@liujitcn/kratos-admin-core 0.0.31 → 0.0.32

package/dist/package/src/utils/passwordStrength.ts

@@ -9,12 +9,10 @@ export interface PasswordStrengthResult {
   strengthScore: number;
   /** 强度等级。 */
   level: PasswordStrengthLevel;
-  /** 是否达到允许提交的最高强度。 */
-  isValid: boolean;
 }
 
 /**
- * 计算密码强度结果，供表单展示和校验统一复用。
+ * 计算密码强度结果，供表单展示使用；最终规则由服务端密码策略校验。
  *
  * @param password 当前密码
  * @returns 密码强度分析结果
@@ -24,14 +22,13 @@ export function getPasswordStrength(password?: string): PasswordStrengthResult {
     return {
       ruleScore: 0,
       strengthScore: 0,
-      level: "empty",
-      isValid: false
+      level: "empty"
     };
   }
 
   let ruleScore = 0;
-  if (password.length >= 8) ruleScore += 1;
-  if (/[a-z]/.test(password) && /[A-Z]/.test(password)) ruleScore += 1;
+  if (/[a-z]/.test(password)) ruleScore += 1;
+  if (/[A-Z]/.test(password)) ruleScore += 1;
   if (/\d/.test(password)) ruleScore += 1;
   if (/[^A-Za-z0-9]/.test(password)) ruleScore += 1;
 
@@ -39,33 +36,19 @@ export function getPasswordStrength(password?: string): PasswordStrengthResult {
     return {
       ruleScore,
       strengthScore: 3,
-      level: "high",
-      isValid: true
+      level: "high"
     };
   }
   if (ruleScore === 3) {
     return {
       ruleScore,
       strengthScore: 2,
-      level: "medium",
-      isValid: false
+      level: "medium"
     };
   }
   return {
     ruleScore,
     strengthScore: 1,
-    level: "low",
-    isValid: false
+    level: "low"
   };
 }
-
-/**
- * 校验密码是否达到最高强度，便于表单规则直接复用。
- *
- * @param password 当前密码
- * @returns 校验结果
- */
-export function validatePasswordStrengthValue(password?: string) {
-  const result = getPasswordStrength(password);
-  return { valid: result.isValid };
-}

