@das-fed/utils 7.1.0-dev.3 → 7.1.0-dev.31

package/create-api-service/thirdLogout/sso/utils.d.ts

@@ -0,0 +1,8 @@
+export declare const getQuery: (name: string) => any;
+/**
+ * 获取当前登录类型。
+ * 优先读取 URL 参数并同步到 localStorage，避免首屏 401 早于路由监听时读不到 loginType。
+ * @returns 当前登录类型
+ */
+export declare const getLoginType: () => any;
+export declare const removeQueryParams: (paramsToRemove: any[]) => void;

package/create-api-service/thirdLogout/thirdLogout/index.d.ts

@@ -0,0 +1,19 @@
+/**
+ * 判断当前是否使用需要定制退出流程的第三方登录。
+ * @returns 是否需要执行第三方退出
+ */
+export declare const isThirdLogin: () => any;
+/**
+ * 执行中深项目的第三方退出登录。
+ * @param redirctToUrl 平台退出完成后的回调地址
+ */
+export declare const zhongshenLogout: (redirctToUrl: string) => void;
+/**
+ * 执行江铃汽车项目的第三方退出登录。
+ */
+export declare const jmcLogout: () => any;
+/**
+ * 根据第三方登录来源调用对应的退出方法。
+ * @param redirctToUrl 平台退出地址
+ */
+export declare const thirdLogout: (redirctToUrl?: string) => any;

package/create-api-service/unauthorized-recovery/index.d.ts

@@ -0,0 +1,36 @@
+import { CurringConfig } from '../../curring-http/type';
+
+/** 401 恢复成功后的结果。 */
+export interface UnauthorizedRecoveryResult {
+    /** 恢复后用于重试原请求的平台访问令牌。 */
+    accessToken: string;
+}
+/** 401 恢复处理器接收的上下文。 */
+export interface UnauthorizedRecoveryContext {
+    /** Axios 返回的原始错误。 */
+    error: any;
+    /** 发生 401 的原始请求配置。 */
+    config: CurringConfig;
+}
+/** 项目可注册的 401 恢复处理器。 */
+export type UnauthorizedRecoveryHandler = (context: UnauthorizedRecoveryContext) => Promise<UnauthorizedRecoveryResult | null>;
+/**
+ * 判断当前是否已经注册项目级 401 恢复处理器。
+ * 框架默认刷新返回 401 后据此判断是否交由项目恢复，避免直接触发退出登录。
+ * @returns 是否存在项目级恢复处理器
+ */
+export declare const hasUnauthorizedRecovery: () => boolean;
+/**
+ * 注册项目自定义的 401 恢复处理器。
+ * 后注册的处理器会覆盖之前的处理器，避免不同项目逻辑同时接管认证流程。
+ * @param handler 项目自定义恢复处理器
+ * @returns 注销当前处理器的方法
+ */
+export declare const registerUnauthorizedRecovery: (handler: UnauthorizedRecoveryHandler) => () => void;
+/**
+ * 尝试恢复 401 请求。
+ * 并发 401 共用同一个恢复任务，避免短时间内重复续签 Token。
+ * @param context 401 请求上下文
+ * @returns 恢复成功后的新 Token；无法恢复时返回 null
+ */
+export declare const recoverUnauthorized: (context: UnauthorizedRecoveryContext) => unknown;

package/create-api-service/unauthorized-recovery/index.js

@@ -0,0 +1,16 @@
+const n = Symbol.for("@das-fed/utils/unauthorized-recovery-state"), o = () => {
+  const r = globalThis;
+  return r[n] || (r[n] = {
+    handler: null,
+    promise: null
+  }), r[n];
+}, e = o(), l = () => e.handler !== null, t = (r) => (e.handler = r, () => {
+  e.handler === r && (e.handler = null);
+}), s = async (r) => e.handler ? (e.promise || (e.promise = Promise.resolve(e.handler(r)).finally(() => {
+  e.promise = null;
+})), e.promise) : null;
+export {
+  l as hasUnauthorizedRecovery,
+  s as recoverUnauthorized,
+  t as registerUnauthorizedRecovery
+};

package/curring-http/type.d.ts

@@ -52,6 +52,12 @@ export type CurringConfig = AxiosRequestConfig & {
   /** 接口401是否重定向到登录页 */
   noRedireLogin?: boolean
 
