Supabase + 登录 + 支付接入说明（v1.8.1）

最后更新：2026-05-29

1. 目标

前端支持 Google 一键登录 + 邮箱注册/登录。
后端支持 Supabase JWT 鉴权。
支持 Polygon 合约支付（USDC / USDC.e）和 Ethereum 主网 USDC 直转支付，并自动确认开通订阅。

2. Supabase 控制台配置

Auth -> Providers 打开 Google 与 Email。
Google Cloud OAuth 回调配置：
- https://<project-ref>.supabase.co/auth/v1/callback
Auth -> URL Configuration 添加：
- 站点 URL（生产域名）
- 回调 URL（例如 https://polyweather-pro.vercel.app/auth/callback）

3. 数据库脚本

在 Supabase SQL Editor 执行：

scripts/supabase/schema.sql
既有生产项目遇到 Disk IO Budget 告警时，再执行 scripts/supabase/io_budget_indexes.sql

会创建支付与订阅相关表：

subscriptions
payments
entitlement_events
user_wallets
wallet_link_challenges
payment_intents
payment_transactions

3.1 Disk IO 告警处理

如果 Supabase 提示项目正在耗尽 Disk IO Budget，先在 SQL Editor 执行：

scripts/supabase/io_budget_indexes.sql
scripts/supabase/disk_io_diagnostics.sql

第一个脚本会把热查询索引收敛为更低写放大的部分索引，移除已被唯一约束覆盖或无热路径使用的冗余索引，并对相关表执行 ANALYZE。第二个脚本用于查看表扫描、dead tuples、索引命中和 pg_stat_statements 中的高读块 SQL。生产执行后，继续观察 Supabase daily/hourly Disk IO 图表，确认请求延迟和 IO wait 是否下降。

4. 环境变量

4.1 前端（Vercel / frontend/.env.local）

NEXT_PUBLIC_SUPABASE_URL=
NEXT_PUBLIC_SUPABASE_ANON_KEY=
POLYWEATHER_AUTH_ENABLED=true
POLYWEATHER_AUTH_REQUIRED=false
POLYWEATHER_API_BASE_URL=http://<backend-host>:8000
POLYWEATHER_BACKEND_ENTITLEMENT_TOKEN=

# WalletConnect（支持手机钱包扫码）
NEXT_PUBLIC_WALLETCONNECT_PROJECT_ID=
NEXT_PUBLIC_WALLETCONNECT_POLYGON_RPC_URL=https://polygon-bor-rpc.publicnode.com

# Overlay 跳转
NEXT_PUBLIC_TELEGRAM_GROUP_URL=https://t.me/<your_group>

4.2 后端 / Bot（.env）

POLYWEATHER_AUTH_ENABLED=true
POLYWEATHER_AUTH_REQUIRED=false
POLYWEATHER_AUTH_REQUIRE_SUBSCRIPTION=false

SUPABASE_URL=
SUPABASE_ANON_KEY=
SUPABASE_SERVICE_ROLE_KEY=
SUPABASE_HTTP_TIMEOUT_SEC=8

POLYWEATHER_PAYMENT_ENABLED=true
# 默认链仍是 Polygon，因为当前 checkout 合约部署在 Polygon。
POLYWEATHER_PAYMENT_CHAIN_ID=137
POLYWEATHER_PAYMENT_RPC_URL=https://polygon-bor-rpc.publicnode.com
POLYWEATHER_PAYMENT_RPC_URLS_BY_CHAIN_JSON={"137":["https://polygon-bor-rpc.publicnode.com"],"1":["https://ethereum-rpc.example"]}
POLYWEATHER_PAYMENT_RECEIVER_CONTRACT=0x<receiver_contract>
POLYWEATHER_PAYMENT_DIRECT_RECEIVER_ADDRESS=0x<treasury_or_receiver_wallet>
POLYWEATHER_PAYMENT_CONFIRMATIONS=2
POLYWEATHER_PAYMENT_INTENT_TTL_SEC=1800
POLYWEATHER_PAYMENT_WALLET_CHALLENGE_TTL_SEC=600
POLYWEATHER_PAYMENT_POLL_INTERVAL_SEC=4
POLYWEATHER_PAYMENT_MAX_WAIT_SEC=50