package/dist/package/src/utils/request.ts

@@ -1,5 +1,6 @@
-import axios, { type InternalAxiosRequestConfig, type AxiosResponse, type AxiosError } from "axios";
+import axios, { type InternalAxiosRequestConfig, type AxiosResponse, type AxiosError, type AxiosRequestConfig } from "axios";
 import qs from "qs";
+import { reactive } from "vue";
 import router from "../routers";
 import { LOGIN_URL } from "../config";
 import pinia from "../stores";
@@ -12,6 +13,10 @@ export const requestBaseURL = `${apiTargetUrl}${apiBasePath}`;
 const SESSION_URL = "/v1/base/session";
 const TOKEN_URL = "/v1/base/token";
 const REFRESH_EXPIRY_COOKIE = "kratos_refresh_exp";
+const REFRESH_TOKEN_TRANSPORT_HEADER = "X-Refresh-Token-Transport";
+const REFRESH_TOKEN_TRANSPORT_COOKIE = "cookie";
+const PASSWORD_CHANGE_REQUIRED_METADATA_KEY = "password_change_required";
+const PASSWORD_CHANGE_STATE_STORAGE_KEY = "admin-password-change-required";
 const CAPTCHA_URL = "/v1/base/captcha";
 const CONFIG_URL = "/v1/base/config";
 const LANGUAGE_URL = "/v1/base/language";
@@ -22,10 +27,7 @@ const OAUTH_TICKET_URL = "/v1/base/oauth/ticket";
 const MFA_VERIFY_URL = "/v1/base/mfa/verify";
 const MFA_ENROLLMENT_URL = "/v1/base/mfa/enrollment";
 const MFA_ENROLLMENT_CONFIRM_URL = "/v1/base/mfa/enrollment/confirm";
-const LEGACY_AUTH_URL = "/auth";
-const LEGACY_REFRESH_TOKEN_URL = `${LEGACY_AUTH_URL}/token`;
-const LEGACY_CAPTCHA_URL = "/login/captcha";
-// 认证公共接口不携带旧 token，同时保留旧路径兼容迁移期间的灰度访问。
+// 认证公共接口不携带访问令牌。
 const NO_AUTH_URL_SET = new Set([
   SESSION_URL,
   TOKEN_URL,
@@ -38,10 +40,7 @@ const NO_AUTH_URL_SET = new Set([
   OAUTH_TICKET_URL,
   MFA_VERIFY_URL,
   MFA_ENROLLMENT_URL,
-  MFA_ENROLLMENT_CONFIRM_URL,
-  LEGACY_AUTH_URL,
-  LEGACY_CAPTCHA_URL,
-  LEGACY_REFRESH_TOKEN_URL
+  MFA_ENROLLMENT_CONFIRM_URL
 ]);
 const AUTH_EXPIRED_EXCLUDED_URL_SET = new Set([
   SESSION_URL,
@@ -55,10 +54,7 @@ const AUTH_EXPIRED_EXCLUDED_URL_SET = new Set([
   OAUTH_TICKET_URL,
   MFA_VERIFY_URL,
   MFA_ENROLLMENT_URL,
-  MFA_ENROLLMENT_CONFIRM_URL,
-  LEGACY_AUTH_URL,
-  LEGACY_REFRESH_TOKEN_URL,
-  LEGACY_CAPTCHA_URL
+  MFA_ENROLLMENT_CONFIRM_URL
 ]);
 
 /** 支持自动重试的 Axios 请求配置。 */
@@ -67,12 +63,52 @@ type RetryableRequestConfig = InternalAxiosRequestConfig & {
   _authRetried?: boolean;
 };
 
+/** 统一的结构化错误响应。 */
+type ErrorResponseData = {
+  code?: string | number;
+  message?: string;
+  reason?: string;
+  metadata?: Record<string, string>;
+};
+
+/** 本地持久化的强制改密状态，仅包含非敏感的显示信息。 */
+interface PersistedPasswordChangeState {
+  /** 是否需要强制修改密码。 */
+  required: boolean;
+  /** 后端返回的提示文案。 */
+  message: string;
+}
+
+/** 读取刷新前保存的强制改密状态。 */
+function getPersistedPasswordChangeState(): PersistedPasswordChangeState {
+  const emptyState = { required: false, message: "" };
+  if (typeof window === "undefined") return emptyState;
+
+  try {
+    const value = window.localStorage.getItem(PASSWORD_CHANGE_STATE_STORAGE_KEY);
+    if (!value) return emptyState;
+    const parsed = JSON.parse(value) as unknown;
+    if (!parsed || typeof parsed !== "object" || Array.isArray(parsed)) return emptyState;
+    const persisted = parsed as { message?: unknown };
+    return {
+      required: true,
+      message: typeof persisted.message === "string" ? persisted.message : ""
+    };
+  } catch {
+    return emptyState;
+  }
+}
+
+/** 强制改密弹窗状态。 */
+export const passwordChangeState = reactive(getPersistedPasswordChangeState());
+
 // 创建 axios 实例
 const service = axios.create({
   baseURL: requestBaseURL,
   timeout: 50000,
   headers: { "Content-Type": "application/json;charset=utf-8" },
-  paramsSerializer: params => qs.stringify(params)
+  paramsSerializer: params => qs.stringify(params),
+  withCredentials: true
 });
 
