@gz-fronted/gz-pc 0.1.0 → 0.1.1-beta.2

package/README.md

@@ -22,8 +22,9 @@ Axios 和 ahooks 是 gz-pc 的普通 dependencies，安装 gz-pc 时会自动安
 
 ## 请求协议
 
-gz-fetch **只有在 HTTP Status 为 200 时才认为请求成功**。201、204 以及其他
-所有状态都会进入统一错误处理。
+gz-fetch 默认将所有 HTTP `2xx` 状态视为成功，包括 200、201、202、204 和 206。
+非 `2xx` 状态进入统一错误处理并抛出 `GzFetchError`，错误中保留 `status` 和
+`responseData`。
 
 成功时直接返回后端原始的 `response.data`，不会返回 `AxiosResponse`，也不会：
 
@@ -31,6 +32,29 @@ gz-fetch **只有在 HTTP Status 为 200 时才认为请求成功**。201、204
 - 自动解包 `data`
 - 转换分页、字段、日期或任何服务端数据
 
+例如后端返回以下内容时，调用方取得的是包含 `code`、`data`、`message` 的完整
+对象：
+
+```ts
+interface CreateOrderResponse {
+  code: number;
+  data: {
+    orderId: string;
+  };
+  message: string;
+}
+
+const response = await gzFetch<CreateOrderResponse, CreateOrderParams>({
+  url: '/order/create',
+  method: 'POST',
+  params,
+});
+
+response.code;
+response.data.orderId;
+response.message;
+```
+
 ```ts
 import { configureGzFetch, gzFetch } from '@gz-fronted/gz-pc/fetch';
 
@@ -105,6 +129,7 @@ function gzFetch<TResponse, TRequestParams = unknown>(
 | `skipAuth`         | `boolean`                              | 否   | 为 `true` 时跳过 Token 注入                |
 | `responseType`     | `'json' \| 'blob' \| 'text'`           | 否   | 响应数据类型，默认 `json`                  |
 | `signal`           | `AbortSignal`                          | 否   | 取消请求的标准 AbortSignal                 |
+| `withCredentials`  | `boolean`                              | 否   | 是否携带跨域 Cookie 等凭证                 |
 
 请求入参字段统一使用 `params`，业务代码不需要区分 Axios 的 `params` 和 `data`：
 
@@ -112,6 +137,8 @@ function gzFetch<TResponse, TRequestParams = unknown>(
 - POST、PUT：`params` 转为 Request Body。
 
 业务请求配置不支持 `data`，也不得混用 `params` 和 `data`。
+POST、PUT 的 `params` 支持 JSON 对象、`FormData`、`URLSearchParams` 和 `Blob`；
+自定义请求头通过 `headers` 传入。
 
 完整示例：
 
@@ -153,15 +180,38 @@ const result = await gzFetch<SaveResult, SaveParams>({
 | ------------------ | ----------------------------------------------------------- | ----------------- | -------------------------- |
 | `baseURL`          | `string`                                                    | 无                | 所有业务请求的基础地址     |
 | `timeout`          | `number`                                                    | `15000`           | 默认请求超时时间，单位毫秒 |
+| `validateStatus`   | `(status: number) => boolean`                               | 所有 `2xx`        | 自定义 HTTP 成功状态范围   |
 | `getToken`         | `() => string \| undefined \| Promise<string \| undefined>` | 无                | 每次请求前动态获取 Token   |
 | `showErrorMessage` | `boolean`                                                   | `true`            | 实例级错误提示开关         |
 | `auth.headerName`  | `string`                                                    | `Authorization`   | Token 请求头名称           |
 | `auth.formatToken` | `(token: string) => string`                                 | `Bearer ${token}` | Token 格式化函数           |
+| `unauthorized`     | `GzFetchUnauthorizedOptions`                                | 未开启            | 可选的 HTTP 401 统一处理   |
 | `middlewares`      | `readonly GzFetchMiddleware[]`                              | `[]`              | 请求、响应和错误中间件     |
 
-当前稳定 API 没有开放 Axios 的 `withCredentials`、`paramsSerializer`、
-`onUploadProgress`、`validateStatus` 等配置，也暂不支持 `PATCH`。业务代码只应传入
-上表列出的字段；如果后续确有通用场景，再通过 gz-pc 统一扩展类型和请求核心。
+需要覆盖默认成功状态时，只在应用初始化层配置：
+
+```ts
+configureGzFetch({
+  validateStatus: (status) => status === 200 || status === 304,
+});
+```
+
+当前稳定 API 没有开放 Axios 的 `paramsSerializer`、`onUploadProgress` 等配置，也
+暂不支持 `PATCH`。业务代码只应传入上表列出的字段；如果后续确有通用场景，再
+通过 gz-pc 统一扩展类型和请求核心。
+
+### 跨域凭证
+
+需要浏览器携带跨域 Cookie 等凭证时，在单次请求中开启 `withCredentials`：
+
+```ts
+await gzFetch<QueryPresetResponse, QueryPresetParams>({
+  url: '/queryFilterTemplate/list',
+  method: 'POST',
+  params,
+  withCredentials: true,
+});
+```
 
 ## Token
 
@@ -196,7 +246,7 @@ configureGzFetch({
 
 ## 错误提示
 
-HTTP 非 200 时仅尝试读取响应体的 `msg`。没有有效 `msg` 时使用默认文案，最终
+HTTP 非 `2xx` 时仅尝试读取响应体的 `msg`。没有有效 `msg` 时使用默认文案，最终
 抛出 `GzFetchError`。
 
 错误类型包括：
@@ -235,6 +285,72 @@ controller.abort();
 await promise;
 ```
 
