@csntgao/uni-base 0.1.1 → 0.1.3

package/README.md

@@ -218,8 +218,8 @@ function applyNotificationRealtimeEvent(rawEvent: unknown) {
     headerSubtitle: '手机号验证后进入企业服务平台',
     headerIconUrl: '/assets/login-shield.svg',
     securityHint: '登录凭证仅用于企业工作台认证，请勿向他人透露验证码',
-    userAgreementUrl: '/agreements/user',
-    privacyAgreementUrl: '/agreements/privacy',
+    userAgreementUrl: 'https://website.hrs100.com/agreement/user-service-agreement.html',
+    privacyAgreementUrl: 'https://website.hrs100.com/agreement/qqxb-user-privacy.html',
     forgotPasswordUrl: '/account/forgot-password',
     initialMethod: 'verification-code',
   })

package/docs//350/264/246/346/210/267/344/270/216/347/231/273/345/275/225/347/273/204/344/273/266/345/212/250/346/200/201/346/216/245/345/205/245/350/257/264/346/230/216.md

@@ -139,8 +139,8 @@ userLogin.configure({
   headerSubtitle: '手机号验证后进入企业服务平台',
   headerIconUrl: 'https://static.example.com/login-shield.svg',
   securityHint: '登录凭证仅用于企业工作台认证，请勿向他人透露验证码',
-  userAgreementUrl: '/agreements/user',
-  privacyAgreementUrl: '/agreements/privacy',
+  userAgreementUrl: 'https://website.hrs100.com/agreement/user-service-agreement.html',
+  privacyAgreementUrl: 'https://website.hrs100.com/agreement/qqxb-user-privacy.html',
   forgotPasswordUrl: '/account/forgot-password',
   initialMethod: 'verification-code',
 })
@@ -151,7 +151,7 @@ userLogin.configure({
 | `transport`                                                                           | 是       | 完成登录接口调用；专用 transport 的 `setAccessToken()` 必须原子保存 JWT。 |
 | `applicationName`                                                                     | 是       | 目标应用稳定名称。                                                        |
 | `headerTitle`、`headerSubtitle`、`headerIconUrl`、`securityHint`                      | 否       | 外观文案与图标；不得包含凭据。                                            |
-| `userAgreementUrl`、`privacyAgreementUrl`、`forgotPasswordUrl`                        | 否       | 调用方页面地址。                                                          |
+| `userAgreementUrl`、`privacyAgreementUrl`、`forgotPasswordUrl`                        | 否       | 调用方页面地址；两个协议地址未传时使用亲亲小保官网协议页。                |
 | `initialMethod`                                                                       | 否       | `password`、`verification-code` 或 `qr-code`。                            |
 | `countdownSeconds`、`qrPollIntervalMs`、`initiallyAgreed`、`initiallyRememberSession` | 否       | 固定行为的可选初始值。                                                    |
 

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@csntgao/uni-base",
-  "version": "0.1.1",
+  "version": "0.1.3",
   "type": "module",
   "packageManager": "pnpm@11.3.0",
   "publishConfig": {

package/packages/web-components/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@uniplat/ai-employee-web-components",
-  "version": "0.23.4",
+  "version": "0.23.6",
   "description": "Framework-independent Web Components for Uniplat account, login, application switching and AI Employee chat",
   "type": "module",
   "sideEffects": true,

package/packages/web-components/src/user-login.ts

@@ -84,6 +84,13 @@ interface UserLoginBranding {
 
 type QrViewState = 'idle' | 'loading' | UserLoginQrStatus | 'error'
 