 // 刷新令牌请求使用独立实例，避免与主请求拦截器互相递归。
@@ -93,6 +129,9 @@ function shouldSkipAuth(config: InternalAxiosRequestConfig) {
   if (config.headers.Authorization === "no-auth") return true;
 
   const requestUrl = config.url ?? "";
+  const requestMethod = String(config.method ?? "").toLowerCase();
+  // 登录请求会显式声明 no-auth，登出请求则必须带访问令牌让服务端清理会话和刷新令牌。
+  if (requestUrl === SESSION_URL && requestMethod === "delete") return false;
   return NO_AUTH_URL_SET.has(requestUrl);
 }
 
@@ -110,7 +149,57 @@ function shouldSkipErrorMessage(config?: InternalAxiosRequestConfig) {
 
   const requestUrl = config.url ?? "";
   const requestMethod = String(config.method ?? "").toLowerCase();
-  return (requestUrl === SESSION_URL || requestUrl === LEGACY_AUTH_URL) && requestMethod === "delete";
+  return requestUrl === SESSION_URL && requestMethod === "delete";
+}
+
+/** 判断响应是否要求用户先修改密码。 */
+function isPasswordChangeRequired(data?: ErrorResponseData) {
+  return data?.metadata?.[PASSWORD_CHANGE_REQUIRED_METADATA_KEY] === "true";
+}
+
+/** 判断最近是否已经处理过强制改密响应。 */
+function isPasswordChangeRequiredPromptActive() {
+  return passwordChangePromptUntil > Date.now();
+}
+
+/** 处理强制改密响应，避免并发请求重复提示并打开全局改密弹窗。 */
+export function handlePasswordChangeRequired(message: string) {
+  if (isPasswordChangeRequiredPromptActive()) return;
+  passwordChangePromptUntil = Date.now() + 10 * 1000;
+  passwordChangeState.required = true;
+  passwordChangeState.message = message;
+  persistPasswordChangeState();
+}
+
+/** 清理强制改密弹窗状态。 */
+export function clearPasswordChangeRequired() {
+  passwordChangeState.required = false;
+  passwordChangeState.message = "";
+  passwordChangePromptUntil = 0;
+  persistPasswordChangeState();
+}
+
+/** 持久化或删除强制改密状态，兼容浏览器禁用本地存储的场景。 */
+function persistPasswordChangeState() {
+  if (typeof window === "undefined") return;
+
+  try {
+    if (passwordChangeState.required) {
+      window.localStorage.setItem(
+        PASSWORD_CHANGE_STATE_STORAGE_KEY,
+        JSON.stringify({ message: passwordChangeState.message })
+      );
+    } else {
+      window.localStorage.removeItem(PASSWORD_CHANGE_STATE_STORAGE_KEY);
+    }
+  } catch {
+    // 本地存储不可用时仍保留当前页面内的响应式状态。
+  }
+}
+
+/** 统一展示请求错误，合并并发请求产生的相同提示。 */
+function showRequestError(message: string) {
+  ElMessage.error({ message, grouping: true });
 }
 
 /** 读取访问令牌过期时间 */
@@ -136,7 +225,13 @@ export function hasValidAccessToken() {
 /** 读取最新可用访问令牌，必要时先串行刷新，供 axios、fetch 与 SSE 共用。 */
 export async function getRequestAccessToken(): Promise<string> {
   const userStore = getUserStore();
-  if (!userStore.token && (userStore.refreshToken || hasRefreshCookieHint())) {
+  if (userStore.isLoggingOut) {
+    return userStore.token.trim();
+  }
+  if (userStore.authInvalidated) {
+    return "";
+  }
+  if (!userStore.token && hasRefreshCookieHint()) {
     await handleTokenRefresh(false);
   }
 
@@ -151,12 +246,15 @@ export async function getRequestAccessToken(): Promise<string> {
 
 /** 尝试通过刷新令牌恢复访问令牌，供路由守卫进入页面前调用。 */
 export async function ensureAccessToken() {
+  const userStore = getUserStore();
+  if (userStore.isLoggingOut || userStore.authInvalidated) {
+    return false;
+  }
   if (hasValidAccessToken()) {
     return true;
   }
 
