u5b8c\u6210\u652f\u4ed8\u540e\uff0cZPay \u540e\u53f0\u81ea\u52a8\u53d1\u9001\u56de\u8c03\u901a\u77e5<\/li>\n\n\n\n
- \u7cfb\u7edf\u9a8c\u8bc1\u7b7e\u540d\u3001\u66f4\u65b0\u8ba2\u5355\u72b6\u6001<\/li>\n\n\n\n
- Dashboard \u663e\u793a”\u5df2\u652f\u4ed8”\u72b6\u6001<\/li>\n\n\n\n
- \u8ba2\u9605\u4ea7\u54c1\u81ea\u52a8\u5ef6\u957f\u4f1a\u5458\u5230\u671f\u65f6\u95f4<\/li>\n<\/ul>\n\n\n\n
\n\n\n\n4.5 Header \u7528\u6237\u72b6\u6001\u540c\u6b65<\/h3>\n\n\n\n1. \u529f\u80fd\u63cf\u8ff0<\/h4>\n\n\n\n
\u5168\u5c40 Header \u7ec4\u4ef6\u5b9e\u65f6\u663e\u793a\u7528\u6237\u767b\u5f55\u72b6\u6001\uff0c\u672a\u767b\u5f55\u663e\u793a”\u767b\u5f55\/\u6ce8\u518c”\u6309\u94ae\uff0c\u5df2\u767b\u5f55\u663e\u793a”\u4e2a\u4eba\u4e2d\u5fc3”\u5165\u53e3\uff0c\u652f\u6301\u72b6\u6001\u81ea\u52a8\u540c\u6b65\u3002<\/p>\n\n\n\n
2. \u5b9e\u73b0\u601d\u8def<\/h4>\n\n\n\n\u7ec4\u4ef6\u6302\u8f7d \u2192 \u68c0\u67e5\u5f53\u524d\u7528\u6237\u72b6\u6001 \u2192 \u76d1\u542c auth \u72b6\u6001\u53d8\u5316\n \u2192 \u72b6\u6001\u53d8\u5316\u81ea\u52a8\u66f4\u65b0 UI \u2192 \u6e05\u7406\u8ba2\u9605\uff08\u9632\u6b62\u5185\u5b58\u6cc4\u6f0f\uff09\n \u2192 \u8def\u7531\u9884\u52a0\u8f7d\u4f18\u5316\u4f53\u9a8c \u2192 \u5bfc\u822a\u65f6\u663e\u793a\u52a0\u8f7d\u52a8\u753b\n<\/code><\/pre>\n\n\n\n3. \u5173\u952e\u4ee3\u7801<\/h4>\n\n\n\n\/\/ components\/ui\/header.tsx\n\"use client\"\n\nimport { useState, useEffect } from 'react'\nimport { createClient } from '@\/utils\/supabase\/client'\nimport { useRouter } from 'next\/navigation'\n\nexport default function Header() {\n const [user, setUser] = useState<User | null>(null)\n const [loading, setLoading] = useState(true)\n const [isNavigating, setIsNavigating] = useState(false)\n const supabase = createClient()\n const router = useRouter()\n\n useEffect(() => {\n \/\/ \u68c0\u67e5\u767b\u5f55\u72b6\u6001\n const checkUser = async () => {\n const { data: { user } } = await supabase.auth.getUser()\n setUser(user || null)\n setLoading(false)\n\n \/\/ \u76d1\u542c\u72b6\u6001\u53d8\u5316\n const { data: { subscription } } = await supabase.auth.onAuthStateChange((_event, session) => {\n setUser(session?.user || null)\n })\n\n return () => subscription.unsubscribe()\n }\n checkUser()\n }, [])\n\n const handleDashboardClick = (e: React.MouseEvent) => {\n e.preventDefault()\n setIsNavigating(true)\n router.prefetch('\/dashboard')\n setTimeout(() => router.push('\/dashboard'), 100)\n }\n\n return (\n <header>\n {loading ? (\n \/\/ \u9aa8\u67b6\u5c4f\u52a0\u8f7d\n <div className=\"h-8 w-20 bg-gray-200 rounded-md animate-pulse\" \/>\n ) : user ? (\n \/\/ \u5df2\u767b\u5f55\n <a href=\"\/dashboard\" onClick={handleDashboardClick}>\n {isNavigating ? <Spinner \/> : '\u4e2a\u4eba\u4e2d\u5fc3'}\n <\/a>\n ) : (\n \/\/ \u672a\u767b\u5f55\n <>\n <Link href=\"\/signin\">\u767b\u5f55<\/Link>\n <Link href=\"\/signup\">\u6ce8\u518c<\/Link>\n <\/>\n )}\n <\/header>\n )\n}\n<\/code><\/pre>\n\n\n\n4. \u6548\u679c\u5c55\u793a<\/h4>\n\n\n\n\n- \u9875\u9762\u52a0\u8f7d\u65f6 Header \u663e\u793a\u9aa8\u67b6\u5c4f\u52a8\u753b<\/li>\n\n\n\n
- \u52a0\u8f7d\u5b8c\u6210\u540e\u663e\u793a\u767b\u5f55\/\u6ce8\u518c\u6309\u94ae<\/li>\n\n\n\n
- \u767b\u5f55\u540e\u5b9e\u65f6\u663e\u793a”\u4e2a\u4eba\u4e2d\u5fc3”<\/li>\n\n\n\n
- \u70b9\u51fb\u4e2a\u4eba\u4e2d\u5fc3\u663e\u793a\u52a0\u8f7d Spinner\uff0c\u9884\u52a0\u8f7d\u8def\u7531<\/li>\n<\/ul>\n\n\n\n
\n\n\n\n4.6 \u8ba2\u9605\u65f6\u95f4\u7d2f\u52a0\u8ba1\u7b97<\/h3>\n\n\n\n1. \u529f\u80fd\u63cf\u8ff0<\/h4>\n\n\n\n
\u7528\u6237\u8d2d\u4e70\u8ba2\u9605\u4ea7\u54c1\u65f6\uff0c\u5982\u679c\u5df2\u6709\u6d3b\u8dc3\u8ba2\u9605\uff0c\u65b0\u8ba2\u9605\u65f6\u95f4\u4ece\u5f53\u524d\u8ba2\u9605\u7ed3\u675f\u65e5\u671f\u5f00\u59cb\u7d2f\u52a0\uff0c\u800c\u4e0d\u662f\u4ece\u5f53\u524d\u65f6\u95f4\u8ba1\u7b97\u3002<\/p>\n\n\n\n
2. \u5b9e\u73b0\u601d\u8def<\/h4>\n\n\n\n\u7528\u6237\u8d2d\u4e70\u8ba2\u9605 \u2192 \u67e5\u8be2\u7528\u6237\u662f\u5426\u6709\u672a\u8fc7\u671f\u8ba2\u9605\n \u251c\u2500 \u6709 \u2192 \u4ece\u8ba2\u9605\u7ed3\u675f\u65e5\u671f\u5f00\u59cb\u7d2f\u52a0\uff08\u6708\u4ed8 +1 \u6708\uff0c\u5e74\u4ed8 +1 \u5e74\uff09\n \u2514\u2500 \u65e0 \u2192 \u4ece\u73b0\u5728\u5f00\u59cb\u8ba1\u7b97\n \u2192 \u4fdd\u5b58\u65b0\u7684\u8ba2\u9605\u7ed3\u675f\u65e5\u671f \u2192 \u8fd4\u56de\u652f\u4ed8\u94fe\u63a5\n<\/code><\/pre>\n\n\n\n3. \u5173\u952e\u4ee3\u7801<\/h4>\n\n\n\n\/\/ \u8ba1\u7b97\u8ba2\u9605\u7ed3\u675f\u65e5\u671f\nasync function calculateSubscriptionEndDate(\n userId: string,\n productId: string,\n subscriptionPeriod: 'monthly' | 'yearly'\n) {\n const supabase = createServerAdminClient()\n\n \/\/ \u67e5\u8be2\u662f\u5426\u6709\u6d3b\u8dc3\u8ba2\u9605\n const { data: existingTransactions } = await supabase\n .from('zpay_transactions')\n .select('subscription_end_date, trade_status')\n .eq('user_id', userId)\n .eq('product_id', productId)\n .eq('trade_status', 'TRADE_SUCCESS')\n .gt('subscription_end_date', new Date().toISOString())\n .order('subscription_end_date', { ascending: false })\n .limit(1)\n\n let subscriptionEndDate: Date\n\n if (existingTransactions && existingTransactions.length > 0) {\n \/\/ \u5df2\u6709\u6d3b\u8dc3\u8ba2\u9605\uff0c\u4ece\u7ed3\u675f\u65e5\u671f\u7d2f\u52a0\n const currentEndDate = new Date(existingTransactions[0].subscription_end_date)\n subscriptionEndDate = new Date(currentEndDate)\n\n if (subscriptionPeriod === 'monthly') {\n subscriptionEndDate.setMonth(subscriptionEndDate.getMonth() + 1)\n } else if (subscriptionPeriod === 'yearly') {\n subscriptionEndDate.setFullYear(subscriptionEndDate.getFullYear() + 1)\n }\n } else {\n \/\/ \u65b0\u8ba2\u9605\uff0c\u4ece\u73b0\u5728\u5f00\u59cb\n subscriptionEndDate = new Date()\n if (subscriptionPeriod === 'monthly') {\n subscriptionEndDate.setMonth(subscriptionEndDate.getMonth() + 1)\n } else if (subscriptionPeriod === 'yearly') {\n subscriptionEndDate.setFullYear(subscriptionEndDate.getFullYear() + 1)\n }\n }\n\n return subscriptionEndDate\n}\n<\/code><\/pre>\n\n\n\n4. \u6548\u679c\u5c55\u793a<\/h4>\n\n\n\n\n- \u7528\u6237 1 \u6708 1 \u65e5\u8d2d\u4e70\u6708\u5361\uff0c\u5230\u671f\u65f6\u95f4 2 \u6708 1 \u65e5<\/li>\n\n\n\n
- \u7528\u6237 1 \u6708 15 \u65e5\u518d\u6b21\u8d2d\u4e70\u6708\u5361\uff0c\u5230\u671f\u65f6\u95f4\u81ea\u52a8\u53d8\u4e3a 3 \u6708 1 \u65e5\uff08\u800c\u975e 2 \u6708 15 \u65e5\uff09<\/li>\n\n\n\n
- Dashboard \u663e\u793a”\u4f1a\u5458\u5230\u671f\u65f6\u95f4\uff1a2026-03-01″<\/li>\n<\/ul>\n\n\n\n
\u4e94\u3001\u5b89\u5168\u673a\u5236<\/h2>\n\n\n\n1. \u8ba4\u8bc1\u5b89\u5168<\/h3>\n\n\n\n\u63aa\u65bd<\/th> \u8bf4\u660e<\/th> \u5b9e\u73b0<\/th><\/tr><\/thead> HttpOnly Cookie<\/td> \u9632\u6b62 XSS \u653b\u51fb\u8bfb\u53d6<\/td> Supabase SSR \u81ea\u52a8\u8bbe\u7f6e<\/td><\/tr> JWT \u8fc7\u671f\u65f6\u95f4<\/td> \u964d\u4f4e\u4ee4\u724c\u6cc4\u9732\u98ce\u9669<\/td> \u9ed8\u8ba4 1 \u5c0f\u65f6<\/td><\/tr> Refresh Token<\/td> \u65e0\u611f\u77e5\u7eed\u671f<\/td> onAuthStateChange \u76d1\u542c<\/td><\/tr> \u5bc6\u7801\u54c8\u5e0c<\/td> \u6570\u636e\u5e93\u4e0d\u5b58\u660e\u6587<\/td> Supabase Auth \u5185\u7f6e<\/td><\/tr><\/tbody><\/table><\/figure>\n\n\n\n2. \u652f\u4ed8\u5b89\u5168<\/h3>\n\n\n\n\/\/ \u591a\u5c42\u9a8c\u8bc1\n1. \u7b7e\u540d\u9a8c\u8bc1 \u2192 \u786e\u4fdd\u8bf7\u6c42\u6765\u81ea ZPay\n2. \u5546\u6237 ID \u9a8c\u8bc1 \u2192 \u786e\u4fdd\u901a\u77e5\u53d1\u9001\u7ed9\u6b63\u786e\u7684\u5546\u6237\n3. \u91d1\u989d\u9a8c\u8bc1 \u2192 \u9632\u6b62\u7be1\u6539\u652f\u4ed8\u91d1\u989d\n4. \u8ba2\u5355\u53f7\u9a8c\u8bc1 \u2192 \u786e\u4fdd\u8ba2\u5355\u5b58\u5728\n5. \u9632\u91cd\u590d\u5904\u7406 \u2192 \u907f\u514d\u91cd\u590d\u53d1\u653e\u6743\u76ca\n<\/code><\/pre>\n\n\n\n3. RLS \u884c\u7ea7\u6743\u9650<\/h3>\n\n\n\n-- \u7528\u6237\u53ea\u80fd\u8bbf\u95ee\u81ea\u5df1\u7684\u6570\u636e\nCREATE POLICY \"select_own_data\" ON users\n FOR SELECT USING (auth.uid() = id);\n\nCREATE POLICY \"update_own_data\" ON users\n FOR UPDATE USING (auth.uid() = id);\n\n-- \u4ea4\u6613\u8bb0\u5f55\uff1a\u7528\u6237\u53ef\u67e5\u770b\u81ea\u5df1\u7684\u8bb0\u5f55\nCREATE POLICY \"select_own_transactions\" ON zpay_transactions\n FOR SELECT USING (auth.uid() = user_id);\n<\/code><\/pre>\n\n\n\n4. \u73af\u5883\u53d8\u91cf\u7ba1\u7406<\/h3>\n\n\n\n# .env.local\uff08\u672c\u5730\u5f00\u53d1\uff09\nNEXT_PUBLIC_SUPABASE_URL=https:\/\/xxx.supabase.co\nNEXT_PUBLIC_SUPABASE_ANON_KEY=eyJhbGc...\nNEXT_PUBLIC_BASE_URL=http:\/\/localhost:3000\nZPAY_PID=xxx\nZPAY_KEY=xxx\n\n# Vercel \u73af\u5883\u53d8\u91cf\uff08\u751f\u4ea7\u73af\u5883\uff09\n# \u5728 Dashboard \u2192 Settings \u2192 Environment Variables \u4e2d\u914d\u7f6e\n# SUPABASE_SERVICE_ROLE_KEY \u4ec5\u670d\u52a1\u7aef\u53ef\u8bbf\u95ee<\/code><\/pre>\n\n\n\n\u516d\u3001\u90e8\u7f72\u4e0e\u8fd0\u7ef4<\/h2>\n\n\n\nVercel \u90e8\u7f72\u6b65\u9aa4<\/h3>\n\n\n\n1. \u5b89\u88c5 Vercel CLI\n npm i -g vercel\n\n2. \u767b\u5f55 Vercel\n vercel login\n\n3. \u9996\u6b21\u90e8\u7f72\n vercel\n\n4. \u751f\u4ea7\u90e8\u7f72\n vercel --prod\n<\/code><\/pre>\n\n\n\n\u73af\u5883\u53d8\u91cf\u914d\u7f6e<\/h3>\n\n\n\n
