@liujitcn/kratos-uni-app-core 0.0.1

package/src/utils/navigation.ts

@@ -0,0 +1,81 @@
+/** 登录前暂存的目标路由。 */
+const LAST_ROUTE_KEY = 'lastRoute'
+/** 登录页路径。 */
+const LOGIN_PAGE = '/pages/login/login'
+/** 首页 tab 页面路径。 */
+export const homeTabPage = '/pages/index/index'
+
+/** 路由 query 支持的值类型。 */
+type RouteQueryValue = string | number | boolean | null | undefined
+
+/** 构建包含 query 的页面路由。 */
+const buildRouteUrl = (path: string, query: Record<string, RouteQueryValue> = {}) => {
+  const queryString = Object.entries(query)
+    .filter(([, value]) => value !== undefined && value !== null && value !== '')
+    .map(([key, value]) => `${encodeURIComponent(key)}=${encodeURIComponent(String(value))}`)
+    .join('&')
+
+  return queryString ? `${path}?${queryString}` : path
+}
+
+/** 获取当前页面的完整路由，包含 query，供登录前回跳使用。 */
+const getCurrentRouteUrl = () => {
+  const pages = getCurrentPages()
+  const currentPage = pages[pages.length - 1]
+  if (!currentPage?.route) {
+    return ''
+  }
+
+  let query: Record<string, RouteQueryValue> = {}
+  const miniProgramPage = currentPage as { options?: Record<string, string> }
+  const routePage = currentPage as {
+    $vm?: { $route?: { query?: Record<string, RouteQueryValue> } }
+  }
+
+  // #ifdef MP-WEIXIN
+  query = miniProgramPage.options || {}
+  // #endif
+
+  // #ifdef H5 || APP-PLUS
+  query = routePage.$vm?.$route?.query || {}
+  // #endif
+
+  return buildRouteUrl(`/${currentPage.route}`, query)
+}
+
+/** 保存当前页面路由，登录成功后恢复到用户原来的页面。 */
+export const saveCurrentRoute = () => {
+  const currentRoute = getCurrentRouteUrl()
+  if (!currentRoute || currentRoute.startsWith(LOGIN_PAGE)) {
+    uni.removeStorageSync(LAST_ROUTE_KEY)
+    return
+  }
+  uni.setStorageSync(LAST_ROUTE_KEY, currentRoute)
+}
+
+/** 保存指定页面路由，供登录成功后继续原访问目标。 */
+export const saveLoginRedirectUrl = (url: string) => {
+  const normalizedUrl = url.startsWith('/') ? url : `/${url}`
+  if (!normalizedUrl.startsWith(LOGIN_PAGE)) {
+    uni.setStorageSync(LAST_ROUTE_KEY, normalizedUrl)
+  }
+}
+
+/** 跳转到登录页，并在跳转前记录当前页面。 */
+export const navigateToLogin = (redirectUrl?: string) => {
+  // 模板直接绑定时会传入点击事件对象，只有字符串才是明确的回跳地址。
+  if (typeof redirectUrl === 'string' && redirectUrl) {
+    saveLoginRedirectUrl(redirectUrl)
+  } else {
+    saveCurrentRoute()
+  }
+  uni.navigateTo({
+    url: LOGIN_PAGE,
+    fail: () => {
+      uni.reLaunch({ url: LOGIN_PAGE })
+    },
+  })
+}
+
+/** 返回首页。 */
+export const switchTabToHome = () => uni.reLaunch({ url: homeTabPage })

package/src/utils/passwordCrypto.ts

@@ -0,0 +1,275 @@
+import { defLoginService } from '../api/base/login'
+import { PasswordCryptoScene } from '../rpc/common/v1/enum'
+import type { PasswordCrypto } from '../rpc/common/v1/types'
+
+// #ifdef MP-WEIXIN
+import * as miniCrypto from 'asmcrypto.js'
+// #endif
+
+type MiniCrypto = typeof import('asmcrypto.js')
+
+export const PASSWORD_CRYPTO_SCENE = PasswordCryptoScene
+export type { PasswordCryptoScene }
+
+/** 将 PEM 公钥转换为二进制 DER 数据。 */
+function pemToArrayBuffer(pem: string) {
+  const base64 = pem
+    .replace(/-----BEGIN PUBLIC KEY-----/g, '')
+    .replace(/-----END PUBLIC KEY-----/g, '')
+    .replace(/\s/g, '')
+  const decode = globalThis.atob
+  if (!decode) {
+    throw new Error('当前环境不支持 Base64 解码')
+  }