-  const userStore = getUserStore();
-  if (!userStore.refreshToken && !hasRefreshCookieHint()) {
+  if (!hasRefreshCookieHint()) {
     return false;
   }
 
@@ -171,6 +269,7 @@ export async function ensureAccessToken() {
 
 // 防止并发 401 重复弹出认证失效确认框。
 let isHandlingAuthExpired = false;
+let passwordChangePromptUntil = 0;
 
 /** 统一处理认证失效 */
 export function handleAuthExpired() {
@@ -190,6 +289,7 @@ export function handleAuthExpired() {
       const userStore = getUserStore();
       const currentRoute = router.currentRoute.value;
       const redirect = currentRoute.path === LOGIN_URL ? undefined : currentRoute.fullPath;
+      clearPasswordChangeRequired();
       userStore.clearAuthData();
       return router.replace({
         path: LOGIN_URL,
@@ -207,7 +307,8 @@ service.interceptors.request.use(
     const skipAuth = shouldSkipAuth(config);
     const accessToken = skipAuth ? "" : await getRequestAccessToken();
     Object.assign(config.headers, getLocaleRequestHeaders());
-    // 登录、验证码、刷新令牌接口不携带旧 token，避免请求头污染。
+    config.headers[REFRESH_TOKEN_TRANSPORT_HEADER] = REFRESH_TOKEN_TRANSPORT_COOKIE;
+    // 登录、验证码、刷新令牌接口不携带访问令牌，避免请求头污染。
     if (!skipAuth && accessToken) {
       config.headers.Authorization = accessToken;
     } else {
@@ -226,24 +327,30 @@ service.interceptors.response.use(
       return response;
     }
 
-    const { code, message, reason, metadata } = response.data;
+    const responseData = response.data as ErrorResponseData;
+    const { code, message, reason, metadata } = responseData;
     if (code === undefined || message === undefined || reason === undefined || metadata === undefined) {
       return response.data;
     }
 
-    ElMessage.error(message || t("common.message.system_error"));
+    if (isPasswordChangeRequired(responseData)) {
+      handlePasswordChangeRequired(message || t("common.message.system_error"));
+    } else {
+      showRequestError(message || t("common.message.system_error"));
+    }
     return Promise.reject(new Error(message || t("common.message.system_error")));
   },
   async (error: AxiosError) => {
     const status = error.response?.status;
-    const data = error.response?.data as { code?: string | number; message?: string } | undefined;
+    const data = error.response?.data as ErrorResponseData | undefined;
     const code = data?.code;
     const message = data?.message;
     const requestConfig = error.config as RetryableRequestConfig | undefined;
 
     // 业务请求仅在 401 时尝试刷新并重放，403 直接展示后端权限错误。
     if ((status === 401 || code === 401) && !shouldSkipAuthExpiredPrompt(requestConfig)) {
-      if (requestConfig && !requestConfig._authRetried && (getUserStore().refreshToken || hasRefreshCookieHint())) {
+      const userStore = getUserStore();
+      if (requestConfig && !requestConfig._authRetried && !userStore.isLoggingOut && !userStore.authInvalidated && hasRefreshCookieHint()) {
         requestConfig._authRetried = true;
         try {
           await handleTokenRefresh(false);
@@ -256,20 +363,27 @@ service.interceptors.response.use(
       handleAuthExpired();
     } else if (data) {
       if (!shouldSkipErrorMessage(requestConfig)) {
-        if (message) {
-          ElMessage.error(message);
+        if (isPasswordChangeRequired(data)) {
+          handlePasswordChangeRequired(message || t("common.message.system_error"));
+        } else if (message) {
+          showRequestError(message);
         } else {
-          ElMessage.error(t("common.message.system_error"));
+          showRequestError(t("common.message.system_error"));
         }
       }
     } else if (!shouldSkipErrorMessage(requestConfig)) {
-      ElMessage.error(error.message || t("common.message.system_error"));
+      showRequestError(error.message || t("common.message.system_error"));
     }
     return Promise.reject(error.message);
   }
 );
 