{\n \"framework\": \"Next.js 14.2.x\",\n \"language\": \"TypeScript 5.x\",\n \"styling\": \"Tailwind CSS 3.x\",\n \"animation\": \"AOS (Animate On Scroll)\",\n \"font\": \"Inter + Cabinet Grotesk\"\n}<\/code><\/pre>\n\n\n\n\u4e3a\u4ec0\u4e48\u9009\u62e9 Next.js 14\uff1f<\/h4>\n\n\n\n\u7279\u6027<\/th> \u4f18\u52bf<\/th> \u672c\u9879\u76ee\u5e94\u7528<\/th><\/tr><\/thead> App Router<\/strong><\/td>\u652f\u6301\u670d\u52a1\u7aef\u7ec4\u4ef6\uff0c\u66f4\u597d\u7684\u6027\u80fd<\/td> \u6240\u6709\u9875\u9762\u9ed8\u8ba4\u670d\u52a1\u7aef\u6e32\u67d3<\/td><\/tr> Layout \u5d4c\u5957<\/strong><\/td>\u590d\u7528 UI \u7ed3\u6784<\/td> (auth)<\/code>\u3001(default)<\/code> \u8def\u7531\u7ec4<\/td><\/tr>Streaming<\/strong><\/td>\u6d41\u5f0f\u6e32\u67d3\uff0c\u9996\u5c4f\u66f4\u5feb<\/td> Dashboard \u6570\u636e\u52a0\u8f7d<\/td><\/tr> API Routes<\/strong><\/td>\u524d\u540e\u7aef\u4e00\u4f53\u5316<\/td> \/api\/checkout<\/code> \u652f\u4ed8\u63a5\u53e3<\/td><\/tr>Vercel \u90e8\u7f72<\/strong><\/td>\u96f6\u914d\u7f6e\uff0c\u81ea\u52a8\u4f18\u5316<\/td> \u4e00\u952e\u90e8\u7f72\uff0c\u5168\u7403 CDN<\/td><\/tr><\/tbody><\/table><\/figure>\n\n\n\n\u540e\u7aef\u6280\u672f\u6808<\/h3>\n\n\n\n{\n \"database\": \"Supabase (PostgreSQL)\",\n \"auth\": \"Supabase Auth\",\n \"orm\": \"Supabase JS Client\",\n \"payment\": \"ZPay \u652f\u4ed8\u5e73\u53f0\"\n}\n<\/code><\/pre>\n\n\n\n\u4e3a\u4ec0\u4e48\u9009\u62e9 Supabase\uff1f<\/h4>\n\n\n\n\u5bf9\u6bd4\u9879<\/th> Supabase<\/th> Firebase<\/th> \u81ea\u5efa\u540e\u7aef<\/th><\/tr><\/thead> \u5f00\u6e90<\/td> \u2705 \u5b8c\u5168\u5f00\u6e90<\/td> \u274c \u95ed\u6e90<\/td> \u2705<\/td><\/tr> \u6570\u636e\u5e93<\/td> PostgreSQL<\/td> NoSQL<\/td> \u81ea\u9009<\/td><\/tr> \u5b9e\u65f6\u8ba2\u9605<\/td> \u2705<\/td> \u2705<\/td> \u9700\u81ea\u5df1\u5b9e\u73b0<\/td><\/tr> \u884c\u7ea7\u6743\u9650<\/td> \u2705 RLS<\/td> \u274c<\/td> \u9700\u81ea\u5df1\u5b9e\u73b0<\/td><\/tr> \u56fd\u5185\u8bbf\u95ee<\/td> \u26a0\ufe0f \u9700\u4ee3\u7406<\/td> \u274c \u88ab\u5899<\/td> \u2705<\/td><\/tr> \u4ef7\u683c<\/td> \ud83d\udcb0 \u514d\u8d39\u989d\u5ea6\u9ad8<\/td> \ud83d\udcb0 \u8f83\u8d35<\/td> \ud83d\udcb0 \u670d\u52a1\u5668\u6210\u672c<\/td><\/tr><\/tbody><\/table><\/figure>\n\n\n\n\u4e09\u3001\u9879\u76ee\u67b6\u6784<\/h2>\n\n\n\n\u6574\u4f53\u6784\u67b6\u56fe<\/h3>\n\n\n\n<\/div><\/figure>\n\n\n\n\u76ee\u5f55\u7ed3\u6784\u8be6\u89e3<\/h3>\n\n\n\nhappyaicoding-template-starter\/\n\u2502\n\u251c\u2500\u2500 .env.local # \u672c\u5730\u73af\u5883\u53d8\u91cf\uff08\u4e0d\u63d0\u4ea4\u5230 Git\uff09\n\u251c\u2500\u2500 next.config.mjs # Next.js \u914d\u7f6e\n\u251c\u2500\u2500 package.json # \u4f9d\u8d56\u7ba1\u7406\n\u251c\u2500\u2500 tailwind.config.js # Tailwind \u914d\u7f6e\n\u251c\u2500\u2500 tsconfig.json # TypeScript \u914d\u7f6e\n\u2502\n\u251c\u2500\u2500 app\/ # Next.js App Router\n\u2502 \u251c\u2500\u2500 layout.tsx # \u6839\u5e03\u5c40\uff08\u5168\u5c40\u5b57\u4f53\u3001SEO\uff09\n\u2502 \u2502\n\u2502 \u251c\u2500\u2500 (default)\/ # \u9ed8\u8ba4\u8def\u7531\u7ec4\uff08\u516c\u5f00\u9875\u9762\uff09\n\u2502 \u2502 \u251c\u2500\u2500 layout.tsx # \u9ed8\u8ba4\u5e03\u5c40\uff08Header + Footer\uff09\n\u2502 \u2502 \u251c\u2500\u2500 page.tsx # \u9996\u9875\n\u2502 \u2502 \u2514\u2500\u2500 ... # \u5176\u4ed6\u516c\u5f00\u9875\u9762\n\u2502 \u2502\n\u2502 \u251c\u2500\u2500 (auth)\/ # \u8ba4\u8bc1\u8def\u7531\u7ec4\uff08\u767b\u5f55\/\u6ce8\u518c\uff09\n\u2502 \u2502 \u251c\u2500\u2500 layout.tsx # \u8ba4\u8bc1\u9875\u9762\u5e03\u5c40\n\u2502 \u2502 \u251c\u2500\u2500 signin\/\n\u2502 \u2502 \u2502 \u2514\u2500\u2500 page.tsx # \u767b\u5f55\u9875\n\u2502 \u2502 \u251c\u2500\u2500 signup\/\n\u2502 \u2502 \u2502 \u2514\u2500\u2500 page.tsx # \u6ce8\u518c\u9875\n\u2502 \u2502 \u2514\u2500\u2500 reset-password\/\n\u2502 \u2502 \u2514\u2500\u2500 page.tsx # \u91cd\u7f6e\u5bc6\u7801\n\u2502 \u2502\n\u2502 \u251c\u2500\u2500 dashboard\/ # \u7528\u6237\u4eea\u8868\u76d8\uff08\u9700\u767b\u5f55\uff09\n\u2502 \u2502 \u251c\u2500\u2500 layout.tsx # \u4eea\u8868\u76d8\u5e03\u5c40\n\u2502 \u2502 \u2514\u2500\u2500 page.tsx # \u4eea\u8868\u76d8\u9996\u9875\n\u2502 \u2502\n\u2502 \u251c\u2500\u2500 payment\/ # \u652f\u4ed8\u76f8\u5173\u9875\u9762\n\u2502 \u2502 \u251c\u2500\u2500 layout.tsx\n\u2502 \u2502 \u2514\u2500\u2500 success\/\n\u2502 \u2502 \u2514\u2500\u2500 page.tsx # \u652f\u4ed8\u6210\u529f\u9875\n\u2502 \u2502\n\u2502 \u251c\u2500\u2500 api\/ # API \u8def\u7531\n\u2502 \u2502 \u251c\u2500\u2500 products\/\n\u2502 \u2502 \u2502 \u2514\u2500\u2500 route.ts # \u4ea7\u54c1\u5217\u8868\u63a5\u53e3\n\u2502 \u2502 \u2514\u2500\u2500 checkout\/\n\u2502 \u2502 \u2514\u2500\u2500 providers\/\n\u2502 \u2502 \u2514\u2500\u2500 zpay\/\n\u2502 \u2502 \u251c\u2500\u2500 url\/\n\u2502 \u2502 \u2502 \u2514\u2500\u2500 route.ts # \u83b7\u53d6\u652f\u4ed8\u94fe\u63a5\n\u2502 \u2502 \u2514\u2500\u2500 webhook\/\n\u2502 \u2502 \u2514\u2500\u2500 route.ts # \u652f\u4ed8\u56de\u8c03\u5904\u7406\n\u2502 \u2502\n\u2502 \u2514\u2500\u2500 auth\/\n\u2502 \u2514\u2500\u2500 callback\/\n\u2502 \u2514\u2500\u2500 route.ts # OAuth \u56de\u8c03\u5904\u7406\n\u2502\n\u251c\u2500\u2500 components\/ # React \u7ec4\u4ef6\n\u2502 \u251c\u2500\u2500 ui\/ # UI \u57fa\u7840\u7ec4\u4ef6\n\u2502 \u2502 \u251c\u2500\u2500 header.tsx # \u5934\u90e8\u5bfc\u822a\n\u2502 \u2502 \u2514\u2500\u2500 footer.tsx # \u9875\u811a\n\u2502 \u251c\u2500\u2500 hero.tsx # \u9996\u9875 Hero \u533a\u57df\n\u2502 \u251c\u2500\u2500 pricing.tsx # \u5b9a\u4ef7\u7ec4\u4ef6\n\u2502 \u251c\u2500\u2500 faqs.tsx # FAQ \u7ec4\u4ef6\n\u2502 \u2514\u2500\u2500 ...