diff --git a/.gitignore b/.gitignore
index 634d1aca52f39958550dfaddd7ccff62ad64c188..d2918cd9ff10008ea01e8a82406229027f7bb259 100644
--- a/.gitignore
+++ b/.gitignore
@@ -41,7 +41,7 @@ build/
 
 # 排除mac本地文件
 *.DS_Store
-
+*.properties
 venv/
 /docker/
 **/assembly/
diff --git a/board/board-service/src/main/java/com/welab/wefe/board/service/api/account/ForgetPasswordApi.java b/board/board-service/src/main/java/com/welab/wefe/board/service/api/account/ForgetPasswordApi.java
new file mode 100644
index 0000000000000000000000000000000000000000..a0d6d7a554d92ce8197f3c897ced6272a1c86d7e
--- /dev/null
+++ b/board/board-service/src/main/java/com/welab/wefe/board/service/api/account/ForgetPasswordApi.java
@@ -0,0 +1,84 @@
+/**
+ * Copyright 2021 Tianmian Tech. All Rights Reserved.
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *     http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */
+
+package com.welab.wefe.board.service.api.account;
+
+import com.welab.wefe.board.service.service.account.AccountService;
+import com.welab.wefe.common.exception.StatusCodeWithException;
+import com.welab.wefe.common.fieldvalidate.annotation.Check;
+import com.welab.wefe.common.web.api.base.AbstractApi;
+import com.welab.wefe.common.web.api.base.Api;
+import com.welab.wefe.common.web.dto.AbstractApiInput;
+import com.welab.wefe.common.web.dto.ApiResult;
+import com.welab.wefe.common.web.dto.NoneApiOutput;
+import org.springframework.beans.factory.annotation.Autowired;
+
+import java.io.IOException;
+
+/**
+ * forget password
+ *
+ * @author aaron.li
+ * @date 2021/11/10 14:08
+ **/
+@Api(path = "account/forget_password", name = "forgetPassword", login = false)
+public class ForgetPasswordApi extends AbstractApi<ForgetPasswordApi.Input, NoneApiOutput> {
+    @Autowired
+    private AccountService accountService;
+
+    @Override
+    protected ApiResult<NoneApiOutput> handle(Input input) throws StatusCodeWithException, IOException {
+        accountService.forgetPassword(input);
+        return success();
+    }
+
+    public static class Input extends AbstractApiInput {
+        @Check(require = true)
+        private String phoneNumber;
+
+        @Check(require = true, regex = "^.{6,128}$")
+        private String password;
+
+        @Check(require = true)
+        private String smsVerificationCode;
+
+        public String getPhoneNumber() {
+            return phoneNumber;
+        }
+
+        public void setPhoneNumber(String phoneNumber) {
+            this.phoneNumber = phoneNumber;
+        }
+
+        public String getPassword() {
+            return password;
+        }
+
+        public void setPassword(String password) {
+            this.password = password;
+        }
+
+        public String getSmsVerificationCode() {
+            return smsVerificationCode;
+        }
+
+        public void setSmsVerificationCode(String smsVerificationCode) {
+            this.smsVerificationCode = smsVerificationCode;
+        }
+    }
+
+
+}
diff --git a/board/board-service/src/main/java/com/welab/wefe/board/service/api/union/SendForgetPasswordSmsCodeApi.java b/board/board-service/src/main/java/com/welab/wefe/board/service/api/union/SendForgetPasswordSmsCodeApi.java
new file mode 100644
index 0000000000000000000000000000000000000000..756d14f4f0b8ccbe52533e40a435b96f8f84dea8
--- /dev/null
+++ b/board/board-service/src/main/java/com/welab/wefe/board/service/api/union/SendForgetPasswordSmsCodeApi.java
@@ -0,0 +1,59 @@
+/**
+ * Copyright 2021 Tianmian Tech. All Rights Reserved.
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *     http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */
+
+package com.welab.wefe.board.service.api.union;
+
+import com.welab.wefe.board.service.sdk.UnionService;
+import com.welab.wefe.common.enums.SmsBusinessType;
+import com.welab.wefe.common.exception.StatusCodeWithException;
+import com.welab.wefe.common.fieldvalidate.annotation.Check;
+import com.welab.wefe.common.web.api.base.AbstractApi;
+import com.welab.wefe.common.web.api.base.Api;
+import com.welab.wefe.common.web.dto.AbstractApiInput;
+import com.welab.wefe.common.web.dto.ApiResult;
+import com.welab.wefe.common.web.dto.NoneApiOutput;
+import org.springframework.beans.factory.annotation.Autowired;
+
+import java.io.IOException;
+
+/**
+ * @author aaron.li
+ * @date 2021/11/11 09:45
+ **/
+@Api(path = "union/send_forget_password_sms_code", name = "send sms verification code", login = false)
+public class SendForgetPasswordSmsCodeApi extends AbstractApi<SendForgetPasswordSmsCodeApi.Input, NoneApiOutput> {
+    @Autowired
+    private UnionService unionService;
+
+    @Override
+    protected ApiResult<NoneApiOutput> handle(Input input) throws StatusCodeWithException, IOException {
+        unionService.sendVerificationCode(input.phoneNumber, SmsBusinessType.AccountForgetPasswordVerificationCode);
+        return success();
+    }
+
+    public static class Input extends AbstractApiInput {
+        @Check(require = true)
+        private String phoneNumber;
+
+        public String getPhoneNumber() {
+            return phoneNumber;
+        }
+
+        public void setPhoneNumber(String phoneNumber) {
+            this.phoneNumber = phoneNumber;
+        }
+    }
+}
diff --git a/board/board-service/src/main/java/com/welab/wefe/board/service/database/entity/job/ProjectFlowMySqlModel.java b/board/board-service/src/main/java/com/welab/wefe/board/service/database/entity/job/ProjectFlowMySqlModel.java
index 53265900655c71efcff4f542ca58d4a15fcb4240..02aba4b78a95fe76a02a6444b071b5e420a9ee83 100644
--- a/board/board-service/src/main/java/com/welab/wefe/board/service/database/entity/job/ProjectFlowMySqlModel.java
+++ b/board/board-service/src/main/java/com/welab/wefe/board/service/database/entity/job/ProjectFlowMySqlModel.java
@@ -63,6 +63,10 @@ public class ProjectFlowMySqlModel extends AbstractBaseMySqlModel {
      * 画布中编辑的图
      */
     private String graph;
+    /**
+     * 创建此流程的成员的ID
+     */
+    private String creatorMemberId;
 
     /**
      * 流程的状态
@@ -168,6 +172,15 @@ public class ProjectFlowMySqlModel extends AbstractBaseMySqlModel {
     public void setStatusUpdatedTime(Date statusUpdatedTime) {
         this.statusUpdatedTime = statusUpdatedTime;
     }
+
+    public String getCreatorMemberId() {
+        return creatorMemberId;
+    }
+
+    public void setCreatorMemberId(String creatorMemberId) {
+        this.creatorMemberId = creatorMemberId;
+    }
+
     //endregion
 
 }
diff --git a/board/board-service/src/main/java/com/welab/wefe/board/service/dto/entity/project/ProjectFlowListOutputModel.java b/board/board-service/src/main/java/com/welab/wefe/board/service/dto/entity/project/ProjectFlowListOutputModel.java
index 652c11095a128e6825408315acc0f2a3d6a7f405..893099053aa3d9445c1ee738f25a715dba7dcf4a 100644
--- a/board/board-service/src/main/java/com/welab/wefe/board/service/dto/entity/project/ProjectFlowListOutputModel.java
+++ b/board/board-service/src/main/java/com/welab/wefe/board/service/dto/entity/project/ProjectFlowListOutputModel.java
@@ -17,6 +17,7 @@
 package com.welab.wefe.board.service.dto.entity.project;
 
 import com.welab.wefe.board.service.dto.entity.AbstractOutputModel;
+import com.welab.wefe.board.service.service.CacheObjects;
 import com.welab.wefe.common.enums.FederatedLearningType;
 import com.welab.wefe.common.enums.JobMemberRole;
 import com.welab.wefe.common.enums.ProjectFlowStatus;
@@ -70,7 +71,14 @@ public class ProjectFlowListOutputModel extends AbstractOutputModel {
      * 任务进度
      */
     private Integer jobProgress;
+    /**
+     * 创建此流程的成员的ID
+     */
+    private String creatorMemberId;
 
+    public String getCreatorMemberName() {
+        return CacheObjects.getMemberName(creatorMemberId);
+    }
 
     //region getter/setter
 
@@ -171,6 +179,14 @@ public class ProjectFlowListOutputModel extends AbstractOutputModel {
         this.isCreator = isCreator;
     }
 
+    public String getCreatorMemberId() {
+        return creatorMemberId;
+    }
+
+    public void setCreatorMemberId(String creatorMemberId) {
+        this.creatorMemberId = creatorMemberId;
+    }
+
     //endregion
 
 }
diff --git a/board/board-service/src/main/java/com/welab/wefe/board/service/dto/entity/project/ProjectFlowOutputModel.java b/board/board-service/src/main/java/com/welab/wefe/board/service/dto/entity/project/ProjectFlowOutputModel.java
index 92e1b2efe76abc8c251d60d13eb0296bdea101cf..a7a12d4ed783880b12804f051cac627e8fd75386 100644
--- a/board/board-service/src/main/java/com/welab/wefe/board/service/dto/entity/project/ProjectFlowOutputModel.java
+++ b/board/board-service/src/main/java/com/welab/wefe/board/service/dto/entity/project/ProjectFlowOutputModel.java
@@ -19,6 +19,7 @@ package com.welab.wefe.board.service.dto.entity.project;
 import com.alibaba.fastjson.JSON;
 import com.alibaba.fastjson.JSONObject;
 import com.welab.wefe.board.service.dto.entity.AbstractOutputModel;
+import com.welab.wefe.board.service.service.CacheObjects;
 import com.welab.wefe.common.enums.FederatedLearningType;
 import com.welab.wefe.common.enums.JobMemberRole;
 import com.welab.wefe.common.enums.ProjectFlowStatus;
@@ -57,6 +58,10 @@ public class ProjectFlowOutputModel extends AbstractOutputModel {
      * 画布中编辑的图
      */
     private JSONObject graph;
+    /**
+     * 创建此流程的成员的ID
+     */
+    private String creatorMemberId;
 
     /**
      * 流程的状态
@@ -78,6 +83,10 @@ public class ProjectFlowOutputModel extends AbstractOutputModel {
         }
     }
 
+    public String getCreatorMemberName() {
+        return CacheObjects.getMemberName(creatorMemberId);
+    }
+
 
     //region getter/setter
 
@@ -174,5 +183,12 @@ public class ProjectFlowOutputModel extends AbstractOutputModel {
         this.projectModelingOutputModel = projectModelingOutputModel;
     }
 
+    public String getCreatorMemberId() {
+        return creatorMemberId;
+    }
+
+    public void setCreatorMemberId(String creatorMemberId) {
+        this.creatorMemberId = creatorMemberId;
+    }
     //endregion
 }
diff --git a/board/board-service/src/main/java/com/welab/wefe/board/service/sdk/FlowService.java b/board/board-service/src/main/java/com/welab/wefe/board/service/sdk/FlowService.java
index 80d72ff5b24e12134e95f859eacda8ed62361623..69668a087282eb577b0bf6b0544ca50cc582d66c 100644
--- a/board/board-service/src/main/java/com/welab/wefe/board/service/sdk/FlowService.java
+++ b/board/board-service/src/main/java/com/welab/wefe/board/service/sdk/FlowService.java
@@ -1,12 +1,12 @@
 /**
  * Copyright 2021 Tianmian Tech. All Rights Reserved.
- * <p>
+ *
  * Licensed under the Apache License, Version 2.0 (the "License");
  * you may not use this file except in compliance with the License.
  * You may obtain a copy of the License at
- * <p>
- * http://www.apache.org/licenses/LICENSE-2.0
- * <p>
+ *
+ *     http://www.apache.org/licenses/LICENSE-2.0
+ *
  * Unless required by applicable law or agreed to in writing, software
  * distributed under the License is distributed on an "AS IS" BASIS,
  * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
diff --git a/board/board-service/src/main/java/com/welab/wefe/board/service/sdk/UnionService.java b/board/board-service/src/main/java/com/welab/wefe/board/service/sdk/UnionService.java
index 66c1c2db8f84e251226bd4e4564f01577d2abaeb..02773dbf61be611131db8282a4d7980cda1c5e83 100644
--- a/board/board-service/src/main/java/com/welab/wefe/board/service/sdk/UnionService.java
+++ b/board/board-service/src/main/java/com/welab/wefe/board/service/sdk/UnionService.java
@@ -1,12 +1,12 @@
 /**
  * Copyright 2021 Tianmian Tech. All Rights Reserved.
- * 
+ *
  * Licensed under the Apache License, Version 2.0 (the "License");
  * you may not use this file except in compliance with the License.
  * You may obtain a copy of the License at
- * 
+ *
  *     http://www.apache.org/licenses/LICENSE-2.0
- * 
+ *
  * Unless required by applicable law or agreed to in writing, software
  * distributed under the License is distributed on an "AS IS" BASIS,
  * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
@@ -34,6 +34,7 @@ import com.welab.wefe.board.service.service.globalconfig.GlobalConfigService;
 import com.welab.wefe.common.CommonThreadPool;
 import com.welab.wefe.common.StatusCode;
 import com.welab.wefe.common.enums.DataSetPublicLevel;
+import com.welab.wefe.common.enums.SmsBusinessType;
 import com.welab.wefe.common.exception.StatusCodeWithException;
 import com.welab.wefe.common.http.HttpRequest;
 import com.welab.wefe.common.http.HttpResponse;
@@ -339,6 +340,50 @@ public class UnionService extends AbstractService {
         return data.toJavaObject(DataSetOutputModel.class);
     }
 