-export default service;
+/** 以请求体、响应体顺序提供带类型约束的 HTTP 请求函数。 */
+function request<Request = unknown, Response = unknown>(config: AxiosRequestConfig<Request>): Promise<Response> {
+  return service<Response, Response, Request>(config) as Promise<Response>;
+}
+
+export default request;
 
 // 刷新 Token 的锁
 let isRefreshing = false;
@@ -301,17 +415,22 @@ async function handleTokenRefresh(promptOnFailure = true) {
 /** 调用刷新令牌接口并回写最新认证信息 */
 async function refreshAccessToken() {
   const userStore = getUserStore();
+  const authVersion = userStore.authVersion;
 
   const response = await refreshService.post(
     TOKEN_URL,
-    { refresh_token: userStore.refreshToken || undefined },
-    { headers: { Authorization: "no-auth", ...getLocaleRequestHeaders() } }
+    {},
+    {
+      headers: {
+        Authorization: "no-auth",
+        [REFRESH_TOKEN_TRANSPORT_HEADER]: REFRESH_TOKEN_TRANSPORT_COOKIE,
+        ...getLocaleRequestHeaders()
+      }
+    }
   );
   const data = response.data;
-  userStore.updateTokenAuth(
-    data.access_token,
-    data.refresh_token ?? userStore.refreshToken,
-    data.token_type ?? "",
-    data.expires_in
-  );
+  if (userStore.authVersion !== authVersion || userStore.isLoggingOut || userStore.authInvalidated) {
+    return;
+  }
+  userStore.updateTokenAuth(data.access_token, data.token_type ?? "", data.expires_in);
 }

package/dist/package/src/utils/tenant.ts

@@ -1,4 +1,4 @@
-import { defBaseTenantService } from "../api/system/base_tenant";
+import { defBaseTenantService } from "../api/system/admin/v1/base_tenant";
 
 /** 默认租户编码。 */
 export const DEFAULT_TENANT_CODE = "0000";

package/dist/package/src/utils/utils.ts

@@ -28,13 +28,32 @@ export function formatSrc(src: string) {
   }
 
   const configuredBase = String(import.meta.env.VITE_APP_STATIC_URL ?? "").trim();
-  if (value.startsWith("/admin/")) {
-    return new URL(value, `${window.location.origin}/`).toString();
-  }
-
   const staticBase = configuredBase
     ? new URL(`${configuredBase.replace(/\/$/, "")}/`, `${window.location.origin}/`).toString()
-    : `${window.location.origin}/admin/`;
-  const normalizedPath = value.replace(/^\/+/, "").replace(/^admin\/+/, "");
+    : `${window.location.origin}/`;
+  const normalizedPath = normalizeStaticAssetPath(value).replace(/^\/+/, "");
   return new URL(normalizedPath, staticBase).toString();
 }
+
+/** 将对象路径转换为统一的数据访问路径。 */
+export function normalizeStaticAssetPath(src: string) {
+  const value = String(src ?? "");
+  if (value.startsWith("http://") || value.startsWith("https://")) {
+    return value;
+  }
+  if (value.startsWith("/data/") || value.startsWith("/admin/")) return value;
+  if (value.startsWith("data/")) return `/${value}`;
+  return value;
+}
+
+/** 将富文本中的媒体路径转换为统一的数据访问路径。 */
+export function normalizeRichTextMediaPaths(html: string) {
+  if (typeof DOMParser === "undefined") return html;
+
+  const document = new DOMParser().parseFromString(html, "text/html");
+  document.body.querySelectorAll<HTMLElement>("img[src], video[src]").forEach(element => {
+    const src = element.getAttribute("src");
+    if (src) element.setAttribute("src", normalizeStaticAssetPath(src));
+  });
+  return document.body.innerHTML;
+}