\n\u2502\n\u251c\u2500\u2500 utils\/\n\u2502 \u2514\u2500\u2500 supabase\/ # Supabase \u5de5\u5177\u51fd\u6570\n\u2502 \u251c\u2500\u2500 server.ts # \u670d\u52a1\u7aef\u5ba2\u6237\u7aef\uff08\u5e26 Cookie\uff09\n\u2502 \u251c\u2500\u2500 client.ts # \u5ba2\u6237\u7aef\u5ba2\u6237\u7aef\n\u2502 \u2514\u2500\u2500 middleware.ts # \u4e2d\u95f4\u4ef6\u8ba4\u8bc1\u903b\u8f91\n\u2502\n\u251c\u2500\u2500 public\/ # \u9759\u6001\u8d44\u6e90\n\u2502 \u251c\u2500\u2500 fonts\/ # \u81ea\u5b9a\u4e49\u5b57\u4f53\n\u2502 \u2514\u2500\u2500 images\/ # \u56fe\u7247\u8d44\u6e90\n\u2502\n\u2514\u2500\u2500 styles\/\n \u2514\u2500\u2500 css\/\n \u2514\u2500\u2500 style.css # \u5168\u5c40\u6837\u5f0f\n\n<\/code><\/pre>\n\n\n\n\u56db\u3001\u6838\u5fc3\u529f\u80fd\u5b9e\u73b0<\/h2>\n\n\n\n\u8ba4\u8bc1\u6d41\u8f6c\u56fe<\/h3>\n\n\n\n<\/div><\/figure>\n\n\n\n4.1 \u7528\u6237\u767b\u5f55\/\u6ce8\u518c\u8ba4\u8bc1<\/h3>\n\n\n\n1. \u529f\u80fd\u63cf\u8ff0<\/h4>\n\n\n\n
\u5b9e\u73b0\u7528\u6237\u90ae\u7bb1\u5bc6\u7801\u767b\u5f55\u3001\u6ce8\u518c\u529f\u80fd\uff0c\u901a\u8fc7 Supabase Auth \u7ba1\u7406\u7528\u6237\u8eab\u4efd\uff0c\u767b\u5f55\u72b6\u6001\u6301\u4e45\u5316\u5b58\u50a8\uff0c\u652f\u6301\u8de8\u9875\u9762\u72b6\u6001\u540c\u6b65\u3002<\/p>\n\n\n\n
2. \u5b9e\u73b0\u601d\u8def<\/h4>\n\n\n\n\u7528\u6237\u8f93\u5165\u51ed\u8bc1 \u2192 Supabase Auth \u9a8c\u8bc1 \u2192 \u8fd4\u56de JWT Token\n \u2192 \u5199\u5165 HttpOnly Cookie \u2192 \u5ba2\u6237\u7aef\u76d1\u542c auth \u72b6\u6001\u53d8\u5316\n \u2192 \u66f4\u65b0 UI \u663e\u793a\u767b\u5f55\u72b6\u6001 \u2192 \u53d7\u4fdd\u62a4\u8def\u7531\u81ea\u52a8\u653e\u884c\n<\/code><\/pre>\n\n\n\n\u5173\u952e\u70b9\uff1a<\/strong><\/p>\n\n\n\n\n- \u4f7f\u7528\u00a0
createClient()<\/code>\u00a0\u521b\u5efa\u5ba2\u6237\u7aef Supabase \u5b9e\u4f8b<\/li>\n\n\n\n- \u901a\u8fc7\u00a0
onAuthStateChange<\/code>\u00a0\u76d1\u542c\u767b\u5f55\u72b6\u6001\u53d8\u5316<\/li>\n\n\n\n- \u767b\u5f55\u6210\u529f\u540e\u8c03\u7528\u00a0
router.refresh()<\/code>\u00a0\u5237\u65b0\u670d\u52a1\u7aef session<\/li>\n<\/ul>\n\n\n\n3. \u5173\u952e\u4ee3\u7801<\/h4>\n\n\n\n\/\/ app\/(auth)\/signin\/page.tsx\n'use client'\n\nimport { useState } from 'react'\nimport { useRouter } from 'next\/navigation'\nimport { createClient } from '@\/utils\/supabase\/client'\n\nexport default function SignIn() {\n const [email, setEmail] = useState('')\n const [password, setPassword] = useState('')\n const [error, setError] = useState<string | null>(null)\n const [loading, setLoading] = useState(false)\n const router = useRouter()\n const supabase = createClient()\n\n const handleSignIn = async (e: React.FormEvent) => {\n e.preventDefault()\n setError(null)\n setLoading(true)\n\n try {\n const { data, error } = await supabase.auth.signInWithPassword({\n email,\n password\n })\n\n if (error) throw error\n\n \/\/ \u767b\u5f55\u6210\u529f\uff0c\u5237\u65b0\u9875\u9762\u83b7\u53d6\u65b0\u7684 session\n router.refresh()\n router.push('\/')\n } catch (error: any) {\n setError(error.message || '\u767b\u5f55\u5931\u8d25\uff0c\u8bf7\u68c0\u67e5\u60a8\u7684\u90ae\u7bb1\u548c\u5bc6\u7801')\n } finally {\n setLoading(false)\n }\n }\n\n return (\n <form onSubmit={handleSignIn}>\n {error && <div className=\"error\">{error}<\/div>}\n <input type=\"email\" value={email} onChange={(e) => setEmail(e.target.value)} placeholder=\"\u90ae\u7bb1\" \/>\n <input type=\"password\" value={password} onChange={(e) => setPassword(e.target.value)} placeholder=\"\u5bc6\u7801\" \/>\n <button type=\"submit\" disabled={loading}>\n {loading ? '\u767b\u5f55\u4e2d...' : '\u767b\u5f55\u8d26\u53f7'}\n <\/button>\n <\/form>\n )\n}\n<\/code><\/pre>\n\n\n\n4. \u6548\u679c\u5c55\u793a<\/h4>\n\n\n\n\n- \u7528\u6237\u8f93\u5165\u90ae\u7bb1\u5bc6\u7801\u70b9\u51fb\u767b\u5f55<\/li>\n\n\n\n
- \u767b\u5f55\u4e2d\u6309\u94ae\u663e\u793a\u52a0\u8f7d\u72b6\u6001<\/li>\n\n\n\n
- \u767b\u5f55\u6210\u529f\u540e\u8df3\u8f6c\u9996\u9875\uff0cHeader \u663e\u793a”\u4e2a\u4eba\u4e2d\u5fc3”<\/li>\n\n\n\n
- \u767b\u5f55\u5931\u8d25\u65f6\u7ea2\u8272\u9519\u8bef\u63d0\u793a\u6846\u663e\u793a\u9519\u8bef\u4fe1\u606f<\/li>\n<\/ul>\n\n\n\n
\n\n\n\n4.2 \u8def\u7531\u6743\u9650\u4fdd\u62a4\uff08Middleware\uff09<\/h3>\n\n\n\n1. \u529f\u80fd\u63cf\u8ff0<\/h4>\n\n\n\n
\u901a\u8fc7 Next.js Middleware \u5728\u8bf7\u6c42\u5230\u8fbe\u9875\u9762\u524d\u62e6\u622a\uff0c\u68c0\u67e5\u7528\u6237\u767b\u5f55\u72b6\u6001\uff0c\u672a\u767b\u5f55\u7528\u6237\u81ea\u52a8\u91cd\u5b9a\u5411\u5230\u767b\u5f55\u9875\uff0c\u5df2\u767b\u5f55\u7528\u6237\u8bbf\u95ee\u767b\u5f55\u9875\u81ea\u52a8\u8df3\u8f6c\u9996\u9875\u3002<\/p>\n\n\n\n