+    public void sendVerificationCode(String mobile, SmsBusinessType smsBusinessType) throws StatusCodeWithException {
+        if (!StringUtil.checkPhoneNumber(mobile)) {
+            throw new StatusCodeWithException("非法的手机号", StatusCode.PARAMETER_VALUE_INVALID);
+        }
+        JObject params = JObject.create()
+                .append("mobile", mobile)
+                .append("smsBusinessType", smsBusinessType);
+        try {
+            request("sms/send_verification_code", params, true);
+        } catch (StatusCodeWithException e) {
+            throw new StatusCodeWithException(getUnionOrigExceptionMsg(e), StatusCode.SYSTEM_ERROR);
+        } catch (Exception e) {
+            throw new StatusCodeWithException(e.getMessage(), StatusCode.SYSTEM_ERROR);
+        }
+    }
+
+    /**
+     * Check verification code
+     */
+    public void checkVerificationCode(String mobile, String code, SmsBusinessType smsBusinessType) throws StatusCodeWithException {
+        JObject params = JObject.create()
+                .append("mobile", mobile)
+                .append("code", code)
+                .append("smsBusinessType", smsBusinessType);
+        try {
+            request("sms/check_verification_code", params, true);
+        } catch (StatusCodeWithException e) {
+            throw new StatusCodeWithException(getUnionOrigExceptionMsg(e), StatusCode.SYSTEM_ERROR);
+        } catch (Exception e) {
+            throw new StatusCodeWithException(e.getMessage(), StatusCode.SYSTEM_ERROR);
+        }
+    }
+
+    private String getUnionOrigExceptionMsg(StatusCodeWithException e) {
+        String errorMsg = e.getMessage();
+        if (StringUtil.isNotEmpty(errorMsg)) {
+            int index = errorMsg.indexOf("：");
+            if (index != -1) {
+                errorMsg = errorMsg.substring(index + 1);
+            }
+        }
+        return errorMsg;
+    }
+
     private JSONObject request(String api, JSONObject params) throws StatusCodeWithException {
         return request(api, params, true);
     }
diff --git a/board/board-service/src/main/java/com/welab/wefe/board/service/service/ProjectFlowService.java b/board/board-service/src/main/java/com/welab/wefe/board/service/service/ProjectFlowService.java
index ea5b9be446d798299d16341e43085dbc8a9b586d..c067d1c3969cd16a054a0ef6d7e7f47b503a3ec8 100644
--- a/board/board-service/src/main/java/com/welab/wefe/board/service/service/ProjectFlowService.java
+++ b/board/board-service/src/main/java/com/welab/wefe/board/service/service/ProjectFlowService.java
@@ -154,6 +154,7 @@ public class ProjectFlowService extends AbstractService {
         flow.setFlowDesc(input.getDesc());
         flow.setFlowStatus(ProjectFlowStatus.editing);
         flow.setMyRole(input.fromGateway() ? project.getMyRole() : JobMemberRole.promoter);
+        flow.setCreatorMemberId(input.fromGateway() ? input.callerMemberInfo.getMemberId() : CacheObjects.getMemberId());
 
         if (StringUtils.isNotBlank(input.getTemplateId())) {
             FlowTemplateMySqlModel template = flowTemplateService.findById(input.getTemplateId());
@@ -429,6 +430,7 @@ public class ProjectFlowService extends AbstractService {
         targetProjectFlow.setFlowStatus(ProjectFlowStatus.editing);
         targetProjectFlow.setCreatedTime(new Date());
         targetProjectFlow.setCreatedBy(input);
+        targetProjectFlow.setCreatorMemberId(sourceProjectFlow.getCreatorMemberId());
         projectFlowRepo.save(targetProjectFlow);
 
         for (ProjectFlowNodeOutputModel sourceProjectFlowNode : sourceProjectFlowNodeList) {
diff --git a/board/board-service/src/main/java/com/welab/wefe/board/service/service/account/AccountService.java b/board/board-service/src/main/java/com/welab/wefe/board/service/service/account/AccountService.java
index ef80694ebe7d9fbee24b42b5d4b55fe11e221df2..6c732c6e271c5d0e1850b7affb05e6aea6ebe275 100644
--- a/board/board-service/src/main/java/com/welab/wefe/board/service/service/account/AccountService.java
+++ b/board/board-service/src/main/java/com/welab/wefe/board/service/service/account/AccountService.java
@@ -1,12 +1,12 @@
 /**
  * Copyright 2021 Tianmian Tech. All Rights Reserved.
- * 
+ *
  * Licensed under the Apache License, Version 2.0 (the "License");
  * you may not use this file except in compliance with the License.
  * You may obtain a copy of the License at
- * 
+ *
  *     http://www.apache.org/licenses/LICENSE-2.0
- * 
+ *
  * Unless required by applicable law or agreed to in writing, software
  * distributed under the License is distributed on an "AS IS" BASIS,
  * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
@@ -24,6 +24,7 @@ import com.welab.wefe.board.service.dto.base.PagingOutput;
 import com.welab.wefe.board.service.dto.entity.AccountOutputModel;
 import com.welab.wefe.board.service.dto.vo.AccountInputModel;
 import com.welab.wefe.board.service.dto.vo.OnlineAccountOutput;
+import com.welab.wefe.board.service.sdk.UnionService;
 import com.welab.wefe.board.service.service.AbstractService;
 import com.welab.wefe.board.service.service.CacheObjects;
 import com.welab.wefe.board.service.service.GatewayService;
@@ -31,10 +32,7 @@ import com.welab.wefe.board.service.service.WebSocketServer;
 import com.welab.wefe.board.service.service.globalconfig.GlobalConfigService;
 import com.welab.wefe.common.StatusCode;
 import com.welab.wefe.common.data.mysql.Where;
-import com.welab.wefe.common.enums.AuditStatus;
-import com.welab.wefe.common.enums.BoardUserSource;
-import com.welab.wefe.common.enums.JobMemberRole;
-import com.welab.wefe.common.enums.OrderBy;
+import com.welab.wefe.common.enums.*;
 import com.welab.wefe.common.exception.StatusCodeWithException;
 import com.welab.wefe.common.util.*;
 import com.welab.wefe.common.web.CurrentAccount;
@@ -66,6 +64,9 @@ public class AccountService extends AbstractService {
     @Autowired
     private GlobalConfigService globalConfigService;
 
+    @Autowired
+    private UnionService unionService;
+
     /**
      * Paging query account
      */
@@ -467,4 +468,33 @@ public class AccountService extends AbstractService {
         // Cancel the super administrator privileges of the current account
         accountRepository.cancelSuperAdmin(CurrentAccount.id());
     }
+
+    public void forgetPassword(ForgetPasswordApi.Input input) throws StatusCodeWithException {
+        if (StringUtil.isEmpty(input.getPhoneNumber())) {
+            throw new StatusCodeWithException("手机号不能为空。", StatusCode.PARAMETER_VALUE_INVALID);
+        }
+        if (StringUtil.isEmpty(input.getPassword())) {
+            throw new StatusCodeWithException("密码不能为空。", StatusCode.PARAMETER_VALUE_INVALID);
+        }
+        if (StringUtil.isEmpty(input.getSmsVerificationCode())) {
+            throw new StatusCodeWithException("短信验证码不能为空。", StatusCode.PARAMETER_VALUE_INVALID);
+        }
+
+        AccountMySqlModel model = accountRepository.findOne("phoneNumber", input.getPhoneNumber(), AccountMySqlModel.class);
+        // phone number error
+        if (model == null) {
+            throw new StatusCodeWithException("手机号错误，该用户不存在。", StatusCode.PARAMETER_VALUE_INVALID);
+        }
+        if (!model.getEnable()) {
+            throw new StatusCodeWithException("用户被禁用，请联系管理员。", StatusCode.PERMISSION_DENIED);
+        }
+
+        unionService.checkVerificationCode(input.getPhoneNumber(), input.getSmsVerificationCode(), SmsBusinessType.AccountForgetPasswordVerificationCode);
+
+        // Regenerate salt
+        String salt = createRandomSalt();
+        model.setSalt(salt);
+        model.setPassword(Sha1.of(input.getPassword() + salt));
+        accountRepository.save(model);
+    }
 }
diff --git a/board/board-website/src/components/Common/TitleNavigator.vue b/board/board-website/src/components/Common/TitleNavigator.vue
index bc5cc3beb99160cd045dd3185fc29008c30cadf1..5462566ca73dc0fc593f4c5aac6546625fce365f 100644
--- a/board/board-website/src/components/Common/TitleNavigator.vue
+++ b/board/board-website/src/components/Common/TitleNavigator.vue
@@ -6,7 +6,6 @@
         >
             <el-link
                 :type="item.highlight ? 'primary' : 'default'"
-                href="javascript:;"
                 @click="jumpto(item)"
             >{{ item.title }}</el-link>
         </li>
diff --git a/board/board-website/src/components/views/flow-status-tag.vue b/board/board-website/src/components/views/flow-status-tag.vue
index 1ed40607c37c37c7db49cbfce7e1244161d0827f..769b8d9c504209b337c149c36f2eb83b4bff4754 100644
--- a/board/board-website/src/components/views/flow-status-tag.vue
+++ b/board/board-website/src/components/views/flow-status-tag.vue
@@ -43,6 +43,11 @@
                     title:  'wait_stop',
                     effect: 'dark',
                 },
+                wait_run: {
+                    type:   'warning',
+                    title:  'wait_run',
+                    effect: 'dark',
+                },
                 wait_success: {
                     type:   'success',
                     title:  'wait_success',
diff --git a/board/board-website/src/store/modules/base.js b/board/board-website/src/store/modules/base.js
index 7613905e3d46c54a31a8445113b20e690ea8018b..b5f9e5deeab9c873acb733aaced290feea13a807 100644
--- a/board/board-website/src/store/modules/base.js
+++ b/board/board-website/src/store/modules/base.js
@@ -1,4 +1,3 @@
-
 function setStorage () {
     /* let keepAlive = localStorage.getItem(KEEPALIVE);
 
