找回密码 短信发送 增加 一段时间内 发送次数限制

@@ -199,19 +199,6 @@ const sendCodeToMobileAPI = (req, res, next) => {
     let areaCode = req.body.areaCode || '86';
     let areaCode = req.body.areaCode || '86';
     let testCode = req.body.yohobuy;
     let testCode = req.body.yohobuy;
 
 
-    /* 如果设置了冻结时间，验证 */
-    if (_.has(req.session, 'backupCaptch.timeout')) {
-        let untilTime = (parseInt(req.session.backupCaptch.timeout, 10) -
-            parseInt(Date.now(), 10)) / 1000 / 60;
-
-        if (parseInt(Date.now(), 10) < parseInt(req.session.backupCaptch.timeout, 10)) {
-            return res.json({
-                code: 401,
-                message: '请' + (parseInt(untilTime, 10) + 1) + '分钟后尝试！'
-            });
-        }
-    }
-
     let errorCount = _.get(req.session, 'captchaValidCount', 4); // 初始1次 + 后续4次， 同一个验证码 共5次
     let errorCount = _.get(req.session, 'captchaValidCount', 4); // 初始1次 + 后续4次， 同一个验证码 共5次
 
 
     if (!errorCount) {
     if (!errorCount) {
@@ -250,6 +237,7 @@ const sendCodeToMobileAPI = (req, res, next) => {
         });
         });
     }
     }
 
 
+
     let ERR = {
     let ERR = {
         code: 400,
         code: 400,
         message: '输入手机号码出错'
         message: '输入手机号码出错'
@@ -259,7 +247,23 @@ const sendCodeToMobileAPI = (req, res, next) => {
         return res.json(ERR);
         return res.json(ERR);
     }
     }
 
 
-    
+    let backCount = _.get(req.session, 'backupCaptch.count'); // 短信验证码 发送次数
+
+    if (!backCount) {
+        /* 如果设置了冻结时间，验证 */
+        let untilTime = (parseInt(req.session.backupCaptch.timeout, 10) -
+            parseInt(Date.now(), 10)) / 1000 / 60;
+
+        if (parseInt(Date.now(), 10) < parseInt(req.session.backupCaptch.timeout, 10)) {
+            return res.json({
+                code: 401,
+                message: '请' + (parseInt(untilTime, 10) + 1) + '分钟后尝试！'
+            });
+        } else {
+            _.set(req.session, 'backupCaptch.count', 5);
+        }
+    }
+
 
 
     service.sendCodeToMobileAsync(phoneNum, areaCode)
     service.sendCodeToMobileAsync(phoneNum, areaCode)
         .then(result => {
         .then(result => {
@@ -269,6 +273,12 @@ const sendCodeToMobileAPI = (req, res, next) => {
             }
             }
 
 
             if (result.code === 200) {
             if (result.code === 200) {
+                --req.session.backupCaptch.count;
+
+                if (!req.session.backupCaptch.count) {
+                    _.set(req.session, 'backupCaptch.timeout', Date.now() + 5 * 60 * 1000);
+                }
+
                 return res.json({
                 return res.json({
                     code: 200,
                     code: 200,
                     data: helpers.urlFormat('/passport/back/mobilecode', {
                     data: helpers.urlFormat('/passport/back/mobilecode', {