+export const USER_LOGIN_QR_LOGIN_ENABLED = false
+
+const USER_LOGIN_DEFAULT_USER_AGREEMENT_URL =
+  'https://website.hrs100.com/agreement/user-service-agreement.html'
+const USER_LOGIN_DEFAULT_PRIVACY_AGREEMENT_URL =
+  'https://website.hrs100.com/agreement/qqxb-user-privacy.html'
+
 const EMPTY_ERRORS: FormErrors = {
   mobile: '',
   smsCode: '',
@@ -921,8 +928,14 @@ export class UniplatUserLogin extends LitElement {
     this.config = {
       transport: config.transport,
       applicationName: normalizeApplicationName(config.applicationName),
-      userAgreementUrl: safeNavigationUrl(config.userAgreementUrl, 'Agreement URL'),
-      privacyAgreementUrl: safeNavigationUrl(config.privacyAgreementUrl, 'Agreement URL'),
+      userAgreementUrl: safeNavigationUrl(
+        config.userAgreementUrl ?? USER_LOGIN_DEFAULT_USER_AGREEMENT_URL,
+        'Agreement URL',
+      ),
+      privacyAgreementUrl: safeNavigationUrl(
+        config.privacyAgreementUrl ?? USER_LOGIN_DEFAULT_PRIVACY_AGREEMENT_URL,
+        'Agreement URL',
+      ),
       forgotPasswordUrl: safeNavigationUrl(config.forgotPasswordUrl, 'Forgot-password URL'),
       countdownSeconds,
       qrPollIntervalMs,
@@ -1063,9 +1076,12 @@ export class UniplatUserLogin extends LitElement {
   }
 
   private renderTabs() {
+    const visibleMethods = LOGIN_METHODS.filter(
+      ({ method }) => method !== 'qr-code' || USER_LOGIN_QR_LOGIN_ENABLED,
+    )
     return html`
       <div class="tabs" part="title tabs" role="tablist" aria-label="登录方式">
-        ${LOGIN_METHODS.map(({ method, label }) => {
+        ${visibleMethods.map(({ method, label }) => {
           const available = this.isMethodAvailable(method)
           return html`
             <button
@@ -1426,6 +1442,7 @@ export class UniplatUserLogin extends LitElement {
     const transport = this.config?.transport
     if (method === 'verification-code') return Boolean(transport)
     if (method === 'password') return typeof transport?.loginWithPassword === 'function'
+    if (!USER_LOGIN_QR_LOGIN_ENABLED) return false
     return (
       typeof transport?.createQrChallenge === 'function' &&
       typeof transport.pollQrChallenge === 'function'

package/packages/web-components/tests/user-login.test.ts

@@ -8,6 +8,7 @@ import {
   type UserLoginErrorDetail,
   type UserLoginTransport,
 } from '../src'
+import { USER_LOGIN_QR_LOGIN_ENABLED } from '../src/user-login'
 
 async function settle(login: UniplatUserLogin): Promise<void> {
   await Promise.resolve()
@@ -47,6 +48,7 @@ describe('<uniplat-user-login>', () => {
   afterEach(() => {
     document.body.replaceChildren()
     vi.useRealTimers()
+    vi.restoreAllMocks()
   })
 
   it('registers, renders the verification login form and completes a safe login flow', async () => {
@@ -90,13 +92,15 @@ describe('<uniplat-user-login>', () => {
       /\.security-icon::before\s*\{[^}]*left:\s*50%;[^}]*box-sizing:\s*border-box;[^}]*transform:\s*translateX\(-50%\);/s,
     )
     expect(login.shadowRoot?.textContent).toContain('验证码登录')
-    expect(login.shadowRoot?.querySelectorAll('[role="tab"]')).toHaveLength(3)
+    expect(USER_LOGIN_QR_LOGIN_ENABLED).toBe(false)
+    expect(login.shadowRoot?.querySelectorAll('[role="tab"]')).toHaveLength(2)
+    expect(login.shadowRoot?.textContent).not.toContain('扫码登录')
     expect(
       login.shadowRoot?.querySelector<HTMLButtonElement>('[role="tab"]:first-child')?.disabled,
     ).toBe(true)
     expect(
       login.shadowRoot?.querySelector<HTMLButtonElement>('[role="tab"]:last-child')?.disabled,
-    ).toBe(true)
+    ).toBe(false)
     expect(login.shadowRoot?.querySelector('#uniplat-login-image-code')).toBeNull()
     expect(login.shadowRoot?.querySelector('.captcha-image')).toBeNull()
     expect(login.shadowRoot?.textContent).not.toContain('图形验证码')
@@ -275,6 +279,32 @@ describe('<uniplat-user-login>', () => {
     ).toThrow(TypeError)
   })
 