@@ -58,7 +57,7 @@ export default _ => {
         },
         'UPDATE_USERINFO' (state, data) {
             state.userInfo = data;
-            setStorage().setItem(USERINFO, JSON.stringify(data));
+            setStorage().setItem(USERINFO, data ? JSON.stringify(data) : '');
         },
         // update tag list
         'UPDATE_TAGSLIST' (state, list) {
diff --git a/board/board-website/src/views/sign/find-password.vue b/board/board-website/src/views/sign/find-password.vue
index a842b3f27d0303cc343a6e4bab3d5124bd0877a3..10daba5b3e5a976330b0d5bab05fe8ef4484ebbb 100644
--- a/board/board-website/src/views/sign/find-password.vue
+++ b/board/board-website/src/views/sign/find-password.vue
@@ -1,14 +1,14 @@
 <template>
-    <div class="page">
+    <div class="full-page">
         <div class="sign-box">
             <div class="logo">
                 <img src="@assets/images/x-logo.png">
             </div>
-            <h2 class="sign-title">找回密码</h2>
+            <h2 class="sign-title mt30">找回密码</h2>
             <el-divider />
             <el-form
                 ref="sign-form"
-                v-model="form"
+                :model="form"
                 inline-message
                 @submit.prevent
             >
@@ -19,31 +19,66 @@
                 >
                     <el-input
                         v-model="form.phone"
-                        placeholder="注册时的手机号码"
                         maxlength="11"
                         type="tel"
                         clearable
                     />
                 </el-form-item>
                 <el-form-item
-                    label="注册时的邮箱"
-                    prop="email"
-                    :rules="emailRules"
+                    label="短信验证码"
+                    :rules="codeRules"
                 >
                     <el-input
-                        v-model="form.email"
-                        placeholder="注册时的邮箱"
-                        maxlength="60"
-                        type="text"
+                        v-model="form.smsCode"
+                        class="form-code"
+                        maxlength="6"
+                        clearable
+                    >
+                        <template v-slot:append>
+                            <el-button
+                                type="primary"
+                                class="smsCount text-c"
+                                :disabled="form.phone.length !== 11 || smsCount < 121"
+                                @click="getSmsCode"
+                            >
+                                {{ smsCount > 120 ? '发送验证码' : `${smsCount}秒后重发` }}
+                            </el-button>
+                        </template>
+                    </el-input>
+                </el-form-item>
+                <el-form-item
+                    label="新密码"
+                    prop="password"
+                    :rules="passwordRules"
+                >
+                    <el-input
+                        v-model="form.password"
+                        type="password"
+                        maxlength="30"
+                        clearable
+                    />
+                </el-form-item>
+                <el-form-item
+                    label="确认新密码"
+                    prop="passwordAgain"
+                    :rules="passwordAgain"
+                    clearable
+                >
+                    <el-input
+                        v-model="form.passwordAgain"
+                        placeholder="再次输入密码"
+                        type="password"
+                        maxlength="30"
                         clearable
                     />
                 </el-form-item>
                 <el-divider />
                 <div class="sign-action">
-                    <router-link :to="{name: 'login'}">立即登录</router-link>
+                    <router-link class="float-left" :to="{name: 'login'}">立即登录</router-link>
                     <el-button
+                        v-loading="submitting"
+                        style="width:80px;"
                         type="primary"
-                        class="ml10"
                         @click="submit"
                     >
                         提交
@@ -55,13 +90,19 @@
 </template>
 
 <script>
+    import md5 from 'js-md5';
+    import { PASSWORDREG } from '@js/const/reg';
+
     export default {
         data() {
             return {
                 form: {
-                    old_password: '',
-                    new_password: '',
+                    phone:         '',
+                    smsCode:       '',
+                    password:      '',
+                    passwordAgain: '',
                 },
+                smsCount:   121,
                 phoneRules: [
                     { required: true, message: '请输入你的手机号' },
                     {
@@ -75,37 +116,108 @@
                         trigger: 'blur',
                     },
                 ],
+                codeRules: [
+                    { required: true, message: '请输入短信验证码' },
+                ],
                 passwordRules: [
-                    { required: true, message: '请输入你的用户名' },
-                    { min: 4, message: '用户名最少4位' },
+                    {
+                        required: true,
+                        message:  '请输入你的密码',
+                    },
+                    {
+                        validator: this.passwordType,
+                        message:   '密码至少8位, 需包含数字,字母,特殊字符任意组合',
+                        trigger:   'blur',
+                    },
                 ],
-                emailRules: [
-                    { required: true, message: '请输入注册时的邮箱' },
+                passwordAgain: [
+                    {
+                        required: true,
+                        message:  '请再次输入密码',
+                        trigger:  'blur',
+                    },
+                    {
+                        min:     8,
+                        message: '密码至少8位',
+                        trigger: 'blur',
+                    },
+                    {
+                        validator: this.passwordCheck,
+                        message:   '两次密码不一致',
+                        trigger:   'blur',
+                    },
                 ],
+                submitting: false,
             };
         },
         methods: {
+            passwordType(rule, value, callback) {
+                if (PASSWORDREG.test(value)) {
+                    callback();
+                } else {
+                    callback(false);
+                }
+            },
+            passwordCheck(rule, value, callback) {
+                if (value === this.form.password) {
+                    callback();
+                } else {
+                    callback(false);
+                }
+            },
+            async getSmsCode(event) {
+                const { code } = await this.$http.post({
+                    url:  '/union/send_forget_password_sms_code',
+                    data: {
+                        phoneNumber: this.form.phone,
+                    },
+                });
+
+                if(code === 0) {
+                    this.smsCount--;
+                    const timer = setInterval(() => {
+                        this.smsCount--;
+                        if (this.smsCount < 0) {
+                            clearInterval(timer);
+                            this.smsCount = 121;
+                        }
+                    }, 1000);
+                }
+            },
             submit() {
+                if (this.submitting) return;
+
+                this.submitting = true;
                 this.$refs['sign-form'].validate(async valid => {
                     if(valid) {
-                        const { code, message } = await this.$http.post({
-                            url:  '/account/update_password',
-                            data: this.form,
+                        const password = [
+                            this.form.phone,
+                            this.form.password,
+                            this.form.phone,
+                            this.form.phone.substr(0, 3),
+                            this.form.password.substr(this.form.password.length - 3),
+                        ].join('');
+                        const { code } = await this.$http.post({
+                            url:  '/account/forget_password',
+                            data: {
+                                phoneNumber:         this.form.phone,
+                                smsVerificationCode: this.form.smsCode,
+                                password:            md5(password),
+                            },
                         });
 
                         if(code === 0) {
                             this.$message.success('密码更新成功! 请重新登录!');
-                            this.$store.commit('UPDATE_USERINFO', {});
+                            this.$store.commit('UPDATE_USERINFO', null);
 
                             this.$router.replace({
                                 name: 'login',
                             });
-                        } else {
-                            this.$message.error(message);
                         }
                     } else {
                         this.$message.error(valid.message);
                     }
+                    this.submitting = false;
                 });
             },
         },
@@ -114,4 +226,22 @@
 
 <style lang="scss" scoped>
     @import './sign.scss';
+
+    .full-page {
+        height:100vh;
+        background: #fff;
+    }
+    .el-form-item{
+        .smsCount{
+            width: 106px;
+            padding-left:27px;
+            line-height: 28px;
+            background-color: var(--el-color-primary);
+            color:#fff;
+            &.is-disabled{
+                background: none;
+                color: var(--el-button-disabled-font-color);
+            }
+        }
+    }
 </style>
diff --git a/board/board-website/src/views/sign/login.vue b/board/board-website/src/views/sign/login.vue
index eb801e6bbb4a6c15db4bc78da7a9f3bdfd9a78ee..b223b2a18005f74c862dbda6222d931cb59691ce 100644
--- a/board/board-website/src/views/sign/login.vue
+++ b/board/board-website/src/views/sign/login.vue
@@ -106,12 +106,6 @@
                             保持登录
                         </el-checkbox> -->
                         <div class="sign-action">
-                            <!-- <router-link
-                            :to="{name: 'find-password'}"
-                            class="mr20"
-                        >
-                            忘记密码
-                        </router-link> -->
                             <el-button
                                 type="primary"
                                 class="login-btn"
@@ -123,6 +117,12 @@
                             </el-button>
                         </div>
                         <h4 class="text-r f14 mt20">
+                            <router-link
+                                :to="{name: 'find-password'}"
+                                class="mr20 float-left"
+                            >
+                                忘记密码?
+                            </router-link>
                             还没有账号?
                             <router-link :to="{ name: 'register', query: { redirect: $route.query.redirect } }">
                                 立即注册
@@ -242,7 +242,7 @@
                                 });
                             } else {
                                 this.$store.commit('SYSTEM_INITED', false);
-                                this.$store.commit('UPDATE_USERINFO', {});
+                                this.$store.commit('UPDATE_USERINFO', null);
                                 this.$message.error('请重试');
                             }
                         } else {
diff --git a/board/board-website/src/views/sign/register.vue b/board/board-website/src/views/sign/register.vue
index cf91869ce5cc4fa7616cbe6532f715a75f45581d..d7155e42cc9b303b950b70894ade840062e51058 100644
--- a/board/board-website/src/views/sign/register.vue
+++ b/board/board-website/src/views/sign/register.vue
@@ -68,7 +68,6 @@
                         v-model="form.password"
                         placeholder="密码"
                         type="password"
-                        id="password"
                         maxlength="30"
                         clearable
                     />
@@ -299,8 +298,8 @@
                     } else {
                         this.getImgCode();
                     }
+                    this.submitting = false;
                 });
-                this.submitting = false;
             },
         },
     };
diff --git a/board/board-website/src/views/teamwork/components/flow-list.vue b/board/board-website/src/views/teamwork/components/flow-list.vue
index 7c812be9cc9166ad9ddfd7d970cb2276b16fa6d1..86ae06da436c7aa673c0ee5c3287bca7d0de4daf 100644
--- a/board/board-website/src/views/teamwork/components/flow-list.vue
+++ b/board/board-website/src/views/teamwork/components/flow-list.vue
@@ -57,7 +57,6 @@
                 </template>
             </el-table-column>
             <el-table-column
-                v-if="form.isPromoter"
                 label="创建者"
                 prop="creator_nickname"
             />
@@ -351,6 +350,9 @@
                 if(code === 0) {
                     this.pagination.total = data.total || 0;
                     if(data.list.length) {
+                        data.list.forEach(item => {
+                            item.creator_nickname = item.creator_nickname || item.creator_member_name;
+                        });
                         this.list = data.list;
                         this.afterTableRender();
                     }
diff --git a/common/java/common-data-mongodb/src/main/java/com/welab/wefe/common/data/mongodb/constant/FlowLimitStrategyTypeEnum.java b/common/java/common-data-mongodb/src/main/java/com/welab/wefe/common/data/mongodb/constant/FlowLimitStrategyTypeEnum.java
new file mode 100644
index 0000000000000000000000000000000000000000..e9ee07a560d89e7a3c8e28ea26597bfc3d9dcac2
--- /dev/null
+++ b/common/java/common-data-mongodb/src/main/java/com/welab/wefe/common/data/mongodb/constant/FlowLimitStrategyTypeEnum.java
@@ -0,0 +1,27 @@
+/**
+ * Copyright 2021 Tianmian Tech. All Rights Reserved.
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *     http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */
+
+package com.welab.wefe.common.data.mongodb.constant;
+
+/**
+ * @author aaron.li
+ * @date 2021/11/9 10:25
+ **/
+public enum FlowLimitStrategyTypeEnum {
+
+    IP,
+    Mobile;
+}
diff --git a/common/java/common-data-mongodb/src/main/java/com/welab/wefe/common/data/mongodb/constant/MongodbTable.java b/common/java/common-data-mongodb/src/main/java/com/welab/wefe/common/data/mongodb/constant/MongodbTable.java
index 50ea5ae7a0484029cc9b7ef6dfc4bf6166af82c9..974cf0d63e3cf55acace5935c46dfbfc86aefc6f 100644
--- a/common/java/common-data-mongodb/src/main/java/com/welab/wefe/common/data/mongodb/constant/MongodbTable.java
+++ b/common/java/common-data-mongodb/src/main/java/com/welab/wefe/common/data/mongodb/constant/MongodbTable.java
@@ -21,6 +21,10 @@ package com.welab.wefe.common.data.mongodb.constant;
  **/
 public class MongodbTable {
 