+## HTTP 401 统一处理
+
+401 统一处理默认关闭，未显式开启时继续执行原有 HTTP 错误提示和抛错逻辑，不弹窗、
+不跳转。需要启用时，在应用初始化配置中传入 `unauthorized.enabled: true`：
+
+```ts
+configureGzFetch({
+  baseURL: '/api',
+  getToken: () => runtimeToken,
+  unauthorized: {
+    enabled: true,
+    loginUrl: '/login',
+    modalTitle: '登录失效',
+    modalMessage: '当前登录状态已失效，请重新登录。',
+  },
+});
+```
+
+配置默认值如下：
+
+| 字段             | 类型         | 默认值                                  |
+| ---------------- | ------------ | --------------------------------------- |
+| `enabled`        | `boolean`    | `false`                                 |
+| `loginUrl`       | `string`     | `/login`                                |
+| `modalTitle`     | `string`     | `登录失效`                              |
+| `modalMessage`   | `string`     | `当前登录状态已失效，请重新登录。`      |
+| `onUnauthorized` | `() => void` | 无；确认后使用 `window.location.assign` |
+
+为了让弹窗继承宿主项目当前的 gg-ui 主题，需要在应用根部的 `ConfigProvider` 内挂载一次
+`GzFetchUnauthorizedModal`：
+
+```tsx
+import { GzFetchUnauthorizedModal } from '@gz-fronted/gz-pc/fetch';
+import { ConfigProvider } from '@chenhui996/gg-ui';
+
+<ConfigProvider themeMode={themeMode}>
+  <GzFetchUnauthorizedModal />
+  <App />
+</ConfigProvider>;
+```
+
+该组件使用受控 gg-ui `Modal`，不会调用脱离 React 上下文的静态
+`Modal.confirm`，因此主题切换时会继续读取宿主 `ConfigProvider` 的主题 Token，
+无需复制亮色或暗色样式。业务页面不需要维护 401 状态或重复渲染弹窗。
+
+所有由同一份 gz-pc 包创建的默认客户端和独立客户端共享一个 401 管理器。首个 401
+打开弹窗，后续并发 401 不会创建新弹窗；取消或弹窗关闭动画结束后会释放状态，后续
+独立发生的 401 可以再次打开。确认操作也有同一状态锁，不会重复执行登录跳转。
+
+业务项目需要自定义 SSO、登出或状态清理时传入 `onUnauthorized`。用户确认后优先执行
+该回调；只有未提供回调时才通过 `window.location.assign(loginUrl)` 跳转：
+
+```ts
+configureGzFetch({
+  unauthorized: {
+    enabled: true,
+    onUnauthorized: () => {
+      authService.logout();
+    },
+  },
+});
+```
+
+开启该能力后，401 仍会作为 `GzFetchError` 抛给调用方，但请求核心不会再为同一个
+401 额外调用普通 `message.error`。其他 HTTP 错误、网络错误、超时和取消请求行为不变。
+
 ## 中间件
 
 中间件的 `onRequest`、`onResponse` 和 `onError` 都按注册顺序执行，不采用洋葱

package/dist/fetch/index.cjs

@@ -2,6 +2,8 @@
 
 var ggUi = require('@chenhui996/gg-ui');
 var axios = require('axios');
+var react = require('react');
+var jsxRuntime = require('react/jsx-runtime');
 
 function _interopDefault (e) { return e && e.__esModule ? e : { default: e }; }
 
@@ -96,9 +98,107 @@ async function runErrorMiddlewares(error, context, middlewares) {
   }
 }
 
