小程序微信后台和代理后台使用同一个域名

codes/agent/game-docker/docker/nginx/default.conf.template

@@ -32,7 +32,8 @@ upstream wxserver_service {
 #   - 业务域名:            ${API_DOMAIN}
 #     (验证文件在 api/ 根目录)
 #   - JS接口安全域名:       ${API_DOMAIN}
-#   - 网页授权域名:         ${WX_DOMAIN}
+#   - 网页授权域名:         ${API_DOMAIN}   ← api 与 wxserver 共用此域名
+#     wxserver OAuth 回调走 https://${API_DOMAIN}/wx/auth/oa/callback
 #
 # 【微信支付后台】(pay.weixin.qq.com)
 #   - 支付授权目录:  https://${DLWEB_DOMAIN}/
@@ -97,7 +98,7 @@ server {
     }
 }
 
-# ===== 网站1: 游戏核心 API (公众号后台) =====
+# ===== 网站1: 游戏核心 API (公众号后台) + wxserver OAuth 回调 =====
 server {
     listen 443 ssl http2;
     listen [::]:443 ssl http2;
@@ -107,6 +108,18 @@ server {
     ssl_certificate_key /etc/letsencrypt/live/${API_DOMAIN}/privkey.pem;
     include /etc/nginx/snippets/ssl-params.conf;
 
+    # wxserver 路由：/wx/ 前缀转发给 wxserver 容器，自动去除 /wx 前缀
+    # 例：/wx/auth/oa/callback → wxserver:/auth/oa/callback
+    location /wx/ {
+        proxy_pass http://wxserver_service/;
+        proxy_set_header Host $host;
+        proxy_set_header X-Real-IP $remote_addr;
+        proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
+        proxy_set_header X-Forwarded-Proto $scheme;
+        proxy_set_header X-Forwarded-Port $server_port;
+    }
+
+    # PHP API（所有其他请求）
     location / {
         proxy_pass http://api_service;
         proxy_set_header Host $host;