+    public static final class Common {
+        public static final String FLOW_LIMIT = "FlowLimit";
+    }
+
     public static final class Union {
         public static final String DATASET = "DataSet";
         public static final String DATASET_MEMBER_PERMISSION = "DataSetMemberPermission";
@@ -30,4 +34,9 @@ public class MongodbTable {
         public static final String BLOCK_SYNC_DETAIL_INFO = "BlockSyncDetailInfo";
         public static final String BLOCK_SYNC_CONTRACT_HEIGHT = "BlockSyncContractHeight";
     }
+
+    public static final class Sms {
+        public static final String VERIFICATION_CODE = "SmsVerificationCode";
+        public static final String DETAIL_INFO = "SmsDetailInfo";
+    }
 }
diff --git a/common/java/common-data-mongodb/src/main/java/com/welab/wefe/common/data/mongodb/constant/SmsBusinessType.java b/common/java/common-data-mongodb/src/main/java/com/welab/wefe/common/data/mongodb/constant/SmsBusinessType.java
new file mode 100644
index 0000000000000000000000000000000000000000..7fe0b9f9f775195651ff25f729b96b9efb0a17b0
--- /dev/null
+++ b/common/java/common-data-mongodb/src/main/java/com/welab/wefe/common/data/mongodb/constant/SmsBusinessType.java
@@ -0,0 +1,26 @@
+/**
+ * Copyright 2021 Tianmian Tech. All Rights Reserved.
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *     http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */
+
+package com.welab.wefe.common.data.mongodb.constant;
+
+/**
+ * @author aaron.li
+ * @date 2021/11/9 09:22
+ **/
+public enum SmsBusinessType {
+    MemberRegisterVerificationCode,
+    AccountForgetPasswordVerificationCode
+}
diff --git a/common/java/common-data-mongodb/src/main/java/com/welab/wefe/common/data/mongodb/constant/SmsSupplierEnum.java b/common/java/common-data-mongodb/src/main/java/com/welab/wefe/common/data/mongodb/constant/SmsSupplierEnum.java
new file mode 100644
index 0000000000000000000000000000000000000000..ee1711c2ee5c76a449e4b138192926ce63625801
--- /dev/null
+++ b/common/java/common-data-mongodb/src/main/java/com/welab/wefe/common/data/mongodb/constant/SmsSupplierEnum.java
@@ -0,0 +1,22 @@
+/**
+ * Copyright 2021 Tianmian Tech. All Rights Reserved.
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *     http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */
+
+package com.welab.wefe.common.data.mongodb.constant;
+
+public enum SmsSupplierEnum {
+
+    Aliyun;
+}
diff --git a/common/java/common-data-mongodb/src/main/java/com/welab/wefe/common/data/mongodb/entity/common/FlowLimit.java b/common/java/common-data-mongodb/src/main/java/com/welab/wefe/common/data/mongodb/entity/common/FlowLimit.java
new file mode 100644
index 0000000000000000000000000000000000000000..4f01aacbbcffa511cc1d760541c06b6f0d56e809
--- /dev/null
+++ b/common/java/common-data-mongodb/src/main/java/com/welab/wefe/common/data/mongodb/entity/common/FlowLimit.java
@@ -0,0 +1,128 @@
+/**
+ * Copyright 2021 Tianmian Tech. All Rights Reserved.
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *     http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */
+
+package com.welab.wefe.common.data.mongodb.entity.common;
+
+import com.welab.wefe.common.data.mongodb.constant.FlowLimitStrategyTypeEnum;
+import com.welab.wefe.common.data.mongodb.constant.MongodbTable;
+import com.welab.wefe.common.data.mongodb.entity.AbstractNormalMongoModel;
+import org.springframework.data.mongodb.core.mapping.Document;
+
+/**
+ * @author aaron.li
+ * @date 2021/10/22 17:16
+ **/
+@Document(collection = MongodbTable.Common.FLOW_LIMIT)
+public class FlowLimit extends AbstractNormalMongoModel {
+
+    /**
+     * The access record key must be unique
+     */
+    private String key;
+    /**
+     * Number of visits
+     */
+    private int count;
+    /**
+     * api path
+     */
+    private String path;
+    /**
+     * flow limit strategy type
+     */
+    private FlowLimitStrategyTypeEnum strategyType;
+    /**
+     * flow limit strategy value
+     */
+    private String strategyValue;
+    /**
+     * Access timing time in milliseconds
+     */
+    private long startVisitTime;
+    /**
+     * Last access time in milliseconds
+     */
+    private long latestVisitTime;
+    /**
+     * The active time is the effective time. If it exceeds this time, it can be judged as an inactive record,
+     * which can be cleared from the database
+     */
+    private long activeTime;
+
+    public String getKey() {
+        return key;
+    }
+
+    public void setKey(String key) {
+        this.key = key;
+    }
+
+    public int getCount() {
+        return count;
+    }
+
+    public void setCount(int count) {
+        this.count = count;
+    }
+
+    public long getStartVisitTime() {
+        return startVisitTime;
+    }
+
+    public void setStartVisitTime(long startVisitTime) {
+        this.startVisitTime = startVisitTime;
+    }
+
+    public long getLatestVisitTime() {
+        return latestVisitTime;
+    }
+
+    public void setLatestVisitTime(long latestVisitTime) {
+        this.latestVisitTime = latestVisitTime;
+    }
+
+    public FlowLimitStrategyTypeEnum getStrategyType() {
+        return strategyType;
+    }
+
+    public void setStrategyType(FlowLimitStrategyTypeEnum strategyType) {
+        this.strategyType = strategyType;
+    }
+
+    public long getActiveTime() {
+        return activeTime;
+    }
+
+    public void setActiveTime(long activeTime) {
+        this.activeTime = activeTime;
+    }
+
+    public String getStrategyValue() {
+        return strategyValue;
+    }
+
+    public void setStrategyValue(String strategyValue) {
+        this.strategyValue = strategyValue;
+    }
+
+    public String getPath() {
+        return path;
+    }
+
+    public void setPath(String path) {
+        this.path = path;
+    }
+}
diff --git a/common/java/common-data-mongodb/src/main/java/com/welab/wefe/common/data/mongodb/entity/sms/SmsDetailInfo.java b/common/java/common-data-mongodb/src/main/java/com/welab/wefe/common/data/mongodb/entity/sms/SmsDetailInfo.java
new file mode 100644
index 0000000000000000000000000000000000000000..b9dee794240618428c4bb6500cf8a6bfa78561cf
--- /dev/null
+++ b/common/java/common-data-mongodb/src/main/java/com/welab/wefe/common/data/mongodb/entity/sms/SmsDetailInfo.java
@@ -0,0 +1,103 @@
+/**
+ * Copyright 2021 Tianmian Tech. All Rights Reserved.
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *     http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */
+
+package com.welab.wefe.common.data.mongodb.entity.sms;
+
+import com.welab.wefe.common.data.mongodb.constant.MongodbTable;
+import com.welab.wefe.common.data.mongodb.constant.SmsBusinessType;
+import com.welab.wefe.common.data.mongodb.constant.SmsSupplierEnum;
+import com.welab.wefe.common.data.mongodb.entity.AbstractNormalMongoModel;
+import org.springframework.data.mongodb.core.mapping.Document;
+
+/**
+ * @author aaron.li
+ * @date 2021/10/22 11:20
+ */
+@Document(collection = MongodbTable.Sms.DETAIL_INFO)
+public class SmsDetailInfo extends AbstractNormalMongoModel {
+    private String bizId;
+    private String reqId;
+    private String mobile;
+    private String reqContent;
+    private SmsSupplierEnum supplier;
+    private boolean success;
+    private String respContent;
+    private SmsBusinessType businessType;
+
+    public String getBizId() {
+        return bizId;
+    }
+
+    public void setBizId(String bizId) {
+        this.bizId = bizId;
+    }
+
+    public String getMobile() {
+        return mobile;
+    }
+
+    public void setMobile(String mobile) {
+        this.mobile = mobile;
+    }
+
+    public String getReqContent() {
+        return reqContent;
+    }
+
+    public void setReqContent(String reqContent) {
+        this.reqContent = reqContent;
+    }
+
+    public String getReqId() {
+        return reqId;
+    }
+
+    public void setReqId(String reqId) {
+        this.reqId = reqId;
+    }
+
+    public SmsSupplierEnum getSupplier() {
+        return supplier;
+    }
+
+    public void setSupplier(SmsSupplierEnum supplier) {
+        this.supplier = supplier;
+    }
+
+    public boolean isSuccess() {
+        return success;
+    }
+
+    public void setSuccess(boolean success) {
+        this.success = success;
+    }
+
+    public String getRespContent() {
+        return respContent;
+    }
+
+    public void setRespContent(String respContent) {
+        this.respContent = respContent;
+    }
+
+    public SmsBusinessType getBusinessType() {
+        return businessType;
+    }
+
+    public void setBusinessType(SmsBusinessType businessType) {
+        this.businessType = businessType;
+    }
+}
diff --git a/common/java/common-data-mongodb/src/main/java/com/welab/wefe/common/data/mongodb/entity/sms/SmsVerificationCode.java b/common/java/common-data-mongodb/src/main/java/com/welab/wefe/common/data/mongodb/entity/sms/SmsVerificationCode.java
new file mode 100644
index 0000000000000000000000000000000000000000..997f565f6401ee1365ba5e8e1c9fa75ee92bb7a3
--- /dev/null
+++ b/common/java/common-data-mongodb/src/main/java/com/welab/wefe/common/data/mongodb/entity/sms/SmsVerificationCode.java
@@ -0,0 +1,53 @@
+/**
+ * Copyright 2021 Tianmian Tech. All Rights Reserved.
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *     http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */
+
+package com.welab.wefe.common.data.mongodb.entity.sms;
+
+import com.welab.wefe.common.data.mongodb.constant.MongodbTable;
+import com.welab.wefe.common.data.mongodb.constant.SmsBusinessType;
+import com.welab.wefe.common.data.mongodb.entity.AbstractNormalMongoModel;
+import org.springframework.data.mongodb.core.mapping.Document;
+
+@Document(collection = MongodbTable.Sms.VERIFICATION_CODE)
+public class SmsVerificationCode extends AbstractNormalMongoModel {
+    private String mobile;
+    private String code;
+    private SmsBusinessType businessType;
+
+    public String getMobile() {
+        return mobile;
+    }
+
+    public void setMobile(String mobile) {
+        this.mobile = mobile;
+    }
+
+    public String getCode() {
+        return code;
+    }
+
+    public void setCode(String code) {
+        this.code = code;
+    }
+
+    public SmsBusinessType getBusinessType() {
+        return businessType;
+    }
+
+    public void setBusinessType(SmsBusinessType businessType) {
+        this.businessType = businessType;
+    }
+}
diff --git a/common/java/common-data-mongodb/src/main/java/com/welab/wefe/common/data/mongodb/repo/FlowLimitRepo.java b/common/java/common-data-mongodb/src/main/java/com/welab/wefe/common/data/mongodb/repo/FlowLimitRepo.java
new file mode 100644
index 0000000000000000000000000000000000000000..bc9ab0eb664b9b62f367ed94c2815fd713d3f1c5
--- /dev/null
+++ b/common/java/common-data-mongodb/src/main/java/com/welab/wefe/common/data/mongodb/repo/FlowLimitRepo.java
@@ -0,0 +1,51 @@
+/**
+ * Copyright 2021 Tianmian Tech. All Rights Reserved.
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *     http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */
+
+
+package com.welab.wefe.common.data.mongodb.repo;
+
+import com.welab.wefe.common.data.mongodb.entity.common.FlowLimit;
+import com.welab.wefe.common.data.mongodb.util.QueryBuilder;
+import org.springframework.data.mongodb.core.query.Query;
+import org.springframework.stereotype.Repository;
+
+import java.util.List;
+
+/**
+ * @author aaron.li
+ * @date 2021/10/22 17:41
+ **/
+@Repository
+public class FlowLimitRepo extends AbstractMongoRepo {
+
+    public FlowLimit findByKey(String key) {
+        Query query = new QueryBuilder().append("key", key).build();
+        return mongoTemplate.findOne(query, FlowLimit.class);
+    }
+
+    public void save(FlowLimit flowLimit) {
+        mongoTemplate.save(flowLimit);
+    }
+
+    public void removeByKey(String key) {
+        Query query = new QueryBuilder().append("key", key).build();
+        mongoTemplate.remove(query, FlowLimit.class);
+    }
+
+    public List<FlowLimit> findAll() {
+        return mongoTemplate.findAll(FlowLimit.class);
+    }
+}
diff --git a/common/java/common-data-mongodb/src/main/java/com/welab/wefe/common/data/mongodb/repo/SmsDetailInfoReop.java b/common/java/common-data-mongodb/src/main/java/com/welab/wefe/common/data/mongodb/repo/SmsDetailInfoReop.java
new file mode 100644
index 0000000000000000000000000000000000000000..dccf5fd8560cde8d77cfeccd45b89e2ae4a5fa81
--- /dev/null
+++ b/common/java/common-data-mongodb/src/main/java/com/welab/wefe/common/data/mongodb/repo/SmsDetailInfoReop.java
@@ -0,0 +1,32 @@
+/**
+ * Copyright 2021 Tianmian Tech. All Rights Reserved.
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *     http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */
+
+package com.welab.wefe.common.data.mongodb.repo;
+
+import com.welab.wefe.common.data.mongodb.entity.sms.SmsDetailInfo;
+import org.springframework.stereotype.Repository;
+
+/**
+ * @author aaron.li
+ * @date 2021/10/22 11:20
+ **/
+@Repository
+public class SmsDetailInfoReop extends AbstractMongoRepo {
+
+    public void save(SmsDetailInfo smsDetailInfo) {
+        mongoTemplate.save(smsDetailInfo);
+    }
+}
diff --git a/common/java/common-data-mongodb/src/main/java/com/welab/wefe/common/data/mongodb/repo/SmsVerificationCodeReop.java b/common/java/common-data-mongodb/src/main/java/com/welab/wefe/common/data/mongodb/repo/SmsVerificationCodeReop.java
new file mode 100644
index 0000000000000000000000000000000000000000..6818fc03352c51258efb0a36f6935293480b6e2d
--- /dev/null
+++ b/common/java/common-data-mongodb/src/main/java/com/welab/wefe/common/data/mongodb/repo/SmsVerificationCodeReop.java
@@ -0,0 +1,49 @@
+/**
+ * Copyright 2021 Tianmian Tech. All Rights Reserved.
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *     http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */
+
+package com.welab.wefe.common.data.mongodb.repo;
+
+import com.welab.wefe.common.data.mongodb.constant.SmsBusinessType;
+import com.welab.wefe.common.data.mongodb.entity.sms.SmsVerificationCode;
+import com.welab.wefe.common.data.mongodb.util.QueryBuilder;
+import org.springframework.data.mongodb.core.query.Query;
+import org.springframework.stereotype.Repository;
+
+import java.util.List;
+
+/**
+ * @author aaron.li
+ * @date 2021/10/22 09:38
+ **/
+@Repository
+public class SmsVerificationCodeReop extends AbstractMongoRepo {
+
+    public void saveOrUpdate(SmsVerificationCode smsVerificationCode) {
+        SmsVerificationCode dbResult = find(smsVerificationCode.getMobile(), smsVerificationCode.getBusinessType());
+        if (null != dbResult) {
+            smsVerificationCode.setId(dbResult.getId());
+            smsVerificationCode.setCode(smsVerificationCode.getCode());
+            smsVerificationCode.setUpdateTime(System.currentTimeMillis());
+        }
+        mongoTemplate.save(smsVerificationCode);
+    }
+
+    public SmsVerificationCode find(String mobile, SmsBusinessType smsBusinessType) {
+        Query query = new QueryBuilder().append("mobile", mobile).append("businessType",smsBusinessType).sort("updateTime", false).build();
+        List<SmsVerificationCode> list = mongoTemplate.find(query, SmsVerificationCode.class);
+        return list.isEmpty() ? null : list.get(0);
+    }
+}
diff --git a/common/java/common-lang/src/main/java/com/welab/wefe/common/enums/SmsBusinessType.java b/common/java/common-lang/src/main/java/com/welab/wefe/common/enums/SmsBusinessType.java
new file mode 100644
index 0000000000000000000000000000000000000000..d5d6394f51a3c92aa51fc358ca9cb276d1f65c5b
--- /dev/null
+++ b/common/java/common-lang/src/main/java/com/welab/wefe/common/enums/SmsBusinessType.java
@@ -0,0 +1,26 @@
+/**
+ * Copyright 2021 Tianmian Tech. All Rights Reserved.
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *     http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */
+
+package com.welab.wefe.common.enums;
+
+/**
+ * @author aaron.li
+ * @date 2021/11/9 09:22
+ **/
+public enum SmsBusinessType {
+    MemberRegisterVerificationCode,
+    AccountForgetPasswordVerificationCode
+}
diff --git "a/documents/\346\225\260\346\215\256\345\272\223\350\256\276\350\256\241/board/wefe_board.sql" "b/documents/\346\225\260\346\215\256\345\272\223\350\256\276\350\256\241/board/wefe_board.sql"
index abc89b5224a55f55f366a7264cd7e8ef60f83f11..5423464d960e8499c5e0b9cc3cf413d0eebd94a8 100644
--- "a/documents/\346\225\260\346\215\256\345\272\223\350\256\276\350\256\241/board/wefe_board.sql"
+++ "b/documents/\346\225\260\346\215\256\345\272\223\350\256\276\350\256\241/board/wefe_board.sql"
@@ -522,6 +522,7 @@ CREATE TABLE `project_flow`
     `flow_name`               varchar(256) NOT NULL COMMENT '流程名称',
     `flow_desc`               text COMMENT '流程描述',
     `graph`                   longtext COMMENT '画布中编辑的图',
+    `creator_member_id`       varchar(36) COMMENT '创建此流程的成员的ID',
     PRIMARY KEY (`id`) USING BTREE,
     UNIQUE KEY `index_unique` (`flow_id`)
 ) ENGINE = InnoDB
diff --git "a/documents/\346\225\260\346\215\256\345\272\223\350\256\276\350\256\241/board/wefe_board_v2.2-v2.3.sql" "b/documents/\346\225\260\346\215\256\345\272\223\350\256\276\350\256\241/board/wefe_board_v2.2-v2.3.sql"
new file mode 100644
index 0000000000000000000000000000000000000000..5c4af76950d63dbe31c0d6bab95f5c2656999f61
--- /dev/null
+++ "b/documents/\346\225\260\346\215\256\345\272\223\350\256\276\350\256\241/board/wefe_board_v2.2-v2.3.sql"
@@ -0,0 +1,10 @@
+-- 此文件为 v2.2 升级为 v2.3 时需要执行的 sql
+-- 请大家按格式写好注释和作者
+
+
+-- ---------------------------------------
+-- 流程表增加字段
+-- author: zane.luo
+-- -------------------------------------
+ALTER TABLE project_flow
+    ADD COLUMN `creator_member_id` varchar(36) COMMENT '创建此流程的成员的ID';
\ No newline at end of file
diff --git a/release/release-control-shell/util/db.py b/release/release-control-shell/util/db.py
index 1e5dbb53ee8d377c5110d7614f0fc50ec1fd9221..492f70e242ef8e379de437b877307f836dea03af 100644
--- a/release/release-control-shell/util/db.py
+++ b/release/release-control-shell/util/db.py
@@ -1,6 +1,6 @@
 from peewee import *
 