+  it('opens the official user and privacy agreements by default', async () => {
+    const openWindow = vi.spyOn(window, 'open').mockReturnValue(null)
+    const login = document.createElement(USER_LOGIN_TAG)
+    login.configure({ transport: createTransport(), applicationName: 'HrSaas' })
+    document.body.append(login)
+    await settle(login)
+
+    const links = login.shadowRoot?.querySelectorAll<HTMLButtonElement>('.agreement-link')
+    expect(links).toHaveLength(2)
+    links?.[0]?.click()
+    links?.[1]?.click()
+
+    expect(openWindow).toHaveBeenNthCalledWith(
+      1,
+      'https://website.hrs100.com/agreement/user-service-agreement.html',
+      '_blank',
+      'noopener,noreferrer',
+    )
+    expect(openWindow).toHaveBeenNthCalledWith(
+      2,
+      'https://website.hrs100.com/agreement/qqxb-user-privacy.html',
+      '_blank',
+      'noopener,noreferrer',
+    )
+  })
+
   it('maps transport failures to stable errors without exposing the original exception', async () => {
     const sensitiveText = 'backend stack with jwt=should-never-render'
     const transport = createTransport({
@@ -506,94 +536,125 @@ describe('<uniplat-user-login>', () => {
     expect(passwordInput?.value).toBe('')
   })
 
-  it('keeps QR status in one panel and clears polling after confirmation', async () => {
-    vi.useFakeTimers()
+  it('hides QR login and falls back to verification login while the feature is disabled', async () => {
     const createQrChallenge = vi.fn(async () => ({
-      challengeId: 'obviously-fake-qr-challenge',
-      imageUrl:
-        'data:image/svg+xml,%3Csvg xmlns="http://www.w3.org/2000/svg" width="120" height="120"%3E%3Crect width="120" height="120"/%3E%3C/svg%3E',
-      pollIntervalMs: 750,
+      challengeId: 'obviously-fake-hidden-challenge',
+      imageUrl: 'data:image/png;base64,b2J2aW91c2x5LWZha2U=',
     }))
-    const pollQrChallenge = vi
-      .fn()
-      .mockResolvedValueOnce({ status: 'scanned' })
-      .mockResolvedValueOnce({
-        status: 'confirmed',
-        result: { applicationName: 'HrSaas' },
-      })
-    const transport = createTransport({ createQrChallenge, pollQrChallenge })
+    const pollQrChallenge = vi.fn(async () => ({ status: 'pending' as const }))
     const login = document.createElement(USER_LOGIN_TAG)
-    const loginEvents: unknown[] = []
-    login.addEventListener('login-success', (event) => {
-      loginEvents.push((event as CustomEvent).detail)
-    })
     login.configure({
-      transport,
+      transport: createTransport({ createQrChallenge, pollQrChallenge }),
       applicationName: 'HrSaas',
       initialMethod: 'qr-code',
-      qrPollIntervalMs: 500,
     })
     document.body.append(login)
     await settle(login)
 