+// src/fetch/unauthorized.ts
+var DEFAULT_UNAUTHORIZED_LOGIN_URL = "/login";
+var DEFAULT_UNAUTHORIZED_MODAL_TITLE = "登录失效";
+var DEFAULT_UNAUTHORIZED_MODAL_MESSAGE = "当前登录状态已失效，请重新登录。";
+var IDLE_SNAPSHOT = { phase: "idle" };
+var snapshot = IDLE_SNAPSHOT;
+var listeners = /* @__PURE__ */ new Set();
+var modalHosts = /* @__PURE__ */ new Set();
+var emitChange = () => {
+  for (const listener of listeners) {
+    listener();
+  }
+};
+var setSnapshot = (nextSnapshot) => {
+  snapshot = nextSnapshot;
+  emitChange();
+};
+var resolveUnauthorizedOptions = (options) => {
+  var _a, _b, _c, _d;
+  return {
+    enabled: (_a = options == null ? void 0 : options.enabled) != null ? _a : false,
+    loginUrl: (_b = options == null ? void 0 : options.loginUrl) != null ? _b : DEFAULT_UNAUTHORIZED_LOGIN_URL,
+    modalTitle: (_c = options == null ? void 0 : options.modalTitle) != null ? _c : DEFAULT_UNAUTHORIZED_MODAL_TITLE,
+    modalMessage: (_d = options == null ? void 0 : options.modalMessage) != null ? _d : DEFAULT_UNAUTHORIZED_MODAL_MESSAGE,
+    ...(options == null ? void 0 : options.onUnauthorized) === void 0 ? {} : { onUnauthorized: options.onUnauthorized }
+  };
+};
+var getUnauthorizedSnapshot = () => snapshot;
+var getUnauthorizedServerSnapshot = () => IDLE_SNAPSHOT;
+var subscribeUnauthorized = (listener) => {
+  listeners.add(listener);
+  return () => listeners.delete(listener);
+};
+var registerUnauthorizedModalHost = (hostId) => {
+  modalHosts.add(hostId);
+  if (snapshot.activeHostId === void 0) {
+    setSnapshot({ ...snapshot, activeHostId: hostId });
+  }
+  return () => {
+    modalHosts.delete(hostId);
+    if (snapshot.activeHostId !== hostId) {
+      return;
+    }
+    const nextHost = modalHosts.values().next();
+    const nextHostId = nextHost.done ? void 0 : nextHost.value;
+    if (snapshot.phase === "closing") {
+      setSnapshot(
+        nextHostId === void 0 ? IDLE_SNAPSHOT : { activeHostId: nextHostId, phase: "idle" }
+      );
+      return;
+    }
+    if (nextHostId === void 0) {
+      setSnapshot(
+        snapshot.options === void 0 ? { phase: snapshot.phase } : { options: snapshot.options, phase: snapshot.phase }
+      );
+      return;
+    }
+    setSnapshot({ ...snapshot, activeHostId: nextHostId });
+  };
+};
+var openUnauthorizedModal = (options) => {
+  if (!options.enabled || snapshot.phase !== "idle") {
+    return false;
+  }
+  setSnapshot({
+    ...snapshot.activeHostId === void 0 ? {} : { activeHostId: snapshot.activeHostId },
+    options,
+    phase: "open"
+  });
+  return true;
+};
+var beginCloseUnauthorizedModal = () => {
+  if (snapshot.phase !== "open" || snapshot.options === void 0) {
+    return void 0;
+  }
+  const { options } = snapshot;
+  setSnapshot({ ...snapshot, phase: "closing" });
+  return options;
+};
+var cancelUnauthorizedModal = () => beginCloseUnauthorizedModal() !== void 0;
+var confirmUnauthorizedModal = () => beginCloseUnauthorizedModal();
+var completeUnauthorizedModal = () => {
+  if (snapshot.phase !== "closing") {
+    return;
+  }
+  setSnapshot(
+    snapshot.activeHostId === void 0 ? IDLE_SNAPSHOT : { activeHostId: snapshot.activeHostId, phase: "idle" }
+  );
+};
+var executeUnauthorizedAction = (options, navigate = (loginUrl) => window.location.assign(loginUrl)) => {
+  if (options.onUnauthorized) {
+    options.onUnauthorized();
+    return;
+  }
+  navigate(options.loginUrl);
+};
+
 // src/fetch/client.ts
 var DEFAULT_TIMEOUT = 15e3;
 var DEFAULT_AUTH_HEADER = "Authorization";
+var DEFAULT_VALIDATE_STATUS = (status) => status >= 200 && status < 300;
 function toHeaderRecord(headers) {
   const result = {};
   for (const [name, value] of Object.entries(headers)) {
@@ -109,15 +209,16 @@ function toHeaderRecord(headers) {
   return result;
 }
 function createGzFetch(options = {}) {
-  var _a, _b, _c, _d, _e, _f, _g;
+  var _a, _b, _c, _d, _e, _f, _g, _h;
