[AllowAnonymous]
[HttpPost]
public async Task<ModelUser> Login(req_Login input)
{
    var user = await _BLL.Login(input);
    if (user == null) throw new BizException("用户不存在或密码不正确(Login)!");
}

public async Task<Api_User> LoginAPP(req_Login input)
{
	//同步CS框架tb_MyUser表【FlagAppLogin = Y】的用户
	if (Globals.SyncCSFrameworkUser)
	{
		this.SyncCSFrameworkUser();
	}

    //登录逻辑，匹配Api_User表的ClientId/Account/Phone/Password四个字段。
    var user = qApiUser.Where(w => w.ClientId == Globals.ClientId 
        && (w.Phone == loginUser.Account || w.Account == loginUser.Account) 
        && w.Password == loginUser.Password).FirstOrDefault();
    if (user == null)
    {
        throw new WebApi.Common.BizException("用户名或账号不正确！");
    }
    else
    {
        //登录成功
    }
}