package/dist/package/src/views/login/components/LoginForm.vue

@@ -99,11 +99,12 @@
       </el-tooltip>
     </div>
   </div>
-  <el-dialog
+  <ProDialog
     v-model="behaviorDialogVisible"
     width="364px"
     top="16vh"
     :show-close="false"
+    :show-footer="false"
     append-to-body
     class="behavior-captcha-dialog"
   >
@@ -130,7 +131,7 @@
         :events="rotateCaptchaEvents"
       />
     </div>
-  </el-dialog>
+  </ProDialog>
   <ProDialog v-model="mfaDialogVisible" :title="t('core.login.mfa_title')" width="360px" :close-on-click-modal="false">
     <ProForm
       ref="mfaLoginFormRef"
@@ -180,9 +181,9 @@ import { computed, ref, reactive, onMounted, watch } from "vue";
 import { useRoute, useRouter } from "vue-router";
 import { HOME_URL } from "../../../config";
 import { getTimeState } from "../../../utils";
-import { defLoginService } from "../../../api/base/login";
-import { defMfaService } from "../../../api/base/mfa";
-import { defOauthService } from "../../../api/base/oauth";
+import { defLoginService } from "../../../api/base/v1/login";
+import { defMfaService } from "../../../api/base/v1/mfa";
+import { defOauthService } from "../../../api/base/v1/oauth";
 import { createWebAuthnCredential, getWebAuthnAssertion } from "../../../security";
 import ProDialog from "../../../components/Dialog/ProDialog.vue";
 import ProForm from "../../../components/ProForm/index.vue";
@@ -204,6 +205,7 @@ import { useConfigStore } from "../../../stores/modules/config";
 import { Click as GoCaptchaClick, Rotate as GoCaptchaRotate, Slide as GoCaptchaSlide } from "go-captcha-vue";
 import "go-captcha-vue/dist/style.css";
 import { useLocaleStore } from "../../../locales";
+import { clearPasswordChangeRequired, handlePasswordChangeRequired } from "../../../utils/request";
 
 const router = useRouter();
 const route = useRoute();
@@ -556,13 +558,9 @@ const finishLogin = async (mustChangePassword = false) => {
   tabsStore.setTabs([]);
   keepAliveStore.setKeepAliveName([]);
 
-  // 5.优先跳回登录失效前页面，没有记录时再进入首个可访问页面。
+  // 5.无论是否需要改密，都回到登录前页面；强制改密状态由布局中的全局弹窗展示。
   // 统一走动态路由感知跳转，避免首次登录后目标页面尚未完成挂载时直接进入 404。
-  if (mustChangePassword) {
-    await navigateTo(router, "/profile", { tab: "password" });
-  } else {
-    await navigateTo(router, getLoginRedirectPath());
-  }
+  await navigateTo(router, getLoginRedirectPath());
   ElNotification({
     title: getTimeState(),
     message: t("core.login.welcome"),
@@ -582,14 +580,20 @@ const handleLoginResponse = async (result: LoginResponse) => {
     mfaDialogVisible.value = true;
     return;
   }
-	if (result.status === LoginStatus.LOGIN_STATUS_MFA_ENROLLMENT_REQUIRED) {
+  if (result.status === LoginStatus.LOGIN_STATUS_MFA_ENROLLMENT_REQUIRED) {
     mfaSetupTicket.value = result.mfa_setup_ticket;
     mfaSetupMethod.value = result.mfa_method || "totp";
     await beginMfaSetup(result.mfa_setup_ticket);
-		return;
-	}
-	userStore.updateTokenAuth(result.access_token, result.refresh_token ?? "", result.token_type ?? "", result.expires_in);
-	await finishLogin(result.status === LoginStatus.LOGIN_STATUS_PASSWORD_CHANGE_REQUIRED);
+    return;
+  }
+  const mustChangePassword = result.status === LoginStatus.LOGIN_STATUS_PASSWORD_CHANGE_REQUIRED;
+  if (mustChangePassword) {
+    handlePasswordChangeRequired(t("core.layout.password_change_required"));
+  } else {
+    clearPasswordChangeRequired();
+  }
+  userStore.updateTokenAuth(result.access_token, result.token_type ?? "", result.expires_in);
+  await finishLogin(mustChangePassword);
 };
 