   const middlewares = (_a = options.middlewares) != null ? _a : [];
   const showInstanceErrorMessage = (_b = options.showErrorMessage) != null ? _b : true;
   const headerName = (_d = (_c = options.auth) == null ? void 0 : _c.headerName) != null ? _d : DEFAULT_AUTH_HEADER;
   const formatToken = (_f = (_e = options.auth) == null ? void 0 : _e.formatToken) != null ? _f : ((token) => `Bearer ${token}`);
+  const unauthorizedOptions = resolveUnauthorizedOptions(options.unauthorized);
   const instance = axios__default.default.create({
     ...options.baseURL === void 0 ? {} : { baseURL: options.baseURL },
     timeout: (_g = options.timeout) != null ? _g : DEFAULT_TIMEOUT,
-    validateStatus: (status) => status === 200
+    validateStatus: (_h = options.validateStatus) != null ? _h : DEFAULT_VALIDATE_STATUS
   });
   async function request(initialConfig) {
     var _a2;
@@ -143,7 +244,8 @@ function createGzFetch(options = {}) {
         ...usesRequestBody || currentConfig.params === void 0 ? {} : { params: currentConfig.params },
         ...currentConfig.timeout === void 0 ? {} : { timeout: currentConfig.timeout },
         ...currentConfig.responseType === void 0 ? {} : { responseType: currentConfig.responseType },
-        ...currentConfig.signal === void 0 ? {} : { signal: currentConfig.signal }
+        ...currentConfig.signal === void 0 ? {} : { signal: currentConfig.signal },
+        ...currentConfig.withCredentials === void 0 ? {} : { withCredentials: currentConfig.withCredentials }
       };
       const response = await instance.request(axiosConfig);
       const context = {
@@ -154,9 +256,13 @@ function createGzFetch(options = {}) {
       return await runResponseMiddlewares(response.data, context, middlewares);
     } catch (originalError) {
       const error = toGzFetchError(originalError);
+      const shouldHandleUnauthorized = unauthorizedOptions.enabled && error.type === "HTTP_ERROR" && error.status === 401;
+      if (shouldHandleUnauthorized) {
+        openUnauthorizedModal(unauthorizedOptions);
+      }
       await runErrorMiddlewares(error, { config: currentConfig }, middlewares);
       const shouldShowError = (_a2 = currentConfig.showErrorMessage) != null ? _a2 : showInstanceErrorMessage;
-      if (shouldShowError && error.type !== "CANCELED_ERROR") {
+      if (shouldShowError && error.type !== "CANCELED_ERROR" && !shouldHandleUnauthorized) {
         ggUi.message.error(error.message);
       }
       throw error;
@@ -192,8 +298,46 @@ async function gzFetch(config) {
   }
   return defaultClient(config);
 }
+var GzFetchUnauthorizedModal = () => {
+  var _a, _b, _c;
+  const hostIdRef = react.useRef(void 0);
+  (_a = hostIdRef.current) != null ? _a : hostIdRef.current = /* @__PURE__ */ Symbol("gz-fetch-unauthorized-modal-host");
+  const hostId = hostIdRef.current;
+  const snapshot2 = react.useSyncExternalStore(
+    subscribeUnauthorized,
+    getUnauthorizedSnapshot,
+    getUnauthorizedServerSnapshot
+  );
+  react.useEffect(() => registerUnauthorizedModalHost(hostId), [hostId]);
+  if (snapshot2.activeHostId !== hostId) {
+    return null;
+  }
+  const handleConfirm = () => {
+    const options = confirmUnauthorizedModal();
+    if (options) {
+      executeUnauthorizedAction(options);
+    }
+  };
+  return /* @__PURE__ */ jsxRuntime.jsx(
+    ggUi.Modal,
+    {
+      afterClose: completeUnauthorizedModal,
+      cancelText: "取消",
+      closable: true,
+      okText: "重新登录",
+      open: snapshot2.phase === "open",
+      title: (_b = snapshot2.options) == null ? void 0 : _b.modalTitle,
+      onCancel: cancelUnauthorizedModal,
+      onOk: handleConfirm,
+      children: (_c = snapshot2.options) == null ? void 0 : _c.modalMessage
+    }
+  );
+};
+GzFetchUnauthorizedModal.displayName = "GzFetchUnauthorizedModal";
+var GzFetchUnauthorizedModal_default = GzFetchUnauthorizedModal;
 