+  /** 是否跳过项目注册的401恢复逻辑 */
+  skipUnauthorizedRecovery?: boolean
+
+  /** 标记当前请求已完成一次401恢复重试，防止重复续签 */
+  _unauthorizedRecoveryRetried?: boolean
+
   /** 开启CSRF安全选项 */
   csrf?: boolean
 }

package/esm-map.json

@@ -124,6 +124,7 @@
   "getTokenParams": "/create-api-service/sso/index",
   "getTokenFromCode": "/create-api-service/sso/index",
   "real_uri": "/create-api-service/sso/index",
+  "getLoginType": "/create-api-service/sso/index",
   "getQuery": "/create-api-service/sso/index",
   "tokenStorage": "/create-api-service/sso/index",
   "login": "/create-api-service/sso/index",
@@ -143,5 +144,15 @@
   "calcTextWidth": "/common-tools/calc-text-width/index",
   "getFileExtension": "/common-tools/get-file-extension/index",
   "getLanguages": "/common-info/index",
-  "appendQueryParams": "/common-tools/get-url-params/index"
+  "appendQueryParams": "/common-tools/get-url-params/index",
+  "refreshToken": "/create-api-service/sso/index",
+  "isThirdLogin": "/create-api-service/thirdLogout/index",
+  "thirdLogout": "/create-api-service/thirdLogout/index",
+  "oauthClient": "/api-services/modules/justauth/index",
+  "zhongshenLogout": "/create-api-service/thirdLogout/index",
+  "jmcLogout": "/create-api-service/thirdLogout/index",
+  "registerUnauthorizedRecovery": "/create-api-service/unauthorized-recovery/index",
+  "recoverUnauthorized": "/create-api-service/unauthorized-recovery/index",
+  "hasUnauthorizedRecovery": "/create-api-service/unauthorized-recovery/index",
+  "clearPlatformAuthStorage": "/token-tools/index"
 }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@das-fed/utils",
-  "version": "7.1.0-dev.3",
+  "version": "7.1.0-dev.31",
   "description": "",
   "type": "module",
   "main": "./index.js",
@@ -9,7 +9,7 @@
   "license": "ISC",
   "dependencies": {
     "@antv/x6": "^2.18.1",
-    "@das-fed/utils": "7.1.0-dev.3",
+    "@das-fed/utils": "7.1.0-dev.31",
     "@vue/shared": "^3.4.21",
     "@vueuse/core": "^9.6.0",
     "axios": "^1.6.7",
@@ -21,8 +21,8 @@
     "vue": "^3.4.21"
   },
   "devDependencies": {
-    "@das-fed/cli": "7.1.0-dev.3",
-    "@das-fed/web": "7.1.0-dev.3",
+    "@das-fed/cli": "7.1.0-dev.31",
+    "@das-fed/web": "7.1.0-dev.31",
     "@types/js-cookie": "^3.0.6",
     "@types/lodash-es": "^4.17.12",
     "@types/qs": "^6.9.15",