-database = MySQLDatabase('wefe_board', **{'charset': 'utf8', 'sql_mode': 'PIPES_AS_CONCAT', 'use_unicode': True, 'host': '10.1.0.120', 'port': 3306, 'user': 'wefe', 'password': 'O*****DDx'})
+database = MySQLDatabase('wefe_board', **{'charset': 'utf8', 'sql_mode': 'PIPES_AS_CONCAT', 'use_unicode': True, 'host': '10.**.**.**', 'port': 3306, 'user': 'wefe', 'password': 'O*****DDx'})
 
 class UnknownField(object):
     def __init__(self, *_, **__): pass
diff --git a/union/union-service/pom.xml b/union/union-service/pom.xml
index 5550f1988c4b9cbc0a9061068ead2446c8f18dec..cb054c3cbc70fbc913a39ae69e3209f631c87c1e 100644
--- a/union/union-service/pom.xml
+++ b/union/union-service/pom.xml
@@ -55,6 +55,11 @@
             <version>1.0.0</version>
         </dependency>
 
+        <dependency>
+            <groupId>com.aliyun</groupId>
+            <artifactId>dysmsapi20170525</artifactId>
+            <version>2.0.5</version>
+        </dependency>
     </dependencies>
 
     <build>
diff --git a/union/union-service/src/main/java/com/welab/wefe/union/service/UnionService.java b/union/union-service/src/main/java/com/welab/wefe/union/service/UnionService.java
index 6aaa761678d72ebba49a8bdcd584d28f761bb7c8..c848e138a5dae96197729ec66cb34f7caef5c5ed 100644
--- a/union/union-service/src/main/java/com/welab/wefe/union/service/UnionService.java
+++ b/union/union-service/src/main/java/com/welab/wefe/union/service/UnionService.java
@@ -27,6 +27,8 @@ import com.welab.wefe.common.web.Launcher;
 import com.welab.wefe.common.web.config.ApiBeanNameGenerator;
 import com.welab.wefe.common.web.dto.SignedApiInput;
 import com.welab.wefe.union.service.cache.MemberActivityCache;
+import com.welab.wefe.union.service.service.flowlimit.FlowLimitByIpService;
+import com.welab.wefe.union.service.service.flowlimit.FlowLimitByMobileService;
 import org.springframework.beans.BeansException;
 import org.springframework.boot.autoconfigure.SpringBootApplication;
 import org.springframework.boot.autoconfigure.data.mongo.MongoDataAutoConfiguration;
@@ -37,9 +39,6 @@ import org.springframework.context.ApplicationContextAware;
 import org.springframework.context.annotation.ComponentScan;
 import org.springframework.scheduling.annotation.EnableScheduling;
 
-import java.util.HashMap;
-import java.util.Map;
-
 /**
  * @author Jervis
  **/
@@ -72,6 +71,8 @@ public class UnionService implements ApplicationContextAware {
                         rsaVerify(params);
                     }
                 })
+                .flowLimitByIpFunctionFunction((httpServletRequest, api, params) -> new FlowLimitByIpService(httpServletRequest, api, params).check())
+                .flowLimitByMobileFunctionFunction((httpServletRequest, api, params) -> new FlowLimitByMobileService(httpServletRequest, api, params).check())
                 .launch(UnionService.class, args);
 