 /** 校验登录阶段 MFA 并完成登录。 */
@@ -859,7 +863,7 @@ watch(
   height: 40px;
   cursor: pointer;
   object-fit: contain;
-  border-radius: 6px;
+  border-radius: var(--admin-page-radius);
 }
 .behavior-captcha-body {
   min-height: 0;
@@ -969,15 +973,19 @@ watch(
   --go-captcha-theme-dot-color-color: #ffffff;
   --go-captcha-theme-dot-bg-color: color-mix(in srgb, var(--el-color-primary) 68%, transparent);
   --go-captcha-theme-dot-border-color: var(--el-bg-color);
-  border-radius: 10px;
+  border-radius: var(--admin-page-radius);
   box-shadow: rgb(0 0 0 / 10%) 0 2px 10px 2px;
 }
 
+:global(.behavior-captcha-dialog .go-captcha.gc-theme) {
+  border-radius: var(--admin-page-radius);
+}
+
 :global(.behavior-captcha-dialog .el-dialog__header) {
   display: none;
 }
 
-:global(.behavior-captcha-dialog .el-dialog__body) {
+:global(.behavior-captcha-dialog.pro-dialog .el-dialog__body) {
   padding: 10px 12px 12px;
 }
 
@@ -999,7 +1007,11 @@ watch(
 
 :global(.behavior-captcha-dialog .go-captcha .gc-body) {
   margin-top: 0;
-  border-radius: 6px;
+  border-radius: var(--admin-page-radius);
+}
+
+:global(.behavior-captcha-dialog .go-captcha .gc-button-block button) {
+  border-radius: var(--admin-page-radius);
 }
 
 :global(.behavior-captcha-dialog .go-captcha .gc-footer) {

package/dist/package/src/views/login/index.scss

@@ -15,7 +15,7 @@
     height: 94%;
     padding: 0 50px;
     background-color: rgb(255 255 255 / 80%);
-    border-radius: 10px;
+    border-radius: var(--admin-page-radius);
     .dark {
       position: absolute;
       top: 13px;
@@ -41,7 +41,7 @@
       max-width: 100%;
       padding: 50px 40px 45px;
       background-color: var(--el-bg-color);
-      border-radius: 10px;
+      border-radius: var(--admin-page-radius);
       box-shadow: rgb(0 0 0 / 10%) 0 2px 10px 2px;
       .login-logo {
         display: flex;

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@liujitcn/kratos-admin-core",
   "private": false,
-  "version": "0.0.31",
+  "version": "0.0.32",
   "type": "module",
   "description": "kratos-admin frontend runtime and base modules",
   "author": {

package/vite.config.ts

@@ -85,6 +85,7 @@ export function defineAdminViteConfig(options: AdminViteConfigOptions = {}) {
           "@liujitcn/kratos-admin-core > dayjs/plugin/advancedFormat.js",
           "@liujitcn/kratos-admin-core > dayjs/plugin/customParseFormat.js",
           "@liujitcn/kratos-admin-core > dayjs/plugin/dayOfYear.js",
+          "@liujitcn/kratos-admin-core > dayjs/plugin/quarterOfYear.js",
           "@liujitcn/kratos-admin-core > dayjs/plugin/isSameOrAfter.js",
           "@liujitcn/kratos-admin-core > dayjs/plugin/isSameOrBefore.js",
           "@liujitcn/kratos-admin-core > dayjs/plugin/localeData.js",