package/token-tools/index.d.ts

@@ -10,7 +10,8 @@ export declare const getAccessToken: () => string;
 /**
  * 获取tokenInfo相关信息
  */
-export declare const getAccessTokenInfo: (key: typeof accessTokenExpiredAtKey | typeof refreshTokenKey | typeof redirectUriKey | typeof accessTokenInfoKey) => any;
+type TokenInfoKey = typeof accessTokenExpiredAtKey | typeof refreshTokenKey | typeof redirectUriKey | typeof accessTokenInfoKey;
+export declare const getAccessTokenInfo: (key: TokenInfoKey) => any;
 /**
  * 存入token、tokenInfo
  * @param token
@@ -18,4 +19,39 @@ export declare const getAccessTokenInfo: (key: typeof accessTokenExpiredAtKey |
  */
 export declare const setAccessToken: (token: string, info?: any) => void;
 export declare const removeAccessToken: () => void;
+/**
+ * 获取、保存和清理平台 token 相关数据。
+ * 统一放在 token-tools 中，便于 SSO 与业务模块复用同一套 token 存储规则。
+ * @returns token 存储操作集合
+ */
+export declare const tokenStorage: () => {
+    /**
+     * 获取当前平台 token 数据。
+     * @returns token、过期时间和 refresh token
+     */
+    getData: () => {
+        accessToken: string;
+        accessTokenExpiredAt: any;
+        refreshToken: any;
+    };
+    /**
+     * 保存平台 token 数据。
+     * @param data token 信息
+     */
+    save: (data: {
+        accessToken: string | null;
+        accessTokenExpiredAt: number;
+        refreshToken: string | null;
+        info: any;
+    }) => void;
+    /**
+     * 清理平台 token 数据。
+     */
+    remove: () => void;
+};
+/**
+ * 清理平台退出相关的本地认证数据。
+ * 统一封装退出清理动作，避免各退出入口遗漏 idelTime、sessionStorage 或流程引擎 token。
+ */
+export declare const clearPlatformAuthStorage: () => void;
 export {};