     }
diff --git a/union/union-service/src/main/java/com/welab/wefe/union/service/api/sms/CheckVerificationCodeApi.java b/union/union-service/src/main/java/com/welab/wefe/union/service/api/sms/CheckVerificationCodeApi.java
new file mode 100644
index 0000000000000000000000000000000000000000..52a5ec799df77c4646e02c6d0c5cd60a77b43be1
--- /dev/null
+++ b/union/union-service/src/main/java/com/welab/wefe/union/service/api/sms/CheckVerificationCodeApi.java
@@ -0,0 +1,83 @@
+/**
+ * Copyright 2021 Tianmian Tech. All Rights Reserved.
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *     http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */
+
+package com.welab.wefe.union.service.api.sms;
+
+import com.welab.wefe.common.data.mongodb.constant.SmsBusinessType;
+import com.welab.wefe.common.exception.StatusCodeWithException;
+import com.welab.wefe.common.fieldvalidate.annotation.Check;
+import com.welab.wefe.common.web.api.base.AbstractApi;
+import com.welab.wefe.common.web.api.base.Api;
+import com.welab.wefe.common.web.api.base.FlowLimitByIp;
+import com.welab.wefe.common.web.dto.AbstractApiInput;
+import com.welab.wefe.common.web.dto.ApiResult;
+import com.welab.wefe.common.web.dto.NoneApiOutput;
+import com.welab.wefe.union.service.service.sms.SmsService;
+import org.springframework.beans.factory.annotation.Autowired;
+
+import java.io.IOException;
+
+/**
+ * @author aaron.li
+ * @date 2021/11/9 11:44
+ **/
+@Api(path = "sms/check_verification_code", name = "check sms verification code",  rsaVerify = true, login = false)
+@FlowLimitByIp(count = 20, second = 10)
+public class CheckVerificationCodeApi extends AbstractApi<CheckVerificationCodeApi.Input, NoneApiOutput> {
+    @Autowired
+    private SmsService smsService;
+
+    @Override
+    protected ApiResult<NoneApiOutput> handle(Input input) throws StatusCodeWithException, IOException {
+        smsService.checkVerificationCodeValid(input.mobile, input.code, input.smsBusinessType);
+        return success();
+    }
+
+    public static class Input extends AbstractApiInput {
+        @Check(name = "Mobile phone number check verification code", require = true)
+        private String mobile;
+
+        @Check(name = "verification code", require = true)
+        private String code;
+
+        @Check(name = "business type", require = true)
+        private SmsBusinessType smsBusinessType;
+
+        public String getMobile() {
+            return mobile;
+        }
+
+        public void setMobile(String mobile) {
+            this.mobile = mobile;
+        }
+
+        public String getCode() {
+            return code;
+        }
+
+        public void setCode(String code) {
+            this.code = code;
+        }
+
+        public SmsBusinessType getSmsBusinessType() {
+            return smsBusinessType;
+        }
+
+        public void setSmsBusinessType(SmsBusinessType smsBusinessType) {
+            this.smsBusinessType = smsBusinessType;
+        }
+    }
+}
diff --git a/union/union-service/src/main/java/com/welab/wefe/union/service/api/sms/SendVerificationCodeApi.java b/union/union-service/src/main/java/com/welab/wefe/union/service/api/sms/SendVerificationCodeApi.java
new file mode 100644
index 0000000000000000000000000000000000000000..3b44fc9dc63e59c9b0cf1d8dda99d46d6369014d
--- /dev/null
+++ b/union/union-service/src/main/java/com/welab/wefe/union/service/api/sms/SendVerificationCodeApi.java
@@ -0,0 +1,91 @@
+/**
+ * Copyright 2021 Tianmian Tech. All Rights Reserved.
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *     http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */
+
+package com.welab.wefe.union.service.api.sms;
+
+import com.welab.wefe.common.data.mongodb.constant.SmsBusinessType;
+import com.welab.wefe.common.exception.StatusCodeWithException;
+import com.welab.wefe.common.fieldvalidate.annotation.Check;
+import com.welab.wefe.common.web.api.base.AbstractApi;
+import com.welab.wefe.common.web.api.base.Api;
+import com.welab.wefe.common.web.api.base.FlowLimitByIp;
+import com.welab.wefe.common.web.api.base.FlowLimitByMobile;
+import com.welab.wefe.common.web.dto.AbstractApiInput;
+import com.welab.wefe.common.web.dto.ApiResult;
+import com.welab.wefe.union.service.service.sms.SmsService;
+import org.springframework.beans.factory.annotation.Autowired;
+
+/**
+ * send sms verification code
+ *
+ * @author aaron.li
+ * @Date 2021/10/19
+ **/
+@Api(path = "sms/send_verification_code", name = "send sms verification code",  rsaVerify = true, login = false)
+@FlowLimitByIp(count = 50, second = 24 * 60 * 60)
+@FlowLimitByMobile(count = 10, second = 24 * 60 * 60)
+public class SendVerificationCodeApi extends AbstractApi<SendVerificationCodeApi.Input, SendVerificationCodeApi.Output> {
+
+    @Autowired
+    private SmsService smsService;
+
+    @Override
+    protected ApiResult<Output> handle(Input input) throws StatusCodeWithException {
+        smsService.sendVerificationCode(input.mobile, input.smsBusinessType);
+        return success();
+    }
+
+    public static class Input extends AbstractApiInput {
+        @Check(name = "Mobile phone number receiving verification code", require = true)
+        private String mobile;
+
+        @Check(name = "business type", require = true)
+        private SmsBusinessType smsBusinessType;
+
+        public String getMobile() {
+            return mobile;
+        }
+
+        public void setMobile(String mobile) {
+            this.mobile = mobile;
+        }
+
+        public SmsBusinessType getSmsBusinessType() {
+            return smsBusinessType;
+        }
+
+        public void setSmsBusinessType(SmsBusinessType smsBusinessType) {
+            this.smsBusinessType = smsBusinessType;
+        }
+    }
+
+    public static class Output {
+
+        private String verificationCode;
+
+        public Output(String verificationCode) {
+            this.verificationCode = verificationCode;
+        }
+
+        public String getVerificationCode() {
+            return verificationCode;
+        }
+
+        public void setVerificationCode(String verificationCode) {
+            this.verificationCode = verificationCode;
+        }
+    }
+}
diff --git a/union/union-service/src/main/java/com/welab/wefe/union/service/config/ConfigProperties.java b/union/union-service/src/main/java/com/welab/wefe/union/service/config/ConfigProperties.java
index 7d0700e6cad144622a7ceb33212593deb00bba4c..bc5c126efb2d1047f56062e212981e7a79acbce8 100644
--- a/union/union-service/src/main/java/com/welab/wefe/union/service/config/ConfigProperties.java
+++ b/union/union-service/src/main/java/com/welab/wefe/union/service/config/ConfigProperties.java
@@ -45,6 +45,21 @@ public class ConfigProperties {
     @Value("${block.chain.union.group.id}")
     private String blockChainUnionGroupId;
 
+    @Value("${aliyun.access.key.id:xxx}")
+    private String aliyunAccessKeyId;
+
+    @Value("${aliyun.access.key.secret:xxx}")
+    private String aliyunAccessKeySecret;
+
+    @Value("${sms.aliyun.sign.name:xxx}")
+    private String smsAliyunSignName;
+
+    @Value("${sms.aliyun.account.forget.password.verification.code.template.code:xxx}")
+    private String smsAliyunAccountForgetPasswordVerificationCodeTemplateCode;
+
+    @Value("${sms.aliyun.member.register.verification.code.template.code:xxx}")
+    private String smsAliyunMemberRegisterVerificationCodeTemplateCode;
+
     public String getBlockChainTomlFilePath() {
         return blockChainTomlFilePath;
     }
@@ -85,4 +100,43 @@ public class ConfigProperties {
         this.blockChainUnionDataSetMemberPermissionContractName = blockChainUnionDataSetMemberPermissionContractName;
     }
 