 exports.GzFetchError = GzFetchError;
+exports.GzFetchUnauthorizedModal = GzFetchUnauthorizedModal_default;
 exports.configureGzFetch = configureGzFetch;
 exports.createGzFetch = createGzFetch;
 exports.getResponseMessage = getResponseMessage;

package/dist/fetch/index.d.cts

@@ -1,4 +1,5 @@
 import { AxiosHeaders } from 'axios';
+import { FC } from 'react';
 
 type GzFetchErrorType = 'HTTP_ERROR' | 'NETWORK_ERROR' | 'TIMEOUT_ERROR' | 'CANCELED_ERROR' | 'UNKNOWN_ERROR';
 interface GzFetchErrorOptions {
@@ -31,6 +32,7 @@ interface GzRequestConfig<TRequestParams = unknown> {
     skipAuth?: boolean;
     responseType?: GzResponseType;
     signal?: AbortSignal;
+    withCredentials?: boolean;
 }
 interface GzInternalRequestConfig extends Omit<GzRequestConfig<unknown>, 'headers'> {
     headers?: GzRequestHeaders;
@@ -53,12 +55,21 @@ interface GzFetchAuthOptions {
     headerName?: string;
     formatToken?: (token: string) => string;
 }
+interface GzFetchUnauthorizedOptions {
+    enabled?: boolean;
+    loginUrl?: string;
+    modalTitle?: string;
+    modalMessage?: string;
+    onUnauthorized?: () => void;
+}
 interface CreateGzFetchOptions {
     baseURL?: string;
     timeout?: number;
+    validateStatus?: (status: number) => boolean;
     getToken?: () => string | undefined | Promise<string | undefined>;
     showErrorMessage?: boolean;
     auth?: GzFetchAuthOptions;
+    unauthorized?: GzFetchUnauthorizedOptions;
     middlewares?: readonly GzFetchMiddleware[];
 }
 interface GzFetchClient {
@@ -75,4 +86,6 @@ declare function createGzFetch(options?: CreateGzFetchOptions): GzFetchClient;
 declare function configureGzFetch(options: CreateGzFetchOptions): void;
 declare function gzFetch<TResponse, TRequestParams = unknown>(config: GzRequestConfig<TRequestParams>): Promise<TResponse>;
 
-export { type CreateGzFetchOptions, type GzErrorContext, type GzFetch, type GzFetchAuthOptions, type GzFetchClient, GzFetchError, type GzFetchErrorOptions, type GzFetchErrorType, type GzFetchMiddleware, type GzInternalRequestConfig, type GzRequestConfig, type GzRequestHeaders, type GzRequestMethod, type GzRequestOptions, type GzRequestParams, type GzResponseContext, type GzResponseType, configureGzFetch, createGzFetch, getResponseMessage, gzFetch, toGzFetchError };
+declare const GzFetchUnauthorizedModal: FC;
+
+export { type CreateGzFetchOptions, type GzErrorContext, type GzFetch, type GzFetchAuthOptions, type GzFetchClient, GzFetchError, type GzFetchErrorOptions, type GzFetchErrorType, type GzFetchMiddleware, GzFetchUnauthorizedModal, type GzFetchUnauthorizedOptions, type GzInternalRequestConfig, type GzRequestConfig, type GzRequestHeaders, type GzRequestMethod, type GzRequestOptions, type GzRequestParams, type GzResponseContext, type GzResponseType, configureGzFetch, createGzFetch, getResponseMessage, gzFetch, toGzFetchError };

package/dist/fetch/index.d.ts

@@ -1,4 +1,5 @@
 import { AxiosHeaders } from 'axios';
+import { FC } from 'react';
 