package/token-tools/index.js

@@ -1,13 +1,14 @@
+import { removeProcessEngineToken as I, setProcessEngineToken as h } from "@das-fed/utils/process-engine-info";
 /*! js-cookie v3.0.5 | MIT */
 function l(e) {
-  for (var t = 1; t < arguments.length; t++) {
-    var n = arguments[t];
-    for (var g in n)
-      e[g] = n[g];
+  for (var n = 1; n < arguments.length; n++) {
+    var t = arguments[n];
+    for (var g in t)
+      e[g] = t[g];
   }
   return e;
 }
-var k = {
+var S = {
   read: function(e) {
     return e[0] === '"' && (e = e.slice(1, -1)), e.replace(/(%[\dA-F]{2})+/gi, decodeURIComponent);
   },
@@ -18,10 +19,10 @@ var k = {
     );
   }
 };
-function d(e, t) {
-  function n(r, i, o) {
+function m(e, n) {
+  function t(r, i, o) {
     if (!(typeof document > "u")) {
-      o = l({}, t, o), typeof o.expires == "number" && (o.expires = new Date(Date.now() + o.expires * 864e5)), o.expires && (o.expires = o.expires.toUTCString()), r = encodeURIComponent(r).replace(/%(2[346B]|5E|60|7C)/g, decodeURIComponent).replace(/[()]/g, escape);
+      o = l({}, n, o), typeof o.expires == "number" && (o.expires = new Date(Date.now() + o.expires * 864e5)), o.expires && (o.expires = o.expires.toUTCString()), r = encodeURIComponent(r).replace(/%(2[346B]|5E|60|7C)/g, decodeURIComponent).replace(/[()]/g, escape);
       var c = "";
       for (var s in o)
         o[s] && (c += "; " + s, o[s] !== !0 && (c += "=" + o[s].split(";")[0]));
@@ -31,10 +32,10 @@ function d(e, t) {
   function g(r) {
     if (!(typeof document > "u" || arguments.length && !r)) {
       for (var i = document.cookie ? document.cookie.split("; ") : [], o = {}, c = 0; c < i.length; c++) {
-        var s = i[c].split("="), I = s.slice(1).join("=");
+        var s = i[c].split("="), u = s.slice(1).join("=");
         try {
           var f = decodeURIComponent(s[0]);
-          if (o[f] = e.read(I, f), r === f)
+          if (o[f] = e.read(u, f), r === f)
             break;
         } catch {
         }
@@ -44,10 +45,10 @@ function d(e, t) {
   }
   return Object.create(
     {
-      set: n,
+      set: t,
       get: g,
       remove: function(r, i) {
-        n(
+        t(
           r,
           "",
           l({}, i, {
@@ -56,28 +57,61 @@ function d(e, t) {
         );
       },
       withAttributes: function(r) {
-        return d(this.converter, l({}, this.attributes, r));
+        return m(this.converter, l({}, this.attributes, r));
       },
       withConverter: function(r) {
-        return d(l({}, this.converter, r), this.attributes);
+        return m(l({}, this.converter, r), this.attributes);
       }
     },
     {
-      attributes: { value: Object.freeze(t) },
+      attributes: { value: Object.freeze(n) },
       converter: { value: Object.freeze(e) }
     }
   );
 }
-var p = d(k, { path: "/" });
-const a = "accessToken", m = "accessTokenExpiredAt", v = "refreshToken", u = "redirectUri", S = "csrf-token", h = () => localStorage.getItem(a) ?? p.get(a) ?? sessionStorage.getItem(a) ?? "", C = (e) => localStorage.getItem(e) ?? p.get(e) ?? sessionStorage.getItem(e) ?? "", x = (e, t = {}) => {
-  var n;
-  (n = window.webConfig) != null && n.disableSaveToken || (localStorage.setItem(a, e), localStorage.setItem(m, t.accessTokenExpiredAt ?? "0"), localStorage.setItem(v, t.refreshToken ?? ""), t.redirectUri && localStorage.setItem(u, t.redirectUri));
-}, U = () => {
-  localStorage.removeItem(a), localStorage.removeItem(m), localStorage.removeItem(v), localStorage.removeItem(u), localStorage.removeItem(S);
+var d = m(S, { path: "/" });
+const a = "accessToken", k = "accessTokenExpiredAt", T = "refreshToken", v = "redirectUri", x = "csrf-token", A = () => localStorage.getItem(a) ?? d.get(a) ?? sessionStorage.getItem(a) ?? "", p = (e) => localStorage.getItem(e) ?? d.get(e) ?? sessionStorage.getItem(e) ?? "", C = (e, n = {}) => {
+  var t;
+  (t = window.webConfig) != null && t.disableSaveToken || (localStorage.setItem(a, e), localStorage.setItem(k, n.accessTokenExpiredAt ?? 0), localStorage.setItem(T, n.refreshToken ?? 0), n.redirectUri && localStorage.setItem(v, n.redirectUri));
+}, E = () => {
+  localStorage.removeItem(a), localStorage.removeItem(k), localStorage.removeItem(T), localStorage.removeItem(v), localStorage.removeItem(x);
+}, U = () => ({
+  /**
+   * 获取当前平台 token 数据。
+   * @returns token、过期时间和 refresh token
+   */
+  getData: () => {
+    const e = p("accessTokenExpiredAt");
+    return {
+      accessToken: A(),
+      accessTokenExpiredAt: e ? Number(e) : 0,
+      refreshToken: p("refreshToken")
+    };
+  },
+  /**
+   * 保存平台 token 数据。
+   * @param data token 信息
+   */
+  save: (e) => {
+    C(e.accessToken ?? "", {
+      accessTokenExpiredAt: e.accessTokenExpiredAt,
+      refreshToken: e.refreshToken
+    }), h(e);
+  },
+  /**
+   * 清理平台 token 数据。
+   */
+  remove: () => {
+    E(), I();
+  }
+}), R = () => {
+  localStorage.removeItem("idelTime"), sessionStorage.clear(), U().remove();
 };
 export {
-  h as getAccessToken,
-  C as getAccessTokenInfo,
-  U as removeAccessToken,
-  x as setAccessToken
+  R as clearPlatformAuthStorage,
+  A as getAccessToken,
+  p as getAccessTokenInfo,
+  E as removeAccessToken,
+  C as setAccessToken,
+  U as tokenStorage
 };