+    public String getAliyunAccessKeyId() {
+        return aliyunAccessKeyId;
+    }
+
+    public void setAliyunAccessKeyId(String aliyunAccessKeyId) {
+        this.aliyunAccessKeyId = aliyunAccessKeyId;
+    }
+
+    public String getAliyunAccessKeySecret() {
+        return aliyunAccessKeySecret;
+    }
+
+    public void setAliyunAccessKeySecret(String aliyunAccessKeySecret) {
+        this.aliyunAccessKeySecret = aliyunAccessKeySecret;
+    }
+
+    public String getSmsAliyunSignName() {
+        return smsAliyunSignName;
+    }
+
+    public void setSmsAliyunSignName(String smsAliyunSignName) {
+        this.smsAliyunSignName = smsAliyunSignName;
+    }
+
+    public String getSmsAliyunMemberRegisterVerificationCodeTemplateCode() {
+        return smsAliyunMemberRegisterVerificationCodeTemplateCode;
+    }
+
+    public void setSmsAliyunMemberRegisterVerificationCodeTemplateCode(String smsAliyunMemberRegisterVerificationCodeTemplateCode) {
+        this.smsAliyunMemberRegisterVerificationCodeTemplateCode = smsAliyunMemberRegisterVerificationCodeTemplateCode;
+    }
+
+    public String getSmsAliyunAccountForgetPasswordVerificationCodeTemplateCode() {
+        return smsAliyunAccountForgetPasswordVerificationCodeTemplateCode;
+    }
+
+    public void setSmsAliyunAccountForgetPasswordVerificationCodeTemplateCode(String smsAliyunAccountForgetPasswordVerificationCodeTemplateCode) {
+        this.smsAliyunAccountForgetPasswordVerificationCodeTemplateCode = smsAliyunAccountForgetPasswordVerificationCodeTemplateCode;
+    }
 }
diff --git a/union/union-service/src/main/java/com/welab/wefe/union/service/listener/ClearNonActiveFlowLimitListener.java b/union/union-service/src/main/java/com/welab/wefe/union/service/listener/ClearNonActiveFlowLimitListener.java
new file mode 100644
index 0000000000000000000000000000000000000000..9eb7f51c80e8106609b2e3b25af810789305a4cb
--- /dev/null
+++ b/union/union-service/src/main/java/com/welab/wefe/union/service/listener/ClearNonActiveFlowLimitListener.java
@@ -0,0 +1,65 @@
+/**
+ * Copyright 2021 Tianmian Tech. All Rights Reserved.
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *     http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */
+
+package com.welab.wefe.union.service.listener;
+
+import cn.hutool.core.thread.ThreadUtil;
+import com.welab.wefe.common.data.mongodb.entity.common.FlowLimit;
+import com.welab.wefe.common.data.mongodb.repo.FlowLimitRepo;
+import com.welab.wefe.common.web.Launcher;
+import com.welab.wefe.union.service.UnionService;
+import org.apache.commons.collections4.CollectionUtils;
+import org.slf4j.Logger;
+import org.slf4j.LoggerFactory;
+import org.springframework.boot.context.event.ApplicationStartedEvent;
+import org.springframework.context.ApplicationListener;
+import org.springframework.stereotype.Component;
+
+import java.util.List;
+
+/**
+ * @author aaron.li
+ * @date 2021/11/9 10:53
+ **/
+@Component
+public class ClearNonActiveFlowLimitListener implements ApplicationListener<ApplicationStartedEvent> {
+    private static final Logger LOG = LoggerFactory.getLogger(ClearNonActiveFlowLimitListener.class);
+
+    @Override
+    public void onApplicationEvent(ApplicationStartedEvent applicationStartedEvent) {
+        ThreadUtil.execAsync(() -> {
+            while (true) {
+                LOG.info("ClearNonActiveFlowLimitListener start.....");
+                try {
+                    FlowLimitRepo flowLimitRepo = UnionService.CONTEXT.getBean(FlowLimitRepo.class);
+                    List<FlowLimit> flowLimitList = flowLimitRepo.findAll();
+                    if (CollectionUtils.isNotEmpty(flowLimitList)) {
+                        for (FlowLimit flowLimit : flowLimitList) {
+                            if ((System.currentTimeMillis() - flowLimit.getLatestVisitTime()) > flowLimit.getActiveTime()) {
+                                flowLimitRepo.removeByKey(flowLimit.getKey());
+                            }
+                        }
+                    }
+                    LOG.info("ClearNonActiveFlowLimitListener end.");
+                } catch (Exception e) {
+                    LOG.error("ClearNonActiveFlowLimitListener exception: ", e);
+                } finally {
+                    com.welab.wefe.common.util.ThreadUtil.sleepSeconds(10);
+                }
+            }
+        });
+    }
+}
diff --git a/union/union-service/src/main/java/com/welab/wefe/union/service/service/flowlimit/AbstractFlowLimitService.java b/union/union-service/src/main/java/com/welab/wefe/union/service/service/flowlimit/AbstractFlowLimitService.java
new file mode 100644
index 0000000000000000000000000000000000000000..82c6c25560b1696b98ef52b09c8ddbab4f74df5e
--- /dev/null
+++ b/union/union-service/src/main/java/com/welab/wefe/union/service/service/flowlimit/AbstractFlowLimitService.java
@@ -0,0 +1,149 @@
+/**
+ * Copyright 2021 Tianmian Tech. All Rights Reserved.
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *     http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */
+
+package com.welab.wefe.union.service.service.flowlimit;
+
+import com.alibaba.fastjson.JSONObject;
+import com.welab.wefe.common.StatusCode;
+import com.welab.wefe.common.data.mongodb.constant.FlowLimitStrategyTypeEnum;
+import com.welab.wefe.common.data.mongodb.entity.common.FlowLimit;
+import com.welab.wefe.common.data.mongodb.repo.FlowLimitRepo;
+import com.welab.wefe.common.exception.StatusCodeWithException;
+import com.welab.wefe.common.web.Launcher;
+import com.welab.wefe.common.web.api.base.AbstractApi;
+import com.welab.wefe.common.web.api.base.Api;
+
+import javax.servlet.http.HttpServletRequest;
+
+/**
+ * @author aaron.li
+ * @date 2021/10/22 15:38
+ **/
+public abstract class AbstractFlowLimitService {
+
+    /**
+     * Http request object
+     */
+    private HttpServletRequest httpServletRequest;
+    /**
+     * API object
+     */
+    private AbstractApi<?, ?> api;
+    /**
+     * API request parameters
+     */
+    private JSONObject params;
+
+    public AbstractFlowLimitService(HttpServletRequest httpServletRequest, AbstractApi<?, ?> api, JSONObject params) {
+        this.httpServletRequest = httpServletRequest;
+        this.api = api;
+        this.params = params;
+    }
+
+
+    public void check() throws StatusCodeWithException {
+        synchronized (AbstractFlowLimitService.class) {
+            String key = getFlowLimitKey();
+            FlowLimitRepo flowLimitRepo = Launcher.CONTEXT.getBean(FlowLimitRepo.class);
+            FlowLimit flowLimit = flowLimitRepo.findByKey(key);
+            flowLimit = (null == flowLimit ? createFlowLimit() : flowLimit);
+            if ((System.currentTimeMillis() - flowLimit.getStartVisitTime()) <= (getFlowLimitSecond() * 1000L)) {
+                if (flowLimit.getCount() >= getFlowLimitCount()) {
+                    throw new StatusCodeWithException(getFlowLimitExceptionTips(), StatusCode.PERMISSION_DENIED);
+                }
+                flowLimit.setCount(flowLimit.getCount() + 1);
+            } else {
+                // Restore site
+                flowLimit.setStartVisitTime(System.currentTimeMillis());
+                flowLimit.setCount(1);
+            }
+            flowLimit.setLatestVisitTime(System.currentTimeMillis());
+            flowLimitRepo.save(flowLimit);
+        }
+    }
+
+    /**
+     * The flow restriction key value must be globally unique
+     */
+    protected abstract String getFlowLimitKey() throws StatusCodeWithException;
+
+    /**
+     * Flow limit strategy type
+     */
+    protected abstract FlowLimitStrategyTypeEnum getFlowLimitStrategyType();
+
+    /**
+     *  Flow limit strategy value
+     */
+    protected abstract String getFlowLimitStrategyValue();
+
+    /**
+     * Flow limit duration, in seconds
+     */
+    protected abstract long getFlowLimitSecond();
+
+    /**
+     * Number of accessible api within the current limit duration
+     */
+    protected abstract int getFlowLimitCount();
+
+    /**
+     * Exception prompt information when triggering current limiting rules
+     */
+    protected String getFlowLimitExceptionTips() {
+        return "访问次数过于频繁，请稍后再试";
+    }
+
+    /**
+     * 返回初始化的流量对象
+     */
+    private FlowLimit createFlowLimit() throws StatusCodeWithException {
+        FlowLimit flowLimit = new FlowLimit();
+        flowLimit.setKey(getFlowLimitKey());
+        flowLimit.setCount(0);
+        flowLimit.setPath(api.getClass().getAnnotation(Api.class).path());
+        flowLimit.setStrategyType(getFlowLimitStrategyType());
+        flowLimit.setStrategyValue(getFlowLimitStrategyValue());
+        flowLimit.setStartVisitTime(System.currentTimeMillis());
+        flowLimit.setLatestVisitTime(flowLimit.getStartVisitTime());
+        flowLimit.setActiveTime(getFlowLimitSecond() * 10 * 1000L);
+        return flowLimit;
+    }
+
+    public HttpServletRequest getHttpServletRequest() {
+        return httpServletRequest;
+    }
+
+    public void setHttpServletRequest(HttpServletRequest httpServletRequest) {
+        this.httpServletRequest = httpServletRequest;
+    }
+
+    public AbstractApi<?, ?> getApi() {
+        return api;
+    }
+
+    public void setApi(AbstractApi<?, ?> api) {
+        this.api = api;
+    }
+
+    public JSONObject getParams() {
+        return params;
+    }
+
+    public void setParams(JSONObject params) {
+        this.params = params;
+    }
+}
diff --git a/union/union-service/src/main/java/com/welab/wefe/union/service/service/flowlimit/FlowLimitByIpService.java b/union/union-service/src/main/java/com/welab/wefe/union/service/service/flowlimit/FlowLimitByIpService.java
new file mode 100644
index 0000000000000000000000000000000000000000..e3466d2d068ddc0383905ec76731225ebea60dcb
--- /dev/null
+++ b/union/union-service/src/main/java/com/welab/wefe/union/service/service/flowlimit/FlowLimitByIpService.java
@@ -0,0 +1,71 @@
+/**
+ * Copyright 2021 Tianmian Tech. All Rights Reserved.
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *     http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */
+
+package com.welab.wefe.union.service.service.flowlimit;
+
+import com.alibaba.fastjson.JSONObject;
+import com.welab.wefe.common.data.mongodb.constant.FlowLimitStrategyTypeEnum;
+import com.welab.wefe.common.web.api.base.AbstractApi;
+import com.welab.wefe.common.web.api.base.Api;
+import com.welab.wefe.common.web.api.base.FlowLimitByIp;
+import com.welab.wefe.common.web.util.HttpServletRequestUtil;
+
+import javax.servlet.http.HttpServletRequest;
+
+/**
+ * IP address flow control
+ *
+ * @author aaron.li
+ * @date 2021/10/22 15:50
+ **/
+public class FlowLimitByIpService extends AbstractFlowLimitService {
+
+    public FlowLimitByIpService(HttpServletRequest httpServletRequest, AbstractApi<?, ?> api, JSONObject params) {
+        super(httpServletRequest, api, params);
+    }
+
+    @Override
+    protected String getFlowLimitKey() {
+        String clientIp = HttpServletRequestUtil.getClientIp(getHttpServletRequest());
+        String path = getApi().getClass().getAnnotation(Api.class).path();
+        return path + "_" + FlowLimitStrategyTypeEnum.IP + "_" + clientIp;
+    }
+
+    @Override
+    protected FlowLimitStrategyTypeEnum getFlowLimitStrategyType() {
+        return FlowLimitStrategyTypeEnum.IP;
+    }
+
+    @Override
+    protected String getFlowLimitStrategyValue() {
+        return HttpServletRequestUtil.getClientIp(getHttpServletRequest());
+    }
+
+    @Override
+    protected int getFlowLimitCount() {
+        return getApi().getClass().getAnnotation(FlowLimitByIp.class).count();
+    }
+
+    @Override
+    protected long getFlowLimitSecond() {
+        return getApi().getClass().getAnnotation(FlowLimitByIp.class).second();
+    }
+
+    @Override
+    protected String getFlowLimitExceptionTips() {
+        return "该IP访问次数过于频繁，请稍后再试";
+    }
+}
diff --git a/union/union-service/src/main/java/com/welab/wefe/union/service/service/flowlimit/FlowLimitByMobileService.java b/union/union-service/src/main/java/com/welab/wefe/union/service/service/flowlimit/FlowLimitByMobileService.java
new file mode 100644
index 0000000000000000000000000000000000000000..ca03a0c306b26c2cc24acc67e5fca239b30fdb58
--- /dev/null
+++ b/union/union-service/src/main/java/com/welab/wefe/union/service/service/flowlimit/FlowLimitByMobileService.java
@@ -0,0 +1,74 @@
+/**
+ * Copyright 2021 Tianmian Tech. All Rights Reserved.
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *     http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */
+
+package com.welab.wefe.union.service.service.flowlimit;
+
+import com.alibaba.fastjson.JSONObject;
+import com.welab.wefe.common.StatusCode;
+import com.welab.wefe.common.data.mongodb.constant.FlowLimitStrategyTypeEnum;
+import com.welab.wefe.common.exception.StatusCodeWithException;
+import com.welab.wefe.common.util.StringUtil;
+import com.welab.wefe.common.web.api.base.AbstractApi;
+import com.welab.wefe.common.web.api.base.Api;
+import com.welab.wefe.common.web.api.base.FlowLimitByMobile;
+
+import javax.servlet.http.HttpServletRequest;
+
+/**
+ * @author aaron.li
+ * @date 2021/11/9 11:05
+ **/
+public class FlowLimitByMobileService extends AbstractFlowLimitService {
+
+    public FlowLimitByMobileService(HttpServletRequest httpServletRequest, AbstractApi<?, ?> api, JSONObject params) {
+        super(httpServletRequest, api, params);
+    }
+
+    @Override
+    protected String getFlowLimitKey() throws StatusCodeWithException {
+        String mobile = getParams().getString("mobile");
+        if (StringUtil.isEmpty(mobile)) {
+            throw new StatusCodeWithException("手机号不能为空", StatusCode.PERMISSION_DENIED);
+        }
+        String path = getApi().getClass().getAnnotation(Api.class).path();
+        return path + "_" + FlowLimitStrategyTypeEnum.Mobile + "_" + mobile;
+    }
+
+    @Override
+    protected FlowLimitStrategyTypeEnum getFlowLimitStrategyType() {
+        return FlowLimitStrategyTypeEnum.Mobile;
+    }
+
+    @Override
+    protected String getFlowLimitStrategyValue() {
+        return getParams().getString("mobile");
+    }
+
+    @Override
+    protected int getFlowLimitCount() {
+        return getApi().getClass().getAnnotation(FlowLimitByMobile.class).count();
+    }
+
+    @Override
+    protected long getFlowLimitSecond() {
+        return getApi().getClass().getAnnotation(FlowLimitByMobile.class).second();
+    }
+
+    @Override
+    protected String getFlowLimitExceptionTips() {
+        return "该手机号访问次数过于频繁，请稍后再试";
+    }
+}
diff --git a/union/union-service/src/main/java/com/welab/wefe/union/service/service/sms/AbstractSendSmsClient.java b/union/union-service/src/main/java/com/welab/wefe/union/service/service/sms/AbstractSendSmsClient.java
new file mode 100644
index 0000000000000000000000000000000000000000..d592ddc4f7dd48361a5bfeca3eafc588f87d3e43
--- /dev/null
+++ b/union/union-service/src/main/java/com/welab/wefe/union/service/service/sms/AbstractSendSmsClient.java
@@ -0,0 +1,37 @@
+/**
+ * Copyright 2021 Tianmian Tech. All Rights Reserved.
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *     http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */
+
+package com.welab.wefe.union.service.service.sms;
+
+
+import java.util.Map;
+
+/**
+ * @author aaron.li
+ * @Date 2021/10/20
+ **/
+public abstract class AbstractSendSmsClient {
+
+    /**
+     * Send verification code sms
+     *
+     * @param mobile        target phone number
+     * @param smsRequest sms request params
+     * @return
+     * @throws Exception
+     */
+    public abstract AbstractSmsResponse sendVerificationCode(String mobile, Map<String, Object> smsRequest) throws Exception;
+}
diff --git a/union/union-service/src/main/java/com/welab/wefe/union/service/service/sms/AbstractSmsResponse.java b/union/union-service/src/main/java/com/welab/wefe/union/service/service/sms/AbstractSmsResponse.java
new file mode 100644
index 0000000000000000000000000000000000000000..e9569a0ad628cc4993548e9391de8a633d4258d7
--- /dev/null
+++ b/union/union-service/src/main/java/com/welab/wefe/union/service/service/sms/AbstractSmsResponse.java
@@ -0,0 +1,62 @@
+/**
+ * Copyright 2021 Tianmian Tech. All Rights Reserved.
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *     http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */
+
+package com.welab.wefe.union.service.service.sms;
+
+import java.util.UUID;
+
+/**
+ * @author aaron.li
+ * @Date 2021/10/20
+ **/
+public abstract class AbstractSmsResponse<T> {
+
+    public T data;
+
+    public AbstractSmsResponse(T data) {
+        this.data = data;
+    }
+
+    public String getReqId() {
+        return UUID.randomUUID().toString().replace("-", "");
+    }
+
+    /**
+     * Is send success
+     *
+     * @return true or false
+     */
+    public abstract boolean success();
+
+    /**
+     * Get response content
+     *
+     * @return Get response body
+     */
+    public abstract String getRespBody();
+
+    public String getMessage() {
+        return null;
+    }
+
+    public T getData() {
+        return data;
+    }
+
+    public void setData(T data) {
+        this.data = data;
+    }
+}
diff --git a/union/union-service/src/main/java/com/welab/wefe/union/service/service/sms/AliyunSendSmsClient.java b/union/union-service/src/main/java/com/welab/wefe/union/service/service/sms/AliyunSendSmsClient.java
new file mode 100644
index 0000000000000000000000000000000000000000..64b99817eb53e4f4bc6ff99351d305b003ca6ffa
--- /dev/null
+++ b/union/union-service/src/main/java/com/welab/wefe/union/service/service/sms/AliyunSendSmsClient.java
@@ -0,0 +1,53 @@
+/**
+ * Copyright 2021 Tianmian Tech. All Rights Reserved.
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *     http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */
+
+package com.welab.wefe.union.service.service.sms;
+
+import com.aliyun.dysmsapi20170525.Client;
+import com.aliyun.dysmsapi20170525.models.SendSmsRequest;
+import com.aliyun.dysmsapi20170525.models.SendSmsResponse;
+import com.aliyun.teaopenapi.models.Config;
+import com.welab.wefe.common.util.JObject;
+
+import java.util.Map;
+
+
+/**
+ * @author aaron.li
+ * @Date 2021/10/20
+ **/
+public class AliyunSendSmsClient extends AbstractSendSmsClient {
+    private Client client;
+
+    public static AliyunSendSmsClient createClient(String accessKeyId, String accessKeySecret) throws Exception {
+        Config config = new Config().setAccessKeyId(accessKeyId).setAccessKeySecret(accessKeySecret);
+        config.endpoint = "dysmsapi.aliyuncs.com";
+        AliyunSendSmsClient aliyunSmsClient = new AliyunSendSmsClient();
+        aliyunSmsClient.client = new Client(config);
+        return aliyunSmsClient;
+    }
+
+    @Override
+    public AbstractSmsResponse sendVerificationCode(String mobile, Map<String, Object> smsRequest) throws Exception {
+        SendSmsRequest sendSmsRequest = new SendSmsRequest();
+        sendSmsRequest.setPhoneNumbers(mobile);
+        sendSmsRequest.setSignName(String.valueOf(smsRequest.get("SignName")));
+        sendSmsRequest.setTemplateCode(String.valueOf(smsRequest.get("templateCode")));
+        sendSmsRequest.setTemplateParam(JObject.create("code", smsRequest.get("code")).toString());
+        SendSmsResponse sendSmsResponse = this.client.sendSms(sendSmsRequest);
+        return new AliyunSmsResponse(sendSmsResponse);
+    }
+}
diff --git a/union/union-service/src/main/java/com/welab/wefe/union/service/service/sms/AliyunSmsResponse.java b/union/union-service/src/main/java/com/welab/wefe/union/service/service/sms/AliyunSmsResponse.java
new file mode 100644
index 0000000000000000000000000000000000000000..5f85b09ebfcd90eaa1c09de7d0e7ffdc4a66bade
--- /dev/null
+++ b/union/union-service/src/main/java/com/welab/wefe/union/service/service/sms/AliyunSmsResponse.java
@@ -0,0 +1,53 @@
+/**
+ * Copyright 2021 Tianmian Tech. All Rights Reserved.
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *     http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */
+
+
+package com.welab.wefe.union.service.service.sms;
+
+import com.aliyun.dysmsapi20170525.models.SendSmsResponse;
+import com.welab.wefe.common.util.JObject;
+
+/**
+ * @author aaron.li
+ * @Date 2021/10/20
+ **/
+public class AliyunSmsResponse extends AbstractSmsResponse<SendSmsResponse> {
+    private final static String RESP_STATUS_OK = "OK";
+
+    public AliyunSmsResponse(SendSmsResponse data) {
+        super(data);
+    }
+
+    @Override
+    public String getReqId() {
+        return data.getBody().getRequestId();
+    }
+
+    @Override
+    public boolean success() {
+        return RESP_STATUS_OK.equals(data.getBody().code);
+    }
+
+    @Override
+    public String getRespBody() {
+        return JObject.create(data.getBody()).toString();
+    }
+
+    @Override
+    public String getMessage() {
+        return data.getBody().getMessage();
+    }
+}
diff --git a/union/union-service/src/main/java/com/welab/wefe/union/service/service/sms/SmsService.java b/union/union-service/src/main/java/com/welab/wefe/union/service/service/sms/SmsService.java
new file mode 100644
index 0000000000000000000000000000000000000000..6a48c87474b49c9bf18b9fda94042f56a05126a0
--- /dev/null
+++ b/union/union-service/src/main/java/com/welab/wefe/union/service/service/sms/SmsService.java
@@ -0,0 +1,164 @@
+/**
+ * Copyright 2021 Tianmian Tech. All Rights Reserved.
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *     http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */
+
+package com.welab.wefe.union.service.service.sms;
+
+import com.welab.wefe.common.StatusCode;
+import com.welab.wefe.common.data.mongodb.constant.SmsBusinessType;
+import com.welab.wefe.common.data.mongodb.constant.SmsSupplierEnum;
+import com.welab.wefe.common.data.mongodb.entity.sms.SmsDetailInfo;
+import com.welab.wefe.common.data.mongodb.entity.sms.SmsVerificationCode;
+import com.welab.wefe.common.data.mongodb.repo.SmsDetailInfoReop;
+import com.welab.wefe.common.data.mongodb.repo.SmsVerificationCodeReop;
+import com.welab.wefe.common.exception.StatusCodeWithException;
+import com.welab.wefe.common.util.JObject;
+import com.welab.wefe.common.util.StringUtil;
+import com.welab.wefe.union.service.config.ConfigProperties;
+import org.slf4j.Logger;
+import org.slf4j.LoggerFactory;
+import org.springframework.beans.factory.annotation.Autowired;
+import org.springframework.stereotype.Service;
+
+import java.util.HashMap;
+import java.util.Map;
+
+/**
+ * @author aaron.li
+ * @Date 2021/10/19
+ **/
+@Service
+public class SmsService {
+    private static final Logger LOG = LoggerFactory.getLogger(SmsService.class);
+
+    /**
+     * Verification code valid duration, unit: minute
+     */
+    private final static long CODE_VALID_DURATION_MINUTE = 2;
+
+    private final static long CODE_VALID_DURATION_MILLISECONDS = CODE_VALID_DURATION_MINUTE * 60 * 1000L;
+
+    @Autowired
+    private ConfigProperties configProperties;
+
+    @Autowired
+    private SmsVerificationCodeReop smsVerificationCodeReop;
+    @Autowired
+    private SmsDetailInfoReop smsDetailInfoReop;
+
+    /**
+     * Send verification code
+     *
+     * @param mobile target mobile number
+     * @throws Exception
+     */
+    public void sendVerificationCode(String mobile, SmsBusinessType smsBusinessType) throws StatusCodeWithException {
+        if (StringUtil.isEmpty(mobile)) {
+            throw new StatusCodeWithException("手机号不能为空", StatusCode.PARAMETER_CAN_NOT_BE_EMPTY);
+        }
+
+        if (!StringUtil.checkPhoneNumber(mobile)) {
+            throw new StatusCodeWithException("非法的手机号", StatusCode.PARAMETER_VALUE_INVALID);
+        }
+
+        if (!checkCodeIsExpire(mobile, smsBusinessType)) {
+            throw new StatusCodeWithException(CODE_VALID_DURATION_MINUTE + "分钟内禁止多次获取验证码", StatusCode.ILLEGAL_REQUEST);
+        }
+
+        // send sms to target mobile
+        try {
+            String code = generateCode();
+            AbstractSendSmsClient sendSmsClient = AliyunSendSmsClient.createClient(configProperties.getAliyunAccessKeyId(), configProperties.getAliyunAccessKeySecret());
+            Map<String, Object> smsRequest = new HashMap<>(16);
+            smsRequest.put("SignName", configProperties.getSmsAliyunSignName());
+            if (smsBusinessType.equals(SmsBusinessType.AccountForgetPasswordVerificationCode)) {
+                smsRequest.put("templateCode", configProperties.getSmsAliyunAccountForgetPasswordVerificationCodeTemplateCode());
+            } else if (smsBusinessType.equals(SmsBusinessType.MemberRegisterVerificationCode)) {
+                smsRequest.put("templateCode", configProperties.getSmsAliyunMemberRegisterVerificationCodeTemplateCode());
+            } else {
+                throw new StatusCodeWithException("无效的短信业务类型", StatusCode.ILLEGAL_REQUEST);
+            }
+            smsRequest.put("code", code);
+
+            AbstractSmsResponse smsResponse = sendSmsClient.sendVerificationCode(mobile, smsRequest);
+            SmsDetailInfo smsDetailInfo = new SmsDetailInfo();
+            smsDetailInfo.setMobile(mobile);
+            smsDetailInfo.setReqId(smsResponse.getReqId());
+            smsDetailInfo.setReqContent(JObject.create(smsRequest).toString());
+            smsDetailInfo.setSupplier(SmsSupplierEnum.Aliyun);
+            smsDetailInfo.setSuccess(smsResponse.success());
+            smsDetailInfo.setRespContent(smsResponse.getRespBody());
+            smsDetailInfo.setBusinessType(smsBusinessType);
+            smsDetailInfoReop.save(smsDetailInfo);
+            if (!smsResponse.success()) {
+                throw new StatusCodeWithException("获取验证码异常:" + smsResponse.getMessage(), StatusCode.SYSTEM_ERROR);
+            }
+
+            SmsVerificationCode smsVerificationCode = new SmsVerificationCode();
+            smsVerificationCode.setMobile(mobile);
+            smsVerificationCode.setCode(code);
+            smsVerificationCode.setBusinessType(smsBusinessType);
+            smsVerificationCodeReop.saveOrUpdate(smsVerificationCode);
+        } catch (StatusCodeWithException e) {
+            LOG.error("获取短信验证码异常:", e);
+            throw e;
+        } catch (Exception e) {
+            LOG.error("获取短信验证码异常:", e);
+            throw new StatusCodeWithException("获取验证码异常:" + e.getMessage(), StatusCode.SYSTEM_ERROR);
+        }
+    }
+
+    /**
+     * Check verification code is valid
+     *
+     * @param mobile target mobile number
+     * @param code   Verification Code
+     * @return true: valid, false: invalid
+     */
+    public void checkVerificationCodeValid(String mobile, String code, SmsBusinessType smsBusinessType) throws StatusCodeWithException {
+        SmsVerificationCode smsVerificationCode = smsVerificationCodeReop.find(mobile, smsBusinessType);
+        if (null == smsVerificationCode) {
+            throw new StatusCodeWithException("验证码无效,请重新获取验证码", StatusCode.PARAMETER_VALUE_INVALID);
+        }
+        long updateTime = smsVerificationCode.getUpdateTime();
+        if (System.currentTimeMillis() - updateTime > CODE_VALID_DURATION_MILLISECONDS) {
+            throw new StatusCodeWithException("验证码无效,请重新获取验证码", StatusCode.PARAMETER_VALUE_INVALID);
+        }
+        if (!smsVerificationCode.getCode().equals(code)) {
+            throw new StatusCodeWithException("验证码不正确", StatusCode.PARAMETER_VALUE_INVALID);
+        }
+    }
+
+
+    /**
+     * Check verification code is valid
+     *
+     * @param mobile target mobile number
+     * @return true: expire, false: non-expire
+     */
+    private boolean checkCodeIsExpire(String mobile, SmsBusinessType smsBusinessTypeEnum) {
+        SmsVerificationCode smsVerificationCode = smsVerificationCodeReop.find(mobile, smsBusinessTypeEnum);
+        if (null == smsVerificationCode) {
+            return true;
+        }
+        long updateTime = smsVerificationCode.getUpdateTime();
+        return System.currentTimeMillis() - updateTime > CODE_VALID_DURATION_MILLISECONDS;
+    }
+
+
+    private String generateCode() {
+        return String.valueOf((int) ((Math.random() * 9 + 1) * 100000));
+    }
+}
diff --git a/union/union-service/src/main/resources/application.properties b/union/union-service/src/main/resources/application.properties
index cc3d31372b558bc764ed98c73196c5c6043671a8..9230723dac0c544a5316b653650d149ccd0b4186 100644
--- a/union/union-service/src/main/resources/application.properties
+++ b/union/union-service/src/main/resources/application.properties
@@ -18,11 +18,11 @@ logging.pattern.file=%d{yyyy-MM-dd HH:mm:ss.SSS} [%level] [%X{requestId}] ${PID:
 
