@liujitcn/kratos-admin-core 0.0.29 → 0.0.32

package/dist/package/src/stores/modules/lockScreen.ts

@@ -0,0 +1,78 @@
+import { defineStore } from "pinia";
+import type { LockScreenState } from "../../stores/interface";
+import piniaPersistConfig from "../../stores/helper/persist";
+
+/** 将锁屏密码转换为不可逆摘要，避免在本地持久化明文密码。 */
+async function hashPassword(password: string): Promise<string> {
+  const data = new TextEncoder().encode(password);
+  const digest = await crypto.subtle.digest("SHA-256", data);
+  return Array.from(new Uint8Array(digest), byte => byte.toString(16).padStart(2, "0")).join("");
+}
+
+/** 管理端锁屏状态仓库。 */
+export const useLockScreenStore = defineStore("admin-lock-screen", {
+  state: (): LockScreenState => ({
+    isLocked: false,
+    passwordHash: "",
+    setupVisible: false,
+    unlockVisible: false,
+    unlockError: false
+  }),
+  getters: {
+    /** 当前是否已配置可用于解锁的密码。 */
+    isConfigured: state => Boolean(state.passwordHash)
+  },
+  actions: {
+    /** 打开锁屏密码设置界面。 */
+    openSetup() {
+      this.setupVisible = true;
+      this.unlockVisible = false;
+      this.unlockError = false;
+    },
+    /** 关闭锁屏密码设置界面。 */
+    closeSetup() {
+      this.setupVisible = false;
+    },
+    /** 设置锁屏密码并立即进入锁屏状态。 */
+    async lock(password: string) {
+      this.passwordHash = await hashPassword(password);
+      this.isLocked = true;
+      this.setupVisible = false;
+      this.unlockVisible = false;
+      this.unlockError = false;
+    },
+    /** 打开锁屏解锁输入界面。 */
+    openUnlock() {
+      this.unlockVisible = true;
+      this.unlockError = false;
+    },
+    /** 返回锁屏首页。 */
+    closeUnlock() {
+      this.unlockVisible = false;
+      this.unlockError = false;
+    },
+    /** 校验锁屏密码，成功后解除当前锁定。 */
+    async unlock(password: string): Promise<boolean> {
+      const passwordHash = await hashPassword(password);
+      if (!this.passwordHash || passwordHash !== this.passwordHash) {
+        this.unlockError = true;
+        return false;
+      }
+
+      this.isLocked = false;
+      this.passwordHash = "";
+      this.unlockVisible = false;
+      this.unlockError = false;
+      return true;
+    },
+    /** 清理锁屏状态，供退出登录时使用。 */
+    clearLock() {
+      this.isLocked = false;
+      this.passwordHash = "";
+      this.setupVisible = false;
+      this.unlockVisible = false;
+      this.unlockError = false;
+    }
+  },
+  persist: piniaPersistConfig("admin-lock-screen", ["isLocked", "passwordHash"])
+});

package/dist/package/src/stores/modules/user.ts

@@ -1,17 +1,22 @@
 import { defineStore } from "pinia";
-import { defAuthService } from "../../api/system/auth";
-import { defLoginService } from "../../api/base/login";
-import type { LoginRequest } from "../../rpc/base/v1/login";
+import { defAuthService } from "../../api/system/admin/v1/auth";
+import { defLoginService } from "../../api/base/v1/login";
+import { defMfaService } from "../../api/base/v1/mfa";
+import type { LoginRequest, LoginResponse } from "../../rpc/base/v1/login";
+import type { VerifyMfaRequest } from "../../rpc/base/v1/mfa";
 import type { UserInfoForm } from "../../rpc/system/admin/v1/auth";
 import { UserState } from "../../stores/interface";
 import piniaPersistConfig from "../../stores/helper/persist";
 import { useDictStoreHook } from "../../stores/modules/dict";
-import { t } from "../../locales";
+import { useLockScreenStore } from "../../stores/modules/lockScreen";
 
 const defaultUserInfo: UserInfoForm = {
   user_name: "",
   nick_name: "",
   phone: "",
+  email: "",
+  id_type: 0,
+  id_code: "",
   avatar: "",
   role_code: "",
   role_name: "",
@@ -23,9 +28,11 @@ const defaultUserInfo: UserInfoForm = {
 export const useUserStore = defineStore("admin-user", {
   state: (): UserState => ({
     token: "",
-    refreshToken: "",
     tokenType: "",
     tokenExpiresAt: 0,
+    isLoggingOut: false,
+    authVersion: 0,
+    authInvalidated: false,
     userInfo: defaultUserInfo
   }),
   getters: {},
@@ -34,10 +41,6 @@ export const useUserStore = defineStore("admin-user", {
     setToken(token: string) {
       this.token = token;
     },
-    /** 设置刷新令牌 */
-    setRefreshToken(refreshToken: string) {
-      this.refreshToken = refreshToken;
-    },
     /** 设置令牌类型 */
     setTokenType(tokenType: string) {
       this.tokenType = tokenType;
@@ -51,12 +54,12 @@ export const useUserStore = defineStore("admin-user", {
       this.userInfo = userInfo;
     },
     /** 根据接口返回统一更新令牌信息 */
-    updateTokenAuth(accessToken: string, refreshToken: string, tokenType: string, expiresIn?: number) {
+    updateTokenAuth(accessToken: string, tokenType: string, expiresIn?: number) {
       const tokenPrefix = tokenType ? `${tokenType} ` : "";
       const expiresAt = expiresIn ? Date.now() + expiresIn * 1000 : 0;
 