-    expect(createQrChallenge).toHaveBeenCalledWith({ applicationName: 'HrSaas' })
-    expect(login.shadowRoot?.querySelector<HTMLImageElement>('.qr-image')?.src).toContain(
-      'data:image/svg+xml',
-    )
-    expect(login.shadowRoot?.textContent).toContain('请使用微信扫描小程序码登录')
-    expect(login.shadowRoot?.textContent).toContain('未登录时先完成登录')
-    expect(login.shadowRoot?.textContent).toContain('电脑端同步登录')
-    expect(vi.getTimerCount()).toBe(1)
-    expect(login.shadowRoot?.innerHTML).not.toContain('obviously-fake-qr-challenge')
-
-    await vi.advanceTimersByTimeAsync(500)
+    expect(login.shadowRoot?.querySelectorAll('[role="tab"]')).toHaveLength(2)
+    expect(login.shadowRoot?.textContent).not.toContain('扫码登录')
+    expect(login.shadowRoot?.querySelector('.qr-panel')).toBeNull()
+    expect(
+      login.shadowRoot?.querySelector('[role="tab"][aria-selected="true"]')?.textContent,
+    ).toContain('验证码登录')
+    expect(createQrChallenge).not.toHaveBeenCalled()
     expect(pollQrChallenge).not.toHaveBeenCalled()
-    await vi.advanceTimersByTimeAsync(250)
-    await settle(login)
-    expect(login.shadowRoot?.textContent).toContain('扫码成功，请在手机上确认')
-    expect(vi.getTimerCount()).toBe(1)
-    expect(pollQrChallenge).toHaveBeenCalledWith('obviously-fake-qr-challenge', 'HrSaas')
-
-    await vi.advanceTimersByTimeAsync(750)
-    await settle(login)
-    expect(loginEvents).toEqual([{ applicationName: 'HrSaas' }])
-    expect(JSON.stringify(loginEvents)).not.toContain('obviously-fake-qr-challenge')
-    expect(vi.getTimerCount()).toBe(0)
   })
 