 
 
-## 区块链相关配置 start##
-# toml配置文件路径
+## \u533A\u5757\u94FE\u76F8\u5173\u914D\u7F6E start##
+# toml\u914D\u7F6E\u6587\u4EF6\u8DEF\u5F84
 block.chain.toml.file.path=xx/xx/config.toml
 
-# union业务的所在群组ID
+# union\u4E1A\u52A1\u7684\u6240\u5728\u7FA4\u7EC4ID
 block.chain.union.group.id=1
 
 
@@ -32,4 +32,12 @@ block.chain.union.member.contract.name=MemberContract
 block.chain.union.data.set.contract.name=DataSetContract
 block.chain.union.data.set.member.permission.contract.name=DataSetMemberPermissionContract
 
-## 区块链相关配置 end##
\ No newline at end of file
+## \u533A\u5757\u94FE\u76F8\u5173\u914D\u7F6E end##
+
+## \u77ED\u4FE1\u76F8\u5173\u914D\u7F6E start
+aliyun.access.key.id=xxxxx
+aliyun.access.key.secret=xxxx
+sms.aliyun.sign.name=\u5929\u5195
+sms.aliyun.account.forget.password.verification.code.template.code=SMS_227737637
+sms.aliyun.member.register.verification.code.template.code=SMS_227737645
+## \u77ED\u4FE1\u76F8\u5173\u914D\u7F6E end
\ No newline at end of file