 type GzFetchErrorType = 'HTTP_ERROR' | 'NETWORK_ERROR' | 'TIMEOUT_ERROR' | 'CANCELED_ERROR' | 'UNKNOWN_ERROR';
 interface GzFetchErrorOptions {
@@ -31,6 +32,7 @@ interface GzRequestConfig<TRequestParams = unknown> {
     skipAuth?: boolean;
     responseType?: GzResponseType;
     signal?: AbortSignal;
+    withCredentials?: boolean;
 }
 interface GzInternalRequestConfig extends Omit<GzRequestConfig<unknown>, 'headers'> {
     headers?: GzRequestHeaders;
@@ -53,12 +55,21 @@ interface GzFetchAuthOptions {
     headerName?: string;
     formatToken?: (token: string) => string;
 }
+interface GzFetchUnauthorizedOptions {
+    enabled?: boolean;
+    loginUrl?: string;
+    modalTitle?: string;
+    modalMessage?: string;
+    onUnauthorized?: () => void;
+}
 interface CreateGzFetchOptions {
     baseURL?: string;
     timeout?: number;
+    validateStatus?: (status: number) => boolean;
     getToken?: () => string | undefined | Promise<string | undefined>;
     showErrorMessage?: boolean;
     auth?: GzFetchAuthOptions;
+    unauthorized?: GzFetchUnauthorizedOptions;
     middlewares?: readonly GzFetchMiddleware[];
 }
 interface GzFetchClient {
@@ -75,4 +86,6 @@ declare function createGzFetch(options?: CreateGzFetchOptions): GzFetchClient;
 declare function configureGzFetch(options: CreateGzFetchOptions): void;
 declare function gzFetch<TResponse, TRequestParams = unknown>(config: GzRequestConfig<TRequestParams>): Promise<TResponse>;
 
-export { type CreateGzFetchOptions, type GzErrorContext, type GzFetch, type GzFetchAuthOptions, type GzFetchClient, GzFetchError, type GzFetchErrorOptions, type GzFetchErrorType, type GzFetchMiddleware, type GzInternalRequestConfig, type GzRequestConfig, type GzRequestHeaders, type GzRequestMethod, type GzRequestOptions, type GzRequestParams, type GzResponseContext, type GzResponseType, configureGzFetch, createGzFetch, getResponseMessage, gzFetch, toGzFetchError };
+declare const GzFetchUnauthorizedModal: FC;
+
+export { type CreateGzFetchOptions, type GzErrorContext, type GzFetch, type GzFetchAuthOptions, type GzFetchClient, GzFetchError, type GzFetchErrorOptions, type GzFetchErrorType, type GzFetchMiddleware, GzFetchUnauthorizedModal, type GzFetchUnauthorizedOptions, type GzInternalRequestConfig, type GzRequestConfig, type GzRequestHeaders, type GzRequestMethod, type GzRequestOptions, type GzRequestParams, type GzResponseContext, type GzResponseType, configureGzFetch, createGzFetch, getResponseMessage, gzFetch, toGzFetchError };

package/dist/fetch/index.js

@@ -1,5 +1,7 @@
-import { message } from '@chenhui996/gg-ui';
+import { Modal, message } from '@chenhui996/gg-ui';
 import axios, { AxiosError, AxiosHeaders } from 'axios';
+import { useRef, useSyncExternalStore, useEffect } from 'react';
+import { jsx } from 'react/jsx-runtime';
 
 // src/fetch/client.ts
 var GzFetchError = class extends Error {
@@ -90,9 +92,107 @@ async function runErrorMiddlewares(error, context, middlewares) {
   }
 }
 