+  const binary = decode(base64)
+  const buffer = new Uint8Array(binary.length)
+  for (let i = 0; i < binary.length; i += 1) {
+    buffer[i] = binary.charCodeAt(i)
+  }
+  return buffer.buffer
+}
+
+/** 将二进制数据编码为 base64 字符串。 */
+function arrayBufferToBase64(buffer: ArrayBuffer) {
+  const bytes = new Uint8Array(buffer)
+  let binary = ''
+  for (let i = 0; i < bytes.byteLength; i += 1) {
+    binary += String.fromCharCode(bytes[i])
+  }
+  const encode = globalThis.btoa
+  if (!encode) {
+    throw new Error('当前环境不支持 Base64 编码')
+  }
+  return encode(binary)
+}
+
+/** 获取浏览器 WebCrypto 能力。 */
+function getSubtleCrypto() {
+  const cryptoApi = globalThis.crypto
+  if (!cryptoApi?.subtle) {
+    throw new Error('当前环境不支持密码加密')
+  }
+  return cryptoApi
+}
+
+/** 生成小程序端密码加密所需的随机字节。 */
+function getMiniRandomBytes(length: number) {
+  return new Promise<ArrayBuffer>((resolve, reject) => {
+    if (typeof wx === 'undefined' || typeof wx.getRandomValues !== 'function') {
+      reject(new Error('当前环境不支持密码加密'))
+      return
+    }
+    wx.getRandomValues({
+      length,
+      success: ({ randomValues }) => {
+        resolve(randomValues)
+      },
+      fail: ({ errMsg }) => {
+        reject(new Error(errMsg || '随机数生成失败'))
+      },
+    })
+  })
+}
+
+type DerNode = {
+  tag: number
+  value: Uint8Array
+  next: number
+}
+
+/** 读取 DER 编码节点，用于解析 RSA SubjectPublicKeyInfo。 */
+function readDerNode(data: Uint8Array, offset: number): DerNode {
+  if (offset + 2 > data.length) {
+    throw new Error('公钥格式无效')
+  }
+  const tag = data[offset]
+  const firstLengthByte = data[offset + 1]
+  let length = firstLengthByte
+  let valueOffset = offset + 2
+  if (firstLengthByte & 0x80) {
+    const lengthByteCount = firstLengthByte & 0x7f
+    if (lengthByteCount === 0 || valueOffset + lengthByteCount > data.length) {
+      throw new Error('公钥格式无效')
+    }
+    length = 0
+    for (let index = 0; index < lengthByteCount; index += 1) {
+      length = length * 256 + data[valueOffset + index]
+    }
+    valueOffset += lengthByteCount
+  }
+  const end = valueOffset + length
+  if (end > data.length) {
+    throw new Error('公钥格式无效')
+  }
+  return {
+    tag,
+    value: data.subarray(valueOffset, end),
+    next: end,
+  }
+}
+
+/** 去除 DER 正整数前导零字节。 */
+function trimDerInteger(value: Uint8Array) {
+  let offset = 0
+  while (offset < value.length - 1 && value[offset] === 0) {
+    offset += 1
+  }
+  return value.subarray(offset)
+}
+
+/** 从 PEM SubjectPublicKeyInfo 中提取 RSA 模数和指数。 */
+function parseMiniRsaPublicKey(publicKey: string): [Uint8Array, Uint8Array] {
+  const base64 = publicKey
+    .replace(/-----BEGIN PUBLIC KEY-----/g, '')
+    .replace(/-----END PUBLIC KEY-----/g, '')
+    .replace(/\s/g, '')
+  const der = new Uint8Array(wx.base64ToArrayBuffer(base64))
+  const subjectPublicKeyInfo = readDerNode(der, 0)
+  const algorithm = readDerNode(subjectPublicKeyInfo.value, 0)
+  const bitString = readDerNode(subjectPublicKeyInfo.value, algorithm.next)
+  if (bitString.tag !== 0x03 || bitString.value[0] !== 0) {
+    throw new Error('公钥格式无效')
+  }
+  const rsaPublicKey = readDerNode(bitString.value, 1)
+  const modulus = readDerNode(rsaPublicKey.value, 0)
+  const exponent = readDerNode(rsaPublicKey.value, modulus.next)