2. \u5b9e\u73b0\u601d\u8def<\/h4>\n\n\n\n\u8bf7\u6c42\u8fdb\u5165 \u2192 Middleware \u62e6\u622a \u2192 \u521b\u5efa Supabase \u5ba2\u6237\u7aef \n \u2192 \u83b7\u53d6\u5f53\u524d\u7528\u6237 Session \u2192 \u5224\u65ad\u8def\u7531\u7c7b\u578b\n \u251c\u2500 \u4fdd\u62a4\u8def\u7531 (\/dashboard) \u4e14\u672a\u767b\u5f55 \u2192 \u91cd\u5b9a\u5411 \/signin\n \u251c\u2500 \u8ba4\u8bc1\u9875\u9762 (\/signin) \u4e14\u5df2\u767b\u5f55 \u2192 \u91cd\u5b9a\u5411 \/\n \u2514\u2500 \u5176\u4ed6\u60c5\u51b5 \u2192 \u653e\u884c\n<\/code><\/pre>\n\n\n\n3. \u5173\u952e\u4ee3\u7801<\/h4>\n\n\n\n\/\/ middleware.ts\nimport { createServerClient } from '@supabase\/ssr'\nimport { NextResponse, type NextRequest } from 'next\/server'\n\nexport async function middleware(request: NextRequest) {\n let response = NextResponse.next({ request: { headers: request.headers } })\n\n const supabase = createServerClient(\n process.env.NEXT_PUBLIC_SUPABASE_URL!,\n process.env.NEXT_PUBLIC_SUPABASE_ANON_KEY!,\n {\n cookies: {\n get(name: string) { return request.cookies.get(name)?.value },\n set(name: string, value: string, options: any) {\n request.cookies.set({ name, value, ...options })\n response = NextResponse.next({ request: { headers: request.headers } })\n response.cookies.set({ name, value, ...options })\n },\n },\n }\n )\n\n \/\/ \u5237\u65b0 session\n await supabase.auth.getSession()\n const { data: { user } } = await supabase.auth.getUser()\n\n const protectedPaths = ['\/dashboard', '\/payment']\n const authPaths = ['\/signin', '\/signup', '\/reset-password']\n\n \/\/ \u5df2\u767b\u5f55\u8bbf\u95ee\u8ba4\u8bc1\u9875\u9762 \u2192 \u8df3\u8f6c\u9996\u9875\n if (authPaths.some(p => request.nextUrl.pathname.startsWith(p)) && user) {\n return NextResponse.redirect(new URL('\/', request.url))\n }\n\n \/\/ \u672a\u767b\u5f55\u8bbf\u95ee\u4fdd\u62a4\u8def\u7531 \u2192 \u8df3\u8f6c\u767b\u5f55\u9875\n if (protectedPaths.some(p => request.nextUrl.pathname.startsWith(p)) && !user) {\n return NextResponse.redirect(new URL('\/signin', request.url))\n }\n\n return response\n}\n\nexport const config = {\n matcher: ['\/((?!_next\/static|_next\/image|favicon.ico|.*\\\\.(?:svg|png|jpg|jpeg|gif|webp)$).*)'],\n}\n<\/code><\/pre>\n\n\n\n4. \u6548\u679c\u5c55\u793a<\/h4>\n\n\n\n\n- \u672a\u767b\u5f55\u8bbf\u95ee\u00a0
\/dashboard<\/code>\u00a0\u2192 \u81ea\u52a8\u8df3\u8f6c\u5230\u00a0\/signin<\/code><\/li>\n\n\n\n- \u767b\u5f55\u540e\u8bbf\u95ee\u00a0
\/signin<\/code>\u00a0\u2192 \u81ea\u52a8\u8df3\u8f6c\u5230\u00a0\/<\/code><\/li>\n\n\n\n- \u4fdd\u62a4\u8def\u7531\u65e0\u9700\u5728\u6bcf\u4e2a\u9875\u9762\u91cd\u590d\u9a8c\u8bc1\u903b\u8f91<\/li>\n<\/ul>\n\n\n\n
\n\n\n\n4.3 \u652f\u4ed8\u94fe\u63a5\u83b7\u53d6\u63a5\u53e3<\/h3>\n\n\n\n1. \u529f\u80fd\u63cf\u8ff0<\/h4>\n\n\n\n
\u7528\u6237\u70b9\u51fb\u8d2d\u4e70\u540e\uff0c\u8c03\u7528\u6b64\u63a5\u53e3\u751f\u6210\u652f\u4ed8\u8ba2\u5355\uff0c\u8fd4\u56de ZPay \u652f\u4ed8\u94fe\u63a5\u3002\u652f\u6301\u8ba2\u9605\u4ea7\u54c1\u65f6\u95f4\u7d2f\u52a0\u8ba1\u7b97\u3002<\/p>\n\n\n\n
2. \u5b9e\u73b0\u601d\u8def<\/h4>\n\n\n\n\u63a5\u6536\u8bf7\u6c42 \u2192 \u9a8c\u8bc1\u7528\u6237\u767b\u5f55 \u2192 \u67e5\u8be2\u4ea7\u54c1\u4fe1\u606f \u2192 \u751f\u6210\u8ba2\u5355\u53f7\n \u2192 \u8ba1\u7b97\u8ba2\u9605\u65f6\u95f4\uff08\u5982\u6709\u6d3b\u8dc3\u8ba2\u9605\u5219\u7d2f\u52a0\uff09\u2192 \u6784\u5efa\u652f\u4ed8\u53c2\u6570\n \u2192 \u751f\u6210 MD5 \u7b7e\u540d \u2192 \u4fdd\u5b58\u4ea4\u6613\u8bb0\u5f55 \u2192 \u8fd4\u56de\u652f\u4ed8 URL\n<\/code><\/pre>\n\n\n\n3. \u5173\u952e\u4ee3\u7801<\/h4>\n\n\n\n\/\/ app\/api\/checkout\/providers\/zpay\/url\/route.ts\nexport async function POST(request: NextRequest) {\n const { productId, paymentMethod } = await request.json()\n\n \/\/ 1. \u9a8c\u8bc1\u7528\u6237\u767b\u5f55\n const supabase = createServerSupabaseClient()\n const { data: { user } } = await supabase.auth.getUser()\n if (!user) {\n return NextResponse.json({ msg: '\u8bf7\u5148\u767b\u5f55' }, { status: 401 })\n }\n\n \/\/ 2. \u83b7\u53d6\u4ea7\u54c1\u4fe1\u606f\n const product = products[productId]\n if (!product) {\n return NextResponse.json({ msg: '\u4ea7\u54c1\u4e0d\u5b58\u5728' }, { status: 404 })\n }\n\n \/\/ 3. \u751f\u6210\u8ba2\u5355\u53f7\n const outTradeNo = generateOutTradeNo()\n\n \/\/ 4. \u8ba1\u7b97\u8ba2\u9605\u65f6\u95f4\uff08\u8ba2\u9605\u4ea7\u54c1\u81ea\u52a8\u7d2f\u52a0\uff09\n let subscriptionEndDate: Date | null = null\n if (product.isSubscription) {\n const { data: existing } = await supabase\n .from('zpay_transactions')\n .select('subscription_end_date')\n .eq('user_id', user.id)\n .eq('trade_status', 'TRADE_SUCCESS')\n .gt('subscription_end_date', new Date().toISOString())\n .order('subscription_end_date', { ascending: false })\n .limit(1)\n\n if (existing && existing.length > 0) {\n \/\/ \u5df2\u6709\u8ba2\u9605\uff0c\u4ece\u7ed3\u675f\u65e5\u671f\u7d2f\u52a0\n const currentEndDate = new Date(existing[0].subscription_end_date)\n subscriptionEndDate = new Date(currentEndDate)\n subscriptionEndDate.setMonth(subscriptionEndDate.getMonth() + 1)\n } else {\n \/\/ \u65b0\u8ba2\u9605\uff0c\u4ece\u73b0\u5728\u5f00\u59cb\n subscriptionEndDate = new Date()\n subscriptionEndDate.setMonth(subscriptionEndDate.getMonth() + 1)\n }\n }\n\n \/\/ 5. \u751f\u6210\u7b7e\u540d\n const signParams = { money, name: product.name, out_trade_no: outTradeNo, ... }\n const sign = generateSign(signParams, process.env.ZPAY_KEY!)