+// src/fetch/unauthorized.ts
+var DEFAULT_UNAUTHORIZED_LOGIN_URL = "/login";
+var DEFAULT_UNAUTHORIZED_MODAL_TITLE = "登录失效";
+var DEFAULT_UNAUTHORIZED_MODAL_MESSAGE = "当前登录状态已失效，请重新登录。";
+var IDLE_SNAPSHOT = { phase: "idle" };
+var snapshot = IDLE_SNAPSHOT;
+var listeners = /* @__PURE__ */ new Set();
+var modalHosts = /* @__PURE__ */ new Set();
+var emitChange = () => {
+  for (const listener of listeners) {
+    listener();
+  }
+};
+var setSnapshot = (nextSnapshot) => {
+  snapshot = nextSnapshot;
+  emitChange();
+};
+var resolveUnauthorizedOptions = (options) => {
+  var _a, _b, _c, _d;
+  return {
+    enabled: (_a = options == null ? void 0 : options.enabled) != null ? _a : false,
+    loginUrl: (_b = options == null ? void 0 : options.loginUrl) != null ? _b : DEFAULT_UNAUTHORIZED_LOGIN_URL,
+    modalTitle: (_c = options == null ? void 0 : options.modalTitle) != null ? _c : DEFAULT_UNAUTHORIZED_MODAL_TITLE,
+    modalMessage: (_d = options == null ? void 0 : options.modalMessage) != null ? _d : DEFAULT_UNAUTHORIZED_MODAL_MESSAGE,
+    ...(options == null ? void 0 : options.onUnauthorized) === void 0 ? {} : { onUnauthorized: options.onUnauthorized }
+  };
+};
+var getUnauthorizedSnapshot = () => snapshot;
+var getUnauthorizedServerSnapshot = () => IDLE_SNAPSHOT;
+var subscribeUnauthorized = (listener) => {
+  listeners.add(listener);
+  return () => listeners.delete(listener);
+};
+var registerUnauthorizedModalHost = (hostId) => {
+  modalHosts.add(hostId);
+  if (snapshot.activeHostId === void 0) {
+    setSnapshot({ ...snapshot, activeHostId: hostId });
+  }
+  return () => {
+    modalHosts.delete(hostId);
+    if (snapshot.activeHostId !== hostId) {
+      return;
+    }
+    const nextHost = modalHosts.values().next();
+    const nextHostId = nextHost.done ? void 0 : nextHost.value;
+    if (snapshot.phase === "closing") {
+      setSnapshot(
+        nextHostId === void 0 ? IDLE_SNAPSHOT : { activeHostId: nextHostId, phase: "idle" }
+      );
+      return;
+    }
+    if (nextHostId === void 0) {
+      setSnapshot(
+        snapshot.options === void 0 ? { phase: snapshot.phase } : { options: snapshot.options, phase: snapshot.phase }
+      );
+      return;
+    }
+    setSnapshot({ ...snapshot, activeHostId: nextHostId });
+  };
+};
+var openUnauthorizedModal = (options) => {
+  if (!options.enabled || snapshot.phase !== "idle") {
+    return false;
+  }
+  setSnapshot({
+    ...snapshot.activeHostId === void 0 ? {} : { activeHostId: snapshot.activeHostId },
+    options,
+    phase: "open"
+  });
+  return true;
+};
+var beginCloseUnauthorizedModal = () => {
+  if (snapshot.phase !== "open" || snapshot.options === void 0) {
+    return void 0;
+  }
+  const { options } = snapshot;
+  setSnapshot({ ...snapshot, phase: "closing" });
+  return options;
+};
+var cancelUnauthorizedModal = () => beginCloseUnauthorizedModal() !== void 0;
+var confirmUnauthorizedModal = () => beginCloseUnauthorizedModal();
+var completeUnauthorizedModal = () => {
+  if (snapshot.phase !== "closing") {
+    return;
+  }
+  setSnapshot(
+    snapshot.activeHostId === void 0 ? IDLE_SNAPSHOT : { activeHostId: snapshot.activeHostId, phase: "idle" }
+  );
+};
+var executeUnauthorizedAction = (options, navigate = (loginUrl) => window.location.assign(loginUrl)) => {
+  if (options.onUnauthorized) {
+    options.onUnauthorized();
+    return;
+  }
+  navigate(options.loginUrl);
+};
+
 // src/fetch/client.ts
 var DEFAULT_TIMEOUT = 15e3;
 var DEFAULT_AUTH_HEADER = "Authorization";
+var DEFAULT_VALIDATE_STATUS = (status) => status >= 200 && status < 300;
 function toHeaderRecord(headers) {
   const result = {};
   for (const [name, value] of Object.entries(headers)) {
@@ -103,15 +203,16 @@ function toHeaderRecord(headers) {
   return result;
 }
 function createGzFetch(options = {}) {
-  var _a, _b, _c, _d, _e, _f, _g;
+  var _a, _b, _c, _d, _e, _f, _g, _h;
   const middlewares = (_a = options.middlewares) != null ? _a : [];
   const showInstanceErrorMessage = (_b = options.showErrorMessage) != null ? _b : true;
   const headerName = (_d = (_c = options.auth) == null ? void 0 : _c.headerName) != null ? _d : DEFAULT_AUTH_HEADER;