-  it('stops polling and offers a refresh after QR login is rejected', async () => {
-    vi.useFakeTimers()
-    const transport = createTransport({
-      createQrChallenge: vi.fn(async () => ({
-        challengeId: 'obviously-fake-rejected-challenge',
-        imageUrl: 'data:image/png;base64,b2J2aW91c2x5LWZha2UtcG5n',
-        pollIntervalMs: 500,
-      })),
-      pollQrChallenge: vi.fn(async () => ({ status: 'rejected' as const })),
-    })
-    const errors: UserLoginErrorDetail[] = []
-    const login = document.createElement(USER_LOGIN_TAG)
-    login.addEventListener('error', (event) => {
-      errors.push((event as unknown as CustomEvent<UserLoginErrorDetail>).detail)
-    })
-    login.configure({ transport, applicationName: 'HrSaas', initialMethod: 'qr-code' })
-    document.body.append(login)
-    await settle(login)
-
-    await vi.advanceTimersByTimeAsync(500)
-    await settle(login)
-
-    expect(login.shadowRoot?.textContent).toContain('登录已取消')
-    expect(login.shadowRoot?.textContent).toContain('已在手机上取消登录，请点击刷新。')
-    expect(vi.getTimerCount()).toBe(0)
-    expect(errors).toEqual([
-      {
-        code: 'QR_LOGIN_REJECTED',
-        message: '已在手机上取消登录，请点击刷新。',
-        recoverable: true,
-      },
-    ])
-  })
+  it.skipIf(!USER_LOGIN_QR_LOGIN_ENABLED)(
+    'keeps QR status in one panel and clears polling after confirmation',
+    async () => {
+      vi.useFakeTimers()
+      const createQrChallenge = vi.fn(async () => ({
+        challengeId: 'obviously-fake-qr-challenge',
+        imageUrl:
+          'data:image/svg+xml,%3Csvg xmlns="http://www.w3.org/2000/svg" width="120" height="120"%3E%3Crect width="120" height="120"/%3E%3C/svg%3E',
+        pollIntervalMs: 750,
+      }))
+      const pollQrChallenge = vi
+        .fn()
+        .mockResolvedValueOnce({ status: 'scanned' })
+        .mockResolvedValueOnce({
+          status: 'confirmed',
+          result: { applicationName: 'HrSaas' },
+        })
+      const transport = createTransport({ createQrChallenge, pollQrChallenge })
+      const login = document.createElement(USER_LOGIN_TAG)
+      const loginEvents: unknown[] = []
+      login.addEventListener('login-success', (event) => {
+        loginEvents.push((event as CustomEvent).detail)
+      })
+      login.configure({
+        transport,
+        applicationName: 'HrSaas',
+        initialMethod: 'qr-code',
+        qrPollIntervalMs: 500,
+      })
+      document.body.append(login)
+      await settle(login)
+
+      expect(createQrChallenge).toHaveBeenCalledWith({ applicationName: 'HrSaas' })
+      expect(login.shadowRoot?.querySelector<HTMLImageElement>('.qr-image')?.src).toContain(
+        'data:image/svg+xml',
+      )
+      expect(login.shadowRoot?.textContent).toContain('请使用微信扫描小程序码登录')
+      expect(login.shadowRoot?.textContent).toContain('未登录时先完成登录')
+      expect(login.shadowRoot?.textContent).toContain('电脑端同步登录')
+      expect(vi.getTimerCount()).toBe(1)
+      expect(login.shadowRoot?.innerHTML).not.toContain('obviously-fake-qr-challenge')
+
+      await vi.advanceTimersByTimeAsync(500)
+      expect(pollQrChallenge).not.toHaveBeenCalled()
+      await vi.advanceTimersByTimeAsync(250)
+      await settle(login)
+      expect(login.shadowRoot?.textContent).toContain('扫码成功，请在手机上确认')
+      expect(vi.getTimerCount()).toBe(1)
+      expect(pollQrChallenge).toHaveBeenCalledWith('obviously-fake-qr-challenge', 'HrSaas')
+
+      await vi.advanceTimersByTimeAsync(750)
+      await settle(login)
+      expect(loginEvents).toEqual([{ applicationName: 'HrSaas' }])
+      expect(JSON.stringify(loginEvents)).not.toContain('obviously-fake-qr-challenge')
+      expect(vi.getTimerCount()).toBe(0)
+    },
+  )
+
+  it.skipIf(!USER_LOGIN_QR_LOGIN_ENABLED)(
+    'stops polling and offers a refresh after QR login is rejected',
+    async () => {
+      vi.useFakeTimers()
+      const transport = createTransport({
+        createQrChallenge: vi.fn(async () => ({
+          challengeId: 'obviously-fake-rejected-challenge',
+          imageUrl: 'data:image/png;base64,b2J2aW91c2x5LWZha2UtcG5n',
+          pollIntervalMs: 500,
+        })),
+        pollQrChallenge: vi.fn(async () => ({ status: 'rejected' as const })),
+      })
+      const errors: UserLoginErrorDetail[] = []
+      const login = document.createElement(USER_LOGIN_TAG)
+      login.addEventListener('error', (event) => {
+        errors.push((event as unknown as CustomEvent<UserLoginErrorDetail>).detail)
+      })
+      login.configure({ transport, applicationName: 'HrSaas', initialMethod: 'qr-code' })
+      document.body.append(login)
+      await settle(login)
+
+      await vi.advanceTimersByTimeAsync(500)
+      await settle(login)
+
+      expect(login.shadowRoot?.textContent).toContain('登录已取消')
+      expect(login.shadowRoot?.textContent).toContain('已在手机上取消登录，请点击刷新。')
+      expect(vi.getTimerCount()).toBe(0)
+      expect(errors).toEqual([
+        {
+          code: 'QR_LOGIN_REJECTED',
+          message: '已在手机上取消登录，请点击刷新。',
+          recoverable: true,
+        },
+      ])
+    },
+  )
 
   it('maps a locked password account to a stable safe component error', async () => {
     const transport = createTransport({

package/restart

@@ -0,0 +1,4 @@
+#! /bin/bash
+git pull
+pnpm i
+pnpm build