+      this.authInvalidated = false;
       this.setToken(`${tokenPrefix}${accessToken}`.trim());
-      this.setRefreshToken(refreshToken ?? "");
       this.setTokenType(tokenType ?? "");
       this.setTokenExpiresAt(expiresAt);
     },
@@ -65,18 +68,23 @@ export const useUserStore = defineStore("admin-user", {
       return Boolean(this.token.trim() && this.tokenExpiresAt > Date.now());
     },
     /** 登录 */
-    async login(loginRequest: LoginRequest) {
+    async login(loginRequest: LoginRequest): Promise<LoginResponse> {
       const data = await defLoginService.Login(loginRequest);
-      this.updateTokenAuth(data.access_token, data.refresh_token ?? "", data.token_type ?? "", data.expires_in);
+      if (data.status === 1 || data.status === 0 || data.status === 4) {
+        this.updateTokenAuth(data.access_token, data.token_type ?? "", data.expires_in);
+      }
+      return data;
     },
-    /** 刷新认证令牌 */
+    /** 校验登录阶段的多因素认证并保存正式令牌。 */
+    async verifyMfa(request: VerifyMfaRequest): Promise<LoginResponse> {
+      const data = await defMfaService.VerifyMfa(request);
+      this.updateTokenAuth(data.access_token, data.token_type ?? "", data.expires_in);
+      return data;
+    },
+    /** 通过 HttpOnly Cookie 刷新认证令牌。 */
     async refreshAccessToken() {
-      if (!this.refreshToken) {
-        return Promise.reject(new Error(t("core.auth.refresh_token_missing")));
-      }
-
-      const data = await defLoginService.RefreshToken({ refresh_token: this.refreshToken });
-      this.updateTokenAuth(data.access_token, data.refresh_token ?? this.refreshToken, data.token_type ?? "", data.expires_in);
+      const data = await defLoginService.RefreshToken({});
+      this.updateTokenAuth(data.access_token, data.token_type ?? "", data.expires_in);
       return data;
     },
     /** 获取用户信息 */
@@ -89,22 +97,26 @@ export const useUserStore = defineStore("admin-user", {
     clearAuthData() {
       // 清理登录态时同步清空字典缓存，避免切换账号后读到旧字典。
       useDictStoreHook().clearDictionaryCache();
+      useLockScreenStore().clearLock();
+      this.authVersion += 1;
+      this.authInvalidated = true;
       this.setToken("");
-      this.setRefreshToken("");
       this.setTokenType("");
       this.setTokenExpiresAt(0);
       this.setUserInfo({ ...defaultUserInfo });
     },
     /** 退出登录 */
     async logout() {
+      this.isLoggingOut = true;
       try {
         await defLoginService.Logout({});
       } catch {
         // 退出接口返回异常时，前端仍需清理本地登录态，避免用户卡在当前会话。
       } finally {
         this.clearAuthData();
+        this.isLoggingOut = false;
       }
     }
   },
-  persist: piniaPersistConfig("admin-user")
+  persist: piniaPersistConfig("admin-user-security-v2", ["userInfo"])
 });

package/dist/package/src/stores/runtime.ts

@@ -1,5 +1,6 @@
 export { useAuthStore } from "./modules/auth";
 export { useConfigStore } from "./modules/config";
 export { useGlobalStore } from "./modules/global";
+export { useLockScreenStore } from "./modules/lockScreen";
 export { useTabsStore } from "./modules/tabs";
 export { useUserStore } from "./modules/user";

package/dist/package/src/styles/element.scss

@@ -1,3 +1,9 @@
+/* 统一 Element Plus 矩形控件与后台页面的圆角。 */
+html:root {
+  --el-border-radius-base: var(--admin-page-radius);
+  --el-border-radius-small: 2px;
+}
+
 /* el-alert */
 .el-alert {
   border: 1px solid;
@@ -27,7 +33,18 @@
   overflow-x: hidden;
   background-color: var(--el-bg-color);
   border: 1px solid var(--el-border-color-light);
-  border-radius: 6px;
+  border-radius: var(--admin-page-radius);
+  box-shadow: 0 0 12px rgb(0 0 0 / 5%);
+}
+
+/* 非列表业务页沿用 ProTable 卡片外观 */
+.el-card.admin-page-card {
+  background-color: var(--el-bg-color);
+  border: 1px solid var(--el-border-color-light);
+  border-radius: var(--admin-page-radius);
+  box-shadow: 0 0 12px rgb(0 0 0 / 5%);
+}
+.el-card.admin-page-card.is-always-shadow {
   box-shadow: 0 0 12px rgb(0 0 0 / 5%);
 }
 