# 支持多链多币种（示例）
# Ethereum 主网 USDC 当前建议只开 direct transfer，不走 Polygon checkout 合约。
POLYWEATHER_PAYMENT_ACCEPTED_TOKENS_JSON=[{"code":"usdc_polygon","symbol":"USDC","name":"USDC on Polygon","chain_id":137,"chain_code":"polygon","chain_name":"Polygon","address":"0x3c499c542cef5e3811e1192ce70d8cc03d5c3359","decimals":6,"receiver_contract":"0x<receiver_contract>","direct_receiver_address":"0x<treasury_or_receiver_wallet>","is_default":true},{"code":"usdc_e_polygon","symbol":"USDC.e","name":"USDC.e on Polygon","chain_id":137,"chain_code":"polygon","chain_name":"Polygon","address":"0x2791Bca1f2de4661ED88A30C99A7a9449Aa84174","decimals":6,"receiver_contract":"0x<receiver_contract>","direct_receiver_address":"0x<treasury_or_receiver_wallet>"},{"code":"usdc_ethereum","symbol":"USDC","name":"USDC on Ethereum","chain_id":1,"chain_code":"ethereum","chain_name":"Ethereum Mainnet","address":"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48","decimals":6,"direct_receiver_address":"0x<treasury_or_receiver_wallet>","supports_contract_checkout":false,"supports_direct_transfer":true,"confirmations":2,"explorer_tx_url":"https://etherscan.io/tx/{tx_hash}"}]

# 套餐
POLYWEATHER_PAYMENT_PLAN_CATALOG_JSON={"pro_monthly":{"plan_id":101,"amount_usdc":"29.9","duration_days":30},"pro_quarterly":{"plan_id":102,"amount_usdc":"79.9","duration_days":90}}
POLYWEATHER_PAYMENT_ALLOWED_PLAN_CODES=pro_monthly,pro_quarterly

# 积分抵扣
POLYWEATHER_PAYMENT_POINTS_ENABLED=true
POLYWEATHER_PAYMENT_POINTS_PER_USDC=500
POLYWEATHER_PAYMENT_POINTS_MAX_DISCOUNT_USDC=3
POLYWEATHER_PAYMENT_POINTS_MAX_DISCOUNT_USDC_BY_PLAN_JSON={"pro_monthly":3,"pro_quarterly":8}

# 支付自动补单
POLYWEATHER_PAYMENT_EVENT_LOOP_ENABLED=true
POLYWEATHER_PAYMENT_CONFIRM_LOOP_ENABLED=true
POLYWEATHER_PAYMENT_CONFIRM_LOOP_INTERVAL_SEC=20
POLYWEATHER_PAYMENT_CONFIRM_LOOP_IDLE_INTERVAL_SEC=300
POLYWEATHER_PAYMENT_CONFIRM_LOOP_IDLE_AFTER_EMPTY_CYCLES=3

5. 验证步骤

登录后请求 /api/auth/me，确认 authenticated=true。
请求 /api/payments/config，确认 enabled=true、configured=true。
钱包绑定：
- POST /api/payments/wallets/challenge
- POST /api/payments/wallets/verify
支付流程：
- POST /api/payments/intents；多链时前端会带 chain_id 和 token_address
- 发链上交易
- POST /api/payments/intents/{id}/submit
- POST /api/payments/intents/{id}/confirm
若前端显示 pending，轮询：
- GET /api/payments/intents/{id}
确认订阅：/api/auth/me 返回 subscription_active=true。

6. 多链支付口径

Polygon 是默认链，仍支持钱包合约支付和手动直转确认。
Ethereum 主网 USDC 是正式支付链路，但当前建议只走手动直转：用户选择 Ethereum 后，前端展示收款钱包、金额、代币合约和 Etherscan 链接，用户提交 tx hash 后后端按 intent.chain_id=1 查询 Ethereum RPC。
不要只依赖前端文案阻止错链付款；后端必须把每笔 intent 的 chain_id、token_address、receiver_address 落库，并在确认时按该链校验 Transfer 事件。

6.1 KiB Raw Blame History Unescape Escape