+  if (modulus.tag !== 0x02 || exponent.tag !== 0x02) {
+    throw new Error('公钥格式无效')
+  }
+  return [trimDerInteger(modulus.value), trimDerInteger(exponent.value)]
+}
+
+/** 计算 RSA-OAEP 所需的 MGF1 掩码。 */
+function generateMgf1Mask(crypto: MiniCrypto, seed: Uint8Array, length: number) {
+  const mask = new Uint8Array(length)
+  const counter = new Uint8Array(4)
+  const hash = new crypto.Sha256()
+  const blockCount = Math.ceil(length / hash.HASH_SIZE)
+  for (let index = 0; index < blockCount; index += 1) {
+    counter[0] = index >>> 24
+    counter[1] = index >>> 16
+    counter[2] = index >>> 8
+    counter[3] = index
+    let block = hash.reset().process(seed).process(counter).finish().result
+    if (!block) {
+      throw new Error('密码加密失败')
+    }
+    const target = mask.subarray(index * hash.HASH_SIZE)
+    if (block.length > target.length) {
+      block = block.subarray(0, target.length)
+    }
+    target.set(block)
+  }
+  return mask
+}
+
+/** 将字节数组编码为小程序可提交的 Base64。 */
+function miniBytesToBase64(value: Uint8Array) {
+  return wx.arrayBufferToBase64(value.slice().buffer)
+}
+
+/** 使用纯 JavaScript 加密实现兼容微信小程序运行时的密码加密协议。 */
+async function encryptMiniProgramPassword(
+  crypto: MiniCrypto,
+  password: string,
+  publicKeyResponse: {
+    key_id: string
+    public_key: string
+    algorithm: string
+    nonce: string
+  },
+): Promise<PasswordCrypto> {
+  const aesKey = new Uint8Array(await getMiniRandomBytes(32))
+  const iv = new Uint8Array(await getMiniRandomBytes(12))
+  const plaintext = crypto.string_to_bytes(password, true)
+  const [modulus, exponent] = parseMiniRsaPublicKey(publicKeyResponse.public_key)
+  const hash = new crypto.Sha256()
+  const keySize = Math.ceil(new crypto.BigNumber(modulus).bitLength / 8)
+  const seed = new Uint8Array(await getMiniRandomBytes(hash.HASH_SIZE))
+  const dataBlockLength = keySize - hash.HASH_SIZE - 1
+  const paddingLength = dataBlockLength - aesKey.length - hash.HASH_SIZE - 1
+  if (paddingLength < 0) {
+    throw new Error('密码长度超出限制')
+  }
+  const encodedMessage = new Uint8Array(keySize)
+  const maskedSeed = encodedMessage.subarray(1, hash.HASH_SIZE + 1)
+  const dataBlock = encodedMessage.subarray(hash.HASH_SIZE + 1)
+  const labelHash = hash.reset().process(new Uint8Array()).finish().result
+  if (!labelHash) {
+    throw new Error('密码加密失败')
+  }
+  dataBlock.set(labelHash, 0)
+  dataBlock.set(aesKey, hash.HASH_SIZE + paddingLength + 1)
+  dataBlock[hash.HASH_SIZE + paddingLength] = 1
+  const dataBlockMask = generateMgf1Mask(crypto, seed, dataBlock.length)
+  for (let index = 0; index < dataBlock.length; index += 1) {
+    dataBlock[index] ^= dataBlockMask[index]
+  }
+  const seedMask = generateMgf1Mask(crypto, dataBlock, maskedSeed.length)
+  maskedSeed.set(seed)
+  for (let index = 0; index < maskedSeed.length; index += 1) {
+    maskedSeed[index] ^= seedMask[index]
+  }
+  const encryptedKey = new crypto.RSA([modulus, exponent]).encrypt(
+    new crypto.BigNumber(encodedMessage),
+  ).result
+  if (!encryptedKey) {
+    throw new Error('密码加密失败')
+  }
+  const ciphertext = crypto.AES_GCM.encrypt(plaintext, aesKey, iv)
+  return {
+    key_id: publicKeyResponse.key_id,
+    nonce: publicKeyResponse.nonce,
+    algorithm: publicKeyResponse.algorithm,
+    encrypted_key: miniBytesToBase64(encryptedKey),