\n\n \/\/ 6. \u4fdd\u5b58\u4ea4\u6613\u8bb0\u5f55\n await supabase.from('zpay_transactions').insert({\n out_trade_no: outTradeNo,\n user_id: user.id,\n product_id: productId,\n trade_status: 'WAIT_BUYER_PAY',\n subscription_end_date: subscriptionEndDate?.toISOString(),\n })\n\n \/\/ 7. \u8fd4\u56de\u652f\u4ed8\u94fe\u63a5\n const paymentUrl = `https:\/\/zpayz.cn\/submit.php?${params.toString()}`\n return NextResponse.json({ code: 'success', paymentUrl })\n}\n<\/code><\/pre>\n\n\n\n4. \u6548\u679c\u5c55\u793a<\/h4>\n\n\n\n\n- \u7528\u6237\u5728\u5b9a\u4ef7\u9875\u70b9\u51fb”\u7acb\u5373\u8d2d\u4e70”<\/li>\n\n\n\n
- \u9009\u62e9\u652f\u4ed8\u65b9\u5f0f\uff08\u652f\u4ed8\u5b9d\/\u5fae\u4fe1\uff09<\/li>\n\n\n\n
- \u524d\u7aef\u8c03\u7528\u63a5\u53e3\u83b7\u53d6\u652f\u4ed8 URL<\/li>\n\n\n\n
- \u81ea\u52a8\u8df3\u8f6c\/\u6253\u5f00\u4e8c\u7ef4\u7801\u5b8c\u6210\u652f\u4ed8<\/li>\n<\/ul>\n\n\n\n
\n\n\n\n4.4 \u652f\u4ed8\u56de\u8c03 Webhook<\/h3>\n\n\n\n1. \u529f\u80fd\u63cf\u8ff0<\/h4>\n\n\n\n
\u63a5\u6536 ZPay \u652f\u4ed8\u5e73\u53f0\u7684\u5f02\u6b65\u901a\u77e5\uff0c\u9a8c\u8bc1\u7b7e\u540d\u3001\u66f4\u65b0\u8ba2\u5355\u72b6\u6001\u3001\u5904\u7406\u8ba2\u9605\u65f6\u95f4\uff0c\u786e\u4fdd\u652f\u4ed8\u7ed3\u679c\u5b89\u5168\u53ef\u9760\u3002<\/p>\n\n\n\n
2. \u5b9e\u73b0\u601d\u8def<\/h4>\n\n\n\n\u6536\u5230\u56de\u8c03 \u2192 \u63d0\u53d6\u53c2\u6570 \u2192 \u9a8c\u8bc1\u7b7e\u540d \u2192 \u9a8c\u8bc1\u5546\u6237 ID\n \u2192 \u68c0\u67e5\u652f\u4ed8\u72b6\u6001 \u2192 \u67e5\u8be2\u8ba2\u5355\u8bb0\u5f55 \u2192 \u9a8c\u8bc1\u91d1\u989d\u4e00\u81f4\u6027\n \u2192 \u9632\u6b62\u91cd\u590d\u5904\u7406 \u2192 \u66f4\u65b0\u8ba2\u5355\u72b6\u6001 \u2192 \u5904\u7406\u8ba2\u9605\u903b\u8f91\n \u2192 \u8fd4\u56de success \u786e\u8ba4\u63a5\u6536\n<\/code><\/pre>\n\n\n\n3. \u5173\u952e\u4ee3\u7801<\/h4>\n\n\n\n\/\/ app\/api\/checkout\/providers\/zpay\/webhook\/route.ts\n\n\/\/ \u9a8c\u8bc1\u7b7e\u540d\u51fd\u6570\nfunction verifySign(params: Record<string, string>, key: string): boolean {\n const { sign, ...restParams } = params\n const filteredParams = Object.entries(restParams)\n .filter(([_, v]) => v && v !== '')\n .sort((a, b) => a[0].localeCompare(b[0]))\n const prestr = filteredParams.map(([k, v]) => `${k}=${v}`).join('&')\n const calculatedSign = crypto.createHash('md5').update(prestr + key).digest('hex')\n return calculatedSign === sign.toLowerCase()\n}\n\nexport async function GET(request: NextRequest) {\n const params = Object.fromEntries(request.nextUrl.searchParams)\n \n \/\/ 1. \u9a8c\u8bc1\u7b7e\u540d\n if (!verifySign(params, process.env.ZPAY_KEY!)) {\n console.error('\u7b7e\u540d\u9a8c\u8bc1\u5931\u8d25')\n return new NextResponse('fail', { status: 200 })\n }\n\n \/\/ 2. \u9a8c\u8bc1\u5546\u6237 ID\n if (params.pid !== process.env.ZPAY_PID) {\n return new NextResponse('fail', { status: 200 })\n }\n\n \/\/ 3. \u68c0\u67e5\u652f\u4ed8\u72b6\u6001\n if (params.trade_status !== 'TRADE_SUCCESS') {\n return new NextResponse('success', { status: 200 })\n }\n\n \/\/ 4. \u67e5\u8be2\u8ba2\u5355\n const supabase = createServerAdminClient()\n const { data: order } = await supabase\n .from('zpay_transactions')\n .select('*')\n .eq('out_trade_no', params.out_trade_no)\n .single()\n\n \/\/ 5. \u9a8c\u8bc1\u91d1\u989d\u4e00\u81f4\u6027\uff08\u9632\u6b62\"\u5047\u901a\u77e5\"\uff09\n const expectedMoney = parseFloat(order.money.toString())\n const receivedMoney = parseFloat(params.money)\n if (Math.abs(expectedMoney - receivedMoney) > 0.01) {\n return new NextResponse('fail', { status: 200 })\n }\n\n \/\/ 6. \u9632\u6b62\u91cd\u590d\u5904\u7406\n if (order.notify_success && order.trade_status === 'TRADE_SUCCESS') {\n return new NextResponse('success', { status: 200 })\n }\n\n \/\/ 7. \u66f4\u65b0\u8ba2\u5355\u72b6\u6001\n await supabase.from('zpay_transactions').update({\n zpay_trade_no: params.trade_no,\n trade_status: 'TRADE_SUCCESS',\n notify_success: true,\n paid_at: new Date().toISOString(),\n }).eq('out_trade_no', params.out_trade_no)\n\n \/\/ 8. \u5904\u7406\u8ba2\u9605\uff08\u66f4\u65b0\u7528\u6237\u6743\u9650\uff09\n if (order.is_subscription) {\n \/\/ \u53ef\u5728\u6b64\u66f4\u65b0 user_subscriptions \u8868\u6216 users.premium_expire_at\n }\n\n return new NextResponse('success', { status: 200 })\n}\n<\/code><\/pre>\n\n\n\n4. \u6548\u679c\u5c55\u793a<\/h4>\n\n\n\n\n- \u7528\u6237\u5b8c\u6210\u652f\u4ed8\u540e\uff0cZPay \u540e\u53f0\u81ea\u52a8\u53d1\u9001\u56de\u8c03\u901a\u77e5<\/li>\n\n\n\n