   const formatToken = (_f = (_e = options.auth) == null ? void 0 : _e.formatToken) != null ? _f : ((token) => `Bearer ${token}`);
+  const unauthorizedOptions = resolveUnauthorizedOptions(options.unauthorized);
   const instance = axios.create({
     ...options.baseURL === void 0 ? {} : { baseURL: options.baseURL },
     timeout: (_g = options.timeout) != null ? _g : DEFAULT_TIMEOUT,
-    validateStatus: (status) => status === 200
+    validateStatus: (_h = options.validateStatus) != null ? _h : DEFAULT_VALIDATE_STATUS
   });
   async function request(initialConfig) {
     var _a2;
@@ -137,7 +238,8 @@ function createGzFetch(options = {}) {
         ...usesRequestBody || currentConfig.params === void 0 ? {} : { params: currentConfig.params },
         ...currentConfig.timeout === void 0 ? {} : { timeout: currentConfig.timeout },
         ...currentConfig.responseType === void 0 ? {} : { responseType: currentConfig.responseType },
-        ...currentConfig.signal === void 0 ? {} : { signal: currentConfig.signal }
+        ...currentConfig.signal === void 0 ? {} : { signal: currentConfig.signal },
+        ...currentConfig.withCredentials === void 0 ? {} : { withCredentials: currentConfig.withCredentials }
       };
       const response = await instance.request(axiosConfig);
       const context = {
@@ -148,9 +250,13 @@ function createGzFetch(options = {}) {
       return await runResponseMiddlewares(response.data, context, middlewares);
     } catch (originalError) {
       const error = toGzFetchError(originalError);
+      const shouldHandleUnauthorized = unauthorizedOptions.enabled && error.type === "HTTP_ERROR" && error.status === 401;
+      if (shouldHandleUnauthorized) {
+        openUnauthorizedModal(unauthorizedOptions);
+      }
       await runErrorMiddlewares(error, { config: currentConfig }, middlewares);
       const shouldShowError = (_a2 = currentConfig.showErrorMessage) != null ? _a2 : showInstanceErrorMessage;
-      if (shouldShowError && error.type !== "CANCELED_ERROR") {
+      if (shouldShowError && error.type !== "CANCELED_ERROR" && !shouldHandleUnauthorized) {
         message.error(error.message);
       }
       throw error;
@@ -186,5 +292,42 @@ async function gzFetch(config) {
   }
   return defaultClient(config);
 }
+var GzFetchUnauthorizedModal = () => {
+  var _a, _b, _c;
+  const hostIdRef = useRef(void 0);
+  (_a = hostIdRef.current) != null ? _a : hostIdRef.current = /* @__PURE__ */ Symbol("gz-fetch-unauthorized-modal-host");
+  const hostId = hostIdRef.current;
+  const snapshot2 = useSyncExternalStore(
+    subscribeUnauthorized,
+    getUnauthorizedSnapshot,
+    getUnauthorizedServerSnapshot
+  );
+  useEffect(() => registerUnauthorizedModalHost(hostId), [hostId]);
+  if (snapshot2.activeHostId !== hostId) {
+    return null;
+  }
+  const handleConfirm = () => {
+    const options = confirmUnauthorizedModal();
+    if (options) {
+      executeUnauthorizedAction(options);
+    }
+  };
+  return /* @__PURE__ */ jsx(
+    Modal,
+    {
+      afterClose: completeUnauthorizedModal,
+      cancelText: "取消",
+      closable: true,
+      okText: "重新登录",
+      open: snapshot2.phase === "open",
+      title: (_b = snapshot2.options) == null ? void 0 : _b.modalTitle,
+      onCancel: cancelUnauthorizedModal,
+      onOk: handleConfirm,
+      children: (_c = snapshot2.options) == null ? void 0 : _c.modalMessage
+    }
+  );
+};
+GzFetchUnauthorizedModal.displayName = "GzFetchUnauthorizedModal";
+var GzFetchUnauthorizedModal_default = GzFetchUnauthorizedModal;
 
-export { GzFetchError, configureGzFetch, createGzFetch, getResponseMessage, gzFetch, toGzFetchError };
+export { GzFetchError, GzFetchUnauthorizedModal_default as GzFetchUnauthorizedModal, configureGzFetch, createGzFetch, getResponseMessage, gzFetch, toGzFetchError };

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@gz-fronted/gz-pc",
-  "version": "0.1.0",
+  "version": "0.1.1-beta.2",
   "description": "Shared fetch, hooks and utility primitives for GZ frontend applications.",
   "license": "MIT",
   "type": "module",