+    iv: miniBytesToBase64(iv),
+    ciphertext: miniBytesToBase64(ciphertext),
+  }
+}
+
+/** 加密单个密码字段，返回后端可解析的密码密文。 */
+export async function encryptPassword(
+  password: string,
+  scene: PasswordCryptoScene,
+): Promise<PasswordCrypto> {
+  const plainPassword = password.trim()
+  if (!plainPassword) {
+    throw new Error('密码不能为空')
+  }
+
+  const publicKeyResponse = await defLoginService.PasswordPublicKey({ scene })
+
+  // 微信小程序没有 window 和 WebCrypto，使用纯 JavaScript 实现保持与后端协议一致。
+  // #ifdef MP-WEIXIN
+  return encryptMiniProgramPassword(miniCrypto, plainPassword, publicKeyResponse)
+  // #endif
+
+  const cryptoApi = getSubtleCrypto()
+  const publicKey = await cryptoApi.subtle.importKey(
+    'spki',
+    pemToArrayBuffer(publicKeyResponse.public_key),
+    { name: 'RSA-OAEP', hash: 'SHA-256' },
+    false,
+    ['encrypt'],
+  )
+  const aesKey = await cryptoApi.subtle.generateKey({ name: 'AES-GCM', length: 256 }, true, [
+    'encrypt',
+  ])
+  const rawAesKey = await cryptoApi.subtle.exportKey('raw', aesKey)
+  const iv = cryptoApi.getRandomValues(new Uint8Array(12))
+  const ciphertext = await cryptoApi.subtle.encrypt(
+    { name: 'AES-GCM', iv },
+    aesKey,
+    new TextEncoder().encode(plainPassword),
+  )
+  const encryptedKey = await cryptoApi.subtle.encrypt({ name: 'RSA-OAEP' }, publicKey, rawAesKey)
+
+  return {
+    key_id: publicKeyResponse.key_id,
+    nonce: publicKeyResponse.nonce,
+    algorithm: publicKeyResponse.algorithm,
+    encrypted_key: arrayBufferToBase64(encryptedKey),
+    iv: arrayBufferToBase64(iv.buffer),
+    ciphertext: arrayBufferToBase64(ciphertext),
+  }
+}

package/src/views/pages/index/index.vue

@@ -0,0 +1,227 @@
+<script setup lang="ts">
+import { onLoad } from '@dcloudio/uni-app'
+import { computed } from 'vue'
+import { useSettingStore } from '../../../stores'
+import defaultLogo from '../../../static/images/logo_icon.png'
+
+const settingStore = useSettingStore()
+const mainTitle = computed(() => settingStore.getData('mainTitle') || '应用框架示例')
+const subTitle = computed(() => settingStore.getData('subTitle') || '保留通用导航与个人中心体验')
+const appLogo = computed(() => settingStore.getData('appLogo') || defaultLogo)
+
+onLoad(() => {
+  void settingStore.loadData().catch(() => undefined)
+})
+</script>
+
+<template>
+  <view class="page">
+    <view class="hero">
+      <image class="logo" :src="appLogo" mode="aspectFit" />
+      <view class="hero-copy">
+        <text class="title">{{ mainTitle }}</text>
+        <text class="subtitle">{{ subTitle }}</text>
+      </view>
+    </view>
+
+    <view class="section">
+      <text class="section-title">当前技术栈</text>
+      <view class="info-list">
+        <view class="info-row">
+          <text class="info-label">应用框架</text>
+          <text class="info-value">uni-app + Vue 3</text>
+        </view>
+        <view class="info-row">
+          <text class="info-label">开发语言</text>
+          <text class="info-value">TypeScript</text>
+        </view>
+        <view class="info-row">
+          <text class="info-label">状态管理</text>
+          <text class="info-value">Pinia</text>
+        </view>
+        <view class="info-row">
+          <text class="info-label">样式方案</text>
+          <text class="info-value">Sass + rpx</text>