- \u7cfb\u7edf\u9a8c\u8bc1\u7b7e\u540d\u3001\u66f4\u65b0\u8ba2\u5355\u72b6\u6001<\/li>\n\n\n\n
- Dashboard \u663e\u793a”\u5df2\u652f\u4ed8”\u72b6\u6001<\/li>\n\n\n\n
- \u8ba2\u9605\u4ea7\u54c1\u81ea\u52a8\u5ef6\u957f\u4f1a\u5458\u5230\u671f\u65f6\u95f4<\/li>\n<\/ul>\n\n\n\n
\n\n\n\n4.5 Header \u7528\u6237\u72b6\u6001\u540c\u6b65<\/h3>\n\n\n\n1. \u529f\u80fd\u63cf\u8ff0<\/h4>\n\n\n\n
\u5168\u5c40 Header \u7ec4\u4ef6\u5b9e\u65f6\u663e\u793a\u7528\u6237\u767b\u5f55\u72b6\u6001\uff0c\u672a\u767b\u5f55\u663e\u793a”\u767b\u5f55\/\u6ce8\u518c”\u6309\u94ae\uff0c\u5df2\u767b\u5f55\u663e\u793a”\u4e2a\u4eba\u4e2d\u5fc3”\u5165\u53e3\uff0c\u652f\u6301\u72b6\u6001\u81ea\u52a8\u540c\u6b65\u3002<\/p>\n\n\n\n
2. \u5b9e\u73b0\u601d\u8def<\/h4>\n\n\n\n\u7ec4\u4ef6\u6302\u8f7d \u2192 \u68c0\u67e5\u5f53\u524d\u7528\u6237\u72b6\u6001 \u2192 \u76d1\u542c auth \u72b6\u6001\u53d8\u5316\n \u2192 \u72b6\u6001\u53d8\u5316\u81ea\u52a8\u66f4\u65b0 UI \u2192 \u6e05\u7406\u8ba2\u9605\uff08\u9632\u6b62\u5185\u5b58\u6cc4\u6f0f\uff09\n \u2192 \u8def\u7531\u9884\u52a0\u8f7d\u4f18\u5316\u4f53\u9a8c \u2192 \u5bfc\u822a\u65f6\u663e\u793a\u52a0\u8f7d\u52a8\u753b\n<\/code><\/pre>\n\n\n\n3. \u5173\u952e\u4ee3\u7801<\/h4>\n\n\n\n\/\/ components\/ui\/header.tsx\n\"use client\"\n\nimport { useState, useEffect } from 'react'\nimport { createClient } from '@\/utils\/supabase\/client'\nimport { useRouter } from 'next\/navigation'\n\nexport default function Header() {\n const [user, setUser] = useState<User | null>(null)\n const [loading, setLoading] = useState(true)\n const [isNavigating, setIsNavigating] = useState(false)\n const supabase = createClient()\n const router = useRouter()\n\n useEffect(() => {\n \/\/ \u68c0\u67e5\u767b\u5f55\u72b6\u6001\n const checkUser = async () => {\n const { data: { user } } = await supabase.auth.getUser()\n setUser(user || null)\n setLoading(false)\n\n \/\/ \u76d1\u542c\u72b6\u6001\u53d8\u5316\n const { data: { subscription } } = await supabase.auth.onAuthStateChange((_event, session) => {\n setUser(session?.user || null)\n })\n\n return () => subscription.unsubscribe()\n }\n checkUser()\n }, [])\n\n const handleDashboardClick = (e: React.MouseEvent) => {\n e.preventDefault()\n setIsNavigating(true)\n router.prefetch('\/dashboard')\n setTimeout(() => router.push('\/dashboard'), 100)\n }\n\n return (\n <header>\n {loading ? (\n \/\/ \u9aa8\u67b6\u5c4f\u52a0\u8f7d\n <div className=\"h-8 w-20 bg-gray-200 rounded-md animate-pulse\" \/>\n ) : user ? (\n \/\/ \u5df2\u767b\u5f55\n <a href=\"\/dashboard\" onClick={handleDashboardClick}>\n {isNavigating ? <Spinner \/> : '\u4e2a\u4eba\u4e2d\u5fc3'}\n <\/a>\n ) : (\n \/\/ \u672a\u767b\u5f55\n <>\n <Link href=\"\/signin\">\u767b\u5f55<\/Link>\n <Link href=\"\/signup\">\u6ce8\u518c<\/Link>\n <\/>\n )}\n <\/header>\n )\n}\n<\/code><\/pre>\n\n\n\n4. \u6548\u679c\u5c55\u793a<\/h4>\n\n\n\n\n- \u9875\u9762\u52a0\u8f7d\u65f6 Header \u663e\u793a\u9aa8\u67b6\u5c4f\u52a8\u753b<\/li>\n\n\n\n
- \u52a0\u8f7d\u5b8c\u6210\u540e\u663e\u793a\u767b\u5f55\/\u6ce8\u518c\u6309\u94ae<\/li>\n\n\n\n
- \u767b\u5f55\u540e\u5b9e\u65f6\u663e\u793a”\u4e2a\u4eba\u4e2d\u5fc3”<\/li>\n\n\n\n
- \u70b9\u51fb\u4e2a\u4eba\u4e2d\u5fc3\u663e\u793a\u52a0\u8f7d Spinner\uff0c\u9884\u52a0\u8f7d\u8def\u7531<\/li>\n<\/ul>\n\n\n\n
\n\n\n\n4.6 \u8ba2\u9605\u65f6\u95f4\u7d2f\u52a0\u8ba1\u7b97<\/h3>\n\n\n\n1. \u529f\u80fd\u63cf\u8ff0<\/h4>\n\n\n\n
\u7528\u6237\u8d2d\u4e70\u8ba2\u9605\u4ea7\u54c1\u65f6\uff0c\u5982\u679c\u5df2\u6709\u6d3b\u8dc3\u8ba2\u9605\uff0c\u65b0\u8ba2\u9605\u65f6\u95f4\u4ece\u5f53\u524d\u8ba2\u9605\u7ed3\u675f\u65e5\u671f\u5f00\u59cb\u7d2f\u52a0\uff0c\u800c\u4e0d\u662f\u4ece\u5f53\u524d\u65f6\u95f4\u8ba1\u7b97\u3002<\/p>\n\n\n\n