@@ -165,10 +182,9 @@
       }
     }
 
-    // 设置 el-table 中 header 文字不换行，并省略
+    // 设置 el-table 表头文字单行省略，完整内容由列标题悬浮提示展示。
     .el-table__header .el-table__cell > .cell {
-      // white-space: nowrap;
-      white-space: wrap;
+      white-space: nowrap;
     }
 
     // 空表时去掉底部那条默认分隔线，和菜单管理页保持一致。
@@ -328,6 +344,21 @@
   }
 }
 
+// ProDialog 需要去掉 Element Plus 默认的外层内边距，避免异步样式重复加载后覆盖紧凑布局。
+.el-dialog.pro-dialog {
+  padding: 0;
+
+  // 对齐原生 MessageBox 的紧凑上下间距，避免标题和操作区留白过大。
+  .el-dialog__header,
+  .el-dialog__body {
+    padding: 12px 20px;
+  }
+
+  .el-dialog__footer {
+    padding: 0 20px 12px;
+  }
+}
+
 @media screen and (width <= 768px) {
   .el-dialog {
     margin-top: 4vh;

package/dist/package/src/utils/clipboard.ts

@@ -0,0 +1,22 @@
+/** 将文本复制到系统剪贴板，并兼容非安全上下文的管理端开发地址。 */
+export async function copyText(content: string): Promise<void> {
+  if (typeof navigator !== "undefined" && navigator.clipboard && typeof window !== "undefined" && window.isSecureContext) {
+    try {
+      await navigator.clipboard.writeText(content);
+      return;
+    } catch {
+      // Clipboard API 受权限限制时继续尝试传统 DOM 方案。
+    }
+  }
+  if (typeof document === "undefined") throw new Error("copy failed");
+  const textarea = document.createElement("textarea");
+  textarea.value = content;
+  textarea.style.position = "fixed";
+  textarea.style.opacity = "0";
+  document.body.appendChild(textarea);
+  textarea.focus();
+  textarea.select();
+  const copied = document.execCommand("copy");
+  document.body.removeChild(textarea);
+  if (!copied) throw new Error("copy failed");
+}

package/dist/package/src/utils/passwordCrypto.ts

@@ -1,4 +1,4 @@
-import { defLoginService } from "../api/base/login";
+import { defLoginService } from "../api/base/v1/login";
 import { PasswordCryptoScene } from "../rpc/base/v1/login";
 import type { PasswordCrypto } from "../rpc/common/v1/types";
 import { t } from "../locales";

package/dist/package/src/utils/passwordStrength.ts

@@ -9,12 +9,10 @@ export interface PasswordStrengthResult {
   strengthScore: number;
   /** 强度等级。 */
   level: PasswordStrengthLevel;
-  /** 是否达到允许提交的最高强度。 */
-  isValid: boolean;
 }
 
 /**
- * 计算密码强度结果，供表单展示和校验统一复用。
+ * 计算密码强度结果，供表单展示使用；最终规则由服务端密码策略校验。
  *
  * @param password 当前密码
  * @returns 密码强度分析结果
@@ -24,14 +22,13 @@ export function getPasswordStrength(password?: string): PasswordStrengthResult {
     return {
       ruleScore: 0,
       strengthScore: 0,
-      level: "empty",
-      isValid: false
+      level: "empty"
     };
   }
 
   let ruleScore = 0;
-  if (password.length >= 8) ruleScore += 1;
-  if (/[a-z]/.test(password) && /[A-Z]/.test(password)) ruleScore += 1;
+  if (/[a-z]/.test(password)) ruleScore += 1;
+  if (/[A-Z]/.test(password)) ruleScore += 1;
   if (/\d/.test(password)) ruleScore += 1;
   if (/[^A-Za-z0-9]/.test(password)) ruleScore += 1;
 
@@ -39,33 +36,19 @@ export function getPasswordStrength(password?: string): PasswordStrengthResult {
     return {
       ruleScore,
       strengthScore: 3,
-      level: "high",
-      isValid: true
+      level: "high"
     };
   }
   if (ruleScore === 3) {
     return {
       ruleScore,
       strengthScore: 2,
-      level: "medium",
-      isValid: false
+      level: "medium"
     };
   }
   return {
     ruleScore,
     strengthScore: 1,
-    level: "low",
-    isValid: false
+    level: "low"
   };
 }
-
-/**
- * 校验密码是否达到最高强度，便于表单规则直接复用。
- *
- * @param password 当前密码
- * @returns 校验结果
- */
-export function validatePasswordStrengthValue(password?: string) {
-  const result = getPasswordStrength(password);
-  return { valid: result.isValid };
-}