+        </view>
+      </view>
+    </view>
+
+    <view class="section">
+      <text class="section-title">演示范围</text>
+      <view class="demo-list">
+        <view class="demo-item">
+          <view class="demo-dot">1</view>
+          <view class="demo-copy">
+            <text class="demo-title">跨端页面</text>
+            <text class="demo-desc">同一套页面代码适配 H5、微信小程序和 App</text>
+          </view>
+        </view>
+        <view class="demo-item">
+          <view class="demo-dot">2</view>
+          <view class="demo-copy">
+            <text class="demo-title">账户能力</text>
+            <text class="demo-desc">个人资料、应用设置与智能助手入口已保留</text>
+          </view>
+        </view>
+        <view class="demo-item">
+          <view class="demo-dot">3</view>
+          <view class="demo-copy">
+            <text class="demo-title">静态首页</text>
+            <text class="demo-desc">当前首页用于展示框架信息，不依赖业务接口</text>
+          </view>
+        </view>
+      </view>
+    </view>
+  </view>
+</template>
+
+<style lang="scss">
+page {
+  background-color: #f7f7f8;
+}
+
+.page {
+  min-height: 100vh;
+  padding: 44rpx 28rpx 56rpx;
+  box-sizing: border-box;
+
+  /* #ifdef MP-WEIXIN */
+  padding-top: calc(44rpx + 44px);
+  /* #endif */
+}
+
+.hero {
+  display: flex;
+  align-items: center;
+  padding: 34rpx 28rpx;
+  border-radius: 12rpx;
+  background-color: #27ba9b;
+  box-shadow: 0 8rpx 18rpx rgba(39, 186, 155, 0.18);
+}
+
+.logo {
+  flex: 0 0 auto;
+  width: 92rpx;
+  height: 92rpx;
+  border-radius: 20rpx;
+  background-color: #fff;
+}
+
+.hero-copy {
+  min-width: 0;
+  margin-left: 22rpx;
+}
+
+.eyebrow,
+.title,
+.subtitle {
+  display: block;
+}
+
+.eyebrow {
+  color: rgba(255, 255, 255, 0.8);
+  font-size: 20rpx;
+  letter-spacing: 2rpx;
+}
+
+.title {
+  margin-top: 8rpx;
+  color: #fff;
+  font-size: 40rpx;
+  font-weight: 600;
+}
+
+.subtitle {
+  margin-top: 10rpx;
+  color: rgba(255, 255, 255, 0.86);
+  font-size: 24rpx;
+}
+
+.section {
+  margin-top: 24rpx;
+}
+
+.section-title {
+  display: block;
+  margin: 0 8rpx 14rpx;
+  color: #26332f;
+  font-size: 28rpx;
+  font-weight: 600;
+}
+
+.info-list,
+.demo-list {
+  overflow: hidden;
+  border-radius: 10rpx;
+  background-color: #fff;
+}
+
+.info-row {
+  display: flex;
+  align-items: center;
+  justify-content: space-between;
+  padding: 26rpx 24rpx;
+  border-bottom: 1rpx solid #edf1ef;
+}
+
+.info-row:last-child {
+  border-bottom: 0;
+}
+
+.info-label {
+  color: #66736f;
+  font-size: 26rpx;
+}
+
+.info-value {
+  color: #26332f;
+  font-size: 26rpx;
+  font-weight: 500;
+}
+
+.demo-item {
+  display: flex;
+  align-items: flex-start;
+  padding: 26rpx 24rpx;
+  border-bottom: 1rpx solid #edf1ef;
+}
+
+.demo-item:last-child {
+  border-bottom: 0;
+}
+
+.demo-dot {
+  flex: 0 0 auto;
+  width: 42rpx;
+  height: 42rpx;
+  border-radius: 50%;
+  background-color: #e8f8f4;
+  color: #16806d;
+  font-size: 24rpx;
+  line-height: 42rpx;
+  text-align: center;
+}
+
+.demo-copy {
+  min-width: 0;
+  margin-left: 18rpx;
+}
+
+.demo-title,
+.demo-desc {
+  display: block;
+}
+
+.demo-title {
+  color: #26332f;
+  font-size: 28rpx;
+  font-weight: 500;
+}
+
+.demo-desc {
+  margin-top: 8rpx;
+  color: #8a9691;
+  font-size: 24rpx;
+  line-height: 1.5;
+}
+</style>