2. \u5b9e\u73b0\u601d\u8def<\/h4>\n\n\n\n\u7528\u6237\u8d2d\u4e70\u8ba2\u9605 \u2192 \u67e5\u8be2\u7528\u6237\u662f\u5426\u6709\u672a\u8fc7\u671f\u8ba2\u9605\n \u251c\u2500 \u6709 \u2192 \u4ece\u8ba2\u9605\u7ed3\u675f\u65e5\u671f\u5f00\u59cb\u7d2f\u52a0\uff08\u6708\u4ed8 +1 \u6708\uff0c\u5e74\u4ed8 +1 \u5e74\uff09\n \u2514\u2500 \u65e0 \u2192 \u4ece\u73b0\u5728\u5f00\u59cb\u8ba1\u7b97\n \u2192 \u4fdd\u5b58\u65b0\u7684\u8ba2\u9605\u7ed3\u675f\u65e5\u671f \u2192 \u8fd4\u56de\u652f\u4ed8\u94fe\u63a5\n<\/code><\/pre>\n\n\n\n3. \u5173\u952e\u4ee3\u7801<\/h4>\n\n\n\n\/\/ \u8ba1\u7b97\u8ba2\u9605\u7ed3\u675f\u65e5\u671f\nasync function calculateSubscriptionEndDate(\n userId: string,\n productId: string,\n subscriptionPeriod: 'monthly' | 'yearly'\n) {\n const supabase = createServerAdminClient()\n\n \/\/ \u67e5\u8be2\u662f\u5426\u6709\u6d3b\u8dc3\u8ba2\u9605\n const { data: existingTransactions } = await supabase\n .from('zpay_transactions')\n .select('subscription_end_date, trade_status')\n .eq('user_id', userId)\n .eq('product_id', productId)\n .eq('trade_status', 'TRADE_SUCCESS')\n .gt('subscription_end_date', new Date().toISOString())\n .order('subscription_end_date', { ascending: false })\n .limit(1)\n\n let subscriptionEndDate: Date\n\n if (existingTransactions && existingTransactions.length > 0) {\n \/\/ \u5df2\u6709\u6d3b\u8dc3\u8ba2\u9605\uff0c\u4ece\u7ed3\u675f\u65e5\u671f\u7d2f\u52a0\n const currentEndDate = new Date(existingTransactions[0].subscription_end_date)\n subscriptionEndDate = new Date(currentEndDate)\n\n if (subscriptionPeriod === 'monthly') {\n subscriptionEndDate.setMonth(subscriptionEndDate.getMonth() + 1)\n } else if (subscriptionPeriod === 'yearly') {\n subscriptionEndDate.setFullYear(subscriptionEndDate.getFullYear() + 1)\n }\n } else {\n \/\/ \u65b0\u8ba2\u9605\uff0c\u4ece\u73b0\u5728\u5f00\u59cb\n subscriptionEndDate = new Date()\n if (subscriptionPeriod === 'monthly') {\n subscriptionEndDate.setMonth(subscriptionEndDate.getMonth() + 1)\n } else if (subscriptionPeriod === 'yearly') {\n subscriptionEndDate.setFullYear(subscriptionEndDate.getFullYear() + 1)\n }\n }\n\n return subscriptionEndDate\n}\n<\/code><\/pre>\n\n\n\n4. \u6548\u679c\u5c55\u793a<\/h4>\n\n\n\n\n- \u7528\u6237 1 \u6708 1 \u65e5\u8d2d\u4e70\u6708\u5361\uff0c\u5230\u671f\u65f6\u95f4 2 \u6708 1 \u65e5<\/li>\n\n\n\n
- \u7528\u6237 1 \u6708 15 \u65e5\u518d\u6b21\u8d2d\u4e70\u6708\u5361\uff0c\u5230\u671f\u65f6\u95f4\u81ea\u52a8\u53d8\u4e3a 3 \u6708 1 \u65e5\uff08\u800c\u975e 2 \u6708 15 \u65e5\uff09<\/li>\n\n\n\n
- Dashboard \u663e\u793a”\u4f1a\u5458\u5230\u671f\u65f6\u95f4\uff1a2026-03-01″<\/li>\n<\/ul>\n\n\n\n
\u4e94\u3001\u5b89\u5168\u673a\u5236<\/h2>\n\n\n\n1. \u8ba4\u8bc1\u5b89\u5168<\/h3>\n\n\n\n\u63aa\u65bd<\/th> \u8bf4\u660e<\/th> \u5b9e\u73b0<\/th><\/tr><\/thead> HttpOnly Cookie<\/td> \u9632\u6b62 XSS \u653b\u51fb\u8bfb\u53d6<\/td> Supabase SSR \u81ea\u52a8\u8bbe\u7f6e<\/td><\/tr> JWT \u8fc7\u671f\u65f6\u95f4<\/td> \u964d\u4f4e\u4ee4\u724c\u6cc4\u9732\u98ce\u9669<\/td> \u9ed8\u8ba4 1 \u5c0f\u65f6<\/td><\/tr> Refresh Token<\/td> \u65e0\u611f\u77e5\u7eed\u671f<\/td> onAuthStateChange \u76d1\u542c<\/td><\/tr> \u5bc6\u7801\u54c8\u5e0c<\/td> \u6570\u636e\u5e93\u4e0d\u5b58\u660e\u6587<\/td> Supabase Auth \u5185\u7f6e<\/td><\/tr><\/tbody><\/table><\/figure>\n\n\n\n2. \u652f\u4ed8\u5b89\u5168<\/h3>\n\n\n\n\/\/ \u591a\u5c42\u9a8c\u8bc1\n1. \u7b7e\u540d\u9a8c\u8bc1 \u2192 \u786e\u4fdd\u8bf7\u6c42\u6765\u81ea ZPay\n2. \u5546\u6237 ID \u9a8c\u8bc1 \u2192 \u786e\u4fdd\u901a\u77e5\u53d1\u9001\u7ed9\u6b63\u786e\u7684\u5546\u6237\n3. \u91d1\u989d\u9a8c\u8bc1 \u2192 \u9632\u6b62\u7be1\u6539\u652f\u4ed8\u91d1\u989d\n4. \u8ba2\u5355\u53f7\u9a8c\u8bc1 \u2192 \u786e\u4fdd\u8ba2\u5355\u5b58\u5728\n5. \u9632\u91cd\u590d\u5904\u7406 \u2192 \u907f\u514d\u91cd\u590d\u53d1\u653e\u6743\u76ca\n<\/code><\/pre>\n\n\n\n3. RLS \u884c\u7ea7\u6743\u9650<\/h3>\n\n\n\n-- \u7528\u6237\u53ea\u80fd\u8bbf\u95ee\u81ea\u5df1\u7684\u6570\u636e\nCREATE POLICY \"select_own_data\" ON users\n FOR SELECT USING (auth.uid() = id);\n\nCREATE POLICY \"update_own_data\" ON users\n FOR UPDATE USING (auth.uid() = id);\n\n-- \u4ea4\u6613\u8bb0\u5f55\uff1a\u7528\u6237\u53ef\u67e5\u770b\u81ea\u5df1\u7684\u8bb0\u5f55\nCREATE POLICY \"select_own_transactions\" ON zpay_transactions\n FOR SELECT USING (auth.uid() = user_id);\n<\/code><\/pre>\n\n\n\n4. \u73af\u5883\u53d8\u91cf\u7ba1\u7406<\/h3>\n\n\n\n# .env.local\uff08\u672c\u5730\u5f00\u53d1\uff09\nNEXT_PUBLIC_SUPABASE_URL=https:\/\/xxx.supabase.co\nNEXT_PUBLIC_SUPABASE_ANON_KEY=eyJhbGc...\nNEXT_PUBLIC_BASE_URL=http:\/\/localhost:3000\nZPAY_PID=xxx\nZPAY_KEY=xxx\n\n# Vercel \u73af\u5883\u53d8\u91cf\uff08\u751f\u4ea7\u73af\u5883\uff09\n# \u5728 Dashboard \u2192 Settings \u2192 Environment Variables \u4e2d\u914d\u7f6e\n# SUPABASE_SERVICE_ROLE_KEY \u4ec5\u670d\u52a1\u7aef\u53ef\u8bbf\u95ee<\/code><\/pre>\n\n\n\n\u516d\u3001\u90e8\u7f72\u4e0e\u8fd0\u7ef4<\/h2>\n\n\n\nVercel \u90e8\u7f72\u6b65\u9aa4<\/h3>\n\n\n\n1. \u5b89\u88c5 Vercel CLI\n npm i -g vercel\n\n2. \u767b\u5f55 Vercel\n vercel login\n\n3. \u9996\u6b21\u90e8\u7f72\n vercel\n\n4. \u751f\u4ea7\u90e8\u7f72\n vercel --prod\n<\/code><\/pre>\n\n\n\n\u73af\u5883\u53d8\u91cf\u914d\u7f6e<\/h3>\n\n\n\n
![\"\"](\"http:\/\/www.houzhibin.top\/wp-content\/uploads\/2026\/03\/\u5c4f\u5e55\u622a\u56fe-2026-03-28-154311.png\")
<\/div><\/figure>\n\n\n\n![\"\"](\"http:\/\/www.houzhibin.top\/wp-content\/uploads\/2026\/03\/\u5c4f\u5e55\u622a\u56fe-2026-03-28-155000.png\")
<\/div><\/figure>\n\n\n\n